Search NASA⌕ Search

SEARCH · Search NASA

Results for “security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 307 records · Page 17
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Method for Assessment of Security-Relevant Settings in Anomaly-Based Intrusion Detection for Industrial Control Systems

Ensuring the integrity of Ethernet-based networks is a challenging and constantly evolving domain. This problem is exacerbated for those operational technology (OT) networks supporting industrial control systems (ICS) since much of that equipment was originally designed to be on a network that was isolated and generally considered free of malefactors. Increasing pressure to bridge these systems with traditional information technology (IT) networks has introduced a bevy of new threats. In response, both academia and industry have responded with security solutions tailored to ICS environments. Deploying these protection systems often involves several configuration choices. While some of these choices are clear (e.g., block/enable protocol X) others are far more subjective (e.g. alert threshold == 3.43). Further complicating the situation, while often similar to IT networks, OT networks have unique challenges and characteristics that make the task of protecting them simultaneously more difficult and straight forward.Extant solutions for quantifying the relative security of intrusion detection systems fail to effectively support the operators of said systems with understanding the impact of various configuration changes. Further, they assume that the attacks are static and not subject to manipulation or alteration in the face of defenses. In this paper, we present a threat-based method for quantifying the relative impact of various security settings for intrusion detection systems (IDSs) within ICS environments. This method provides operational staff with a clear understanding of the relative impact of their settings and assumes that the attacks levied against them are dynamic. The model is described in detail, we apply the model to a synthetic data set, and discuss the inferences that can be made and what types of decisions they could be used to support.

Gillen, Rob↗
DOE OSTI2020

An Assessment of the Usability of Machine Learning Based Tools for the Security Operations Center

Gartner, a large research and advisory company, anticipates that by 2024 80% of security operation centers (SOCs) will use machine learning (ML) based solutions to enhance their operations. 1 1 https://www.ciodive.com/news/how-data-science-tools-can-lighten-the-load-for-cybersecurity-teams/572209/ In light of such widespread adoption, it is vital for the research community to identify and address usability concerns. This work presents the results of the first in situ usability assessment of ML-based tools. With the support of the US Navy, we leveraged the national cyber range-a large, air-gapped cyber testbed equipped with state-of-the-art network and user emulation capabilities-to study six US Naval SOC analysts' usage of two tools. Our analysis identified several serious usability issues, including multiple violations of established usability heuristics for user interface design. We also discovered that analysts lacked a clear mental model of how these tools generate scores, resulting in mistrust a and/or misuse of the tools themselves. Surprisingly, we found no correlation between analysts' level of education or years of experience and their performance with either tool, suggesting that other factors such as prior background knowledge or personality play a significant role in ML-based tool usage. Our findings demonstrate that ML-based security tool vendors must put a renewed focus on working with analysts, both experienced and inexperienced, to ensure that their systems are usable and useful in real-world security operations settings.

Oesch, T↗
DOE OSTI2022

Experimental Setup for Grid Control Device Software Updates in Supply Chain Cyber-Security

Supply chain cyberattacks that exploit insecure third-party software are a growing concern for the security of the electric power grid. These attacks seek to deploy malicious software in grid control devices during the fabrication, shipment, installation, and maintenance stages, or as part of routine software updates. Malicious software on grid control devices may inject bad data or execute bad commands, which can cause blackouts and damage power equipment. This paper describes an experimental setup to simulate the software update process of a commercial power relay as part of a hardware-in-the-loop simulation for grid supply chain cyber-security assessment. The laboratory setup was successfully utilized to study three supply chain cyber-security use cases.

Keller, Joseph↗
DOE OSTI2019

Enabling Secure Grid Information Sharing through Hash Calendar-based Blockchain Infrastructures

The power grid is becoming increasingly interconnected, as information from grid operations must be accessible to an array of engineers, grid regulators, and market operators. However, there remain challenges ensuring the appropriate integrity and authenticity of the grid information. While traditional cryptographic protocols, like public key infrastructure, provide security for in-transit communication, they come with key exchanges and cost to get public key certificates from a centralized authority. To address these challenges, this paper demonstrates how a hash calendar-based blockchain can be used to provide improved security for communication with the use of distributed ledgers. It demonstrates the security requirements and threats to this communication, and then provides a theoretic definition of the process. Furthermore, it introduces a use-case of the proposed process within the WSU Smart City Testbed DMS with the Guardtime’s Keyless Signature Infrastructure (KSI) architecture.

