SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
In this report, Millstone 1- Develop Facility Energy System Models is documented, including an introduction of the energy facility in military microgrids through a set of mathematical models of the energy facility using electricity, natural gas, and heat as energy resources.
The motivation behind this project is to protect critical infrastructure in electric power generation pertaining to solar photovoltaic (PV) systems. This growing renewable energy resource is becoming a more vital part of the nation’s energy portfolio, particularly since it has achieved grid-parity to existing generation methods in terms of cost. It is thus vital that steps be taken to ensure the cybersecurity of these assets. The project goal was to devise a multilevel cybersecurity solution to address PV security gaps at the inverter and system levels, and field test the solution under the supervision and review of a US-based solar inverter manufacturer and PV installer/operator. A two-level cyberattack defense approach was formulated whereby the first level, the solar inverter level, hardens individual devices and achieves a deeply cyber-secure inverter. The inverter level security involves a multi-layer defense-in-depth approach for securing the inverter while also providing data for the system level algorithms. The second level, the system level, addresses intrusion detection and restoration involving an ensemble of inverters and relevant systems.
Satellite ocean color missions require an abundance of high-quality in situ measurements for bio-optical and atmospheric algorithm development and post-launch product validation and sensor calibration. To facilitate the assembly of a global data set, the NASA Sea-viewing Wide Field-of-view (SeaWiFS) Project developed the Seafaring Bio-optical Archive and Storage System (SeaBASS), a local repository for in situ data regularly used in their scientific analyses. The system has since been expanded to contain data sets collected by the NASA Sensor Intercalibration and Merger for Biological and Interdisciplinary Oceanic Studies (SIMBIOS) Project, as part of NASA Research Announcements NRA-96-MTPE-04 and NRA-99-OES-99. SeaBASS is a well moderated and documented hive for bio-optical data with a simple, secure mechanism for locating and extracting data based on user inputs. Its holdings are available to the general public with the exception of the most recently collected data sets. Extensive quality assurance protocols, comprehensive data and system documentation, and the continuation of an archive and relational database management system (RDBMS) suitable for bio-optical data all contribute to the continued success of SeaBASS. This document provides an overview of the current operational SeaBASS system.
Space Medicine provides healthcare services of various types for astronauts throughout their lifetime starting from the time they are selected as astronauts. IT challenges include: protection of private medical information, access from locations both inside and outside NASA, nearly 24x7 access, access during disasters, international partner access, data archiving, off-region backup, secure communication of medical data to people outside the NASA system (e.g. expert consultants), efficient movement of medical record information between locations, search and retrieval of relevant information, and providing all of these services/capabilities within a limited budget. In Space Medicine, we have provided for these in various ways: limit the amount of private medical information stored locally, utilize encryption mechanisms that the international partners can also use, utilize 2-factor authentication, virtualize servers, employ concept-based search, and use of standardized terminologies (SNOMED) and messaging (HL7).
Abstract not provided.
The following landscape analysis explores blockchain or distributed ledger technologies application to securing electricity infrastructure. The exploration of how distributed ledger technologies can be used to increase the trustworthiness and integrity of the grid’s edge is imperative to the economic, security and well-being of all modern societies that rely on electricity. Blockchain technology’s ability to secure, track and optimize complex data transactions provides an exciting value proposition to securing and optimizing the U.S. power grid. An energy delivery system (EDS) operating at the grid’s edge requires unprecedented levels of security and trustworthiness to verify integrity of data and manage complex transactive and distributed Energy Resources (DERs) exchanges. Moreover, grid-edge devices lack visibility, control and security to conduct real-time energy transactions with the required security, speed and scale. The U.S. power grid is a complex system of systems that requires secure, reliable and trustworthy EDSs. Grid modernization has increased the speed and size of data sets exchanged on these systems (Gordes and Mylrea 2014). Exasperating the challenge is these systems are increasingly distributed creating new data fidelity and interoperability challenges for grid operators struggling to balance and incorporate DERs. Blockchain technology provides an atomically verifiable cryptographic signature to help increase the trustworthiness of EDSs at the grid’s edge. This feature is especially important at distribution level since EDSs and field devices have increasing operational and security requirements that are often diametrically opposed. For example, as data, speed and analytic requirements increase, security and functionality requirements increase. Further, as the grid’s edge incorporate DERs and transacts in real time, availability is prioritized over the integrity and confidentially of that data. Blockchain presents the prospect of solving some of these complex challenges related to grid security and modernization. However, there are more questions about blockchain applicability than answers. There are number of theoretical blockchain applications to the energy sector, but few energy utilities have actually applied, implemented or even experimented with the underlying distributed ledger technology and consensus algorithms that enable blockchain to exchange data more efficiently and securely.
