Search NASA⌕ Search

SEARCH · Search NASA

Results for “Test Effect Payload”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

Invite the Chaos Monkey: Test Effect Payloads for Tuning ICS Incident Response

In 2010, when Netflix moved their operational systems to the cloud, they developed a pseudo-random mechanism to cause deliberate outages and failures of key system elements to ensure that automated systems for detecting and remediating outages were mature and fully functional. This Chaos Monkey spawned an entire Simian Army designed to ensure system resilience and enable failure response before issues became outages. Through the DARPA RADICS program, Provatech, INL, and other researchers have developed a mechanism for creating controllable failures via Test Effect Payloads (TEPs) for Industrial Control Systems in order to enable an asset owner to tune network and process sensor technology, increase the effectiveness of incident response and remediation, and highlight areas where resilient technology could bring benefit to Operational Technology. This talk will explore what a TEP is, how to create a TEP, and suggest what a systematic system resilience plan using TEP’s might look like. We will also discuss how regulated entities might employ TEP’s in a compliant resilience strategy.

42 ENGINEERING↗

EV SALaD 2023 Demonstration: Best Practices and Mitigations for Protecting EVSE Infrastructure

The Electric Vehicle Secure Architecture Laboratory Demonstration (EV SALaD) program is a demonstration of cybersecurity best practices for high-power electric vehicle (EV) charging infrastructure led by Idaho National Laboratory (INL), in collaboration with other DOE National Laboratories participating in the EVs at Scale Consortium.a Sandia National Laboratories (SNL) and Pacific Northwest National Laboratory (PNNL) participated in the first 2-year (FY22-23) demonstration cycle for EV SALaD. This report documents the FY23 demonstration, the second in a series of demonstrations and collaborations in deploying and operating cybersecure EV charging infrastructure. It includes a summary of improvements from the FY22 demonstration, technical analysis of the FY23 demonstration, how the research demonstrates cyber-physical and cybersecurity best practices for high-power EV charging infrastructure, and related impacts to national and energy security. For EV SALaD, the FY22 demonstration focused on the detection, ranking, and prioritization of anomalous events for high-power EV charging. The FY23 demonstration additionally included the demonstration of cybersecurity best practices, which included protection and mitigation solutions to prevent, respond, and recover from anomalous events. During the demonstrations, the multi-lab EV SALaD team conducted a Test Effect Payload (TEP)b evaluation on extreme fast charger (XFC) hardware equipped with Cerberus, a detection and response solution, to demonstrate anomaly detection and mitigation cybersecurity best practices against cyber-enabled events.

33 ADVANCED PROPULSION SYSTEMS↗

Emulation and Adversarial Analysis of EV Charging Networks

In the effort of decarbonization and evolution of the modern electrical grid, electric vehicles (EVs) play a key part to transform the grid. However, due to the rapid adoption of EVs and the demand of the charging infrastructure required to power said EVs, risk of a cyber-attack may impose serious consequences. There is a need to analyze and protect the charging ecosystem infrastructure from cyber threats before it reaches wide-scale deployment. In an effort to secure vehicle to grid (V2G) communications, standardization is necessary for continued reliable system operation. The protocol ISO 15118 outlines controls and practices that should be implemented for secure vehicle to grid (V2G) communications. The standard is gaining momentum for American markets as the demand for EV infrastructure grows. The adoption of ISO 15118 in American markets poses several challenges: the deployment of a public key infrastructure (PKI) as outlined within the standard, interoperability of charging different EVs with chargers from different manufactures using the PKI, and scaling the ecosystem to meet the demand while managing risks. This project was created to understand potential cyber and scaling challenges of PKI for EV infrastructure through utilizing a series of emulated components mapping to what exists in the EV ecosystem today, and the components of the PKI that are under development. The key nodes within the emulation that are under development are: electric vehicle (EV), electric vehicle supply equipment (EVSE), charge network operator (CNO), certificate authority (CA), and online certificate status protocol (OCSP) that must all interact using secure and trusted communications. With these emulated components and utilizing orchestration methods to rapidly deploy and scale the components, the ability to analyze risks of the ecosystem and address gaps before the PKI ecosystem is fully deployed to production should yield a more robust and mature production charging infrastructure. Our approach will use a modular architecture of virtual machines within an orchestration platform and will target scales of 100s, 1000s, and 10,000s of entities interacting. The core research questions trying to be answered with this scope of work are: what are the impacts of a rogue CA, what are the risks of certificate revocation list (CRL) management, what is the value of OCSP stapling, what components are vulnerable to DOS attacks, and what test effective payloads may impact the components.

