Search NASA⌕ Search

SEARCH · Search NASA

Results for “Computer Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,693 records · Page 94
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Cybersecurity Attacks in Vehicular Sensors

Today's modern vehicles contain anywhere from sixty to one-hundred sensors and exhibit the characteristics of Cyber-Physical-Systems (CPS). There is a high degree of coupling, cohesiveness, and interactions among vehicle's CPS components (e.g., sensors, devices, systems, systems-of-systems) across sensing, communication, and control layers. Cyber-attacks in the sensing or communication layers can compromise the security of the control layer. This paper provides a detailed review of potential cyber threats related to the sensing layer. Notably, the focus is mainly towards two categories of sensors: vehicle dynamics sensors (e.g., Tire Pressure Monitoring Systems (TPMS), magnetic encoders, and inertial sensors) and environment sensors (e.g., Light Detection and Ranging (LiDAR), ultrasonic, camera, Radio Detection and Ranging (Radar) systems, and Global Positioning System (GPS) units). Furthermore, the paper also offers perspectives through existing countermeasures from literature and stresses the need for data-driven cybersecurity solutions.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

Tomographic Reconstruction of the Neutron Time-Energy Spectrum from a Dense Plasma Focus

A dense plasma focus (DPF) nuclear fusion generator is an attractive pulsed neutron source in many applications, due to its relatively large neutron yield, produced in a short time duration. In order to design a DPF that generates neutrons within a specified time profile, or generates a neutron energy spectrum with specific properties, it is necessary to understand and be able to fully characterize the results of the fusion process releasing the neutrons. The time-energy spectrum of fusion neutrons is an ideal quantity to use to validate multiphysics codes that simulate the pinch and fusion processes, because it is a quantity that requires the physics of each of the stages leading up to and ending in the fusion reaction to be simulated correctly. In particular, since DPF fusion neutrons are not monoenergetic – and there can often be several fusion pinches creating neutrons – a computer simulation matching high quality neutron spectrum measurements provides great confidence in the fidelity of the simulation. In order to make such a comparison, it is first necessary to have quality measurements from which to infer the spectrum. In this work we pose neutron spectroscopy as the classical tomographic inverse problem from neutron time of flight data at multiple distances, but enhanced by using detector pairs designed to reduce the scatter background and with an additional measurement of the time profile of the fusion pinch near its source. The detector pairs enhance the quality of the time of flight measurements and the additional constraint posed by the measured time profile allows for temporal resolution in the spectrum reconstruction that is equal to the measurement resolution, which can be subnanosecond, and energy resolution in the 10’s of keV, without the problem being underconstrained. We present results from a Deuterium-fueled DPF at the U.S. Department of Energy’s Nevada National Security Site and show that we can infer the time-energy spectrum from our measurements for both single and multi-pinch fusion reactions with equal fidelity.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2019

A Passive Network Cyber Threat Intelligence Framework for Legacy Critical Control Systems using Machine Learning

The importance of Internet and communication networks in our daily life and in any organization’s daily operations is well known and cannot be overstressed. A nation’s economy is fully reliant on its critical infrastructure. Energy sector is one of the 16 Critical Infrastructure Sectors identified by the Department of Homeland Security. Securing these critical infrastructure sectors is challenging but is also of utmost priority in this day of constant and persistent cyber threats. Threat is any circumstance or event that has the potential to adversely impact an agency's assets and operations. Cyber Threat Intelligence (CTI) is the process of collection, analysis, and identification of potential cyber threats to the organization. This goal of current research performed at the Savannah River National Laboratory (SRNL), Aiken, SC, is to develop a Cyber Threat Intelligence framework for gathering Threat Intelligence passively from the network traffic from and to a real or simulated Critical Control Systems.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Materials Characterization: A Primer for Solid Phase Processing Applications

