Search NASA⌕ Search

SEARCH · Search NASA

Results for “security analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21

What Happened, and Why: Toward an Understanding of Human Error Based on Automated Analyses of Incident Reports

The objective of the Aviation System Monitoring and Modeling project of NASA's Aviation Safety and Security Program was to develop technologies to enable proactive management of safety risk, which entails identifying the precursor events and conditions that foreshadow most accidents. Information about what happened can be extracted from quantitative data sources, but the experiential account of the incident reporter is the best available source of information about why an incident happened. In Volume I, the concept of the Scenario was introduced as a pragmatic guide for identifying similarities of what happened based on the objective parameters that define the Context and the Outcome of a Scenario. In this Volume II, that study continues into the analyses of the free narratives to gain understanding as to why the incident occurred from the reporter s perspective. While this is just the first experiment, the results of our approach are encouraging and indicate that it will be possible to design an automated analysis process guided by the structure of the Scenario that can achieve the level of consistency and reliability of human analysis of narrative reports.

Ferryman, Thomas A.↗

Cis-Lunar Base Camp

Historically, when mounting expeditions into uncharted territories, explorers have established strategically positioned base camps to pre-position required equipment and consumables. These base camps are secure, safe positions from which expeditions can depart when conditions are favorable, at which technology and operations can be tested and validated, and facilitate timely access to more robust facilities in the event of an emergency. For human exploration missions into deep space, cis-lunar space is well suited to serve as such a base camp. The outer regions of cis-lunar space, such as the Earth-Moon Lagrange points, lie near the edge of Earth s gravity well, allowing equipment and consumables to be aggregated with easy access to deep space and to the lunar surface, as well as more distant destinations, such as near-Earth Asteroids (NEAs) and Mars and its moons. Several approaches to utilizing a cis-lunar base camp for sustainable human exploration, as well as some possible future applications are identified. The primary objective of the analysis presented in this paper is to identify options, show the macro trends, and provide information that can be used as a basis for more detailed mission development. Compared within are the high-level performance and cost of 15 preliminary cis-lunar exploration campaigns that establish the capability to conduct crewed missions of up to one year in duration, and then aggregate mass in cis-lunar space to facilitate an expedition from Cis-Lunar Base Camp. Launch vehicles, chemical propulsion stages, and electric propulsion stages are discussed and parametric sizing values are used to create architectures of in-space transportation elements that extend the existing in-space supply chain to cis-lunar space. The transportation options to cis-lunar space assessed vary in efficiency by almost 50%; from 0.16 to 0.68 kg of cargo in cis-lunar space for every kilogram of mass in Low Earth Orbit (LEO). For the 15 cases, 5-year campaign costs vary by only 15% from 0.36 to 0.51 on a normalized scale across all campaigns. Thus the development and first flight costs of assessed transportation options are similar. However, the cost of those options per flight beyond the initial operational capability varies by 70% from 0.3 to 1.0 on a normalized scale. The 10-year campaigns assessed begin to show the effect of this large range of cost beyond initial operational capability as they vary approximately 25% with values from 0.75 to 1.0 on the normalized campaign scale. Therefore, it is important to understand both the cost of implementation and first use as well as long term utilization. Finally, minimizing long term recurring costs is critical to the affordability of future human space exploration missions. Finally minimizing long term recurring costs is critical to the affordability of future human space exploration missions.

Merrill, Raymond G.↗

Capabilities of the Impact Testing Facility at Marshall Space Flight Center

The test and analysis capabilities of the Impact Testing Facility at NASA's Marshall Space Flight Center are described. Nine different gun systems accommodate a wide range of projectile and target sizes and shapes at velocities from subsonic through hypersonic, to accomplish a broad range of ballistic and hypervelocity impact tests. These gun systems include ballistic and microballistic gas and powder guns, a two-stage light gas gun, and specialty guns for weather encounter studies. The ITF "rain gun" is the only hydrometeor impact gun known to be in existence in the United States that can provide single impact performance data with known raindrop sizes. Simulation of high velocity impact is available using the Smooth Particle Hydrodynamic Code. The Impact Testing Facility provides testing, custom test configuration design and fabrication, and analytical services for NASA, the Department of Defense, academic institutions, international space agencies, and private industry in a secure facility located at Marshall Space Flight Center, on the US Army's Redstone Arsenal in Huntsville, Alabama. This facility performs tests that are subject to International Traffic in Arms Regulations (ITAR) and DoD secret classified restrictions as well as proprietary and unrestricted tests for civil space agencies, academic institutions, and commercial aerospace and defense companies and their suppliers.

