Search NASA⌕ Search

SEARCH · Search NASA

Results for “penetration testing”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

Analyzing Risks and Vulnerabilities of Various Computer Systems and Undergoing Exploitation using Embedded Devices

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere has heightened from airports to communication among the military branches legionnaires. With advanced persistent threats (APTs) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated, patched and secured state in a launch control system environment. Attacks on critical systems are becoming more and more relevant and frequent. Nation states are hacking into critical networks that might control electrical power grids or water dams as well as carrying out advanced persistent threat (APTs) attacks on government entities. NASA, as an organization, must protect its self from attacks from all different types of attackers with different motives. Although the International Space Station was created, there is still competition between the different space programs. With that in mind, NASA might get attacked and breached for various reasons such as espionage or sabotage. My project will provide a way for NASA to complete an in house penetration test which includes: asset discovery, vulnerability scans, exploit vulnerabilities and also provide forensic information to harden systems. Completing penetration testing is a part of the compliance requirements of the Federal Information Security Act (FISMA) and NASA NPR 2810.1 and related NASA Handbooks. This project is to demonstrate how in house penetration testing can be conducted that will satisfy all of the compliance requirements of the National Institute of Standards and Technology (NIST), as outlined in FISMA. By the end of this project, I hope to have carried out the tasks stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, as well as policies and procedures.

Penetration Testing↗

Effect of Vacuum on Force Response of an Ultrasonic Penetrator

Introduction: The Apollo astronauts encountered higher than expected resistances when interacting with the lunar soil via the Apollo Lunar Surface Drill (ALSD) and the trenching tool. Reducing the force required to move tools or other mechanical components through regolith will impact many steps of the resource extraction process. Force reduction has been achieved in soil materials by imparting vibration to tooling interfaces such as a vibratory farming cultivator, a percussive scoop, and ultrasonically resonant penetrators. Vibration-assisted tools in granular media reduce interaction forces by fluidizing a volume around the tool, allowing the tool to progress through a dynamic (fluid) medium instead of a static (solid) medium. This work seeks to quantify ultrasonic vibration’s effect on the force response of a penetrator in lunar soil simulant in vacuum sufficient to be within the molecular flow regime of any disturbed gases. Methods: A custom vacuum chamber setup, CUBEvac, was designed and built to facilitate penetration testing in a high vacuum environment, for comparison to penetration behavior in ambient terrestrial environment. A two-stage pumping system (Agilent Triscroll 600 roughing pump, Agilent VHS-6 oil diffusion pump) reached chamber pressures of about 5x10-6 Torr with regolith simulant in place. Figure 1 is a schematic of the heart of the assembly (note the penetration drive mechanisms above the chamber feedthrough and the regolith simulant sample in the bottom are not shown). The penetration actuation stack was comprised of a stepper motor driving a lead screw to move the ultra-sonic probe vertically inside the chamber. Motion was coordinated with an Arduino Uno. GRC-3 lunar simulant was used for this set of experiments. Samples were prepared in a four-liter stain-less steel, cylindrical pot with an internal diameter of approximately 15.56 cm (6.125 in) and a depth of 19.37 cm (7 5/8 in) for testing. The soil was baked out prior to compaction preparation as a measure to reduce soil moisture which interfered with pump down capacity. The soil was not baked again if it was removed from the vacuum chamber, prepped, and immediately returned to the vacuum chamber for pump down. The soil was compacted using a 60 Hz vibration table with a surcharge of 34 kg place on top of the soil in the container. Prepared soil samples weighed approximately 6.5 kg (bulk density 1.895-1.934 g/cm3). Two probe end effectors were tested: A cone penetrometer (static only) with a nominal diameter of 12.7 mm (0.5 in) and a nominal height of 28.6 mm (1.125 in); and a vibrating cylindrical probe measuring 12.7 mm in diameter and 50.8 mm in effective length from the tip (Figure 2). The cylindrical probe vibrated resonantly at 20 kHz with an amplitude 23 μm. The cone penetration tests were conducted to assess potential soil behavior differences in vacuum. The cylinder probe tests were conducted as the primary subject of this investigation to assess force response in vacuum. For each test, a regolith simulant sample was load-ed and compacted in the chamber, which was then evacuated for roughly 18 hours to reach the lowest possible pressure (approximately 5x10-6 Torr for most tests). The probe was then moved to about 10 mm above the soil surface before being pushed to a depth of 50 mm for the cylinder probe tests and to a depth of 100 mm for the cone penetrometer tests, both at a speed of 2 mm/s. The simulant samples were prepared the same for all tests. Ideally, they would respond consistently to probe penetration under ambient and vacuum conditions. This was evaluated by measuring the resistance of representative prepared simulant beds with a standard cone penetrometer in both environments. Results and Discussion: The resistance of the simulant samples in the vacuum tests was consistently lower than in the ambient tests as determined by the cone penetration tests. Thus, the ambient and vacuum results cannot be compared directly; work is underway to de-confound and better correlate the data. Still, figures 3-6 show that probe penetration forces are lower overall in the vacuum environment. In both environments, resonant vibration of the probe provides two useful effects: It reduces the probe penetration force and smooths the force-depth curve, significantly reducing local maxima. These effects have implications for various potential applications, such as astronaut hand-tools, where benefits (reducing astronaut effort) outweigh the cost of the additional energy re-quired to generate vibration. These results demonstrate that resonantly vibrating tools can meaningfully reduce the penetration force required for excavation, probing, and drilling tools in simulated lunar regolith deposits under vacuum levels approaching those that will be experience on the Moon’s surface. Lunar-gravity, ambient environment tests are scheduled soon. The effects of realistic temperatures and temperature gradients and deeper vacuum remain to be tested.