charging ecosystem↗

PacWave South SeaRAY k2 Risk Registers

The SeaRAY is a deployable power system for maritime sensors, monitoring equipment, communications, unmanned underwater vehicles, and other similar payloads. This project is to design, deliver, and test a prototype low-power WEC that lowers the total cost of ownership and provides robust, new capabilities for customers in the maritime environment. Failure Modes, Effects, and Criticality Analysis (FMECA) is conducted to systematically identify all potential failure modes and their effects on the system, and to analyze the criticality of each risk based on the likelihood of the event and the severity of the impact. Actions may then be recommended to mitigate the criticality of a risk, either by reducing the likelihood of the risk or the severity of its impact. Risk assessment is executed iteratively as an integral part of the design process. By incorporating risk assessment early in the development cycle, mitigation of risk can be achieved cost effectively. The actions recommended to mitigate risk may be subsequently executed, and as the design progresses the risk assessment is reviewed and revised. Review of the risk assessment is integrated into structured design reviews, ensuring that critical risks are comprehended and that the Project will not progress to e.g. fabrication while intolerable risks remain. The risk assessment process results in the population and maintenance of Risk Registers (RRs). Each major system (and as needed, subsystem) will have a distinct RR. This allows each system or subsystem to be assessed individually, rendering the RRs to a manageable size for review.

16 TIDAL AND WAVE POWER↗

PRISTINE: An Emulation Platform for PCB-Level Hardware Trojans

Printed circuit Boards (PCBs) are becoming increasingly vulnerable to malicious design alteration, also known as Trojan attacks, due to a distributed business model that often involves various untrusted parties. Such attacks can be mounted at various stages in the PCB life cycle. The relative ease of alteration of PCB hardware even after fabrication (due to physical access to surface-mounted critical components and traces) makes them attractive for an adversary to manipulate their functional/physical behavior for malicious intent. There is a growing need to explore viable Trojan attacks in a PCB, analyze their functional and physical characteristics (e.g., impact on power or delay), and study the effectiveness of countermeasures against these attacks. While simulation-based approaches for PCB Trojan insertion are effective at creating a large population of possible Trojans, they fail to provide functional feasibility analysis with a realistic workload for a trigger circuit. Also, they cannot estimate a Trojan’s side-channel footprint due to the unavailability of physical models of diverse PCB components. To address these deficiencies, in this paper, we present PRISTINE, a PCB-level emulation system for any integrity or physical tampering issues, specifically, hardware Trojan insertion. The need for building such an emulation platform to resolve PCB trust issues in the supply chain is also surveyed and discussed. Both custom Hardware Hacking (HaHa) boards and multiple commercial PCBs are then used to test the ability of the proposed system to emulate various hardware Trojans specially designed to exploit board-specific hardware characteristics. Experimental results on emulated board-level Trojans show that a wide range of Trojans can be successfully activated, thus enabling the expected payload effects on both types of boards to be studied and quantified. The resulting data are further analyzed to create PCB-level Trojan benchmarks. In particular, a comparative evaluation of the experimental results is used to propose a risk level metric that quantifies the probability of detection and degree of payload impact of each Trojan on a given commercial PCB.

47 OTHER INSTRUMENTATION↗

Drop Analysis of the Advanced Test Reactor Fresh Fuel Shipping Container with Heavier Low-Enriched Uranium Fuel Contents

