Idaho National Laboratory (INL) Cybersecurity Support to the Department of Homeland Security (DHS)
Overview of Idaho National Laboratory Cybersecurity Support to the Department of Homeland Security.
99 GENERAL AND MISCELLANEOUS↗
SEARCH · Search NASA
Results for “Department of Homeland Security”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
W-13 Advanced Engineering Analysis Group Overview [Slides]
W-13 provides the Nuclear Weapons Program at Los Alamos National Laboratory with excellence in engineering analysis, predictive modeling, validated simulations, and the quantification of margins and uncertainty. Our customers include the nuclear weapons program, the Department of Homeland Security, and the Department of Defense, among others.
42 ENGINEERING↗
Washington State Cyber Incident Response Summit Event Report
On September 7 and 8, 2022, Pacific Northwest National Laboratory and Washington State Adjutant General Major General Bret Daugherty, with support from the Department of Homeland Security Cybersecurity and Infrastructure Security Agency, hosted the Washington State Cyber Incident Response Summit at Camp Murray in Washington State. The invite-only summit convened 40 key decision makers and stakeholders from across the state to discuss strategies and pilot a collaborative approach to improve cyber incident response readiness within Washington. In small working groups, participants shared incident response lessons learned, best practices, and opportunities for improvement within the water and transportation sectors. This report highlights the details of the workshop presentations and discussions.
97 MATHEMATICS AND COMPUTING↗
Modular Software Interfaces for Revolutionary Flexibility in Space Operations
To make revolutionary improvements in exploration, space systems need to be flexible, realtime reconfigurable, and able to trade data transparently among themselves and mission operations. Onboard operations systems, space assembly coordination and EVA systems in exploration and construction all require real-time modular reconfigurability and data sharing. But NASA's current exploration systems are still largely legacies from hastily-developed, one-off Apollo-era practices. Today's rovers, vehicles, spacesuits, space stations, and instruments are not able to plug-and-play, Lego-like: into different combinations. Point-to-point dominates - individual suit to individual vehicle, individual instrument to rover. All are locally optimized, all unique, each of the data interfaces has been recoded for each possible combination. This will be an operations and maintenance nightmare in the much larger Project Constellation system of systems. This legacy approach does not scale to the hundreds of networked space components needed for space construction and for new, space-based approaches to Earth-Moon operations. By comparison, battlefield information management systems, which are considered critical to military force projection, have long since abandoned a point-to-point approach to systems integration. From a system-of-systems viewpoint, a clean-sheet redesign of the interfaces of all exploration systems is a necessary prerequisite before designing the interfaces of the individual exploration systems. Existing communications and Global Information Grid and middleware technologies are probably sufficient for command and control and information interfaces, with some hardware and time-delay modifications for space environments. NASA's future advanced space operations must also be information and data compatible with aerospace operations and surveillance systems being developed by other US Government agencies such as the Department of Homeland Security, Federal Aviation Administration and Department of Defense. This paper discusses fundamental system-of-systems infrastructure: approaches and architectures for modular plug-and-play software interfaces for revolutionary improvements in flexibility, modularity, robustness, ease of maintenance, reconfigurability, safety and productivity. Starting with middleware, databases, and mobile communications technologies, our technical challenges will be to apply these ideas to the requirements of constellations of space systems and to implement them initially on prototype space hardware. This is necessary to demonstrate an integrated information sharing architecture and services. It is a bottom-up approach, one that solves the problem of space operations data integration. Exploration demands uniform software mechanisms for application information interchange, and the corresponding uniformly available software services to enhance these mechanisms. We will examine the issues in plug-and-play, real-time-configurable systems, including common definition and management and tracking of data and information among many different space systems. Different field test approaches are discussed, including the use of the International Space Station and terrestrial analog mission operations at field sites.
Glass, Brian↗
SDRD Program at the NNSS - June 14, 2023
Presentation on the SDRD Program to be presented by Paul Guss during the June 14 Department of Homeland Security Science and Technology event.