E Rezich↗

Understanding Li-Ion Cell Internal Short Circuit and Thermal Runaway through Small, Slow and In Situ Sensing Nail Penetration

Here we report a small, slow and in situ sensing (3S) nail penetration test method to understand Li-ion cell internal short circuit (ISC) and thermal runaway. The method not only keeps conventional nail penetration's advantage of simple implementation, but also enhances its relevance to field failures and enables detailed in situ diagnosis. It was applied to 3-Ah pouch cells and revealed insights that could not be captured by conventional methods. Most interestingly, multiple in situ temperature peaks were observed during a period of over 100 s before thermal runaway. These initial peaks exceeded safety limit but the temperature rapidly decreased after each peak instead of causing immediate thermal runaway. Further investigation suggested that the initial temperature peaks occurred when nail tip reached aluminum foil current collector to form a low resistance ISC between anode and aluminum foil. The rapid temperature decrease after each peak can be attributed to sudden drop of ISC current, which can be further attributed to rupture of aluminum foil and increase of contact resistance. The findings show that 3S nail penetration test can separate processes of ISC from thermal runaway and provide details of ISC at the level of individual electrode and current collector.

25 ENERGY STORAGE↗

Water depth penetration film test

As part of the National Aeronautics and Space Administration Earth Resources Program, a comparative and controlled evaluation of nine film-filter combinations was completed to establish the relative effectiveness in recording water subsurface detail if exposed from an aerial platform over a typical water body. The films tested, with one exception, were those which prior was suggested had potential. These included an experimental 2-layer positive color film, a 2-layer (minus blue layer) film, a normal 3-layer color film, a panchromatic black-and-white film, and a black-and-white infrared film. Selective filtration was used with all films.

Lockwood, H. E.↗

A comparison of whipple shield hypervelocity impact tests to penetration predictors

An analytical model is presented for converting ballistic limit curves obtained from flat plate projectile experiments to ballistic limit curves based on equivalent diameter spheres. The developed method demonstrates good correlation of the ballistic limit of the shield concept for the flat-plate projectiles to the theoretical ballistic limit for equivalent spheres as predicted by the penetration equations.

Hill, Scott A.↗

Disruption of Commercial Solar Inverter System by TLS Proxy Man-in-the-Middle Attack

Transport Layer Security (TLS) is a cryptographic protocol that encrypts communication data, providing end-to-end communication encryption and authentication. Currently, TLS is widely adopted for securing communication between servers and end devices, including solar inverter systems. Therefore, users/operators can securely access the solar inverters through a web user interface (WebUI) application programmable interface (API) on a PC or server over TLS-enabled Wi-Fi or Ethernet. However, the security of the TLS-based network becomes compromised if it is breached by a TLS proxy man-in-the-middle (MITM) exploit. This report explores potential vulnerabilities in a commercial solar inverter system that leverages a TLS proxy MITM and discusses the impacts through assume-breached penetration testing. Furthermore, the paper explores recommended mitigation methods against the TLS proxy MITM exploit in solar inverters.

