Search NASA⌕ Search

SEARCH · Search NASA

Results for “SECURITY MANAGEMENT”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

The Distributed Energy Resource Risk Manager

Organizations need a comprehensive approach to managing security and privacy risks, especially for energy resources that are becoming increasingly distributed. A tool by the National Renewable Energy Laboratory (NREL) makes it possible to manage these risks and maintain the highest standards of cybersecurity. To simplify risk management for facilities and distributed energy resources, NREL has created the Distributed Energy Resource Risk Manager, an automated, user-friendly tool that helps navigate and implement one of the most widely trusted frameworks for information security, the National Institute of Standards and Technology Risk Management Framework.

compliance↗
DOE OSTI2023

NREL Project CloudZero

The National Renewable Energy Laboratory's (NREL's) CloudZero project is evaluating the ability to reliably and securely manage complex energy systems from the cloud, identifying major technical and regulatory barriers to cloud adoption, suggesting new security controls and best practices for cloud applications, and empowering industry to embrace the cloud, where appropriate.

cloud↗
DOE OSTI2020

Disposition Options for Sodium Cooled Fast Reactor (A White Paper)

The sodium-cooled fast reactor (SFR) design concept is one of the six classes of nuclear reactors in the GenIV initiative. SFRs are uranium or plutonium-fueled reactors operating in the fast neutron spectrum using liquid sodium as the coolant. SFRs can be designed as a breeder reactor or actinide-burning reactor in addition to operating the thorium fuel cycle. While having different fuel designs, the anticipated waste streams, and the necessary management strategies for spent nuclear fuel (SNF) and radioactive wastes from SFRs are very similar. This includes the SNF, activated sodium coolant, in-core stainless-steel components, piping, resins and filters, solidified liquid waste, contaminated equipment, and other radioactive wastes. Modern SFR designs are based on a long and rich operating history of several liquid-metal-cooled fast reactors with sodium coolant. Several of these reactors have been shut down, the fuel has been placed in safe storage, and they have undergone some degree of decommissioning. As such, there is significant experience in the management of the SNF and radioactive wastes associated with operating these reactors. This white paper will identify the definitions and regulations that apply to the safe and secure management, storage, and disposal of radioactive waste and identify the key radioactive waste streams from SFRs. Idaho National Laboratory has significant experience in the management of the SNF from the SFR predecessors. This experience should form the basis for the management and disposition efforts of the radioactive waste from any new SFR-type small modular reactor or microreactor intended for deployment at the Idaho National Laboratory Site

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS2004

Data processing pipeline with transaction-oriented data sharing

This paper makes three contributions to the area of modern science data processing systems. First, the paper describes the science data processing pipeline, developed at the Multi-mission Image Processing Lab of JPL, for transforming raw space data into high quality image data and automating the distribution of data using a high-performance file transaction service. File Exchange Interface is the file transaction service developed MIPL. Second, it presents the FEI component architecture in the are of file transaction management, security,a nd file integrity verfication. Finally, the paper presents the federated model for the FEI service to demonstrate how to create a pool of file trasaction services to support load balancing and service fallover, and simplify service management.

science data processing↗
DOE OSTI2024

Clearance Tracker

The manual process of managing security clearance was cumbersome and inefficient, involving the emailing of a fillable PDF from person to person. There was no visibility into the progress of a clearance submission. Clearance Tracker provides an automated workflow with data validation and notifications to manage the clearance process. The automated workflow routes notifications to individuals when their input is required. All participants can track the progress of clearance requests.

Short, RickyD↗
NASA NTRS2012

Autonomous Information Unit for Fine-Grain Data Access Control and Information Protection in a Net-Centric System

As communication and networking technologies advance, networks will become highly complex and heterogeneous, interconnecting different network domains. There is a need to provide user authentication and data protection in order to further facilitate critical mission operations, especially in the tactical and mission-critical net-centric networking environment. The Autonomous Information Unit (AIU) technology was designed to provide the fine-grain data access and user control in a net-centric system-testing environment to meet these objectives. The AIU is a fundamental capability designed to enable fine-grain data access and user control in the cross-domain networking environments, where an AIU is composed of the mission data, metadata, and policy. An AIU provides a mechanism to establish trust among deployed AIUs based on recombining shared secrets, authentication and verify users with a username, X.509 certificate, enclave information, and classification level. AIU achieves data protection through (1) splitting data into multiple information pieces using the Shamir's secret sharing algorithm, (2) encrypting each individual information piece using military-grade AES-256 encryption, and (3) randomizing the position of the encrypted data based on the unbiased and memory efficient in-place Fisher-Yates shuffle method. Therefore, it becomes virtually impossible for attackers to compromise data since attackers need to obtain all distributed information as well as the encryption key and the random seeds to properly arrange the data. In addition, since policy can be associated with data in the AIU, different user access and data control strategies can be included. The AIU technology can greatly enhance information assurance and security management in the bandwidth-limited and ad hoc net-centric environments. In addition, AIU technology can be applicable to general complex network domains and applications where distributed user authentication and data protection are necessary. AIU achieves fine-grain data access and user control, reducing the security risk significantly, simplifying the complexity of various security operations, and providing the high information assurance across different network domains.