Kaur, Kudrat J.↗
DOE OSTI2026

Direct Nonlinear Approximation for Security Region Boundary of Integrated Energy Systems: A Polynomial Chaos Expansion Solution

The strong interdependence of electricity, gas, and heating systems can facilitate fault propagation within integrated energy systems (IESs), posing significant challenges to secure operation. This paper proposes a polynomial chaos expansion (PCE)-based approximation method to accurately characterize the IES security region boundary (IES–SRB). By integrating the Karush-Kuhn-Tucker conditions with PCE theory, the IES-SRB approximation problem is reformulated as a set of nonlinear equations concerning the approximation coefficients. Using the Galerkin projection method, these equations are further transformed into a system of projection equations that govern the polynomial approximation coefficients in the IES-SRB approximation. To reduce computational complexity while maintaining high approximation accuracy, a piecewise polynomial approximation method is proposed. Numerical studies on the E39-G20-H6 and E118-G96-H52 IES test systems demonstrate that the proposed method can accurately and effectively construct IES security regions.

Wu, Chenghao [Northeast Electric Power University]↗
DOE OSTI2023

Measuring Equality in Machine Learning Security Defenses: A Case Study in Speech Recognition

Over the past decade, the machine learning security community has developed a myriad of defenses for evasion attacks. An understudied question in that community is: for whom do these defenses defend? This work considers common approaches to defending learned systems and how security defenses result in performance inequities across different sub-populations. We outline appropriate parity metrics for analysis and begin to answer this question through empirical results of the fairness implications of machine learning security methods. We find that many methods that have been proposed can cause direct harm, like false rejection and unequal benefits from robustness training. The framework we propose for measuring defense equality can be applied to robustly trained models, preprocessing-based defenses, and rejection methods. We identify a set of datasets with a user-centered application and a reasonable computational cost suitable for case studies in measuring the equality of defenses. In our case study of speech command recognition, we show how such adversarial training and augmentation have non-equal but complex protections for social subgroups across gender, accent, and age in relation to user coverage. We present a comparison of equality between two rejection-based defenses: randomized smoothing and neural rejection, finding randomized smoothing more equitable due to the sampling mechanism for minority groups. This represents the first work examining the disparity in the adversarial robustness in the speech domain and the fairness evaluation of rejection-based defenses.

• Artificial intelligence (AI) / machine learning ↗
DOE OSTI2023

Data for Climate vs Energy Security: Quantifying the Trade-offs of BECCS Deployment and Overcoming Opportunity Costs on Set-Aside Land

Bioenergy with carbon capture and storage (BECCS) sits at the nexus of the climate and energy security. We evaluated trade-offs between scenarios that support climate stabilization (negative emissions and net climate benefit) or energy security (ethanol production). Our spatially explicit model indicates that the foregone climate benefit from abandoned cropland (opportunity cost) increased carbon emissions per unit of energy produced by 14–36%, making geologic carbon capture and storage necessary to achieve negative emissions from any given energy crop. The toll of opportunity costs on the climate benefit of BECCS from set-aside land was offset through the spatial allocation of crops based on their individual biophysical constraints. Dedicated energy crops consistently outperformed mixed grasslands. We estimate that BECCS allocation to land enrolled in the Conservation Reserve Program (CRP) could capture up to 9 Tg C year–1 from the atmosphere, deliver up to 16 Tg CE year–1 in emissions savings, and meet up to 10% of the US energy statutory targets, but contributions varied substantially as the priority shifted from climate stabilization to energy provision. Our results indicate a significant potential to integrate energy security targets into sustainable pathways to climate stabilization but underpin the trade-offs of divergent policy-driven agendas.

