Search NASA⌕ Search

SEARCH · Search NASA

Results for “secure communications”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Countering Weapons of Mass Destruction Office (CWMD) Data Categorization Study: Chemical, Biological, Radiological, and Nuclear (CBRN) Detection Device Data

Pacific Northwest National Laboratory (PNNL) seeks to address critical questions related to chemical, biological, radiological, and nuclear (CBRN) detection devices. This research aims to enhance the security and understanding of these devices by investigating various aspects of their identification, communication, and functionality. The primary focus is on network security, malware detection, device identification, and intelligence gathering. CBRN data can be categorized in various ways depending on the purpose of CBRN detection devices and the specific context of the applications for analysis. Criteria that can be used to assist in this effort include but are not limited to data type, data protocol, source/destination, application, time, security, and content. This study will inform additional paths for data classification, data profiling, data mapping, and data modeling. This will help the Countering Weapons of Mass Destruction Office (CWMD) better understand their data and make informed decisions based on the insights gained from this study and their application. The CBRN Data Categorization study will include the identification of 5–10 different CBRN detection devices with unique characteristics for assessing and analyzing the data that is being produced by and transmitted from these devices.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
NASA NTRS2015

Securing the Global Airspace System Via Identity-Based Security

Current telecommunications systems have very good security architectures that include authentication and authorization as well as accounting. These three features enable an edge system to obtain access into a radio communication network, request specific Quality-of-Service (QoS) requirements and ensure proper billing for service. Furthermore, the links are secure. Widely used telecommunication technologies are Long Term Evolution (LTE) and Worldwide Interoperability for Microwave Access (WiMAX) This paper provides a system-level view of network-centric operations for the global airspace system and the problems and issues with deploying new technologies into the system. The paper then focuses on applying the basic security architectures of commercial telecommunication systems and deployment of federated Authentication, Authorization and Accounting systems to provide a scalable, evolvable reliable and maintainable solution to enable a globally deployable identity-based secure airspace system.

Communications↗
NASA NTRS2003

Software To Secure Distributed Propulsion Simulations

Distributed-object computing systems are presented with many security threats, including network eavesdropping, message tampering, and communications middleware masquerading. NASA Glenn Research Center, and its industry partners, has taken an active role in mitigating the security threats associated with developing and operating their proprietary aerospace propulsion simulations. In particular, they are developing a collaborative Common Object Request Broker Architecture (CORBA) Security (CORBASec) test bed to secure their distributed aerospace propulsion simulations. Glenn has been working with its aerospace propulsion industry partners to deploy the Numerical Propulsion System Simulation (NPSS) object-based technology. NPSS is a program focused on reducing the cost and time in developing aerospace propulsion engines

Blaser, Tammy M.↗
DOE OSTI2024

5G Securely Energized and Resilient: (5G-SER) (Final Report)

NREL's work on 5G integration with physical power systems (versus simulated systems demonstrated in task 3) under 5G-Securely Energized and Resilient (5G-SER) achieved a major milestone in with the completion of Task 4 activities. After many months (6+) of planning and development along with scaling challenges along the way, a full 5G end-to-end network with physical hardware components (physical inverter, physical power panel, physical battery, etc.) was deployed in a containerized environment. In parallel, a distributed controls architecture for a microgrid powering 5G resources was also successfully modified from its previous instantiation for a simulated environment to work with these physical components. These accomplishments set the stage to use newly setup 5G technology with physical microgrid components to test the feasibility of 5G wireless with physical systems to enable resilient communications between controls and distributed solar and storage resources while exploring ways to configure 5G components to survive power disturbances. The results detailed in the report below show that even utilizing physical components, 5G wireless systems were able to provide resilient results that were similar to the results from the simulated environment Task 3).

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Exponential Backoff and Its Security Implications for Safety-Critical OT Protocols over TCP/IP Networks

