SEARCH · Search NASA

Results for “Secure Software Development”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14

All sources NASA NTRS DOE OSTI

NASA NTRSDate not supplied

DRF: A Software Architecture for a Data Marketplace to Support Advanced Air Mobility

Advanced Air Mobility is a new aviation vision, where unmanned aerial systems will trans- port passengers and cargo across urban and rural areas. Critical to the realization of this vision is the development of a digital marketplace, which allows service providers and consumers operating in the airspace ecosystem to securely exchange data and reasoning insights. In this paper, we present the architecture of a decentralized data marketplace that connects data and reasoning service providers to vehicles and other service consumers along the cloud-to-edge continuum. We also present two example use cases to demonstrate the value of our approach.

Autonomy↗

DOE OSTI2022

Efficient Clustering of Software Vulnerabilities using Self Organizing Map (SOM)

The common vulnerabilities and exposures (CVE) database was created with a mission to ``identify, define, and catalog publicly disclosed cybersecurity vulnerabilities''. This rich body of information can be used to enable rapid and efficient response to secure and defend cyber operations and protect critical cyber infrastructure. The main goal of this paper is to develop a visual analytics tool to enable deep analysis of CVEs using unsupervised clustering techniques. We enhance our analysis by first mapping CVEs to hierarchical-classes in Common Weakness Enumeration (CWE) using information in the National Vulnerability Database (NVD). Both the mapping and the numerical representation of CVEs are enabled by V2W-BERT, which uses natural language processing of the extensive information in NVD to generate a large tabular database of 137,226 CVE entries from 1999 to 2020, where each CVE is represented by a vector of 768 numerical features. The vectorized data is processed by Self-Organizing Maps (SOM), which is an unsupervised machine learning technique for dimensionality reduction, visual representation and clustering. Using a Torus map of 6417 units, we achieve ~10-fold data compression of ~140k CVEs using SOM. The trained map is further clustered using standard K-means clustering into 138 clusters of CVEs. We conducted a brief investigation of the rich mapping of CVEs to best-matching-units to K-means clusters, as well as CVEs to CWEs. For example, this novel mapping provided insight into the role of CWE-59 and CWE-264 in several CVEs that is otherwise hard to explore in the original data. We conclude that our this novel approach will not only enable deep analysis of the complex relationships between CVEs and CWEs, but also a mechanism to quickly respond to and design mitigation actions for rapidly evolving vulnerabilities that have not been mapped to existing CWEs.

Panchal, Khyati↗

NASA NTRS2010

Efficient Web Services Policy Combination

Large-scale Web security systems usually involve cooperation between domains with non-identical policies. The network management and Web communication software used by the different organizations presents a stumbling block. Many of the tools used by the various divisions do not have the ability to communicate network management data with each other. At best, this means that manual human intervention into the communication protocols used at various network routers and endpoints is required. Developing practical, sound, and automated ways to compose policies to bridge these differences is a long-standing problem. One of the key subtleties is the need to deal with inconsistencies and defaults where one organization proposes a rule on a particular feature, and another has a different rule or expresses no rule. A general approach is to assign priorities to rules and observe the rules with the highest priorities when there are conflicts. The present methods have inherent inefficiency, which heavily restrict their practical applications. A new, efficient algorithm combines policies utilized for Web services. The method is based on an algorithm that allows an automatic and scalable composition of security policies between multiple organizations. It is based on defeasible policy composition, a promising approach for finding conflicts and resolving priorities between rules. In the general case, policy negotiation is an intractable problem. A promising method, suggested in the literature, is when policies are represented in defeasible logic, and composition is based on rules for non-monotonic inference. In this system, policy writers construct metapolicies describing both the policy that they wish to enforce and annotations describing their composition preferences. These annotations can indicate whether certain policy assertions are required by the policy writer or, if not, under what circumstances the policy writer is willing to compromise and allow other assertions to take precedence. Meta-policies are specified in defeasible logic, a computationally efficient non-monotonic logic developed to model human reasoning. One drawback of this method is that at one point the algorithm starts an exhaustive search of all subsets of the set of conclusions of a defeasible theory. Although the propositional defeasible logic has linear complexity, the set of conclusions here may be large, especially in real-life practical cases. This phenomenon leads to an inefficient exponential explosion of complexity. The current process of getting a Web security policy from combination of two meta-policies consists of two steps. The first is generating a new meta-policy that is a composition of the input meta-policies, and the second is mapping the meta-policy onto a security policy. The new algorithm avoids the exhaustive search in the current algorithm, and provides a security policy that matches all requirements of the involved metapolicies.