Field Data↗
DOE OSTI2019

Fundamentals of Nuclear Security Culture [PowerPoint]

We examine the following topics: Nuclear and Radiological Security Culture; Threats and consequences ; The Human Factor; Legal and Regulatory Basis for Security Culture; Security Culture basic concepts; Systematic SC program; Enhancing SC; and, Situational Awareness. We will discuss these aspects and conduct exercises to apply them

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2020

Report series: Evaluation, Finding of Effect, and Mitigation Documentation for the 1960s Dormitories and 1950s Quonset Hut Foundations, Mercury, Area 23, Nevada National Security Site, Nye County, Nevada [3 Reports Consolidated]

The U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office (NNSA/NFO) plans to modernize the town of Mercury at the Nevada National Security Site (NNSS) in Nye County, Nevada, to meet current and future National Weapons Science, Global and Homeland Security Programs, and Environmental Management mission requirements. These plans—including anticipated demolitions, consolidations, and rebuilding at Mercury—are considered an undertaking subject to review under Title 54 U.S.C. § 306108, commonly known as Section 106 of the National Historic Preservation Act, Title 54 U.S.C. § 300101, et seq., and its implementing regulations, 36 C.F.R. Part 800. Desert Research Institute (DRI) completed an architectural survey of Mercury in 2017. This effort resulted in the identification, recording, and evaluation of the Mercury Historic District, as well as the identification of its contributing components. This district was recommended eligible to the National Register of Historic Places (NRHP or National Register) under Criteria A and C, but was unevaluated under Criteria B and D at that time. The Mercury Historic District contains 153 individual landscapes, buildings, and structures. Of these resources, DRI recommends all except one as contributing elements of the historic district during its period of significance corresponding to nuclear testing from 1951 through 1992. During most of the Cold War, the land now called the NNSS was referred to as the Nevada Test Site (NTS). This report evaluates resources dating to the 1950s and 1960s between Jangle and Knothole Streets and south of Ranger Avenue in Mercury prior to the proposed demolition of all resources in that area between Sandstone and Greenhouse Avenues as a phase of the larger modernization program mentioned above. Although the Mercury Historic District as a whole is eligible to the National Register, further evaluation of these properties, as detailed in this report, indicates that none are individually eligible under any of the Secretary of Interior’s Significance Criteria, either at the national or local level.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2020

2020 LLNL Nuclear Science and Security Summer Internship Program

The Lawrence Livermore National Laboratory (LLNL) Nuclear Science and Security Summer Internship Program (NS 3 IP) is designed to give graduate students an opportunity to come to LLNL for 8–10 weeks of hands-on research. Students conduct research under the supervision of a staff scientist, attend a weekly lecture series, interact with other students, and present their work in poster format at the end of the program. Students also have the opportunity to meet staff scientists one-on-one, participate in LLNL facility tours (e.g., the National Ignition Facility and Center for Accelerator Mass Spectrometry), and gain a better understanding of the various science programs at LLNL. Due to the travel and access restrictions imposed by the COVID-19 pandemic, the 2020 NS 3 IP was organized as an “all-virtual” internship program. With LLNL’s extensive institutional support, students accessed the laboratory’s cyberinfrastructure through a secure virtual desktop environment and all seminars, mentor interactions, summer presentations, and laboratory tours were performed remotely. While this virtual internship format did not allow for hands-on laboratory research projects, both the interns and their mentors constructed creative research projects that maximized student exposure to nuclear science research that is relevant to DTRA and LLNL interests in nuclear security.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2020

Securing Vehicle Charging Infrastructure

As the US electrifies the transportation sector, cyber attacks targeting vehicle charging could bring consequences to electrical system infrastructure. This is a growing area of concern as charging stations increase power delivery and must communicate to a range of entities to authorize charging, sequence the charging process, and manage load (grid operators, vehicles, OEM vendors, charging network operators, etc.). The research challenges are numerous and are complicated because there are many end users, stakeholders, and software and equipment vendors interests involved. Poorly implemented electric vehicle supply equipment (EVSE), electric vehicle (EV), or grid communication system cybersecurity could be a significant risk to EV adoption because the political, social, and financial impact of cyberattacks - or public perception of such - ripples across the industry and has lasting and devastating effects. Unfortunately, there is no comprehensive EVSE cybersecurity approach and limited best practices have been adopted by the EV/EVSE industry. There is an incomplete industry understanding of the attack surface, interconnected assets, and unsecured interfaces. Thus, comprehensive cybersecurity recommendations founded on sound research are necessary to secure EV charging infrastructure. This project is providing the power, security, and automotive industry with a strong technical basis for securing this infrastructure by developing threat models, determining technology gaps, and identifying or developing effective countermeasures. Specifically, the team is creating a cybersecurity threat model and performing a technical risk assessment of EVSE assets, so that automotive, charging, and utility stakeholders can better protect customers, vehicles, and power systems in the face of new cyber threats.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2021