99 GENERAL AND MISCELLANEOUS↗
Countering Weapons of Mass Destruction (CWMD) Zero Trust Framework: CWMD Zero Trust Principles Model
The research focuses on the critical need for enhanced cybersecurity within the Countering Weapons of Mass Destruction (CWMD) Office, specifically targeting Chemical, Biological, Radiological, and Nuclear devices. Traditional perimeter-based security models are insufficient against modern cyber threats, prompting a shift toward Zero Trust principles (ZTP) that emphasize continuous verification and stringent security for all devices. Federal directives mandate the adoption of Zero Trust (ZT) across agencies, supported by guidelines from National Institute of Standards and Technology (NIST), U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA), U.S. Department of Defense (DoD) and National Security Agency (NSA). The research involved mapping ZT guidance from these agencies to develop tailored CWMD ZTP. The study identified gaps and areas for improvement, including clear transitional guidance from traditional to ZT architectures and the focus on explicit cross cutting capabilities. Design improvements are recommended to ensure increased comprehensive protection and resilience against sophisticated cyber threats for Chemical, Biological, Radiological, and Nuclear (CBRN) devices. Collaborative efforts among federal agencies are essential for the successful deployment of an optimized ZT guidance.
45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
Smart Microgrids
The Nation’s electrical power depends on one bulk power grid to support security and economic prosperity. According to the Department of Homeland Security’s Homeland Threat Assessment of 2020, the largest cyber threat to homeland security is potential disruption to critical infrastructure, including power grids. Critical infrastructure includes the physical and cyber systems which generate, transmit, and distribute electricity with an impact on economic security, public health, or safety. The surety of the Nation’s power grid is vital for providing essential services and would put the population at risk if disrupted. Power outages can have catastrophic consequences for critical organizations such as hospitals and military installations. Additionally, the current fossil-fuel dependent power grid is extremely fragile and vulnerable to overloads, storms that destroy power lines, and cyber-attacks.
24 POWER TRANSMISSION AND DISTRIBUTION↗
Gamma Spectroscopy Detector Candidates and Radioisotope Identification Algorithms for Use in National Security Applications
In 2006, the United States Congress mandated for the Department of Homeland Security (DHS) to screen all cargo containers to protect against terrorist acts and ensure the safety and security of the nation. Containers are screened by gamma and neutron detectors to ensure threat material is not smuggled into the country. However, because commerce is radioactive, detecting the presence of radioactive materials is not sufficient in ensuring the safety and security of the nation. Radioactive materials must also be identified in real time, thus distinguishing threat sources (Uranium-235 and Plutonium-230) from non-threat sources (kitty litter, pot ash, medical isotopes). Screening cargo containers can be considered a two-step process (1) alerting to the presence of radioactive material when gamma counts exceed a threshold setting, and (2) once alerted, identifying the type of radioactive material, which is done by collecting a gamma spectra and analyzing it with an analysis tool/algorithm. For this reason, it is important to evaluate not only emerging technology in neutron and gamma detection, but also investigate new advances in algorithm development for radioisotope identification (RIID). New candidates in detection and on-board algorithm analysis might offer opportunities to make the scanning, detection, and identification process more efficient while still ensuring the health and safety of the public. This research will investigate emerging technology in radiation detection focused on gamma spectroscopy capabilities and RIID algorithms for DHS applications.
61 RADIATION PROTECTION AND DOSIMETRY↗
Emergency Management of Tomorrow Research: Emergency Operations Center of the Future Tabletop Exercise Nashua, NH Tabletop Exercise
As part of the Emergency Management (EM) of Tomorrow Research (EMOTR) program, sponsored by the Department of Homeland Security (DHS) Science and Technology (S&T) Directorate, Pacific Northwest National Laboratory (PNNL) developed concepts for the Emergency Operations Center (EOC) of the Future to provide recommendations to assist DHS S&T in future decision-making with regards to research and development (R&D) and investments toward establishing a framework for a national, coordinated approach to EM. PNNL is conducting tabletop exercises (TTXs) designed to assess the impacts and benefits of emerging technologies on EM organizations.
99 GENERAL AND MISCELLANEOUS↗
Emergency Management of Tomorrow Research: Emergency Operations Center of the Future Seattle, WA Tabletop Exercise
As part of the Emergency Management (EM) of Tomorrow Research (EMOTR) program, sponsored by the Department of Homeland Security (DHS) Science and Technology (S&T) Directorate, Pacific Northwest National Laboratory (PNNL) developed concepts for the Emergency Operations Center (EOC) of the Future to provide recommendations to assist DHS S&T in future decision-making with regards to research and development (R&D) and investments toward establishing a framework for a national, coordinated approach to EM. PNNL is conducting tabletop exercises (TTXs) designed to assess the impacts and benefits of emerging technologies on EM organizations.
