SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
This paper describes the use of the Flexible Modeling Framework (FMF) for model checking (MC) to perform and search for vulnerabilities in the Secure Socket Layer (SSL) communication protocol.
This report summarizes the presentations of the 7th IEEE Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE 2002) Enterprise Security (ES) Workshop.
Part Two expands upon Part One in an attempt to translate the methodology for ground system personnel. The goal is to build upon the methodology presented in Part One by showing examples and details on how to implement the methodology. Section 1: Ground Systems Overview; Section 2: Secure Software Development; Section 3: Defense in Depth for Ground Systems; Section 4: What Now?
The United States government has identified that application specific integrated circuit (ASIC) and field programmable gate array (FPGA) hardware are at risk from a variety of adversary attacks. This finding affects system security and trust. Consequently, processes are being developed for system mitigation and countermeasure application. The scope of this tutorial pertains to potential vulnerabilities and countermeasures within the ASIC/FPGA design cycle. The presentation demonstrates how design practices can affect the risk for the adversary to: change circuitry, steal intellectual property, and listen to data operations. An important portion of the design cycle is assuring the design is working as specified or as expected. This is accomplished by exhaustive testing of the target design. Alternatively, it has been shown that well established schemes for test coverage enhancement (design-for-verification (DFV) and design-for-test (DFT)) can create conduits for adversary accessibility. As a result, it is essential to perform a trade between robust test coverage versus reliable design implementation. The goal of this tutorial is to explain the evolution of design practices; review adversary accessibility points due to DFV and DFT circuitry insertion (back door circuitry); and to describe common engineering trade-off considerations for test versus adversary threats.
Global food production depends upon many factors that Earth observing satellites routinely measure about water, energy, weather, and ecosystems. Increasingly sophisticated, publicly-available satellite data products can improve efficiencies in resource management and provide earlier indication of environmental disruption. Satellite remote sensing provides a consistent, long-term record that can be used effectively to detect large-scale features over time, such as a developing drought. Accuracy and capabilities have increased along with the range of Earth observations and derived products that can support food security decisions with actionable information. This paper highlights major capabilities facilitated by satellite observations and physical models that have been developed and validated using remotely-sensed observations. Although we primarily focus on variables relevant to agriculture, we also include a brief description of the growing use of Earth observations in support of aquaculture and fisheries.
During the Summer 2020 session, I worked with intern Destani S. Van Arsdalen of EGS Software. Together, we co-created a tool to aid the dynamic investigation, updated over time,of the security compliance of LCS COTS and open source software. We originally planned touse spreadsheet software for management and analysis, but through this exploratoryproject, chose to use Python and JSON after receiving feedback on our project’s current anddesired capabilities at that time.At first, the project was solely designed to help on-board new COTS software, based on aquestionnaire that could be filled out for each software package. This, combined with usingthe spreadsheet application’s web-query capabilities to fetch information from the NVD,allowed presentation and analytics cells to automatically populate as elements of themanually-filled questionnaire changed. While this system was promising, we decided tochange technologies for a few reasons. In the spreadsheet, single cells could not hold complexdata like arrays and objects. The automatic population of cells and dynamic updates made itdifficult to manage and add new features. And finally, it had limited extensibility sinceadding new software required significant understanding of how both the spreadsheet wasconstructed, and the more obscure, proprietary scripting languages packaged with it.The pivot to a standard computer science database language of JSON, aided by thescripting capabilities of Python, greatly helped to improve the project’s functionality. First,and most importantly, the script’s import and analysis of database data is easilyreproducible. Additional data analysis can be modularly added without requiringmodification of the script and is capable of routine scheduling. The revised process can besplit into three parts. First, the conversion of LCS asset and software documentation into theJSON hierarchical database format. Second, the merging of this database with the NVD,forming a new data structure, using CPEs of the CVE object as a linking element betweenthem. And third, the automatically performed analytics and analysis of the combined data,in a modular and extensible format, to produce better informed business decisions. The outputted graphs, for example, are automatically generated by the Python script inconnection with the combined database. This allows updated graphs and any analytics to be re-rendered automatically following updates to the LCS’s initial asset documentation. Afinal report can then be programmatically and easily constructed from these sources to allow fully reproducible metrics for heavily evidenced risk management decisions.
Since the cyber threat landscape changes daily, cybersecurity needs to be an ongoing activity for every organization within the UAM environments. This paper will provide information on identified cyber threats and controls associated with an instance of the Urban Air Mobility (UAM) environment. The MITRE ATT&CK model and framework and the selection of cyber threats and the National Institute of Standards and Technology publications for security control identification and cybersecurity risk identification will be leveraged for analysis.