Vatan, Farrokh↗

DOE OSTI2023

Hydrogen Extremely Low Probability of Rupture Version 1

SAND2024-08511O The Hydrogen Extremely Low Probability of Rupture (HELPR) software toolkit provides probabilistic fracture assessments of natural gas infrastructure for transporting hydrogen. Using probabilistic sampling and sensitivity analysis—along with engineering fatigue and fracture mechanics— the software develops models that can predict structural integrity measures for natural gas pipelines under stress. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Schroeder, Benjamin↗

DOE OSTI2021

Wind Energy Forecasting with the Weather Research and Forecasting Model

This was a collaborative effort between Lawrence Livermore National Security, LLC as manager and operator of Lawrence Livermore National Laboratory (LLNL) and Siemens Energy, Inc. (Siemens) to develop a wind resource forecasting tool. LLNL was to develop an independent high-resolution mesoscale modeling capability forecasting tool that could be implemented in conjunction with existing wind farm control and monitoring software to provide forecasting of wind resources using local observations of winds and temperature. Research with LLNL’s state-of-the-art large-eddy simulation meteorological prediction model, based on the community WRF model and innovative turbulence parameterizations, would improve that model’s applicability to large wind farms offshore and in complex terrain. The modeling capability would include uncertainty quantification. Finally, the application of the modeling tool and existing global climate change predictions would enable the delineation of the likely effects of climate change on wind resources. Siemens was to provide high time resolution hub-height wind speed and other meteorological data streams, including temperature profiles from wind farms, for LLNL to incorporate into the modeling system, to validate and tune this forecasting model for their locations of interest. These data streams would also be used for longer-term studies of correlations of wind resources to climate oscillations to indicate how long-term climate change trends may affect the available wind resource. Siemens would also provide information and observations of turbine wakes for incorporation into the modeling tool. By implementing state-of-the-art turbulence parameterizations into a simulation model and/or ensembles of simulation models, and by integrating real-time hub height wind speed and other meteorological datastreams from wind farms into that model or ensemble of models, LLNL would develop a forecasting tool that could be implemented by Siemens as an add-on to existing wind farm control and monitoring software to provide owners with useful resource forecasting. The desired outcome was that the accuracy level of the output would be sufficient to substantiate power output commitments. The final deliverable for this work would consist of a document outlining the algorithms and software tools that could be integrated into Siemens Wind Park Supervisor.

17 WIND ENERGY↗

DOE OSTI2017

NMIS/FNMIS Comparison for US DOE Office of Nuclear Verification

A comparison of the characteristics of the Nuclear Materials Identification System (NMIS) and its more fieldable version that was developed for future treaty applications, the Fieldable Nuclear Materials Identification System (FNMIS), is presented. Both systems were developed for the US Department of Energy (DOE) Office of Nuclear Verification (ONV). Under the Warhead Safety and Security Exchange Agreement, NMIS was also jointly developed with the Russian Federation. The configuration of the systems and their characteristics are described. In addition, the capabilities, advantages and disadvantages, and a comparison fast-neutron transmission imaging measurement is presented. The comparison measurements gave essentially the same results because the software and imaging apparatus have the same capabilities, with the FNMIS completing the measurements slightly faster. NMIS is an open system that is more easily modified for research applications and is not suitable for the ONV mission, and FNMIS is compatible with an information barrier, which is more useful for ONV applications.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

NASA NTRS1998

Under Attack

Diversified High Technologies, Inc. (DHT) has supported the Avionics Software Development Environment Pathfinder (ASDEP) program throughout its phases. For the first two years, DHT operated as the technology facilitator providing technical coordination between vendors, contractors, and NASA. This evolved to hands-on technical support such as systems installation, upgrades, and integration. DHT has recently been providing support in secure technology migration path planning and the incorporation of new security technologies in response to evolving program requirements.