The Pacific Northwest National Laboratory (PNNL) undertook the Materials Characterization, Prediction, and Control (MCPC) Laboratory Directed Research and Development (LDRD) Project to advance understanding of nuclear material processing and enable multifold acceleration in the development and qualification of new material systems produced via advanced manufacturing methods, such as solid phase processing, for use in national security and advanced energy applications (Smith 2021). As a two-year LDRD investment requiring focused research, the MCPC project applied only a subset of the wide range of available destructive and nondestructive characterization methods to provide data to the predictive modeling and data analytics tasks. The purpose of this report is to review a wide range of destructive and nondestructive characterization methods that are relevant in solid-phase processing (SPP) applications, but not necessarily applied in the MCPC Project as a guide to the planning of characterization activities in future research. Particular attention is given to measured characteristics that can correlate to other material characteristics, with a particular interest in nondestructive evaluation (NDE) that can be applied to samples obtained in the MCPC Project. Destructive examinations include tensile tests, optical and electron microscopy, micro-hardness, and residual stress tests. NDE tests include surface visual inspection, eddy current examination for cracks, 4-point potential drop, ultrasound, x-ray, and computed tomography.

36 MATERIALS SCIENCE↗
DOE OSTI2019

Advanced modeling of $\mathrm{DER}$s and $\mathrm{UPFC}$ devices with Sparse Tableau Formulation for $\mathrm{ACOPF}$

Distributed energy resources (DERs) are projected to be significant contributors in electric power grid modernization efforts. Yet many distribution and transmission system operators are concerned about potential reliability and security impacts of high penetration of DERs, and cite the need of greater visibility and controllability of decision variables associated with these DERs. Tractable modeling of DERs in AC optimal power flow (ACOPF) is one of the barriers to their integration into the existing operation, planning and market paradigm. Similarly, as more intermittent renewable resources are deployed, power flow control becomes more valuable, and accurate representation of Flexible AC Transmission System (FACTS) devices in ACOPF will likely grow in importance. Here this paper focuses on the detailed representation of substations with the high penetration of DERs, and on the Unified Power Flow Controller (UPFC) FACTS devices, in OPF. To this end, a novel Sparse Tableau Formulation (STF) for ACOPF is used to accurately model such features as substation reconfiguration to accommodate DERs, and to represent decision variables appropriate to the voltage source converters within UPFCs. Numerical studies are provided to demonstrate the impacts of detailed DER and UPFC representations on optimal operation, and the computational efficiency.

42 ENGINEERING↗
DOE OSTI2025

Critical Energy Infrastructure Cybersecurity: Enhanced Cyber Resilience for Federal Energy Systems

This presentation is an overview of FEMP Resilient and Secure Infrastructure and Facilities. An educational and interactive workshop centered on resilient and secure federal infrastructure and facilities, with a focus on inverter-based resources at Federal sites, building automation systems, and Federal supply chains. This workshop will illustrate an all-hazards scenario and discuss how Federal agencies can be positioned to resist these real-world scenarios.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Design of Nuclear Criticality Safety Framework for Hands-on Construction of Fast Systems Over Ranges of Multiplication

Since 1945, Los Alamos National Laboratory (LANL) has performed critical experiments, primarily at the Los Alamos Critical Experiments Facility (LACEF) at Technical Area 18 (TA-18). Since 2011, these experiments have been conducted by the National Criticality Experiments Research Center (NCERC), operated by LANL, at the Device Assembly Facility (DAF) in the Nevada National Security Site (NNSS). These experiments utilize various types of Special Nuclear Material (SNM). Some of these experiments utilize what is referred to as the Rocky Flat Shells, which are called such as they came from the Rocky Flats Plant. These concentric hemi-shells are made of Highly Enriched Uranium (HEU), which is 93 w/o 235U. Fig. 1. Subset of the Rocky Flat Shells LANL is designing a new subcritical hands-on experiment with the goal of achieving a neutron multiplication in the range of 50 to 200, which correlates to Keff values of 0.98 to 0.995. ANSI/ANS-1 is the standard for Conduct of Critical Experiments which governs critical operations at NCERC. Section 3.9 of ANSI/ANS-1 states that when manipulating a critical assembly by hand, the predicted k eff of a known configuration should not exceed 0.95 (a neutron multiplication of 20). This presents a challenge, as this system would have a higher multiplication than 20 and the assembly would have to remain subcritical in normal and credible accident scenarios. To ensure the safety of such an assembly, the different normal and abnormal conditions that could alter the criticality 1 MCNP® and Monte Carlo N-Particle® are registered trademarks owned by Triad National Security, LLC, manager and operator of Los Alamos National Laboratory. Any third party use of such registered marks should be properly of the system must be considered and analyzed. If such a condition is deemed to be credible, it will be further investigated using the Monte Carlo N-Particle (MCNP) transport code. If the results of these simulations show that a k eff larger than one could be possible, modifications to the assembly will be made until such an event is deemed no longer possible.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2021

