Search NASA⌕ Search

SEARCH · Search NASA

Results for “security properties”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Formal verification and validation of run-to-completion style state charts using Event-B

State chart notations with ‘run to completion’ semantics are popular with engineers for designing controllers that react to environment events with a sequence of state transitions but lack formal refinement and rigorous verification methods. State chart models are typically used to design complex control systems that respond to environmental triggers with a sequential process. The model is usually constructed at a concrete level and verified and validated using animation techniques relying on human judgement. Event-B, on the other hand, is based on refinement from an initial abstraction and is designed to make formal verification by automatic theorem provers feasible. Abstraction and formal verification provide greater assurance that critical (e.g. safety or security) properties are not violated by the control system. In this paper, we introduce a notion of refinement into a ‘run to completion’ state chart modelling notation and leverage Event-B’s tool support for theorem proving. We describe the difficulties in translating ‘run to completion’ semantics into Event-B refinements and suggest a solution. We illustrate our approach and show how models can be validated at different refinement levels using our scenario checker animation tools. We show how critical invariant properties can be verified by proof despite the reactive nature of the system and how behavioural aspects of the system can be verified by testing the expected reactions using a temporal logic, model checking approach. To verify liveness, we outline a proof that the run to completion is deadlock-free and converges to complete the run.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Secure LoRa Firmware Update with Adaptive Data Rate Techniques

Internet of Things (IoT) devices rely upon remote firmware updates to fix bugs, update embedded algorithms, and make security enhancements. Remote firmware updates are a significant burden to wireless IoT devices that operate using low-power wide-area network (LPWAN) technologies due to slow data rates. One LPWAN technology, Long Range (LoRa), has the ability to increase the data rate at the expense of range and noise immunity. The optimization of communications for maximum speed is known as adaptive data rate (ADR) techniques, which can be applied to accelerate the firmware update process for any LoRa-enabled IoT device. In this paper, we investigate ADR techniques in an application that provides remote monitoring of cattle using small, battery-powered devices that transmit data on cattle location and health using LoRa. In addition to issues related to firmware update speed, there are significant concerns regarding reliability and security when updating firmware on mobile, energy-constrained devices. A malicious actor could attempt to steal the firmware to gain access to embedded algorithms or enable faulty behavior by injecting their own code into the device. A firmware update could be subverted due to cattle moving out of the LPWAN range or the device battery not being sufficiently charged to complete the update process. To address these concerns, we propose a secure and reliable firmware update process using ADR techniques that is applicable to any mobile or energy-constrained LoRa device. The proposed system is simulated and then implemented to evaluate its performance and security properties.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2014

Hyperion

The Hyperion system was designed to "look inside" an executable program and determine software's function or "behavior" without the use of the software's source code. Hyperion accomplishes this by generating associated program behaviors and the complete set of conditions under which they occur. These behaviors can be automatically checked for known malicious signatures and inspected by domain experts to assure correct operation and the absence of malicious content. Hyperion can also be used to check a program's security properties and to optimize a program.

Prowell, Stacy↗
DOE OSTI2021

Practices for Demonstrating Energy Savings from Commercial PACE Projects

Nearly three-fourths of U.S. states have authorized local governments to use voluntary special assessments on commercial properties to finance energy improvements that boost economic development, create jobs, increase property values and advance energy goals. Commercial Property Assessed Clean Energy (C-PACE) financing allows building owners to repay the borrowed capital — from private or public sources — over time using their property as security. Berkeley Lab is supporting the Department of Energy’s Commercial PACE Working Group by developing a series of C-PACE issue briefs. The second brief in this series, Practices for Demonstrating Energy Savings from Commercial PACE Projects, looks at common practices for demonstrating energy savings to support state and local governments that sponsor C-PACE programs and want to track their energy impacts. This brief reviews: -The value proposition and trade-offs of conducting energy impact assessments for C-PACE programs; -Methods to quantify energy savings impacts from energy efficiency building improvements; and -Available resources and tools to support energy impact assessments. C-PACE programs may benefit from energy impact assessments for many reasons, including: -Validating the public benefits of the programs -Demonstrating that C-PACE can deliver participant benefits -Illustrating program impacts on public policy goals -Generating data to help improve program performance Many C-PACE programs are collecting data on project energy savings impacts, and these data can be leveraged to further support decision making and program implementation. Potential drawbacks to energy impact assessments may include added cost and burdens on property owners (e.g., the need to collect building energy consumption data). Where these burdens are considerable, they might slow program uptake. State and local governments can balance the benefits of energy impact assessments with the range of costs and accuracy inherent to available assessment methodologies. Additionally, depending on the policy context in the state or local government, a C-PACE program may be able to leverage existing efforts (e.g., building energy benchmarking programs) to reduce impact assessment costs, align with building owner practices and expectations, and efficiently assess program impact.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2013