The Advanced Test Reactor Fresh Fuel Shipping Container (ATR FFSC) is a rectangular stainless steel container used for shipping radioactive material. The container is described in the ATR FFSC Safety Analysis Report (SAR). Per the ATR FFSC SAR, the ATR FFSC is designated a Type AF-96 packaging per the definition of 10 CFR §71.4, and was originally designed to transport high enriched uranium (HEU) reactor fuel elements for the Advanced Test Reactor (ATR), the Advanced Test Reactor Critical (ATRC) facility, the Massachusetts Institute of Technology Reactor (MITR), and the University of Missouri Research Reactor (MURR). The Department of Energy, National Nuclear Security Administration’s (NNSA), Office of Material Management and Minimization (M3) is working with the Idaho National Laboratory (INL) to develop and qualify new low enriched uranium (LEU) fuels and technologies for use in the ATR, ATRC, MITR, and MURR reactors. The LEU fuel elements will weigh significantly more than the current HEU designs and, combined with their associated Fuel Handling Enclosures for packaging, some configurations will exceed the 50 lbf used in the ATR FFSC qualifying drop tests. There are LEU versions of MITR, MURR, and ATR fuel elements. However, for this evaluation, drop analysis of the ATR FFSC with only the heavier ATR Low Enrichment (LOWE) fuel element is considered in this evaluation because the LOWE fuel element is the heaviest of the considered LEU fuel elements. The ATR HEU fuel element and the ATR LOWE fuel element are identical in every design aspect except for the fuel meat inside the 19 fuel plates. The LEU fuel meats are made using a U-10Mo high-density foil rather than uranium dispersed in aluminum in the HEU fuel elements. The high density of the uranium in the LEU fuel meat increases the LOWE fuel element weight to just under 44 lbf (versus the 22.1 lbf weight of the tested ATR HEU fuel element). ATR fuel elements are placed in a thin-gauge aluminum weldment called a "Fuel Handling Enclosure" during packaging. The Fuel Handling Enclosure is used to cover and protect the element during loading and unloading operations. The ATR Fuel Handling Enclosure weighs about 15 lbf per the drawings in the ATR FFSC SAR and the weight is accounted for in this evaluation. Transporting the heavier LEU fuel elements require evaluation of two issues. The first is the effect of the increased mass of the LEU fuel elements on the survivability of the ATR FFSC package following the requisite drop qualifications. The second is the effect of the increased mass of the fuel plates on the fuel element during the same drops. The ATR FFSC containing an ATR HEU fuel element in an ATR Fuel Handling Enclosure was physically dropped multiple times to qualify the container as a Type AF-96 package. The ATR FFSC SAR describes the drop tests performed with an actual ATR HEU fuel element weighing 22.1 lbf contained in a 14.3 lbf Fuel Handling Enclosure for a total payload of 36.4 lbf. Those drop tests showed that the ATR FFSC maintained containment of the ATR HEU fuel element and the fuel element was not significantly damaged. (Containment herein is not defined as a leak tight but is retention of the radioactive contents.) The purpose of the evaluation is to analytically show that, for a similar set of tests, the ATR FFSC maintains containment of the heavier ATR LOWE fuel element and to assess the damage to the fuel element during the drops. The approach was to create finite element analysis (FEA) models that produce the same results as the physical drops. Those models were then used as the benchmarks for the follow-on analyses using the heavier contents. FEA models of the drops of ATR FFSC using up to a 115 lbf fuel element were run and evaluated. Likewise, drops of a LOWE fuel element weighing 44 lbf in the ATR FFSC were run and evaluated. It is important to note that this report was done at the quality level necessary to be included in a nuclear facility safety basis. However, it is not the intent of this report to conclude the suitability of the ATR FFSC for transporting the heavier payloads. This report only describes the results of the FEA as related to the required drop scenarios. Incorporation of the FEA into the safety basis will be evaluated by the ATR FFSC design authority. The physical drop tests of the HEU fuel element and FEA drop analysis for the LOWE fuel element showed noteworthy damage to the fuel plates. An aluminum protective block was conceived to mitigate the damage. The concept requires the blocks to be placed in the fuel element between the end boxes and fuel plates. Additional FEA drop analyses were performed using the protective block. The addition of the blocks is primarily intended to mitigate the damage to the LOWE fuel element fuel plates. However, FEA drop analyses of the ATR HEU fuel element with the blocks were also performed and included for information.

42 ENGINEERING↗

Assessing the Vulnerability of Unmanned Aircraft Systems to Directed Acoustic Energy

The increasingly large payloads of Unmanned Aircraft Systems (UASs) are exponentially increasing the threat to the nuclear enterprise. Current mitigation using RF interference is effective, but not feasible for fully autonomous systems and is prohibited in many areas. A new approach to UAS threat mitigation is needed that does not create radio interference but is effective against any type of vehicle. At the present time there is no commercial counter-UAS system that directly assaults the mems gyros and accelerometers in the Inertial Measurement Unit on the aircraft. But lab testing has revealed resonances in some IMUs that make them susceptible to moderate amplitude acoustic monotones. Sandia's energetic materials facility has enabled a quick and thorough exploration of UAS vulnerability to directed acoustic energy by using intense acoustic impulses to destabilize or down a UAS. We have: 1) detonated/deflagrated explosive charges of various sizes; 2) accurately measured impulse pressure and pulse duration; 3) determined what magnitude of acoustic insult to the IMU disrupts flight and for how long and; 4) determined if the air blast/shock wave on aircraft/propellers disrupts flight.

42 ENGINEERING↗