97 MATHEMATICS AND COMPUTING↗

Ransomware Security Threat Modeling for Photovoltaic Systems

Ransomware attacks are one of the most dangerous cyber-attacks which can disrupt the operation of photovoltaic (PV) systems and incur an enormous economic loss. This paper introduces a ransomware security threat modeling method that identifies potential vulnerabilities, threats, and impacts of ransomware attacks targeting a PV system. Here, the security threat modeling consists of three steps: 1) system identification, 2) threat modeling that finds existing vulnerabilities, 3) attack modeling that designs attack profiles to succeed ransomware attacks, and 4) penetration testing that performs authorized cyber-attacks and analyzes impacts of the ransomware attack profiles using a real-time hardware-in-the-loop (HIL) PV system security testbed.

attack modeling↗

Surface penetrators for planetary exploration: Science rationale and development program

Work on penetrators for planetary exploration is summarized. In particular, potential missions, including those to Mars, Mercury, the Galilean satellites, comets, and asteroids are described. A baseline penetrator design for the Mars mission is included, as well as potential instruments and their status in development. Penetration tests in soft soil and basalt to study material eroded from the penetrator; changes in the structure, composition, and physical properties of the impacted soil; seismic coupling; and penetrator deflection caused by impacting rocks, are described. Results of subsystem studies and tests are given for design of entry decelerators, high-g components, thermal control, data acquisition, and umbilical cable deployment.

Murphy, J. P.↗

Fabrication and testing of prestressed composite rotor blade spar specimens

Prestressed composite spar specimens were fabricated and evaluated by crack propagation and ballistic penetration tests. The crack propagation tests on flawed specimens showed that the prestressed composite spar construction significantly suppresses crack growth. Damage from three high velocity 30 caliber projectile hits was confined to three small holes in the ballistic test specimen. No fragmentation or crack propagation was observed indicating good ballistic damage resistance. Rotor attachment approaches and improved structural performance configurations were identified. Design theory was verified by tests. The prestressed composite spar configuration consisted of a compressively prestressed high strength ARDEFORM 301 stainless steel liner overwrapped with pretensioned S-994 fiberglass.

Gleich, D.↗

Comparison of Generation of Higher-Order Neutron Scattering Cross Sections

The generation of high-order neutron scattering cross sections consistent with high-fidelity simulations remains an area of active research. Popular options include generating cross sections from continuous energy Monte Carlo calculations or generating cross sections from a deterministic neutron transport calculation with high-fidelity tabulated cross sections. Both options present challenges. Monte Carlo simulations can naturally process continuous energy cross section data and allow for the general description of anisotropic neutron scattering given a scattering law. However, Monte Carlo simulations are inherently related to particle weighting and it has been suggested that this may be unacceptable for generating high-order neutron scattering cross sections. Deterministic neutron transport calculations can easily calculate high-order moments of the flux to appropriately calculate higher-order neutron scattering cross sections but are generally limited by discretization of space, energy, and angle. In this work, the trade-offs between generation of high-order neutron scattering cross sections via Monte Carlo and deterministic neutron transport methods are investigated. The methods implemented in the Monte Carlo computer program Serpent and the deterministic fast reactor neutron cross section generator MC2-3 are compared. Cross sections resulting from these methods are used in Rattlesnake, a deterministic neutron transport code developed by Idaho National Laboratory (INL), and results are compared to a reference continuous energy Monte Carlo calculation. Whereas previous work investigating the effects of anisotropic neutron scattering has focused on light water reactor (LWR) simulations, this work focuses on high-order neutron scattering cross sections as they relate to fast reactor simulations. To investigate the consequences of the Serpent and MC2-3 methodologies, a test problem is developed. The test problem is a one-dimensional geometry with fast reactor materials designed to demonstrate deep penetration and exacerbate the effects of high-order neutron scattering. Based on the results of the deep penetration test problem, it is concluded that P3 neutron scattering cross sections are sufficient to describe anisotropic scattering in fast reactor materials. Any neutron scattering of order higher than P3 offers negligible change in the eigenvalue of the test problem. Additionally, it is determined that the methodology as implemented in Serpent is applicable for generating high-order neutron scattering cross sections through at least P3 in fast reactor materials.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Titanium-Oxygen Reactivity Study

A program has been conducted at Astronautics to investigate the likelihood of occurrence of the catastrophic oxidation of titanium alloy sheet under conditions which simulate certain cases of accidental failure of the metal while it is in contact with liquid or gaseous oxygen. Three methods of fracturing the metal were used; they consisted of mechanical puncture, tensile fracture of welded joints, and perforation by very high velocity particles. The results of the tests which have been conducted provide further evidence of the reactivity of titanium with liquid and gaseous oxygen. The evidence indicates that the rapid fracturing of titanium sheet while it is in contact with oxygen initiates the catastrophic oxidation reaction. Initiation occurred when the speed of the fracture was some few feet per second, as in both the drop-weight puncture tests and the static tensile fracture tests of welded joints, as well as when the speed was several thousand feet per second, as in the simulated micrometeoroid penetration tests. The slow propagation of a crack, however, did not initiate the reaction. It may logically be concluded that the localized frictional heat of rapid fracture and/or spontaneous oxidation (exothermic) of minute particles emanating from the fracture cause initiation of the reaction. Under conditions of slow fracture, however, the small heat generated may be adequately dissipated and the reaction is not initiated. A portion of the study conducted consisted of investigating various means by which the reaction might be retarded or prevented. Providing a "barrier" at the titanium-oxygen interface consisting of either aluminum metal or a coating of a petroleum base corrosion inhibitor appeared to be only partially effective in retarding the reaction. The accidental puncturing or similar rupturing of thin-walled pressurized oxygen tanks on missiles and space vehicle will usually constitute loss of function, and may sometimes cause their catastrophic destruction by explosive decompression regardless of the type of material used for their construction. In the case of tanks constructed of titanium alloys the added risk is incurred of catastrophic burning of the tanks. In view of this it is recommended that thin-walled tanks constructed of titanium alloys should not be used to contain liquid or gaseous oxygen.

