Search NASA⌕ Search

SEARCH · Search NASA

Results for “penetration testing”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Cone Penetration Tests at the PacWave South Test Site

This ZIP archive contains cone penetration test data from the PacWave South Test Site. The data were collected in September 2023 aboard the ship Seacor Lee operating out of the Port of Newport, OR. The tests were performed by ConeTec using an AP van den Berg ROSON-100. The cone itself was a standard u2-type, 10 cm^2. A total of 22 soundings were performed.

16 TIDAL AND WAVE POWER↗

Effects of Cone Penetrometer Testing on Shallow Hydrogeology at a Contaminated Site

Penetration testing is a popular and instantaneous technique for subsurface mapping, contaminant tracking, and the determination of soil characteristics. While the small footprint and reproducibility of cone penetrometer testing makes it an ideal method for in-situ subsurface investigations at contaminated sites, the effects to local shallow groundwater wells and measurable influence on monitoring networks common at contaminated sites is unknown. Physical and geochemical parameters associated with cone penetrometer testing were measured from a transect of shallow groundwater monitoring wells adjacent to penetrometer testing. For wells screened above the depth of cone refusal, the physical advancement and retraction of the cone had a significant effect ( p < 0.01) on water level for several pushes within 10 meters of a monitoring well, and a measured increase in specific conductivity. No effect on geochemistry or water level was observed in continuous monitoring data from wells screened below the depth of cone refusal, but variability in specific conductivity from these wells during penetration testing was only a fraction of the natural variation measured during precipitation events. Continuous measurements of specific conductivity and water level demonstrated that the effects of penetration testing have limited spatial and temporal distributions with a null effect post-testing.

54 ENVIRONMENTAL SCIENCES↗

Understanding Li-Ion Cell Internal Short Circuit and Thermal Runaway through Small, Slow and In Situ Sensing Nail Penetration

Here we report a small, slow and in situ sensing (3S) nail penetration test method to understand Li-ion cell internal short circuit (ISC) and thermal runaway. The method not only keeps conventional nail penetration's advantage of simple implementation, but also enhances its relevance to field failures and enables detailed in situ diagnosis. It was applied to 3-Ah pouch cells and revealed insights that could not be captured by conventional methods. Most interestingly, multiple in situ temperature peaks were observed during a period of over 100 s before thermal runaway. These initial peaks exceeded safety limit but the temperature rapidly decreased after each peak instead of causing immediate thermal runaway. Further investigation suggested that the initial temperature peaks occurred when nail tip reached aluminum foil current collector to form a low resistance ISC between anode and aluminum foil. The rapid temperature decrease after each peak can be attributed to sudden drop of ISC current, which can be further attributed to rupture of aluminum foil and increase of contact resistance. The findings show that 3S nail penetration test can separate processes of ISC from thermal runaway and provide details of ISC at the level of individual electrode and current collector.

25 ENERGY STORAGE↗

Disruption of Commercial Solar Inverter System by TLS Proxy Man-in-the-Middle Attack

Transport Layer Security (TLS) is a cryptographic protocol that encrypts communication data, providing end-to-end communication encryption and authentication. Currently, TLS is widely adopted for securing communication between servers and end devices, including solar inverter systems. Therefore, users/operators can securely access the solar inverters through a web user interface (WebUI) application programmable interface (API) on a PC or server over TLS-enabled Wi-Fi or Ethernet. However, the security of the TLS-based network becomes compromised if it is breached by a TLS proxy man-in-the-middle (MITM) exploit. This report explores potential vulnerabilities in a commercial solar inverter system that leverages a TLS proxy MITM and discusses the impacts through assume-breached penetration testing. Furthermore, the paper explores recommended mitigation methods against the TLS proxy MITM exploit in solar inverters.

97 MATHEMATICS AND COMPUTING↗

Ransomware Security Threat Modeling for Photovoltaic Systems

Ransomware attacks are one of the most dangerous cyber-attacks which can disrupt the operation of photovoltaic (PV) systems and incur an enormous economic loss. This paper introduces a ransomware security threat modeling method that identifies potential vulnerabilities, threats, and impacts of ransomware attacks targeting a PV system. Here, the security threat modeling consists of three steps: 1) system identification, 2) threat modeling that finds existing vulnerabilities, 3) attack modeling that designs attack profiles to succeed ransomware attacks, and 4) penetration testing that performs authorized cyber-attacks and analyzes impacts of the ransomware attack profiles using a real-time hardware-in-the-loop (HIL) PV system security testbed.