Initial Security Briefing [Slides]

The objectives of this training are to introduce you to the various aspects of security at Los Alamos National Laboratory, help you understand the role of security in your work, and let you know where to get answers to security related questions.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2021

U.S. and Allied Cyber Security Cooperation in the Indo-Pacific (Workshop Summary)

On March 30, 31, and April 1, 2021, the Center for Global Security Research (CGSR) at Lawrence Livermore National Laboratory (LLNL) hosted a workshop titled "U.S. and allied Cyber Security Cooperation in the Indo-Pacific". This session brought together participants drawn across the policy, military, and private sector in the United States and among allied countries in Europe and the Indo-Pacific. The workshop evaluated threat perceptions, assessed cyber power in a regional context, and explored opportunities for building capacity and trust with allies, partners, and the private sector. The region's cyber threat landscape is marked by increasing malicious activity, with threats persistent and ever-growing. Grounded by this strategic reality, the workshop advocated for 1) a concerted push into the arena of norm setting from the bottom up, 2) an agreed metric by which to assess progress, and 3) the creation of future lines of collaborative effort for the United States and its allies to ensure an open, interoperable, and secure internet.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

Cyber Security Summer School 2021 [Slides]

LANL is committed to training the next generation of cyber security professionals and researchers for the US Department of Energy. Alumni are prepared to mitigate rapidly-evolving threats to national security by applying best-practice analysis and developing novel tools. The 2021 summer school ended with another recruiting success, recruiting 5 students into A-4,T, and NIE-- as staff or students. The research track students further strengthened LANL’s cyber mission by applying their skills to develop innovative solutions to help address national cyber threats. The investigation track students learned the necessary concepts and skills for responding effectively to cyber security incidents

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2021

Gamma Spectroscopy Detector Candidates and Radioisotope Identification Algorithms for Use in National Security Applications

In 2006, the United States Congress mandated for the Department of Homeland Security (DHS) to screen all cargo containers to protect against terrorist acts and ensure the safety and security of the nation. Containers are screened by gamma and neutron detectors to ensure threat material is not smuggled into the country. However, because commerce is radioactive, detecting the presence of radioactive materials is not sufficient in ensuring the safety and security of the nation. Radioactive materials must also be identified in real time, thus distinguishing threat sources (Uranium-235 and Plutonium-230) from non-threat sources (kitty litter, pot ash, medical isotopes). Screening cargo containers can be considered a two-step process (1) alerting to the presence of radioactive material when gamma counts exceed a threshold setting, and (2) once alerted, identifying the type of radioactive material, which is done by collecting a gamma spectra and analyzing it with an analysis tool/algorithm. For this reason, it is important to evaluate not only emerging technology in neutron and gamma detection, but also investigate new advances in algorithm development for radioisotope identification (RIID). New candidates in detection and on-board algorithm analysis might offer opportunities to make the scanning, detection, and identification process more efficient while still ensuring the health and safety of the public. This research will investigate emerging technology in radiation detection focused on gamma spectroscopy capabilities and RIID algorithms for DHS applications.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2021

The Architecture of Area 12 Camp - Nevada's Atomic Ghost Town. An Architectural Survey of Area 12 Camp, Nevada National Security Site, Nye County, Nevada