Chow, Edward T.↗
DOE OSTI2021

Cybersecurity Certification Recommendations for Interconnected Grid Edge Devices and Inverter Based Resources

Escalating deployment of PV and grid-edge devices on the distribution grid has increased the sustainability and efficiency of the electric grid. However, the increasing number of distributed energy resources (DERs) deployed creates a heightened cyber-physical interdependency on the distribution grid and thus creates more vectors for cyber-attacks to exploit through information and communication technology (ICT) systems and networks. For example, control signal packets can be modified, intercepted, or corrupted due to vulnerabilities in communication protocols used by microgrid controllers and grid edge devices for power control. Therefore, to mitigate and prevent cyber-attacks on grid edge devices and the inverter-based resources connected to the distribution grid, the U.S. Department of Solar Energy Technologies Office (SETO) awarded funding to the National Renewable Energy Laboratory and Sandia National Laboratory (SNL) to research, develop, and harmonize cybersecurity standards for Photovoltaic (PV) systems and for other kinds of DERs. To help develop a standard for DER cybersecurity, NREL established certification recommendations and test cases, in consensus with the solar industry and UL, for ensuring intrinsic design security for DERs. These recommendations were developed to bolster the cybersecure functionalities such as TLS, MAC, CRL, session resumption/renegotiation, and password, system, and service security management within the DER devices. The proposed test cases verify authentication, authorization, confidentiality, and data integrity for data and communications of DERs that use Transmission Control Protocol/Internet Protocol (TCP/IP). They were also developed to protect DER communications from eavesdropping, replay, man-in-the-middle, denial of service (DoS), spoofing through security certificates, least-privilege violation, and brute-force credentials. This report, which has been validated and reviewed by UL, expands upon those test cases to provide DER cybersecurity certification recommendations which increase DER resiliency and help to mitigate cyber-attacks. UL's collaboration with NREL and approval of this document will accelerate the adoption of a UL standard for DER cybersecurity.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2014

IT Security Support for the Spaceport Command Control System Development

My job title is IT Security support for the Spaceport Command & Control System Development. As a cyber‐security analyst it is my job to ensure NASA's information stays safe from cyber threats, such as, viruses, malware and denial-of-service attacks by establishing and enforcing system access controls. Security is very important in the world of technology and it is used everywhere from personal computers to giant networks ran by Government agencies worldwide. Without constant monitoring analysis, businesses, public organizations and government agencies are vulnerable to potential harmful infiltration of their computer information system. It is my responsibility to ensure authorized access by examining improper access, reporting violations, revoke access, monitor information request by new programming and recommend improvements. My department oversees the Launch Control System and networks. An audit will be conducted for the LCS based on compliance with the Federal Information Security Management Act (FISMA) and The National Institute of Standards and Technology (NIST). I recently finished analyzing the SANS top 20 critical controls to give cost effective recommendations on various software and hardware products for compliance. Upon my completion of this internship, I will have successfully completed my duties as well as gain knowledge that will be helpful to my career in the future as a Cyber Security Analyst.

IT Security↗
NASA NTRS2016

Information Management Platform for Data Analytics and Aggregation (IMPALA) System Design Document

The System Design document tracks the design activities that are performed to guide the integration, installation, verification, and acceptance testing of the IMPALA Platform. The inputs to the design document are derived from the activities recorded in Tasks 1 through 6 of the Statement of Work (SOW), with the proposed technical solution being the completion of Phase 1-A. With the documentation of the architecture of the IMPALA Platform and the installation steps taken, the SDD will be a living document, capturing the details about capability enhancements and system improvements to the IMPALA Platform to provide users in development of accurate and precise analytical models. The IMPALA Platform infrastructure team, data architecture team, system integration team, security management team, project manager, NASA data scientists and users are the intended audience of this document. The IMPALA Platform is an assembly of commercial-off-the-shelf (COTS) products installed on an Apache-Hadoop platform. User interface details for the COTS products will be sourced from the COTS tools vendor documentation. The SDD is a focused explanation of the inputs, design steps, and projected outcomes of every design activity for the IMPALA Platform through installation and validation.