Security of Distribution Synchrophasors Data (DSD) is of paramount importance as the data is used for critical smart grid applications including situational awareness, advanced protection, and dynamic control. Unfortunately, the DSD are attractive targets for malicious attackers aiming to damage grid. Data spoofing is a new class of deceiving attack, where the DSD of one Phasor Measurement Units (PMUs) is tampered by other PMUs thereby spoiling measurement based applications. In order to address this issue, a source authentication based data spoofing attack detection method is proposed using Multi-view Convolutional Neural Network (MCNN). First, common components embedded in raw frequency measurements from DSD are removed by Savitzky-Golay (SG) filter. Second, fast S transform (FST) is utilized to extract representative spatial fingerprints via time frequency analysis. Third, the spatial fingerprint is fed to MCNN, which combines dilated and standard convolutions for automatic feather extraction and source identification. Finally, according to the output of MCNN, spoofing attack detection is performed via threshold criterion. Extensive experiments with actual DSD from multiple locations in FNET/Grideye are conducted to verify the effectiveness of the proposed method.
Shaft adapter developed to provide means for securing Acurex 1200B universal data coupler to rotating instrumented shaft. Consists of two major parts: shaft sleeve and shaft clamp. Provides for accurate measurements of stresses and strains in shaft.
The Nevada National Security Site (NNSS) worked with other sites within the Department of Energy National Nuclear Security Administration weapons complex to develop design requirements for a Remote Monitoring System. System objectives included: Continuous monitoring of packaging (containers) within a Facility's buildings to meet Material Control and Accountability (MC&A) inventory requirements. Remotely access and receive monitoring data for tamper detection/alarm, tracking information, environmental conditions, equipment metadata (serial number, date of manufacture, etc.), and assessment video feeds. All data processing, storage/retrieval, and communications will be protected in a manner commensurate with its trust level and classification. Remotely collected and processed data will be securely stored, backed up, and archived. Current and historical data will accessible within and outside of a Building (location). Automated creation of reports and data visualization. Design features to facilitate the potential future integration with the Facility's physical security alarm and display system. The requirements may be used to develop an integrated conceptual design or may be used in a modular fashion to inform separate designs. The guiding principles in developing the system objectives include: For MC&A needs, remotely perform the physical inventory and evidence collection of tamper for Security Category I and II packaged material within a facility and be capable of satisfying guidelines establish by DOE M 470.4-6, “Nuclear Material Control and Accountability.” For personnel safety needs: Meet/satisfy Nuclear Explosive Safety requirements. Minimize the exposure of personnel to radiation to be as low as reasonably achievable (ALARA) in accordance with NSTec Radiological Controls Manual. For DOE nuclear materials, Building environment shall be controlled to meet requirements for packaged nuclear materials specified in weapons laboratory literature.