Source record↗

NASA NTRS2003

Reconfigurable Hardware Adapts to Changing Mission Demands

A new class of computing architectures and processing systems, which use reconfigurable hardware, is creating a revolutionary approach to implementing future spacecraft systems. With the increasing complexity of electronic components, engineers must design next-generation spacecraft systems with new technologies in both hardware and software. Derivation Systems, Inc., of Carlsbad, California, has been working through NASA s Small Business Innovation Research (SBIR) program to develop key technologies in reconfigurable computing and Intellectual Property (IP) soft cores. Founded in 1993, Derivation Systems has received several SBIR contracts from NASA s Langley Research Center and the U.S. Department of Defense Air Force Research Laboratories in support of its mission to develop hardware and software for high-assurance systems. Through these contracts, Derivation Systems began developing leading-edge technology in formal verification, embedded Java, and reconfigurable computing for its PF3100, Derivational Reasoning System (DRS ), FormalCORE IP, FormalCORE PCI/32, FormalCORE DES, and LavaCORE Configurable Java Processor, which are designed for greater flexibility and security on all space missions.

Source record↗

DOE OSTI2019

SBIR Phase II Final Report - A Robust Wireless Communication System for Harsh Environments Including Nuclear Facilities

This is the Final Report for the DOE Phase II SBIR project “A Robust Wireless Communication System for Harsh Environments Including Nuclear Facilities.” The topics covered herein include technical progress made, progress against the planned milestones and deliverables, project outcomes, and a discussion on future expectations of deployment and impacts of the results of this work. In brief, all planned work for the project was successfully completed, on or ahead of schedule and on budget. The major accomplishment was the successful development of new sensor/communications systems with wideband (WB)/ultra-wideband (UWB) communications based on the software-defined-radio (SDR) technology to improve sensing and control in nuclear power plants and then a broad range of similar sensing applications. The impacts of these disciplines/focuses of this SBIR include: A new multi-frequency SDR-based architecture with WB/UWB communications integrated with sensors was developed, utilizing 310 MHz, 450 MHz, 915 MHz, and 5 GHz frequencies; Secure communications using Advanced Encryption Standard (AES) algorithm; Sensing possibilities not effectively addressed by previous technologies was addressed; and, The newly developed wireless sensor communications system can adapt its communications parameters to its operational environment for optimal performance. The performance of this system has been evaluated by systematic laboratory and field testing. The field testing was conducted at Massachusetts Institute of Technology (MIT)’s Nuclear Test Reactor, and the McClellan Nuclear center at the University of California Davis (UC Davis), as well as at Oak Ridge National Laboratory (ORNL). The success in this project resulted in DSI being awarded “The DOE’s 2018 SBIR/STTR Small Business of the Year”. This technology has attracted interest from The Rolls Royce company with ongoing discussions under NDA for potential strategic partnership between DSI and Rolls Royce in providing wireless sensor communications in nuclear facilities. Furthermore, the success of this project has attracted significant interest from the United Nations International Atomic Agency (IAEA) in Vienna, Austria, as well as other DOE and DOD offices. Currently, per request from IAEA, DOE’s office of International Safeguards has funded DSI to develop a WB/UWB wireless communication system for real-time transmission of images from IAEA’s safeguards cameras in various nuclear facilities. DSI also has received a Phase II and Phase II.5 SBIR awards from ARMY and NAVY for wireless communications capability for various DOD aircraft.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2016

Microgrid Design Analysis Using Technology Management Optimization and the Performance Reliability Model

Microgrids are a focus of localized energy production that support resiliency, security, local con- trol, and increased access to renewable resources (among other potential benefits). The Smart Power Infrastructure Demonstration for Energy Reliability and Security (SPIDERS) Joint Capa- bility Technology Demonstration (JCTD) program between the Department of Defense (DOD), Department of Energy (DOE), and Department of Homeland Security (DHS) resulted in the pre- liminary design and deployment of three microgrids at military installations. This paper is focused on the analysis process and supporting software used to determine optimal designs for energy surety microgrids (ESMs) in the SPIDERS project. There are two key pieces of software, an ex- isting software application developed by Sandia National Laboratories (SNL) called Technology Management Optimization (TMO) and a new simulation developed for SPIDERS called the per- formance reliability model (PRM). TMO is a decision support tool that performs multi-objective optimization over a mixed discrete/continuous search space for which the performance measures are unrestricted in form. The PRM is able to statistically quantify the performance and reliability of a microgrid operating in islanded mode (disconnected from any utility power source). Together, these two software applications were used as part of the ESM process to generate the preliminary designs presented by SNL-led DOE team to the DOD. Acknowledgements Sandia National Laboratories and the SPIDERS technical team would like to acknowledge the following for help in the project: * Mike Hightower, who has been the key driving force for Energy Surety Microgrids * Juan Torres and Abbas Akhil, who developed the concept of microgrids for military instal- lations * Merrill Smith, U.S. Department of Energy SPIDERS Program Manager * Ross Roley and Rich Trundy from U.S. Pacific Command * Bill Waugaman and Bill Beary from U.S. Northern Command * Tarek Abdallah, Melanie Johnson, and Harold Sanborn of the U.S. Army Corps of Engineers Construction Engineering Research Laboratory * Colleagues from Sandia National Laboratories (SNL) for their reviews, suggestions, and participation in the work.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2018