Scalable Techniques for Stochastic Power Flow Problems (Final Report)

The proposed research focuses on developing scalable algorithms for two-stage security-constrained OPF problems with AC power flow constraints, a class of problems complicated by (i) scale arising from a scenario representation; and (ii) the presence of nonlinearity, nonconvexity, and possibly second-stage discreteness or complementarity. Unfortunately, most existing solvers cannot contend with both challenges simultaneously; accordingly, the proposed research focuses on developing solution techniques that can both scale with the number of scenarios and contend with nonconvexity and second-stage complementarity. We consider three avenues for addressing such problems: (i) Variable sample-size SQP (VS-SQP) methods that combine sparse Quasi-Newton updates with a scalable variance-reduced stochastic gradient scheme for stochastic QP subproblems, allowing for contending with second-stage complementarity via regularization; (ii) Variable sample-size stochastic Interior-point (VS-sIP) schemes that propose a sampling-based regularized (to allow for contending with complementarity) interior-point schemes in which a Schur-complement technique is employed for decomposing the Newton direction computation step; (iii) Variable sample-size tractable ADMM (VS-tADMM) schemes combine variable sample-sizes with carefully designed techniques for resolving each of the nonconvex updates (by leveraging the QCQP structures). We intend to compare the three schemes using performance profiles in terms of solution quality, scalability, etc. and then select one scheme which will then be developed and further refined in Python for purposes of the GO competition.

42 ENGINEERING↗
DOE OSTI2019

Multi–LDAP Dynamic User Management Tool Utilizing Oracle Application Express and PL/SQL

A Center for Infrastructure Security Analysis (CISA) client system required support of multiple Lightweight Directory Access Protocol (LDAP) directories for multiple, varied user communities. The LDAP directories were all based upon different technologies, i.e., Microsoft Active Directory (AD), Microsoft Active Directory Lightweight Directory Services (ADLDS), and Oracle Internet Directory (OID), depending on system setup, security requirements, and legacy software. Research revealed that PL/SQL provided the capability to execute dynamic PL/SQL and SQL blocks. The dynamic capabilities were utilized along with several configuration tables to provide an object-oriented, polymorphic-like behavior. This architecture was chosen so that a top-level application programming interface (API) could be defined for all calls, no matter what type of LDAP was being manipulated, as each LDAP type has slightly different attributes and requirements. The dynamic nature of the user management system allowed for easy setup and utilization of any new LDAP directories, minimizing the time and effort expended on system changes.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Multi-parametric analysis for mixed integer linear programming: An application to transmission upgrade and congestion management

Upgrading the capacity of existing transmission lines is essential for meeting the growing energy demands, facilitating the integration of renewable energy, and ensuring the security of the transmission system. This study focuses on the selection of lines whose capacities and by how much should be expanded from the perspective of the Independent System Operators (ISOs) to minimize the total system cost. We employ advanced multi-parametric programming and an enhanced branch-and-bound algorithm to address complex mixed-integer linear programming (MILP) problems, considering multi-period time constraints and physical limitations of generators and transmission lines. To characterize the various decisions in transmission expansion, we model the increased capacity of existing lines as parameters within a specified range. This study first relaxes the binary variables to continuous variables and applies the Lagrange method and Karush-Kuhn-Tucker (KKT) conditions to obtain optimal solutions and identify critical regions associated with active and inactive constraints. Moreover, we extend the traditional branch-and-bound (B&B) method by determining the problem’s upper and lower bounds at each node of the B&B decision tree, helping to manage computational challenges in large-scale MILP problems. Here, we compare the difference between the upper and lower bounds to obtain an approximate optimal solution within the decision-makers’ tolerable error range. In addition, the first derivative of the objective function on the parameters of each line is used to inform the selection of lines for easing congestion and maximizing social welfare. Finally, the capacity upgrades are selected by weighing the reductions in system costs against the expense of upgrading line capacities. The findings are supported by numerical simulations and provide transmission-line planners with decision-making guidance.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Development of Integrated Safety and Security Models for Comprehensive Reliability and Resiliency Evaluation