The U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office (NNSA/NFO) plans to demolish 10 buildings and one structure in Area 12 Camp at the Nevada National Security Site (NNSS) in Nye County, Nevada, to meet current and future National Weapons Science, Global and Homeland Security Program, and Environmental Management mission requirements and to reduce dangers to site workers from some of these resources. These demolitions constitute an undertaking subject to review under Title 54 U.S.C. § 306108, commonly known as Section 106 of the National Historic Preservation Act, Title 54 U.S.C. § 300101, et seq., and its implementing regulations, 36 C.F.R. Part 800. These resources were recorded and evaluated as individually ineligible for the National Register of Historic Places (National Register or NRHP) by Menocal and Shaw (2019). Upon review by the Nevada State Historic Preservation Office (SHPO) and internal review by Desert Research Institute (DRI) and NNSA/NFO staff, it was determined that these resources needed to be rerecorded and evaluated in relation to what appeared to be a National Register-eligible Historic District made up of the entirety of Area 12 Camp. Based on preliminary information, it appeared that all 11 resources would likely be contributing elements of that historic district. With that assumption in mind, recording of the entire proposed Area 12 Camp Historic District was done for three purposes. First, it would result in a definitive significance evaluation of the 11 resources in question. Second, recording of the entire camp would be offered as an appropriate mitigation measure for the demolition of these resources. Third, it would present an essential background for future management of resources within the district boundaries. Prior to the present survey, Area 12 Camp had not yet been systematically recorded; therefore, DRI surveyed an area of approximately 229 acres for architectural resources. This effort resulted in the identification, recording, and evaluation of the Area 12 Camp Historic District (SHPO Resource No. D372), including the identification of its contributing components. This district is recommended eligible for the National Register of Historic Places under Criteria A and C. It is unevaluated under Criteria B and D. The Area 12 Historic District contains 71 Principal Resources, which include landscapes, buildings, and structures. Of these resources, 69 (including 10 of the 11 resources to be removed) are recommended as contributing elements of the historic district during its period of significance corresponding to nuclear testing from 1960 through 1992. During most of the Cold War, the government reservation now called the NNSS was named the Nevada Test Site (NTS).

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

2021 LLNL Nuclear Science and Security Summer Internship Program

The Lawrence Livermore National Laboratory (LLNL) Nuclear Science and Security Summer Internship Program (NS 3 IP) is designed to give graduate students an opportunity to come to LLNL for 8–10 weeks of hands-on research. Students conduct research under the supervision of a staff scientist, attend a weekly lecture series, interact with other students, and present their work in poster format at the end of the program. Students also have the opportunity to meet staff scientists one-on-one, participate in LLNL facility tours (e.g., the National Ignition Facility and Center for Accelerator Mass Spectrometry), and gain a better understanding of the various science programs at LLNL. Due to the travel and access restrictions imposed by the COVID-19 pandemic, the 2021 NS 3 IP was organized as an “all-virtual” internship program. With LLNL’s extensive institutional support, students accessed the laboratory’s cyberinfrastructure through a secure virtual desktop environment and all seminars, mentor interactions, summer presentations, and laboratory tours were performed remotely. While this virtual internship format did not allow for hands-on laboratory research projects, both the interns and their mentors constructed creative research projects that maximized student exposure to nuclear science research that is relevant to DTRA and LLNL interests in nuclear security. We anticipate a return to an in-person internship format for the summer of 2022.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2021

Section 106 Recordation, Interpretation, and Documentation for the Demolition of Buildings 9201-5 and 9204-4, Y-12 National Security Complex, Oak Ridge, Tennessee

In 2019 and 2020, Cultural Resource Analysts, Inc. (CRA), began preparing recordation packages for 18 World War II and Cold War Era buildings slated for demolition at the request of Consolidated Nuclear Security, LLC (CNS), on behalf of the U.S. Department of Energy (DOE), National Nuclear Security Administration (NNSA). The recordations for these 18 buildings, which are located within what is now known as the Y-12 National Security Complex (Y-12) in Oak Ridge, Tennessee, were prepared and submitted in two separate packages. The first report (EC-NP-004) was prepared as a mitigation measure to address adverse effects that will result from the proposed demolition of 16 support and ancillary buildings. The current report is the second of the two packages and addresses the last two of the 18 buildings slated for demolition (9201-5 and 9204-4), which are two of the large process buildings located at Y-12. All 18 of these buildings have previously been determined eligible for listing in the National Register of Historic Places (NRHP). The two buildings, Building 9201-5 and Building 9204-4, are located south of Bear Creek Road and west of the main Y-12 entrance gate. Both buildings were constructed as uranium enrichment facilities in support of the Manhattan Project, a top-secret World War II mission to develop the world’s first nuclear weapons. Building 9201-5, completed in October 1944, is the Alpha-5 process facility and Building 9204-4, completed in Fall 1945, is the Beta-4 process facility. Over the years, these facilities were repurposed for a number of different functions.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