3D Flow and Temperature Analysis of Filling a Plutonium Mold (Revision 1) [Poster]

The plutonium foundry at Los Alamos National Laboratory casts products for various special nuclear applications. However, plutonium’s radioactivity, material properties, and security constraints complicate the ability to perform experimental analysis of mold behavior. The Manufacturing Engineering and Technologies (MET-2) group previously developed a graphite mold to vacuum cast small plutonium disks to be used by the Department of Homeland Security as point sources for radiation sensor testing. A two-stage pouring basin consisting of a funnel and an angled cavity directs the liquid into a vertical runner. A stack of ten disk castings connect to the runner by horizontal gates. Volumetric flow rates were implemented to limit overflow into the funnel and minimize foundry returns. Models using Flow-3D computational fluid dynamics software are employed here to determine liquid Pu flow paths, optimal pour regimes, temperature changes, and pressure variations.

36 MATERIALS SCIENCE↗
NASA NTRS1992

Teaching, learning, and planetary exploration

The progress accomplished in the first five months of the three-year grant period of Teaching, Learning, and Planetary Exploration is presented. The objectives of this project are to discover new education products and services based on space science, particularly planetary exploration. An Exploration in Education is the umbrella name for the education projects as they are seen by teachers and the interested public. As described in the proposal, our approach consists of: (1) increasing practical understanding of the potential role and capabilities of the research community to contribute to basic education using new discoveries; (2) developing an intellectual framework for these contributions by supplying criteria and templates for the teacher's stories; (3) attracting astronomers, engineers, and technical staff to the project and helping them form productive education partnerships for the future, (4) exploring relevant technologies and networks for authoring and communicating the teacher's stories; (5) enlisting the participation of potential user's of the teacher's stories in defining the products; (6) actually producing and delivering many educationally useful teacher's stories; and (7) reporting the pilot study results with critical evaluation. Technical progress was made by assembling our electronic publishing stations, designing electronic publications based on space science, and developing distribution approaches for electronic products. Progress was made addressing critical issues by developing policies and procedures for securing intellectual property rights and assembling a focus group of teachers to test our ideas and assure the quality of our products. The following useful materials are being produced: the TOPS report; three electronic 'PictureBooks'; one 'ElectronicArticle'; three 'ElectronicReports'; ten 'PrinterPosters'; and the 'FaxForum' with an initial complement of printed materials. We have coordinated with planetary scientists and astronomers both at the technical and policy level to assure the efficiency and ultimate utility of these efforts to derive educational benefits from the space science and exploration program as a whole.

Brown, Robert A.↗
NASA NTRS2001

Reducing software security risk through an integrated approach

The fourth quarter delivery, FY'01 for this RTOP is a Property-Based Testing (PBT), 'Tester's Assistant' (TA). The TA tool is to be used to check compiled and pre-compiled code for potential security weaknesses that could be exploited by hackers. The TA Instrumenter, implemented mostly in C++ (with a small part in Java), parsels two types of files: Java and TASPEC. Security properties to be checked are written in TASPEC. The Instrumenter is used in conjunction with the Tester's Assistant Specification (TASpec)execution monitor to verify the security properties of a given program.

software security↗
NASA NTRS2006

Security Verification Techniques Applied to PatchLink COTS Software

Verification of the security of software artifacts is a challenging task. An integrated approach that combines verification techniques can increase the confidence in the security of software artifacts. Such an approach has been developed by the Jet Propulsion Laboratory (JPL) and the University of California at Davis (UC Davis). Two security verification instruments were developed and then piloted on PatchLink's UNIX Agent, a Commercial-Off-The-Shelf (COTS) software product, to assess the value of the instruments and the approach. The two instruments are the Flexible Modeling Framework (FMF) -- a model-based verification instrument (JPL), and a Property-Based Tester (UC Davis). Security properties were formally specified for the COTS artifact and then verified using these instruments. The results were then reviewed to determine the effectiveness of the approach and the security of the COTS product.