Protection of the national infrastructure is a high priority for cybersecurity of the homeland. Critical infrastructure such as the national power grid, commercial financial networks, and communications networks have been successfully invaded and re-invaded from foreign and domestic attackers. The ability to re-establish authentication and confidentiality of the network participants via secure channels that have not been compromised would be an important countermeasure to compromise of our critical network infrastructure. This paper describes a concept of operations by which the NASA Tracking and Data Relay (TDRS) constellation of spacecraft in conjunction with the White Sands Complex (WSC) Ground Station host a security recovery system for re-establishing secure network communications in the event of a national or regional cyberattack. Users would perform security and network restoral functions via a Broadcast Satellite Service (BSS) from the TDRS constellation. The BSS enrollment only requires that each network location have a receive antenna and satellite receiver. This would be no more complex than setting up a DIRECTTV-like receiver at each network location with separate network connectivity. A GEO BSS would allow a mass re-enrollment of network nodes (up to nationwide) simultaneously depending upon downlink characteristics. This paper details the spectrum requirements, link budget, notional assets and communications requirements for the scheme. It describes the architecture of such a system and the manner in which it leverages off of the existing secure infrastructure which is already in place and managed by the NASAGSFC Space Network Project.
The Nevada National Security Site (NNSS) worked with other sites within the Department of Energy National Nuclear Security Administration weapons complex to develop design requirements for a Remote Monitoring System. System objectives include: • Continuous monitoring of packaging (containers) within a Facility's buildings to meet Material Control and Accountability (MC&A) inventory requirements. • Remotely access and receive monitoring data for tamper detection/alarm, tracking information, environmental conditions, equipment metadata (serial number, date of manufacturer, etc.), and assessment video feeds. • All data processing, storage/retrieval, and communications will be protected in a manner commensurate with its trust level and classification. • Remotely collected and processed data will be securely stored, backed up, and archived. • Current and historical data will accessible within and outside of a Building (location). • Automated creation of reports and data visualization. • Design features to facilitate the potential future integration with the Facility's physical security alarm and display system. The requirements may be used to develop an integrated conceptual design or may be used in a modular fashion to inform separate designs. The guiding principles in developing the system objectives include: • For MC&A needs, remotely perform the physical inventory and evidence collection of tamper for Security Category I and II packaged material within a facility and be capable of satisfying guidelines establish by DOE M 470.4-6, “Nuclear Material Control and Accountability.” • For personnel safety needs: o Meet/satisfy Nuclear Explosive Safety requirements. o Minimize the exposure of personnel to radiation to be as low as reasonably achievable (ALARA) in accordance with NSTec Radiological Controls Manual (Ref TBD). • For DOE nuclear materials, Building environment shall be controlled to meet requirements for packaged nuclear materials specified in weapons laboratory literature.
With the rapid development and broad applications of next-generation sequencing platforms and bioinformatic analytical tools, genomics has become a popular area for biosurveillance and international scientific collaboration. Governments from countries including the United States (US), Canada, Germany, and the United Kingdom have leveraged these advancements to support international cooperative programs that aim to reduce biological threats and build scientific capacity worldwide. A recent conference panel addressed the impacts of the enhancement of genomic sequencing capabilities through three major US bioengagement programs on international scientific engagement and biosecurity risk reduction. Here, the panel contrasted the risks and benefits of supporting the enhancement of genomic sequencing capabilities through international scientific engagement to achieve biological threat reduction and global health security. The lower costs and new bioinformatic tools available have led to the greater application of sequencing to biosurveillance. Strengthening sequencing capabilities globally for the diagnosis and detection of infectious diseases through mutual collaborations has a high return on investment for increasing global health security. International collaborations based on genomics and shared sequence data can build and leverage scientific networks and improve the timeliness and accuracy of disease surveillance reporting needed to identify and mitigate infectious disease outbreaks and comply with international norms. Further efforts to promote scientific transparency within international collaboration will improve trust, reduce threats, and promote global health security.