attack modeling↗

Comparison of Generation of Higher-Order Neutron Scattering Cross Sections

The generation of high-order neutron scattering cross sections consistent with high-fidelity simulations remains an area of active research. Popular options include generating cross sections from continuous energy Monte Carlo calculations or generating cross sections from a deterministic neutron transport calculation with high-fidelity tabulated cross sections. Both options present challenges. Monte Carlo simulations can naturally process continuous energy cross section data and allow for the general description of anisotropic neutron scattering given a scattering law. However, Monte Carlo simulations are inherently related to particle weighting and it has been suggested that this may be unacceptable for generating high-order neutron scattering cross sections. Deterministic neutron transport calculations can easily calculate high-order moments of the flux to appropriately calculate higher-order neutron scattering cross sections but are generally limited by discretization of space, energy, and angle. In this work, the trade-offs between generation of high-order neutron scattering cross sections via Monte Carlo and deterministic neutron transport methods are investigated. The methods implemented in the Monte Carlo computer program Serpent and the deterministic fast reactor neutron cross section generator MC2-3 are compared. Cross sections resulting from these methods are used in Rattlesnake, a deterministic neutron transport code developed by Idaho National Laboratory (INL), and results are compared to a reference continuous energy Monte Carlo calculation. Whereas previous work investigating the effects of anisotropic neutron scattering has focused on light water reactor (LWR) simulations, this work focuses on high-order neutron scattering cross sections as they relate to fast reactor simulations. To investigate the consequences of the Serpent and MC2-3 methodologies, a test problem is developed. The test problem is a one-dimensional geometry with fast reactor materials designed to demonstrate deep penetration and exacerbate the effects of high-order neutron scattering. Based on the results of the deep penetration test problem, it is concluded that P3 neutron scattering cross sections are sufficient to describe anisotropic scattering in fast reactor materials. Any neutron scattering of order higher than P3 offers negligible change in the eigenvalue of the test problem. Additionally, it is determined that the methodology as implemented in Serpent is applicable for generating high-order neutron scattering cross sections through at least P3 in fast reactor materials.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Named Data Networking for DER Cybersecurity

We present our research findings on the novel NDN protocol. In this work, we defined key attack scenarios for possible exploitation and detail software security testing procedures to evaluate the security of the NDN software. This work was done in the context of distributed energy resources (DER). The software security testing included an execution of unit tests and static code analyses to better understand the software rigor and the security that has been implemented. The results from the penetration testing are presented. Recommendations are discussed to provide additional defense for secure end-to-end NDN communications.

97 MATHEMATICS AND COMPUTING↗

Prevention of lithium-ion battery thermal runaway using polymer-substrate current collectors

Isolating electronically conducting material from internal short circuits is a promising way to prevent the onset of thermal runaway within lithium-ion cells. Here, a metal-coated polymer current collector, which is designed to disconnect internal short circuits by withdrawing from the heating region, is tested in 18650 cells. In addition to having lower mass and manufacturing costs, cells with metal-coated polymer current collectors demonstrate a reduced risk of thermal runaway during nail penetration. High-speed synchrotron X-ray radiography of 18650 cells during nail-penetration testing, in tandem with pre- and post-mortem X-ray computed tomography, provides insights into the function of the current collectors. The results are compared with those of 18650 cells with standard commercial aluminum and copper current collectors. Cells with aluminum-coated polymer current collectors demonstrated 100% success in thermal runaway prevention during nail penetration, retaining a cell voltage >4.00 V, while standard cells consistently experienced thermal runaway.

25 ENERGY STORAGE↗

Analysis of Dust and Corrosion Witness Samples Recovered from SNF Dry Storage Systems, Maine Yankee, 2023

This report documents the results of a long-term (5.79 year) exposure of 4-point bend corrosion test samples in the inlet and outlet vents of four spent nuclear fuel dry storage systems at the Maine Yankee Independent Spent Fuel Storage Installation. The goal of the test was to evaluate the corrosiveness of salt aerosols in a realistic near-marine environment, providing a data set for improved understanding of stress corrosion cracking of spent nuclear fuel dry storage canisters. Examination of the samples after extraction showed minor corrosion was present, mostly on rough-ground surfaces. However, dye penetrant testing showed that no SCC cracks were present. Dust collected on coupons co-located with the corrosion specimens was analyzed by scanning electron microscopy and leached to determine the soluble salts present. The dust was mostly organic material (pollen and stellate trichomes), with lesser detrital mineral grains. Salts present were a mix of sea-salts and continental salts, with chloride dominating the anions, but significant amounts of nitrate were also present. Both corrosion samples and dust samples showed evidence of wetting, indicating entry of water into the vents. The results of this field test suggest that the environment at Maine Yankee is not highly aggressive, although extrapolation from the periodically wetted vent samples to the hot, dry, canister surface may be difficult. No stress corrosion cracks were observed, but minor corrosion was present despite high nitrate concentrations in the salts. These observations may help address the ongoing question of the importance of nitrate in suppressing corrosion and SCC.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Field study of group effects on the pullout capacity of “deep” helical piles in sand

This paper presents the results of a field load test program used to investigate group effects on the pullout capacity of single-helix “deep” helical piles/anchors in sand. The high tensile capacity and silent installation of helical piles has given them serious consideration as an alternative to conventional deep foundations and anchors for offshore renewable energy structures. New offshore applications may consider the use of groups of helical piles to resist structural loads. Group interaction effects are known to occur in helical piles, but there is a scarcity of field data on groups in sands under tensile loading. This study involved the installation and load testing of single-helix 152mm diameter round shaft piles and pile groups embedded in sand to depths of 12 and 18 helix diameters below the ground surface. The study was designed to explore the effects of close pile spacing, group configuration (i.e., number of piles), and soil strength (i.e., friction angle) as interpreted from cone penetration test (CPT) resistance. The results showed group efficiencies ranging from about 0.6 to 1.0 at a horizontal spacing of 2 to 3 times the helix diameter in sands with friction angles of about 39° to 44°. The data from this study may also be useful for validation of numerical models for analysis of helical pile group interactions.