A Scalable HPC Insider Threat Monitoring System

Cyber Equations, Inc. is reporting on the results of its DOE SBIR Phase I project for the development of a Scalable HPC Insider Threat Monitoring System. This final report to the Department of Energy for Task DE-FOA-0001618 covers the period from 02/21/2017 to 02/20/2018 and summarizes the larger research accomplishments, which can be divided in theoretical and laboratory experiments. One of the many challenges for the U.S. Department of Energy (DOE) is the support of the high-performance computing (HPC) centers while providing quality information services, strategic vision, leadership, technical expertise, and capabilities necessary to enable the DOE to deliver effective, efficient, economical, and secure HPC services. In order to realize a secure DOE laboratory enterprise, DOE facilities operations must counter a wide range of cyber insider threats, from unsophisticated adversaries up to advanced, nation state sponsored actors. The DOE laboratories also presents an enormous insider attack surface of an ever-growing number of computers, networks, and devices all running a myriad of software. In addition, the DOE laboratories are connected to a variety of external organizations which multiplies the possibility of insider threat. During this SBIR project Cyber Equations developed a strategic combination of supervised and unsupervised machine learning techniques to control scale and classify whether entities, such as hosts, actors, or documents, are showing suspicious insider behavior. We conducted experiments using real cyber data to show that changes in observable behavior (e.g., changes in outbound traffic patterns) are indicative of attacks executing (e.g., insiders exfiltrating data, bots calling home, or an attack spreading). The features and methods we use, have been used in the anomaly detection research and development community for a significant amount of time and robust implementations are openly available. K-Means clustering, Decision Trees, and Support Vector Machine based classifiers are readily available through the R language and open source H20 machine learning framework. The Cyber Equations approach is novel in its use of these classifiers combined with Hadoop based parallel processing technology. The five stages of processing used by CyberInsider improve scalability and reduce the high number of false positives normally associated with network anomaly detection. In summary, the Cyber Equations has successfully accomplished all of its Phase I tasks and demonstrated the feasibility of the Insider Threat Monitoring System.

97 MATHEMATICS AND COMPUTING↗

NASA NTRS1991

Discrete mathematics, formal methods, the Z schema and the software life cycle

The proper role and scope for the use of discrete mathematics and formal methods in support of engineering the security and integrity of components within deployed computer systems are discussed. It is proposed that the Z schema can be used as the specification language to capture the precise definition of system and component interfaces. This can be accomplished with an object oriented development paradigm.

Bown, Rodney L.↗

DOE OSTI2021

Remote Target Engagement System (RTES) Generation 4 ("Gen 4")

RTES is designed to provide teleoperation of remote weapon platform capability at defensive physical protection locations requiring active lethal capabilities for final access denial. Multiple operator consoles allow for coordinated engagement of many weapon platforms by one or more operator consoles. This results in faster response times, increased effectiveness, and increased survivability from removing response force from harm's way increasing survivability. This software is developed against DoD requirements and has been safety and functionally reviewed and approved for operational use. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2021-1935 O

Klingler, KristopherR.↗

DOE OSTI2022

A Review of Technologies that can Provide a 'Root of Trust' for Operational Technologies

The supply chain attack pathway is being increasingly used by adversaries to bypass security controls and gain unauthorized access to sensitive networks and equipment (e.g., Critical Digital Assets). Cyber-attacks targeting supply chain generally aim to compromise the environments, products, or services of vendors and suppliers to inject, add, or substitute authentic software and hardware with malicious elements. These malicious elements are deemed to be authentic as they arise from the vendor or supplier (i.e., the supply chain). This research aims at providing a survey of technologies that have the potential to reduce exposure of sensitive networks and equipment to these attacks, thereby improving tamper resistance. The recent advances in the performance and capabilities of these technologies in recent years has increased their potential applications to reduce or mitigate exposure of the supply chain attack pathway. The focus being on providing an analysis of the benefits and disadvantages of smart cards, secure tokens, and elements to provide root of trust. This analysis provides evidence that these roots of trust can increase the technical capability of equipment and networks to authenticate changes to software and configuration thereby increasing resilience to some supply chain attacks, such as those related to logistics and ICT channels, but not development environment attacks.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