The VA Environmental Determinants of Health (EDH) Advanced Software Pipeline Framework is designed to enhance the efficiency, scalability, and security of geospatial data processing workflows. This framework integrates modern data orchestration and containerization technologies, including Prefect for workflow automation, Docker for containerization, and PostgreSQL/PostGIS for geospatial data storage and analysis. It ensures standardized, reproducible, and automated data processing, supporting VA objectives related to substance use risk assessment and recovery research. The pipeline addresses key scalability and performance challenges through horizontal and vertical scaling, high-performance computing (HPC) integration, parallel processing, task caching, and dynamic resource allocation. These optimizations improve throughput and reduce latency, allowing the system to efficiently manage large and complex datasets. Additionally, security and compliance measures—such as data encryption (SSL), Role-Based Access Control (RBAC), and adherence to GDPR and HIPAA standards—safeguard sensitive information throughout data transmission and storage. A key implementation of this framework includes the automation of shelter list geolocation workflows, ensuring that up-to-date data is readily available for VA decision-making. Lessons learned from this project include the transition from in-memory processing to incremental storage writes, improving resource management and reliability. Future enhancements aim to expand automation, integrate AI-driven anomaly detection, and incorporate high-performance computing resources. This framework provides a scalable, secure, and adaptable solution for managing geospatial datasets, reinforcing the VA’s ability to support clinical and strategic initiatives through data-driven decision-making.
Data Science Infrastructure (DSI) Project offers a standardized but flexible way of storing data and associated metadata to support AI/ML and data intensive scientific workflows: Establish requirements via use case interviews; Develop DSI framework to support flexible, secure, and accessible data stores tailored to researcher needs; Augment existing institutional frameworks for code management, performance testing and file indexing via automated DSI interfaces; Deploy DSI framework to support key use cases in collaboration with domain scientists.
Functional randomness in security tokens (FRIST) may achieve improved security in two-factor authentication hardware tokens by improving on the algorithms used to securely generate random data. A system and method in one embodiment according to the present invention may allow for security of a token based on storage cost and computational security. This approach may enable communication where security is no longer based solely on onetime pads (OTPs) generated from a single cryptographic function (e.g., SHA-256).
Better performing Forward Error Correction on the forward link along with adequate power in the data open an uplink operations trade space that enable missions to: Command to greater distances in deep space (increased uplink margin). Increase the size of the payload data (latency may be a factor). Provides space for the security header/trailer of the CCSDS Space Data Link Security Protocol. Note: These higher rates could be used for relief of emergency communication margins/rates and not limited to improving top-end rate performance. A higher performance uplink could also reduce the requirements on flight emergency antenna size and/or the performance required from ground stations. Use of a selective repeat ARQ protocol may increase the uplink design requirements but the resultant development is deemed acceptable, due the factor of 4 to 8 potential increase in uplink data rate.
Better performing Forward Error Correction on the forward link along with adequate power in the data open an uplink operations trade space that enable missions to: Command to greater distances in deep space (increased uplink margin) Increase the size of the payload data (latency may be a factor) Provides space for the security header/trailer of the CCSDS Space Data Link Security Protocol Note: These higher rates could be used for relief of emergency communication margins/rates and not limited to improving top-end rate performance. A higher performance uplink could also reduce the requirements on flight emergency antenna size and/or the performance required from ground stations. Use of a selective repeat ARQ protocol may increase the uplink design requirements but the resultant development is deemed acceptable, due the factor of 4 to 8 potential increase in uplink data rate.
False data injection cyber-attack detection models on smart grid operation have been much explored recently, considering analytical physics-based and data-driven solutions. Recently, a hybrid data-driven physics-based model framework for monitoring the smart grid is developed. However, the framework has not been implemented in real-time environment yet. In this paper, the framework of the hybrid model is developed within a real-time simulation environment. OPAL-RT real-time simulator is used to enable Hardware-in-the-Loop testing of the framework. IEEE 9-bus system is considered as a testing grid for gaining insight. The process of building the framework and the challenges faced during development are presented. The performance of the framework is investigated under various false data injection attacks.