99 GENERAL AND MISCELLANEOUS↗
Emergency Management of Tomorrow Research: Emergency Operations Center of the Future Madison, WI Tabletop Exercise
As part of the Emergency Management (EM) of Tomorrow Research (EMOTR) program, sponsored by the Department of Homeland Security (DHS) Science and Technology (S&T) Directorate, Pacific Northwest National Laboratory (PNNL) developed concepts for the Emergency Operations Center (EOC) of the Future to provide recommendations to assist DHS S&T in future decision-making with regards to research and development (R&D) and investments toward establishing a framework for a national, coordinated approach to EM. PNNL is conducting tabletop exercises (TTXs) designed to assess the impacts and benefits of emerging technologies on EM organizations.
99 GENERAL AND MISCELLANEOUS↗
Emergency Management of Tomorrow Research – Task 3B Research and Development Community Awareness: Eliciting Emergency Management Stakeholder Input
The Department of Homeland Security (DHS) Science and Technology Directorate (S&T) is partnering with Pacific Northwest National Laboratory (PNNL) to execute the Emergency Management (EM) of Tomorrow Research (EMOTR) program to identify current EM research, elicit capability needs from EM practitioners, and identify where technology, such as artificial intelligence (AI), may benefit the future of EM and emergency operations centers. This report details the methodology, analysis, and insights of interviews and focus groups conducted as part of the task to elicit stakeholder input.
99 GENERAL AND MISCELLANEOUS↗
FRMAC Laboratory Analysis Manual Volume 1, Revision 0
The Federal Radiological Monitoring and Assessment Center (FRMAC) is an operational center, available on request by the Department of Homeland Security (DHS) to respond to nuclear and radiological incidents as described in the National Response Framework (NRF). Under the Federal Interagency Operational Plan for Response and Recovery’s Nuclear/Radiological Annex, the U.S. Department of Energy (DOE) has the responsibility to maintain the operational readiness of the FRMAC during the emergency phase of an event. FRMAC is initially established and managed by the Nuclear Emergency Support Team (NEST) and serves as an interagency operations center with representatives from various federal, state, and local radiological response organizations. The purpose of the FRMAC is to assist state, local, tribal, and territorial governments (SLTT) in their mission to protect the health and well-being of their citizens with: • Verified radiation measurements. • Interpretations of radiation distributions based on Environmental Protection Agency (EPA), Food and Drug Administration (FDA), or local Protective Action Guidelines (PAGs). • Characterization of overall radiological conditions. Once a declaration to respond to a radiological emergency has been made, the National Nuclear Security Administration (NNSA) Headquarters will coordinate the response in consultation with the cognizant NNSA Regional Coordinating Office (RCO). Each of the eight RCOs maintain a 24-hour response capability for radiological emergencies that may occur in states served by its region. When a FRMAC is established, it operates under the parameters of the Incident Command System (ICS), as defined in the National Incident Management Systems (NIMS) construct. The Consequence Management Home Team (CMHT) will be activated immediately during normal business hours (Pacific Time Zone), and within two hours otherwise. The Consequence Management Response Team (CMRT) is prepared for deployment within six hours after activation. Along with the assets, FRMAC provides an operational framework for coordinating of all federal off-site radiological monitoring and assessment activities during a response to a radiological emergency to support the coordinating agency and SLTT governments. Potential radiological emergencies that fall within FRMAC vary widely in terms of the area affected, the nature of the contamination, and the scope of the government’s response. Detonation of a nuclear device, accidental release of radiation from a nuclear power plant, and a terrorist threat are just a few of the many possible scenarios FRMAC must be prepared to address. Through all this, supporting the state, local, and tribal organizations in the protection of the public remains the primary goal of the federal response.