The security of the electric grid and supporting energy systems is crucial to national security. One of the complexities in analyzing the security of energy systems is the safety consequences that may result from accidents. For energy systems, the goal is to ensure that they operate as intended and that any consequences are mitigated or prevented. The integration of safety and security is paramount to protecting these systems from attacks and ensuring that large consequences are prevented. This report describes an integrated safety and security methodology to evaluate cybersecurity events that can lead to large consequences. This novel approach first describes how Systems-Theoretic Process Analysis (STPA) provides a digital causal analysis for Bayesian Networks (BNs). The use of STPA causal analysis provides a systematic approach to constructing BNs that adequately model cyber scenarios that result in consequences. When combined with the technical principles described in Risk-Informed Management of Enterprise Systems (RIMES), a comprehensive risk-informed cybersecurity analysis results that allows decision-makers to prioritize systems that most impact risk.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

Cybersecurity for Electric Vehicle Charging Infrastructure

As the U.S. electrifies the transportation sector, cyberattacks targeting vehicle charging could impact several critical infrastructure sectors including power systems, manufacturing, medical services, and agriculture. This is a growing area of concern as charging stations increase power delivery capabilities and must communicate to authorize charging, sequence the charging process, and manage load (grid operators, vehicles, OEM vendors, charging network operators, etc.). The research challenges are numerous and complicated because there are many end users, stakeholders, and software and equipment vendors interests involved. Poorly implemented electric vehicle supply equipment (EVSE), electric vehicle (EV), or grid operator communication systems could be a significant risk to EV adoption because the political, social, and financial impact of cyberattacks — or public perception of such — would ripple across the industry and produce lasting effects. Unfortunately, there is currently no comprehensive EVSE cybersecurity approach and limited best practices have been adopted by the EV/EVSE industry. There is an incomplete industry understanding of the attack surface, interconnected assets, and unsecured inter faces. Comprehensive cybersecurity recommendations founded on sound research are necessary to secure EV charging infrastructure. This project provided the power, security, and automotive industry with a strong technical basis for securing this infrastructure by developing threat models, determining technology gaps, and identifying or developing effective countermeasures. Specifically, the team created a cybersecurity threat model and performed a technical risk assessment of EVSE assets across multiple manufacturers and vendors, so that automotive, charging, and utility stakeholders could better protect customers, vehicles, and power systems in the face of new cyber threats.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Independent Review of the Proof-of-Concept Cyber100 Compass Cybersecurity Risk Tool

The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER), and Office of Electricity (OE) commissioned the National Renewable Energy Laboratory (NREL) to develop a method and tool to enable electric utilities to understand and manage the risk of cybersecurity events that can lead to physical effects like blackouts. This tool, called Cyber100 Compass, uses cybersecurity data elicited from cybersecurity experts, then incorporates that data into a tool designed to be usable by cybersecurity non-experts who understand the system itself. The tool estimates dollar-valued risks for a current or postulated future electric power digital control configuration, in order to enable utility risk planners to prioritize among proposed cybersecurity risk mitigation options. With the development of the Cyber100 Compass tool for quantification of future cyber-physical security risks, NREL has taken an initial bold step in the direction of enabling and indeed encouraging electric utilities to address the potential for cybersecurity incidents to produce detrimental physical effects related to electric power delivery. As part of the Cyber100 Compass development process, DOE funded NREL to seek out an independent technical review of the risk methodology embodied in the tool. NREL requested this review from Sandia National Laboratories, and made available to Sandia a very late version of the project report, as well as NREL personnel to provide clarification and to respond to questions. This paper provides the result of the independent review activity.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS2003