Engineering↗

Compressible battery foams to prevent cascading thermal runaway in Li-ion pouch batteries

Lithium-ion battery packs require thermal management to achieve optimum life and safety. This is becoming crucial for battery packs composed of high-energy-density cells. Pouch cells themselves achieve highest packaging efficiency but require additional structural support and thermal management when grouped into modules, especially under abusive conditions such as thermal runaway. Novel foam battery pads have demonstrated to cushion volume changes of pouch cells and are reengineered in this study to mitigate cell-to-cell thermal runaway propagation. The compressible pads are made of polyurethane foams incorporating flame-retardant additives or coatings, including intumescent and fire wall materials. Here their performances were evaluated by conducting nail penetration tests on modules composed of pouch cells at 100% state of charge (SOC), with the foams placed in between the cells. Experimental results show cascading thermal runaway was considerably delayed by polyurethane foams incorporating flame-retardant additives or coatings. Complete prevention of cascading failure was achieved with dense polyurethane foams with multilayered coatings of both fire wall and intumescent materials.

25 ENERGY STORAGE↗

Cyber Attack Sequences Generation for Electric Power Grid

Security assessment of cyber-physical energy systems (CPESs) such as the electric power grid is a critical operation to maintain availability, reliability, and quality of service in the presence of persistent threats from malicious cyber actors. Existing security assessment approaches such as penetration testing and red teaming rely on subject matter expert experience and forensic cyber analysis of historical events to perform realistic, threat-informed assessments of CPES defense. CPESs have a large attack surface because of the heterogeneity and complexity of underlying topology, devices, measurements, and vulnerabilities. The aforementioned approaches lead to partial coverage of the attack surface with a large set of unknown but possible exploits. There is a need to automate the CPES attack surface discovery and contextualize it for relevant, highly probable, real-world attack scenarios. We propose a methodology and framework to facilitate the discovery of the CPES attack surface. We present a multilayer attack graph with ranked attack sequences to describe CPES failure scenarios. We present a work-in-progress framework that lists key components to automate the attack modeling and sequence generation. We demonstrate the published National Electric Sector Cybersecurity Organization Resource CPES failure scenario to highlight the trustworthiness of generated attack sequences.

Dutta, Ashutosh↗

Corrosion Studies of Pine-Derived Bio-Oil and Heavy Fuel Oil Blends

To reduce the amount of greenhouse gas produced from the combustion of petroleum fuels, renewable liquid fuels are needed. Pyrolysis of biomass provides a means to produce liquid fuels to displace current petroleum products. However, common ferrous alloys are susceptible to high corrosion rates when exposed to bio-oil. This study analyzes the effects of blending bio-oil derived from loblolly pine with heavy fuel oil added to reduce corrosion of common structural alloys. Laboratory corrosion studies of six different blends of bio-oil/heavy fuel oil were performed for 1,000 hours at 50°C. Chemical characterization was also performed to determine the total acid content of each blend. Post-exposure characterizations such as changes in weight, X-ray diffraction, dye penetrant testing, and metallography were performed to provide more insight into the corrosion mechanism of bio-oil/heavy fuel oil blends. We hypothesized that the corrosion rates of ferrous alloys would increase with an increase in bio-oil concentration. The results of these characterization and corrosion studies confirmed this hypothesis and will be reported.

09 BIOMASS FUELS↗

DEReliction: A Cybersecurity Vulnerability Assessment Methodology for Distributed Energy Resources

With the increasing integration of Distributed Energy Resources (DER) into the electric grid, maintaining grid reliability and resilience requires that these devices remain secure. This paper discusses a cybersecurity vulnerability assessment methodology that incorporates best practices from Sandia National Laboratories, SANS Institute, OWASP Foundation, and other web and Internet of Things (IoT) penetration testing (“pen testing”) programs, courses, and frameworks for assessing the security posture of devices. The methodology involves five sequential steps: (1) Collect Public Information, (2) Extract Hardware Details, (3) Inventory Software Components, (4) Identify Vulnerabilities, and (5) Test Vulnerabilities. Each step uncovers potential weaknesses in both hardware and software components of DER devices, considering adversary tactics, techniques, and procedures (TTPs), and potential attack vectors along the way. The results from the execution of this method on multiple residential- and small commercial-scale photovoltaic (PV) inverters reveled hardware and software vulnerabilities, which highlight the benefit of taking a methodical approach to discover vulnerabilities. While the specific vulnerability details are not shared here, a generalized overview of findings underscore the importance of robust security assessments for DER devices. Adoption of an assessment framework of this kind will identify and mitigate cybersecurity threats and bolster the resilience of DER-integrated electric grids.

24 POWER TRANSMISSION AND DISTRIBUTION↗