Chafey, J. E.↗

Named Data Networking for DER Cybersecurity

We present our research findings on the novel NDN protocol. In this work, we defined key attack scenarios for possible exploitation and detail software security testing procedures to evaluate the security of the NDN software. This work was done in the context of distributed energy resources (DER). The software security testing included an execution of unit tests and static code analyses to better understand the software rigor and the security that has been implemented. The results from the penetration testing are presented. Recommendations are discussed to provide additional defense for secure end-to-end NDN communications.

97 MATHEMATICS AND COMPUTING↗

Thermal performance of a modularized replaceable multilayer insulation system for a cryogenic stage

A rugged modularized MLI system for a 2.23-meter-diameter (87.6-in.-diam) liquid hydrogen tank was designed, fabricated, and tested under simulated near-earth and deep-space environments. The two blankets of the system were each composed of 17 double-aluminized Mylar radiation shields separated by silk net. The unit area weight of the installed system was 1.54 kg/sqm (0.32 lb/sq ft). The overall average heat transferred into the insulated tank was 22.7 and 0.98 watts (77.4 and 3.3 Btu/hr) during simulated near-earth and deep-space testing, respectively. The near-earth result was only 2.6 times that predicted for an undisturbed insulation system (i.e., no seams or penetrations). Tests indicate that this insulation concept could be useful for a cryogenic space tug or orbit transfer vehicle application.

Knoll, R. H.↗

Lunar regolith penetrators and cutters

An apparatus was designed and built for conducting simulation experiments on cutting tool penetration in the centrifuge. This equipment is mounted on the laminar container which is used for the regolith densification study, so that the end product of the latter, i.e., a regolith bed with the proper density profile, can be used directly for the penetration tests. In this apparatus, an etching tool is suspended through a pulley system by the action of a double acting air cylinder. By adjusting the air pressure acting on each side of the cylinder, the net downward force acting on the tool can be controlled. The penetration of the tool is measured by an LVDT. This apparatus was proof-tested in the centrifuge and is ready for use in conjunction with the regolith densification experiments.

Barnes, Frank↗

Prevention of lithium-ion battery thermal runaway using polymer-substrate current collectors

Isolating electronically conducting material from internal short circuits is a promising way to prevent the onset of thermal runaway within lithium-ion cells. Here, a metal-coated polymer current collector, which is designed to disconnect internal short circuits by withdrawing from the heating region, is tested in 18650 cells. In addition to having lower mass and manufacturing costs, cells with metal-coated polymer current collectors demonstrate a reduced risk of thermal runaway during nail penetration. High-speed synchrotron X-ray radiography of 18650 cells during nail-penetration testing, in tandem with pre- and post-mortem X-ray computed tomography, provides insights into the function of the current collectors. The results are compared with those of 18650 cells with standard commercial aluminum and copper current collectors. Cells with aluminum-coated polymer current collectors demonstrated 100% success in thermal runaway prevention during nail penetration, retaining a cell voltage >4.00 V, while standard cells consistently experienced thermal runaway.

25 ENERGY STORAGE↗

Containment of composite fan blades

The development of containment concepts for use with large composite fan blades, taking into account the frangible nature of composite blades is considered. Aspects of the development program include; (1) an analysis to predict the interaction between a failed fan blade and the blade containment structure; (2) scaling factors to allow impact testing using subscale containment rings and simulated blades; (3) the design and fabrication of containment systems for further evaluation in a rotating rig test facility; (4) evaluate the test data against the analytically predicted results; and (5) determine overall systems weights and design characteristics of a composite fan stage installation and compare to the requirements of an equivalent titanium fan blade system. Progress in the blade impact penetration tests and the design and fabrication of blade containment systems is reported.

Coppa, A. P.↗