Carnell, Andrew↗
NASA NTRS2003

Transferring Knowledge from Observations and Models to Decision Makers: An Overview and Challenges

Over the last 25 years, a tremendous progress has been made in the Earth science space-based remote sensing observations, technologies and algorithms. Such advancements have improved the predictability by providing lead-time and accuracy of forecast in weather, climate, natural hazards, and natural resources. It has further reduced or bounded the overall uncertainties by partially improving our understanding of planet Earth as an integrated system that is governed by non-linear and chaotic behavior. Many countries such US, European Community, Japan, China and others have invested billions of dollars in developing and launching space-based assets in the low earth (LEO) and geostationary (GEO) orbits. However, the wealth of this scientific knowledge that has potential of extracting monumental socio-economic benefits from such large investments have been slow in reaching to public and decision makers. For instance, there are a number of areas such as energy forecasting, aviation safety, agricultural competitiveness, disaster management, security, air quality and public health can directly take advantage. Nevertheless, we all live in a global economy that depends on access to the best available Earth Science information for all inhabitants of this planet. This paper surveys and examines a number such applications in terms of their architecture, maturity and economic applicability as they apply to the societal needs. A detailed analysis is also presented of various challenges and issues that pertain to a number of areas such as: (1) difficulties in making a speedy transition of data and information from observations and models to relevant Decision Support Systems (DSS) or tools, (2) data and models inter-operability issues, (3) limitations of spatial, spectral and temporal resolution, (4) communication limitations as dictated by the availability of image processing and data compression techniques. Additionally, the most critical element amongst all is the organizational and management boundaries that must be resolved at local, state, national and international levels to implement and realize free flow of such vital information. This paper also makes attempts to address this topic and discuss possible approaches to deal with this quandary.

Habib, Shahid↗
DOE OSTI2021

Grid Cyber-Security Strategy in an Attacker-Defender Model

The progression of cyber-attacks on the cyber-physical system is analyzed by the Probabilistic, Learning Attacker, and Dynamic Defender (PLADD) model. Although our research does apply to all cyber-physical systems, we focus on power grid infrastructure. The PLADD model evaluates the effectiveness of moving target defense (MTD) techniques. We consider the power grid attack scenarios in the AND configurations and OR configurations. In addition, we consider, for the first time ever, power grid attack scenarios involving both AND configurations and OR configurations simultaneously. Cyber-security managers can use the strategy introduced in this manuscript to optimize their defense strategies. Specifically, our research provides insight into when to reset access controls (such as passwords, internet protocol addresses, and session keys), to minimize the probability of a successful attack. Our mathematical proof for the OR configuration of multiple PLADD games shows that it is best if all access controls are reset simultaneously. For the AND configuration, our mathematical proof shows that it is best (in terms of minimizing the attacker's average probability of success) that the resets are equally spaced apart. We introduce a novel concept called hierarchical parallel PLADD system to cover additional attack scenarios that require combinations of AND and OR configurations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Towards Automatic Mapping of Vulnerabilities to Attack Patterns using Large Language Models

With the advent of new devices and applications, cyber attack surface is continuously evolving due to the emergence of new attack techniques and vulnerabilities. Hence, security management tool must assess the cyber risk of an enterprise at regular interval basis through comprehensively identifying associations among attack techniques, weakness, and vulnerabilities. However, existing repositories providing such associations are incomplete (i.e., missing associations), inducing the likelihood of undermining the risk of particular set of attack techniques. Moreover, such associations still rely on manual interpretation, which is slow compared to attack speed and ineffective for the increasing list of vulnerabilities and attack actions. Therefore, there is an urge to develop methodologies for automatically associating vulnerabilities to all relevant attack techniques. In this paper, we present a framework, named VWC-MAP, that can automatically identify all relevant attack techniques of a vulnerability via weakness based on their text descriptions, applying natural language process (NLP) techniques. To achieve that, we present a novel two-tiered classification approach, where the first tier classifies vulnerabilities to weakness, and the second tier classifies weakness to attack techniques. This research has improved the scalability of the current state-of-the-art tool to make vulnerability to weakness mapping significantly faster. Moreover, this paper presents two novel approaches for weakness to attack technique mapping applying Text-to-Text and link prediction techniques. Our experiment results cross-validated through cyber-security experts show that VWC-MAP can associate vulnerabilities to weakness types with 87% accuracy and to new attack patterns with 80% accuracy.