The convergence of Operational Technology (OT) and Information Technology (IT) networks has become increasingly prevalent with the growth of Industrial Internet of Things (IIoT) applications. This shift, while enabling enhanced automation, remote monitoring, and data sharing, also introduces new challenges related to communication latency and cybersecurity. Oftentimes, legacy OT protocols were adapted to the TCP/IP stack without an extensive review of the ramifications to their robustness, performance, or safety objectives. To further accommodate the IT/OT convergence, protocol gateways were introduced to facilitate the migration from serial protocols to TCP/IP protocol stacks within modern IT/OT infrastructure. However, they often introduce additional vulnerabilities by exposing traditionally isolated protocols to external threats. This study investigates the security and reliability implications of migrating serial protocols to TCP/IP stacks and the impact of protocol gateways, utilizing two widely used OT protocols: Modbus TCP and DNP3. Our protocol analysis finds a significant safety-critical vulnerability resulting from this migration, and our subsequent tests clearly demonstrate its presence and impact. A multi-tiered testbed, consisting of both physical and emulated components, is used to evaluate protocol performance and the effects of device-specific implementation flaws. Through this analysis of specifications and behaviors during communication interruptions, we identify critical differences in fault handling and the impact on time-sensitive data delivery. The findings highlight how reliance on lower-level IT protocols can undermine OT system resilience, and they inform the development of mitigation strategies to enhance the robustness of industrial communication networks.

DNP3↗
DOE OSTI2025

Electric Utility Communications Standards Landscape 2025 Edition

Historically, challenges to managing electric utility data exchange have been addressed through dedicated communication solutions, enabling the transmission of data with both speed and security. Protocols have been deployed in a relatively uniform fashion; for example, field communications for Supervisory Control and Data Acquisition (SCADA) are commonly implemented using IEEE 1815 (DNP3).

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS1998

Technology Development, Implementation, and Assessment: K-16 Pre-Service, In-Service, and Distance Learning Initiatives

This summer 22 kindergarten through 8th grade teachers attended a 3-week Teacher Enhancement Institute (TEI) at NASA Langley Research Center. TEI is funded by NASA Education Division and is a collaborative effort between NASA Langley's Office of Education and Christopher Newport University. Selected teacher teams were drawn from Langley's 5-state precollege service region, which includes Kentucky, North Carolina, South Carolina, Virginia, and West Virginia. The goal of TEI was for teachers to learn aeronautics and the broad application of science and technology through a problem-based learning (PBL) strategy. PBL is an instructional method using a real world problem, also known as an ill-structured problem, as the context for an in-depth investigation. Most real life problems are ill-structured, as are all the really important social, political and scientific problems. The teachers were immediately immersed in an ill-structured problem to design a communication strategy for the White House Commission on Aviation Safety and Security to educate and disseminate aviation information to the general public. Specifically, the communication strategy was to focus on aeronautics principles, technology and design associated with US general aviation revitalization and aviation safety programs. The presented problem addressed NASA's strategic outcome to widely communicate the content, relevancy and excitement of its missions and discoveries to the general population. Further, the PBL scenario addressed the technological challenges being taken up by NASA to revolutionize air travel and the way in which aircraft are designed, built, and operated. It also addressed getting people and freight safely and efficiently to any location in the world at a reasonable cost. With a "real" need-to-know problem facing them, the teachers set out to gather information and to better understand the problem using inquiry-based and scientific methods. The learning in this aeronautics scenario was driven by the direction taken by participants. With the support of the TEI faculty, the teachers quickly identified NASA Langley researchers that served as consultants to help solve the problem. To achieve their goal, the teacher teams developed lesson plans for elementary and middle school students, wrote a newspaper, published a brochure to educate the general public, constructed games for children of all ages, and produced a video. As a second problem, the TEI participants will design their own aeronautic lesson plan and immerse their 1997-98 school year students in the problem. The problem is for the students "to create a traveling hands-on, minds-on aeronautics museum exhibit created for children by children." As a culminating activity, the Virginia Air and Space Center in Hampton, VA, will set up a special display of the exhibits in the Summer 1998. The TEI faculty will visit each TEI teacher's classroom during the academic school year to observe the implementation of the unit. In addition to the classroom observations, electronic follow-up sessions will be conducted during the school year to support the teachers' efforts in developing their PBL units to integrate technology in math and science instruction. These sessions eill be conducted using the Internet. Teachers will be connected through a chat-line to share ideas, ask questions, and generate solutions.