54 ENVIRONMENTAL SCIENCES↗
Advanced Reactor Safeguards & Security Program: Cybersecurity Scenarios
The use of digital control systems and automation in advanced nuclear power systems introduces different types of vulnerabilities compared to legacy (i.e. analog) control systems that cyber adversaries can exploit. These vulnerabilities pose a challenge to reactor operators and cyber operations staff due to the dynamic nature of the event in which a human response or a lack of response can potentially evolve into a worsening plant condition. Using the Department of Homeland Security Cyber and Infrastructure Security Agency’s (CISA) critical infrastructure exercise framework, this document presents several cyber security scenarios typical of digital control systems that could be used in advanced reactor designs. These scenarios can be used in tabletop exercises to evaluate cyber security posture or conduct training on different aspects of cyber security, including detection, threat hunting using indicators of compromise, evaluating incident response, risk mitigation, incident reporting, information sharing and recovery.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NCERC 2024 Highlights
The National Nuclear Security Administration (NNSA) is entrusted with ensuring the safety, security, and reliability of the nation’s nuclear weapons stockpile while advancing programs aimed at reducing global nuclear proliferation. These critical mission objectives are achieved through the expertise of a highly skilled team of professionals. The operations at the National Criticality Experiments Research Center (NCERC) play a vital role in developing and enhancing knowledge and expertise in advanced nuclear technologies. NCERC supports a wide range of mission areas, including nuclear criticality safety, nuclear emergency response, and nuclear nonproliferation, safeguards, and arms control. It also provides support to the Department of Homeland Security, advances stockpile stewardship science, and delivers scientific expertise to other government agencies, such as NASA and the Defense Threat Reduction Agency. NCERC conducts experiments utilizing diverse nuclear materials, from small neutron-emitting sources for testing radiation detection equipment to larger quantities of uranium and plutonium for criticality experiments. A cornerstone of NCERC's mission portfolio includes the operation of four critical mass assembly machines—Planet, Comet, Flattop, and Godiva-IV—which are instrumental in advancing nuclear science and ensuring the nation’s nuclear security objectives.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Analyzing Infrastructure Interdependencies Using Network-Of-Networks Modeling
Infrastructure networks play a crucial role in our day-to-day lives, and modeling these infrastructure networks can help decisionmakers prepare for and respond to disruptions such as natural disasters or cyberattacks. Because these infrastructure networks depend on each other, it is not sufficient to model a single network in isolation. We build on previous single-network-modeling techniques to develop a methodology for modeling infrastructure interdependencies as a Network-of-Networks. Using distributionlevel data from a real U.S. city on the power grid, road geometry, and hospital locations, we show how to apply this methodology to modeling three of the U.S. Department of Homeland Security's Critical Infrastructure Sectors: Healthcare, Transportation, and Energy. We also analyze three primary metrics before and after a simulated disaster: 1) impact on hospital access; 2) road network impact with the change in betweenness centrality; 3) electric customer outage. We simulate three different disruptions: 1) road flooding from nearby rivers; 2) a malicious actor targeting the road networks; 3) a malicious actor targeting the electric grid. Finally, we discuss how our methodology can be applied to additional infrastructure networks and types of disruption, and how Artificial Intelligence (AI) techniques may be incorporated into this methodology for further research.
Scherrer, Evan [Drake University, Iowa]↗
Evolution and Trends of Industrial Control System Cyber Incidents since 2017
The industrial control systems (ICSs) that manage our critical infrastructure are increasingly converging with corporate networks and the Internet as technology and businesses prioritize digital connectivity. These connections make them more vulnerable and available to malicious cyber actors who traditionally targeted the companies’ more public-facing information technology (IT) networks. This paper will review select publicly reported cyber incidents to highlight the continued and growing threat to ICS devices and operational technology (OT) environments. It will summarize the incident and when available, will provide information on the cyber actors, the vulnerabilities they exploited, and any publications the U.S. Government (USG) provided in response. Data belonging to the Department of Homeland Security (DHS) will be used to highlight quantitative trends concerning ICS incidents. This paper builds on “History of Industrial Control System Cyber Incidents” (Hemsley & Fisher 2018), a paper that highlighted select noteworthy threats and incidents to ICS systems up to 2017. This paper will similarly review select incidents occurring after the last previously reviewed incident, Triton/HatMan, December 2017, and will note ICS incident trends including IT/OT convergence and advances in cyber-threat actors’ capabilities in observed in the examined incidents.
99 GENERAL AND MISCELLANEOUS↗
Technical Assistance for Characterization Studies of Personal Protection Equipment (PPE) (Final CTAP Report)
Sandia National Laboratories (SNL) conducted an independent assessment of three different certified N95 respirators for the State of New Mexico Department of Homeland Security and Emergency Management. The testing conducted under this effort mimicked traditional NIOSH certification testing methodologies, where possible (NIOSH 2019). This included the use of a commercially available off-the-shelf (COTS) instrument typically used in industry for N95 respirator certification (ATI 2018). The COTS system, an Air Techniques International 100Xs automated filter tester, was used for all the testing reported in this document. It is important to note that SNL is NOT a certification laboratory, and all quantitative results are for informational purposes only. Additional technical information of N95-related efforts conducted by this team may be found in: Omana et al. (2020a), Omana et al. (2020b), Celina et al. (2020)
42 ENGINEERING↗