Optimal Inflatable Space Towers with 3 - 100 km Height

Theory and computations are provided for building inflatable space towers up to one hundred kilometers in height. These towers can be used for tourism, scientific observation of space, observation of the Earth's surface, weather and upper atmosphere, and for radio, television, and communication transmissions. These towers can also be used to launch space ships and Earth satellites. These projects are not expensive and do not require rockets. They require thin strong films composed from artificial fibers and fabricated by current industry. The towers can be built using present technology. The towers can be used (for tourism, communication, etc.) during the construction process and provide self-financing for further construction. The tower design does not require work at high altitudes; all construction can be done at the Earth's surface. The transport system for a tower consists of a small engine (used only for friction compensation) located at the Earth's surface. The tower is separated into sections and has special protection mechanisms in case of damage. Problems involving security, control, repair, and stability of the proposed towers are addressed in other publications. The author is prepared to discuss these and other problems with serious organizations desiring to research and develop these projects.

Bolonkin, Alexander↗
DOE OSTI2022

Multi-Level Impacts of Extreme Climate-Related Events on Food Supply Chain: Idaho Potato's Case Study

Background: The world is experiencing frequent extreme weather events like droughts, floods, snowstorms, and shifting of seasons due to climate change. Increasing frequencies and severity of these extreme weather events threaten food security because agriculture is extremely vulnerable to climate change. Higher temperature reduces overall yields of the desirable crops but proliferates weeds and harmful pests. Current data shows that every year U.S. farmers spend more than 11 billion USD to fight weeds and this number is expected to rise in the coming years due to climate change. Due to droughts, the water required for irrigation is becoming scarcer. Since many areas are becoming climatically unusable for crop production, the amount of farmland area is shrinking rapidly. In addition, changes in precipitation patterns are causing crop failures and negatively impacting expected yields. In this study, we investigated how different extreme climate events impact different stages of a food supply chain. Approach: As a case study, we chose Idaho’s potato supply chain (SC). Idaho is the top potato producing state in the U.S. and contributes around 30% of the nation’s potato production. Using the agent-based modeling (ABM) approach, we developed a multi-echelon potato supply chain computer simulation model with six types of agents – seed producers, farmers, shippers, processors, retailers, and logistics companies. In addition to the baseline scenario, we developed two additional climate-related disruption events – drought and snowstorm. We investigated how each of these disruption events impacts different stakeholders across the supply chain in terms of revenue and some other key performance metrics such as lead time, food waste, number of delayed orders, and order fulfillment rate. Results: Extreme climate events not only impact the growers but there is also cascading ripple effects downstream of the supply chain. The methodology developed in this study could be applied to other food and agricultural SC to understand the vulnerabilities of the different links. The findings would potentially help to adopt new policies for the well-being of the overall SC.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Health Assessment and Performance Monitoring of Large Machine Diagnostics

Diagnostic machines are a crucial component of the Stockpile Stewardship Program for data collection, toward the ultimate goal of improving our understanding of nuclear physics. These systems consist of interactions between many complex components, and require regular maintenance for acceptable performance. The Cygnus X-ray diagnostic located at the Nevada National Security Site's U1a underground facility which provides radiographic data for subcritical experiments, is a prime example of these systems. Component degradation and failures within Cygnus can result in system downtime and data loss, affecting schedules and increasing experiment costs. To evade such failures, years worth of data on machine performance has been collected on the two Cygnus axes in the form of voltage and current measurements of Cygnus' various components. Using these as input, we have developed machine learning techniques for assessing the health of Cygnus, with the ultimate goal of predicting declining performance and machine failure.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Supply Chain Management in Cyber Grid Guard Framework

Grid modernization has impeded innovative power grid applications and energy resources that are increasingly distributed. Blockchain/distributed ledger technology (DLT) has the potential to enhance the resilience of the electric infrastructure, particularly in a decentralized and distributed environment. The benefits of blockchain are to ensure asset information and lifecycle events are secure and traceable and identify potential malicious modification of data. Oak Ridge National Laboratory (ORNL) has developed a framework, Cyber Grid Guard (CGG), incorporating blockchain. The system implements a low-energy, fast, and robust enhancement to system trustworthiness within and across electric grid systems, including substations, control centers, and metering infrastructures. Currently, one of the major concerns is supply chain attacks. There have been several recent attacks that have significantly impacted critical infrastructures and organizations around the world. This document focuses on how CGG can be used to address the supply chain issue.

24 POWER TRANSMISSION AND DISTRIBUTION↗