Petersen, Richard↗
NASA NTRS2002

Spinoff 2002: Fortieth Anniversary Technology Utilization Program

Since its inception 40 years ago, NASA's Technology Transfer Program has led the way for our nation to benefit from cutting-edge aerospace technologies. In addition to contributing to U.S. economic growth, these technologies are improving the quality of life on Earth while finding new ways to protect and preserve it. NASA's research and development efforts have advanced areas in medicine, communications, manufacturing, computer technology, and homeland security. These breakthroughs, translated into commercial products, are enhancing the lives of Americans everywhere. When a congressional mandate led NASA to develop the Scientific and Technical Information (STI) Program, the Agency began a wide dissemination of its research and development results. In doing so, NASA recognized that many of its technologies were transferable to industry for the development of commercial products. As a result, the Technology Utilization Program was born in 1962. The successful program went through several changes over the years, as its philosophy, mission, and goals adapted into the Technology Transfer Program we know today. The program strives to make the latest technologies available to industry as soon as they are developed. Each year, NASA's Spinoff publication showcases new products and services resulting from commercial partnerships between NASA and private industry. In the 2002 issue, the NASA field centers reflect upon the growth that has made these innovations available to the public. The Research and Development section examines past achievements, current successes, and future goals for each of the ten NASA centers. The Commercial Benefits section proudly highlights 51 new spinoff products, including a heart pump for patients needing a heart transplant, as well as an air purifier that destroys anthrax spores. The Technology Transfer and Outreach section describes the outreach achievements and educational successes made possible through the NASA Commercial Technology Network. Each section of Spinoff 2002 provides compelling evidence of the Technology Transfer Program's success and value. With commercial products and successes spanning from work on the Apollo missions to the International Space Station, the 40th anniversary of the Technology Transfer Program invites us to celebrate our history while planning the future.

Source record↗
NASA NTRS2018

Research and Technology Support Request: Functional Requirements

The objective of this Functional Requirements document is to present a new online platform, called R&T Support Request, which can be used to improve the overall quality and efficiency of communication between Users who request help from UB and Suppliers who answer those calls for help. The online portal is to be used for the first step of communication, as well as a tracking system to give progress updates. This document will establish stakeholders of this online platform, focus on interactions between potential Users (within and outside of the UB Directorate) and Suppliers (within the UB Directorate). This communication will be facilitated through a secure online platform which allows Users to submit Help Request Forms which will be received by designated groups within UB.

Research and Technology↗
NASA NTRS2013

Security Risk Assessment Process for UAS in the NAS CNPC Architecture

This informational paper discusses the risk assessment process conducted to analyze Control and Non-Payload Communications (CNPC) architectures for integrating civil Unmanned Aircraft Systems (UAS) into the National Airspace System (NAS). The assessment employs the National Institute of Standards and Technology (NIST) Risk Management framework to identify threats, vulnerabilities, and risks to these architectures and recommends corresponding mitigating security controls. This process builds upon earlier work performed by RTCA Special Committee (SC) 203 and the Federal Aviation Administration (FAA) to roadmap the risk assessment methodology and to identify categories of information security risks that pose a significant impact to aeronautical communications systems. A description of the deviations from the typical process is described in regards to this aeronautical communications system. Due to the sensitive nature of the information, data resulting from the risk assessment pertaining to threats, vulnerabilities, and risks is beyond the scope of this paper

data links↗
NASA NTRS2018

Blockchain Application Within a Multi-Sensor Satellite Architecture

With the thrust towards multi-sensor satellite architectures for earth and space exploration, such as constellations and swarms, new technologies are required to enable the transition to this future capability. One of the areas of interest is establishing secure, efficient and prioritized data and command communication pathways among ground and space-based sources for such systems. This paper presents early research results on the potential role, capabilities and value of blockchain usage within constellation and swarm satellite architectures. It demonstrates the use of blockchain's smart contract and distributed ledger capabilities for secure and prioritized multi-sensor satellite collaborative data exchanges, as well as the logging and tracking of command and control events. Adapting and utilizing this emerging technology will aid in addressing technology gaps expected from future constellation flight architectures, such as managing collective computational operations (correlation), dynamic and autonomous observation planning, time-critical events, and provenance tied to ground and space-based autonomous operations and control recordkeeping. In this scenario blockchain is applied in encrypted command transmittal to multiple, yet specific, entities enabling acknowledgement transmittals, performance scalability, and automatic event-based triggering.

Mital, Rohit↗
DOE OSTI2024

Field Programmable Gate Array-Based Reactor Protection Systems and Potential for Inclusion of Secure Elements to Improve Cybersecurity

For acceptable implementations of technologies like wireless communications, remote monitoring, etc., strong mitigations must be developed and evaluated to ensure that new attack pathways do not increase risk for Advanced Reactors. Secure Elements can be adopted and adapted for this purpose based on tamper resistance and cryptographic abilities, but research must be done to properly integrate into critical components such as FPGA-based Important to Safety systems in conjunction with current and future regulations on cyber security features in Advanced Reactors. Typically, the integration of a Secure Element happens during the POST and UEFI boot of a computing platform, performed by the Operating System, which is not possible with FPGAs because they do not include these firmware components. Work must be done to identify a reliable and secure method for integration in FPGA-based systems which lack Operating Systems and therefore complex boot procedures, system calls, etc.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Field Programmable Gate Array-Based Reactor Protection Systems and Potential for Inclusion of Secure Elements to Improve Cybersecurity