Das, Siddhartha Shankar↗
DOE OSTI2020

Potential Disposition Options for a Salt Fueled Molten Salt Reactor At the INL (A White Paper)

The molten salt reactor (MSR) design concept has been the focus of significant research and development efforts, both in the U.S. and around the world. There are generally two types of MSRs, salt fueled MSRs that have the fuel dissolved within the salt and solid fueled MSRs that only use the molten salt as a coolant. The range of conceptual designs and the flexibility of operations of MSRs results in a wide range of potential waste streams from salt fueled MSRs; all of which require safe and secure storage and eventual disposition. This white paper will 1) survey the range of salt fueled MSR designs, 2) recognize the implications of design, on the resulting waste streams, and 3) identify the definitions and regulations that apply to the safe and secure management, storage, and disposal of these streams. Research in MSR waste streams is young and the focus of intense research that requires more funding and time to become mature enough to fully support design decisions. Once a specific design is selected, a more detailed management and disposition effort must be performed.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS2002

Security in Full-Force

When fully developed for NASA, Vanguard Enforcer(TM) software-which emulates the activities of highly technical security system programmers, auditors, and administrators-was among the first intrusion detection programs to restrict human errors from affecting security, and to ensure the integrity of a computer's operating systems, as well as the protection of mission critical resources. Vanguard Enforcer was delivered in 1991 to Johnson Space Center and has been protecting systems and critical data there ever since. In August of 1999, NASA granted Vanguard exclusive rights to commercialize the Enforcer system for the private sector. In return, Vanguard continues to supply NASA with ongoing research, development, and support of Enforcer. The Vanguard Enforcer 4.2 is one of several surveillance technologies that make up the Vanguard Security Solutions line of products. Using a mainframe environment, Enforcer 4.2 achieves previously unattainable levels of automated security management.

Source record↗
NASA NTRS2012

Achievable Performance and Effective Interrogator Design for SAW RFID Sensor Tags

For many NASA missions, remote sensing is a critical application that supports activities such as environmental monitoring, planetary science, structural shape and health monitoring, non-destructive evaluation, etc. The utility of the remote sensing devices themselves is greatly increased if they are passive V that is, they do not require any on-board power supply such as batteries V and if they can be identified uniquely during the sensor interrogation process. Additional passive sensor characteristics that enable greater utilization in space applications are small size and weight, long read ranges with low interrogator power, ruggedness, and operability in extreme environments (vacuum, extreme high/low temperature, high radiation, etc.) In this paper, we consider one very promising passive sensor technology, called surface acoustic wave (SAW) radio-frequency identification (RFID), that satisfies all of these criteria. In general, RFID is a method of identifying items using radio waves to interrogate tags encoded with a unique identifier that are affixed to the items of interest. In the case of passive tags, only the interrogator, which transmits power to the tags in the form of radio-frequency electromagnetic radiation, requires access to a power supply. Passive RFID technologies are used today in many applications, including asset tracking and management, security and access control, and remote sensing. To date, most of the development and application in RFID technology has focused on either asset/inventory tracking and control or security and access control because these are the largest commercial application areas. Recently however, there has been growing interest in using passive RFID technology for remote sensing applications, and SAW devices are at the forefront of RFID sensing technology development. Although SAW RFID tags have great potential for use in numerous space-based remote sensing applications, the limited collision resolution capability of current generation tags limits the performance in a cluttered sensing environment. That is, as more SAW-based sensors are added to the environment, numerous tag responses are superimposed at the receiver and decoding all or even a subset of the telemetry becomes increasingly difficult. Background clutter generated by reflectors other than the sensors themselves is also a problem, as is multipath interference and signal distortion, but the limiting factor in many remote sensing applications can be expected to be tag mutual interference. This problem may be greatly mitigated by proper design of the SAW tag waveform, but that remains an open research problem, and in the meantime, several other related questions remain to be answered including: (1) What are the fundamental relationships between tag parameters such as bit-rate, time-bandwidth-product, SNR, and achievable collision resolution? (2) What are the differences in optimal or near-optimal interrogator designs between noise-limited environments and interference-limited environments? (3) What are the performance characteristics of different interrogator designs in term of parameters such as transmitter power level, range, and number of interfering tags? In this paper, we will present the results of a research effort aimed at providing at least partial answers to all of these questions.