patch↗
DOE OSTI2019

Advanced Multilayer Coatings for National Security

This project advanced the state-of-the-art in multilayer interference coatings with customtailored properties for national security applications, by understanding and overcoming limitations in the physical properties of these coatings. We focused on improving the properties of two major types of multilayers: the reflectance of hard x-ray aperiodic multilayer coatings (MLs) and the laser damage resistance of dielectric multilayer coatings (MLDs). We developed a new class of hard x-ray MLs for imaging in the 17 – 59 keV photon energy range for applications including target diagnostics and astrophysics. We elucidated the physical and chemical properties of nanoscale layers of ML materials and their interfaces and developed generalized protocols for aperiodic ML design and deposition. We revealed the origin of important laser damage-prone precursors and the underlying mechanism upon exposure to high energy and intensity nanosecond (ns) lasers in the ultraviolet (UV) region. In both ML and MLD coatings, we investigated the relationships between deposition conditions and performance. We then applied deposition process modifications specific to each type of ML and MLD coatings to dramatically improve the ML reflective performance and the MLD laser-damage resistance.

36 MATERIALS SCIENCE↗
DOE OSTI2017

Integrated Work Management: Overview, Course 31881

Integrated work management (IWM) is the process used for formally implementing the five-step process associated with integrated safety management (ISM) and integrated safeguards and security management (ISSM) at Los Alamos National Laboratory (LANL). IWM also directly supports the LANL Environmental Management System (EMS). IWM helps all workers and managers perform work safely and securely and in a manner that protects people, the environment, property, and the security of the nation. The IWM process applies to all work activities at LANL, from working in the office to designing experiments to assembling and detonating explosives. The primary LANL document that establishes and describes IWM requirements is Procedure (P) 300, Integrated Work Management.

99 GENERAL AND MISCELLANEOUS↗
NASA NTRS1985

Protecting intellectual property in space; Proceedings of the Aerospace Computer Security Conference, McLean, VA, March 20, 1985

The primary purpose of the Aerospace Computer Security Conference was to bring together people and organizations which have a common interest in protecting intellectual property generated in space. Operational concerns are discussed, taking into account security implications of the space station information system, Space Shuttle security policies and programs, potential uses of probabilistic risk assessment techniques for space station development, key considerations in contingency planning for secure space flight ground control centers, a systematic method for evaluating security requirements compliance, and security engineering of secure ground stations. Subjects related to security technologies are also explored, giving attention to processing requirements of secure C3/I and battle management systems and the development of the Gemini trusted multiple microcomputer base, the Restricted Access Processor system as a security guard designed to protect classified information, and observations on local area network security.

Source record↗
DOE OSTI2022

Multilayered Network Models for Security: Enhancing System Security Engineering with Orchestration

Security engineering approaches can often focus on a particular domain—physical security, cyber security, or personnel security, for example. Yet, security systems engineering consistently faces challenges requiring socio-technical solutions to address evolving and dynamic complexity. While some drivers of this complexity stem from complex risk environments, innovative adversaries, and disruptive technologies, other drivers are endogenous and emerge from the interactions across security engineering approaches. In response, INCOSE's Systems Security Working Group identified the need to better coordinate “disparate security solutions [that] operate independently” as one of eleven key concepts in their IS21 FuSE Security Roadmap. From this perspective, this need for “security orchestration” aligns with the perspective that security is a property that emerges from interactions within complex systems. Current efforts at Sandia National Laboratories are developing a systems security engineering approach that describes high consequence facility (HCF) security as a multidomain set of interacting layers. The result is a multilayered network (MLN)-based approach that captures the interactions between infrastructure, physical components, digital components, and humans in nuclear security systems. This article will summarize the MLN-based approach to HCF security and describe two preliminary results demonstrating potential benefits from incorporating interactions across disparate security solutions. Here, leveraging the logical structure of networks, this MLN model-based approach provides an example of how security orchestration provides enhanced systems security engineering solutions.

42 ENGINEERING↗
NASA NTRS2000

Reducing Software Security Risk Through an Integrated Approach

This paper discusses new joint work by the California Institute of Technology's Jet Propulsion Laboratory and the University of California at Davis sponsored by the National Aeronautics and Space Administration to develop a security assessment instrument for the software development and maintenance life cycle.

risk matrix↗
NASA NTRS2009

Proof Compression and the Mobius PCC Architecture for Embedded Devices

The EU Mobius project has been concerned with the security of Java applications, and of mobile devices such as smart phones that execute such applications. In this talk, I'll give a brief overview of the results obtained on on-device checking of various security-related program properties. I'll then describe in more detail how the concept of certified abstract interpretation and abstraction-carrying code can be applied to polyhedral-based analysis of Java byte code in order to verify properties pertaining to the usage of resources of a down-loaded application. Particular emphasis has been on finding ways of reducing the size of the certificates that accompany a piece of code.

Jensen, Thomas↗