For acceptable implementations of technologies like wireless communications, remote monitoring, etc., strong mitigations must be developed and evaluated to ensure that new attack pathways do not increase risk for Advanced Reactors. Secure Elements can be adopted and adapted for this purpose based on tamper resistance and cryptographic abilities, but research must be done to properly integrate into critical components such as FPGA-based Important to Safety systems in conjunction with current and future regulations on cyber security features in Advanced Reactors. Typically, the integration of a Secure Element happens during the POST and UEFI boot of a computing platform, performed by the Operating System, which is not possible with FPGAs because they do not include these firmware components. Work must be done to identify a reliable and secure method for integration in FPGA-based systems which lack Operating Systems and therefore complex boot procedures, system calls, etc.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2014

Analyzing Risks and Vulnerabilities of Various Computer Systems and Undergoing Exploitation using Embedded Devices

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere has heightened from airports to communication among the military branches legionnaires. With advanced persistent threats (APTs) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated, patched and secured state in a launch control system environment. Attacks on critical systems are becoming more and more relevant and frequent. Nation states are hacking into critical networks that might control electrical power grids or water dams as well as carrying out advanced persistent threat (APTs) attacks on government entities. NASA, as an organization, must protect its self from attacks from all different types of attackers with different motives. Although the International Space Station was created, there is still competition between the different space programs. With that in mind, NASA might get attacked and breached for various reasons such as espionage or sabotage. My project will provide a way for NASA to complete an in house penetration test which includes: asset discovery, vulnerability scans, exploit vulnerabilities and also provide forensic information to harden systems. Completing penetration testing is a part of the compliance requirements of the Federal Information Security Act (FISMA) and NASA NPR 2810.1 and related NASA Handbooks. This project is to demonstrate how in house penetration testing can be conducted that will satisfy all of the compliance requirements of the National Institute of Standards and Technology (NIST), as outlined in FISMA. By the end of this project, I hope to have carried out the tasks stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, as well as policies and procedures.

Penetration Testing↗
DOE OSTI2025

Cyber-Informed Engineering (CIE) Workbook: End-of-Train (EoT) / Head-of-Train (HoT) Communications

This workbook presents a vulnerability (CVE-2025-1727 ) found in train applications and guides a digital risk assessment and mitigation analysis and application of Cyber-Informed Engineering principles to mitigate the potential consequences and ultimately the hazard through the engineering discipline because of exploiting this vulnerability. Workshop participants are encouraged to use the workbook to capture insights and lessons learned. The workbook guides the participant to: • Understand the HE communication vulnerability • Map digital threats to physical consequences • Use bowtie analysis to illustrate both “security” and “engineering” barriers • Apply CIE principles to ensure that even if communications are compromised, the physical engineered system still behaves safely. • Produce an actionable set of engineered and infosec controls for implementation

42 - ENGINEERING↗
NASA NTRS1997

Internet technologies and requirements for telemedicine

Internet technologies are briefly introduced and those applicable for telemedicine are reviewed. Multicast internet technologies are described. The National Aeronautics and Space Administration (NASA) 'Telemedicine Space-bridge to Russia' project is described and used to derive requirements for internet telemedicine. Telemedicine privacy and Quality of Service (QoS) requirements are described.

Remote Consultation↗
DOE OSTI2025

Entropy of the Quantum–Classical Interface: A Potential Metric for Security

Hybrid quantum–classical systems are emerging as key platforms in quantum computing, sensing, and communication technologies, but the quantum–classical interface (QCI)—the boundary enabling these systems—introduces unique and largely unexplored security vulnerabilities. This position paper proposes using entropy-based metrics to monitor and enhance security, specifically at the QCI. We present a theoretical security outline that leverages well-established information-theoretic entropy measures, such as Shannon entropy, von Neumann entropy, and quantum relative entropy, to detect anomalous behaviors and potential breaches at the QCI. By linking entropy fluctuations to scenarios of practical relevance—including quantum key distribution, quantum sensing, and hybrid control systems—we promote the potential value and applicability of entropy-based security monitoring. While explicitly acknowledging practical limitations and theoretical assumptions, we argue that entropy-based metrics provide a complementary approach to existing security methods, inviting further empirical studies and theoretical refinements that can strengthen future quantum technologies.

97 MATHEMATICS AND COMPUTING↗