• An Intersection of Challenges for Food Security • The Agricultural Model Intercomparison and Improvement Project (AgMIP) • Establishing and evaluating agricultural models • Responding to the transient signal of climate change • Understanding food systems and identifying potential for unexpected behaviors • Opportunities For a More Resilient Future
The capture and curation of all primary instrument data is a potentially valuable source of added insight into experiments or diagnostics in laboratory experiments. The data can, when properly curated, enable analysis beyond the current practice that uses just a subset of the as-measured data. Complete curated data can also be input for machine learning and other data exploration tools. Conveniently storing and accessing instrument data requires that the instruments are connected to databases and users through a networking infrastructure. This infrastructure needs to accommodate a wide array of instruments which can range from single laboratory mounted probes for environment monitoring to computers managing multiple instruments. These resources may also include mobile devices on which researchers record instrument and experiment state related notes. These varied data sources bring with them the challenges of different communications capabilities and protocols as well as the primary data typically being produced in proprietary formats. These challenges are further compounded when the instruments need to operate in secure environments such as required in national laboratories. We will discuss the SmartLab, an ongoing effort to set up a system for instrument and simulation data curation at NASA Langley Research Center. We will outline the challenges faced in managing the data sources required for ongoing research activities and the solutions that are being considered and implemented to address those challenges.
Nontoxic paste consisting of a dispersion of graphite or silver granules in a mixture of polyvinylpyrolidone and diluted glycerol secures biomedical electrodes to human skin. Silver paste has a high electrical conductivity and forms a bond between metal and moist or dry skin.
Plastic self-compressing adapter with grooves, attached to the jaws of a bench vise, secures thin-wall tubing vertically or horizontally during cutting and flaring operations without marring or damaging it. Magnets incorporated in both sections of the adapter prevent detachment from the jaws when the vise is opened.
Cryptanalysis applied to a simple Merkle-Hellman (1978) public key cryptographic system (described within a standard-parameter knapsack problem) reveals the high vulnerability of the system. However, a cryptanalytic attack becomes ineffective when the knapsack problem with two or more iterations is used in order to obscure the structure of the superincreasing sequence. To enhance the security of a cryptographic system structured numbers can be used, while the multiple iterations of the modular multiplications technique can produce a safer Merkle-Hellman knapsack system.
The design of a secure communication system is described. A product code, formed from two pseudorandom sequences of digital bits, is used to encipher or scramble data prior to transmission. The two pseudorandom sequences are periodically changed at intervals before they have had time to repeat. One of the two sequences is transmitted continuously with the scrambled data for synchronization. In the receiver portion of the system, the incoming signal is compared with one of two locally generated pseudorandom sequences until correspondence between the sequences is obtained. At this time, the two locally generated sequences are formed into a product code which deciphers the data from the incoming signal. Provision is made to ensure synchronization of the transmitting and receiving portions of the system.
The Column Longeron Latch (CLL) was designed and developed as the securing mechanism for the deployable, telescoping column of the Hoop/Column antenna. The column is an open lattice structure with three longerons as the principal load-bearing members. It is divided into telescoping sections that are deployed after the antenna is place in Earth orbit. The CLL provides a means to automatically lock the longeron sections into position during deployment as well as a means of unlocking the sections when the antenna is to be restowed. The CLL is a four bar linkage mechanism using the over center principle for locking. It utilizes the relative movement of the longeron sections to activate the mechanism during antenna deployment and restowing. The CLL design is one of the first mechanisms developed to meet the restowing requirements of spacecraft which will utilize the STS retrieval capability.
Method of fastening road pads on tracked vehicles ensures retaining tabs properly installed and less likely to fail from shock or pad squirming when tracked vehicle turns. No risk squirming of pad might overcome retaining force of rubber encapsulation or teeth of split-collet fastener shred soft-iron projections on pad shell, causing inadvertent release of pad. Rod extending through track shells and tabs on pad shells includes grooved cams to secure pads.
The Space Shuttle vehicle consists of the orbiter, external tank, and two solid rocket boosters. In dealing with security two major protective categories are considered, taking into account resource protection and information protection. A review is provided of four basic programs which have to be satisfied. Aspects of science and technology transfer are discussed. The restrictions for the transfer of science and technology information are covered under various NASA Management Instructions (NMI's). There were two major events which influenced the protection of sensitive and private information on the Space Shuttle program. The first event was a manned space flight accident, while the second was the enactment of a congressional bill to establish the rights of privacy. Attention is also given to national resource protection and national defense classified operations.
Closure device for secure waste containers prevents classified papers and other proprietary articles from being withdrawn when container turned on side. Has pendulum that swings comb into closed position when container turned on side. Suspended with axis of rotation perpendicular to axes of combs. Extends through D-shaped cam ring, attached to upper comb with standoff struts. When container tilted sideways, pendulum swings along arc side of D-shaped ring. Forces cam ring aside, moving upper comb toward closed position. If container tilted forward or backward, pendulum does not interfere with comb movement. Spring catches added to combs so if actuated and close container opening, they lock in place to prevent further tampering.
A security code system for controlling access to computer and computer-controlled entry situations comprises a plurality of subsets of alpha-numeric characters disposed in random order in matrices of at least two dimensions forming theoretical rectangles, cubes, etc., such that when access is desired, at least one pair of previously unused character subsets not found in the same row or column of the matrix is chosen at random and transmitted by the computer. The proper response to gain access is transmittal of subsets which complete the rectangle, and/or a parallelepiped whose opposite corners were defined by first groups of code. Once used, subsets are not used again to absolutely defeat unauthorized access by eavesdropping, and the like.