Search NASA⌕ Search

SEARCH · Search NASA

Results for “Command Error Detection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

An Artificially Intelligent Physical Model-Checking Approach to Detect Switching-Related Attacks on Power Systems

Decentralized and hierarchical microgrid control strategies have lain the groundwork for shaping the future smart grid. Such control approaches require the cooperation between microgrid operators in control centers, intelligent microcontrollers, and remote terminal units via secure and reliable communication networks. In order to enhance the security and complement the work of network intrusion detection systems, this paper presents an artificially intelligent physical model-checking that detects tampered-with circuit breaker switching control commands whether, due to a cyber-attack or human error. In this technique, distributed agents, which are monitoring sectionalized areas of a given microgrid, will be trained and continuously adapted to verify that incoming control commands do not violate the physical system operational standards and do not put the microgrid in an insecure state. The potential of this approach has been tested by deploying agents that monitor circuit breakers status commands on a 14-bus IEEE benchmark system. The results showed the accuracy of the proposed framework in characterizing the power system and successfully detecting malicious and/or erroneous control commands.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Small arms suppression project (LLNL final report)

US Special Operations Command (USSOCOM) was seeking a technological leap in small firearms weapon suppressor technology, because anticipated enemy capabilities are requiring the operators to have smaller detection cross sections to ensure the safe execution of missions. Suppressors have been developed almost exclusively through trial-and-error methods since the time of the original design by Hiram Maxim over one hundred years ago. Consequently USSOCOM deemed it prudent to perform a physicsbased study of weapon suppression to understand performance limits and possibly identify breakthrough technologies. Lawrence Livermore National Laboratory’s (LLNL’s) high performance production level computational tool called ALE3D (Arbitrary Lagrangian-Eulerian 3D and 2D) has unique physics models and numerical algorithms for modeling suppressor dynamics. The flexible and extendable code framework supports fully integrated hydrodynamics, heat transfer, solid and fluid dynamics, and chemistry that can be applied to simulating propellant-driven motion of a bullet down a gun barrel, the transfer of heat from the burning propellant to the barrel and suppressor, the chemistry of muzzle flash, and the shock/acoustic/optical signatures in the near-field. LLNL’s originally anticipated role was to augment ALE3D for this task, by developing the software and analysis methodologies specific to the simulation of blast and muzzle flash phenomena. It was believed that insights provided by our ALE3D simulations in tandem with a coordinated experimental component by our other team members from Oak Ridge National Laboratory (ORNL) and the U. S. Army Armament, Research, Development and Engineering Center (ARDEC), would have excellent prospects of yielding useful suppressor design improvements that could be transitioned to industry and utilized by US Special Operations Command. The three year effort has come to fruition with the development of revolutionary suppressor designs that far outperform any previous or current design by anyone outside this multi-lab team.

42 ENGINEERING↗

New operator assistance features in the CMS Run Control System

During Run-1 of the LHC, many operational procedures have been automated in the run control system of the Compact Muon Solenoid (CMS) experiment. When detector high voltages are ramped up or down or upon certain beam mode changes of the LHC, the DAQ system is automatically partially reconfigured with new parameters. Certain types of errors such as errors caused by single-event upsets may trigger an automatic recovery procedure. Furthermore, the top-level control node continuously performs cross-checks to detect sub-system actions becoming necessary because of changes in configuration keys, changes in the set of included front-end drivers or because of potential clock instabilities. The operator is guided to perform the necessary actions through graphical indicators displayed next to the relevant command buttons in the user interface. Through these indicators, consistent configuration of CMS is ensured. However, manually following the indicators can still be inefficient at times. A new assistant to the operator has therefore been developed that can automatically perform all the necessary actions in a streamlined order. If additional problems arise, the new assistant tries to automatically recover from these. With the new assistant, a run can be started from any state of the sub-systems with a single click. An ongoing run may be recovered with a single click, once the appropriate recovery action has been selected. We review the automation features of CMS Run Control and discuss the new assistant in detail including first operational experience.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗

Quantum Key Distribution for Critical Infrastructures: Towards Cyber-Physical Security for Hydropower and Dams

Hydropower facilities are often remotely monitored or controlled from a centralized remote control room. Additionally, major component manufacturers monitor the performance of installed components, increasingly via public communication infrastructures. While these communications enable efficiencies and increased reliability, they also expand the cyber-attack surface. Communications may use the internet to remote control a facility’s control systems, or it may involve sending control commands over a network from a control room to a machine. The content could be encrypted and decrypted using a public key to protect the communicated information. These cryptographic encoding and decoding schemes become vulnerable as more advances are made in computer technologies, such as quantum computing. In contrast, quantum key distribution (QKD) and other quantum cryptographic protocols are not based upon a computational problem, and offer an alternative to symmetric cryptography in some scenarios. Although the underlying mechanism of quantum cryptogrpahic protocols such as QKD ensure that any attempt by an adversary to observe the quantum part of the protocol will result in a detectable signature as an increased error rate, potentially even preventing key generation, it serves as a warning for further investigation. In QKD, when the error rate is low enough and enough photons have been detected, a shared private key can be generated known only to the sender and receiver. We describe how this novel technology and its several modalities could benefit the critical infrastructures of dams or hydropower facilities. The presented discussions may be viewed as a precursor to a quantum cybersecurity roadmap for the identification of relevant threats and mitigation.

97 MATHEMATICS AND COMPUTING↗

Development of the Delphi display concept for alternative explanations decision making support - 120

Human operators of advanced technology systems, such as nuclear power, command and control, and deepwater oil drilling, must be able to evaluate and respond to a wide array of operational anomalies. Unfortunately, these circumstances are often complex and ambiguous, complicating decision making tasks. One common decision making error, called confirmation bias, occurs when decision makers prematurely focus on one explanation instead of systematically considering all plausible alternative explanations that could equally well account for an operational anomaly (Nickerson, 1998). The Delphi display is designed to counteract decision makers' tendencies towards confirmation bias and to encourage them to consider all plausible explanations, including high risk explanations, they might otherwise overlook. An initial Delphi display prototype was designed to help identify the underlying cause of operational anomalies in the complex, high-consequence technology of deepwater drilling. This prototype decision aid incorporates major indicators related to operational anomalies and presents corresponding plausible explanations for each indicator, ranging from high-risk system-critical explanations to lower-risk but still significant events. The Delphi display incorporates several innovative features to help decision makers detect and monitor operational anomalies and view the relationships among indicators and their associated plausible explanations. Preliminary evaluations of an early prototype Delphi display for detecting kicks in deepwater oil drilling operations have been promising. Moreover, the methodology used to design and develop the Delphi display can be readily generalized to numerous other operational contexts that require humans to make system-critical decisions. To illustrate, an initial Delphi display design for nuclear power plant control is described. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