NASA NTRS2011

Integrated Modeling, Mapping, and Simulation (IMMS) Framework for Exercise and Response Planning

EmergenCy management personnel at federal, stale, and local levels can benefit from the increased situational awareness and operational efficiency afforded by simulation and modeling for emergency preparedness, including planning, training and exercises. To support this goal, the Department of Homeland Security's Science & Technology Directorate is funding the Integrated Modeling, Mapping, and Simulation (IMMS) program to create an integrating framework that brings together diverse models for use by the emergency response community. SUMMIT, one piece of the IMMS program, is the initial software framework that connects users such as emergency planners and exercise developers with modeling resources, bridging the gap in expertise and technical skills between these two communities. SUMMIT was recently deployed to support exercise planning for National Level Exercise 2010. Threat, casualty. infrastructure, and medical surge models were combined within SUMMIT to estimate health care resource requirements for the exercise ground truth.

Mapar, Jalal↗

DOE OSTI2020

Structural Analysis Approach for the Defense Programs Package 3 (DPP-3)

The Pacific Northwest National Laboratory (PNNL) is the design authority for a new Type B hazardous materials transportation package designated as the Defense Programs Package 3 (DPP-3) for the U.S. Department of Energy (DOE) National Nuclear Security Administration (NNSA). The DPP-3 has been developed using similar materials and fabrication methods employed in previous U.S. Nuclear Regulatory Commission (NRC), DOE, and NNSA certified packages. The DPP-3 design criteria are derived from the American Society of Mechanical Engineers (ASME) Boiler and Pressure Vessel Code (BPVC), NNSA guidance and NRC regulatory guides in order to safely and securely transport a variety of payloads. Final regulatory approval by the NNSA will require physical testing to demonstrate that the containment vessel (CV) remains leaktight after enduring the entire regulatory testing sequence prescribed in Title 10 of the Code of Federal Regulations Part 71 (10 CFR 71). In order to gain confidence that the DPP-3 will remain leaktight after testing, the DPP-3 has been structurally analyzed using the Finite Element Analysis (FEA) software LS-DYNA. The FEA analyses serve two general purposes: first, they aid in design and development of the package, and second, they advise as to which drop orientations are expected to cause the most damage during regulatory testing. This paper will discuss how the design criteria are incorporated into analytical techniques needed to evaluate the FEA structural simulation results for 10 CFR 71 conditions to give confidence the DPP-3 testing campaign will be successful.

Sakalaukus Jr., Peter J.↗

DOE OSTI2016

Best Paper Award: Gathering Threat Intelligence Through Computer Network Deception

Presented at the 2016 IEEE International Symposium on Technologies for Homeland Security (HST), this LDRD-funded research received a Best Paper award, the highest award presented at the conference. The research focused on developing, implementing, and testing a novel computer network operations architecture that enables proactive defense by managing and monitoring enterprise resource allocations and network flows. The architecture leverages three emerging concepts: software-defined networks, cloud computing, and deception, to enable the detection and identification of anomalous access and intrusions to adjust to the dynamic nature of the adversary and to provide a mechanism to discover and react to the adversary’s attacks in a methodical and proactive manner. Additionally, the work allows network defenders to gather information on an adversary’s tools, tactics and procedures, providing insight into the “what, why, and how” of the adversary’s operations. A summary of the work presented at IEEE can be found at http://tiny.sandia.gov/8d8lu.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

NASA NTRS1995

Security for Multimedia Space Data Distribution over the Internet

Distribution of interactive multimedia to remote investigators will be required for high quality science on the International Space Station (ISS). The Internet with the World Wide Web (WWW) and the JAVA environment are a good match for distribution of data, video and voice to remote science centers. Utilizing the "open" Internet in a secure manner is the major hurdle in making use of this cost effective, off-the-shelf, universal resource. This paper examines the major security threats to an Internet distribution system for payload data and the mitigation of these threats. A proposed security environment for the Space Station Biological Research Facility (SSBRP) is presented with a short description of the tools that have been implemented or planned. Formulating and implementing a security policy, firewalls, host hardware and software security are also discussed in this paper. Security is a vast topic and this paper can only give an overview of important issues. This paper postulates that a structured approach is required and stresses that security must be built into a network from the start. Ignoring security issues or putting them off until late in the development cycle can be disastrous.

Stone, Thom↗