Barton Richard J.↗
NASA NTRS2019

Soil Moisture Data Assimilation to Estimate Irrigation Water Use

Knowledge of irrigation is essential to support food security, manage depleting water resources, and comprehensively understand the global water and energy cycles. Despite the importance of understanding irrigation, little consistent information exists on the amount of water that is applied for irrigation. In this study, we develop and evaluate a new method to predict daily to seasonal irrigation magnitude using a particle batch smoother data assimilation approach, where land surface model soil moisture is applied in different configurations to understand how characteristics of remotely sensed soil moisture may impact the performance of the method. The study employs a suite of synthetic data assimilation experiments, allowing for systematic diagnosis of known error sources. Assimilation of daily synthetic soil moisture observations with zero noise produces irrigation estimates with a seasonal bias of 0.66% and a correlation of 0.95 relative to a known truth irrigation. When synthetic observations were subjected to an irregular overpass interval and random noise similar to the Soil Moisture Active Passive satellite (0.04 cm(exp 3) cm(exp -3)), irrigation estimates produced a median seasonal bias of <1% and a correlation of 0.69. When systematic biases commensurate with those between NLDAS‐2 land surface models and Soil Moisture Active Passive are imposed, irrigation estimates show larger biases. In this application, the particle batch smoother outperformed the particle filter. The presented framework has the potential to provide new information into irrigation magnitude over spatially continuous domains, yet its broad applicability is contingent upon identifying new method(s) of determining irrigation schedule and correcting biases between observed and simulated soil moisture, as these errors markedly degraded performance.

R Abolafia-Rosenzweig↗
DOE OSTI2021

Evaluating Emissions Reductions from DERs in REopt Lite

Creating a clear business justification for an energy & water project is essential for developing projects by transforming data and analysis into a compelling story to secure management buy-in. This presentation provides an overview of how distributed energy resources (DERs) can provide cost savings, resilience benefits, and emissions reduction. Many technical and economic factors affect which distributed energy technologies can best meet site goals, and should be considered concurrently. With increasingly integrated and complex systems, back-of-the envelope calculations are no longer sufficient to determine distributed energy project potential. REopt Lite can be used to model emissions and evaluate the impact of DERs on reducing emissions.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2020

The TRANSCEND University Consortium: Theme 4: Nuclear Materials - 20431

The safe and secure management of Pu is a matter of international concern, with ∼250 t of separated Pu currently stockpiled worldwide. The UK's civil inventory of nuclear materials contains significant stocks of separated Pu from the reprocessing of Magnox and AGR spent fuels. The preferred option for the 138.5 tonnes of Pu is re-use as mixed oxide (MOx) fuel, although 5% is not suitable for re-use and is recommended for direct disposal. However, it will take more than 15 years to implement re-use, requiring that the Pu be kept in interim storage in its current state for that period, i.e. as PuO{sub 2} powder within inert steel storage cans at Sellafield. The focus of the work presented here is thus plutonium storage and the direct disposal of plutonium. The Research and Development needs of both are now pressing: in the case of storage due to it being the current default; in the case of immobilization and disposal because of a comparative lack of Research and Development on Pu conditioning and packaging due to policy uncertainty as to whether it would be disposed of in a Geologic Disposal Facility (GDF). Addressing these needs is complicated by Pu's high radioactivity, decay heat and radiotoxicity, criticality, nuclear safeguard requirements and, for some UK Pu contaminated materials targeted for disposal, poor inventory. Thus, there is also a critical requirement for underpinning research on Pu bearing materials in these two contexts. In response to these needs, the TRANSCEND Consortium (Transformative Science and Engineering for Nuclear Decommissioning, a multi-disciplinary collaboration of 11 universities and 8 key industry partners from across the UK's civil nuclear sector) is seeking to provide technical underpinning to ongoing option development for the UK's civil Pu stockpile. Whilst understanding the behaviour of plutonium during its re-use as MOx is beyond the scope of the TRANSCEND Consortium work plan, the main objectives of the work are: (1) For interim storage: to understand how the surface structure and properties of pristine and radiation damaged PuO{sub 2} change with time in the absence and presence of water; and (2) For immobilization and disposal: to understand the mechanisms of incorporation of Pu into ceramic and glass-ceramic waste-forms, as well as the effect on these of self-induced radiation damage. Each objective is being addressed through separate work packages, the details of which are discussed in this paper. (authors)

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