Finchum, Andy↗

System Security Authorization Agreement (SSAA) for the WIRE Archive and Research Facility

The Wide-Field Infrared Explorer (WIRE) Archive and Research Facility (WARF) is operated and maintained by the Department of Physics, USAF Academy. The lab is located in Fairchild Hall, 2354 Fairchild Dr., Suite 2A103, USAF Academy, CO 80840. The WARF will be used for research and education in support of the NASA Wide Field Infrared Explorer (WIRE) satellite, and for related high-precision photometry missions and activities. The WARF will also contain the WIRE preliminary and final archives prior to their delivery to the National Space Science Data Center (NSSDC). The WARF consists of a suite of equipment purchased under several NASA grants in support of WIRE research. The core system consists of a Red Hat Linux workstation with twin 933 MHz PIII processors, 1 GB of RAM, 133 GB of hard disk space, and DAT and DLT tape drives. The WARF is also supported by several additional networked Linux workstations. Only one of these (an older 450 Mhz PIII computer running Red Hat Linux) is currently running, but the addition of several more is expected over the next year. In addition, a printer will soon be added. The WARF will serve as the primary research facility for the analysis and archiving of data from the WIRE satellite, together with limited quantities of other high-precision astronomical photometry data from both ground- and space-based facilities. However, the archive to be created here will not be the final archive; rather, the archive will be duplicated at the NSSDC and public access to the data will generally take place through that site.

Source record↗

'The surface management system' (SuMS) database: a surface-based database to aid cortical surface reconstruction, visualization and analysis

Surface reconstructions of the cerebral cortex are increasingly widely used in the analysis and visualization of cortical structure, function and connectivity. From a neuroinformatics perspective, dealing with surface-related data poses a number of challenges. These include the multiplicity of configurations in which surfaces are routinely viewed (e.g. inflated maps, spheres and flat maps), plus the diversity of experimental data that can be represented on any given surface. To address these challenges, we have developed a surface management system (SuMS) that allows automated storage and retrieval of complex surface-related datasets. SuMS provides a systematic framework for the classification, storage and retrieval of many types of surface-related data and associated volume data. Within this classification framework, it serves as a version-control system capable of handling large numbers of surface and volume datasets. With built-in database management system support, SuMS provides rapid search and retrieval capabilities across all the datasets, while also incorporating multiple security levels to regulate access. SuMS is implemented in Java and can be accessed via a Web interface (WebSuMS) or using downloaded client software. Thus, SuMS is well positioned to act as a multiplatform, multi-user 'surface request broker' for the neuroscience community.

NASA Discipline Neuroscience↗

Evaluating Changes in Freshwater Health in the Tonlé Sap Basin using Remotely Sensed Data

The Tonlé Sap lake and river basin provide freshwater resources to about 4.5 million people in central Cambodia. Accelerating dam construction, intensifying agriculture, deforestation, and changing climate patterns threaten the health of the lake and the food security of nearby communities. NASA DEVELOP collaborated with Conservation International to calculate multiple components of the ecosystem vitality indicator of the Freshwater Health Index for Tonlé Sap lake from 2000 – 2020 using remote sensing. Landcover classifications, lake level altimetry, groundwater storage and nutrient flows were derived from multiple satellites including Landsat 5, Landsat 7, Landsat 8, Sentinel-2, the Global Precipitation Measurement (GPM)mission, and the Gravity Recovery and Climate Experiment (GRACE). Additionally, the Soil and Water Assessment Tool (SWAT) was used to analyze nutrient flow and water quality in the basin. A breakdown in the volume and regularity of annual lake levels from 2000-2020 was observed, reflecting increased pressure on water supply and agricultural productivity. A decrease in landcover naturalness was also observed and at least 8% of forested areas in the basin were lost while rice harvest intensity increased throughout the study period. Additionally, an initial water quality analysis was demonstrated using SWAT. Continued collaboration with Conservation International and local representatives will guide the remaining water quality analyses and allow them to make informed decisions regarding freshwater management and resource allocation in the Tonlé Sap lake and river basin.

Adriana Le Compte↗

Large-scale Advanced Prop-fan (LAP) hub/blade retention design report

The Large-scale Advanced Prop-fan (LAP) hub assembly forms a semi-rigid link between the blades, which provide the thrust, and the engine shaft, which provides the torque. The hub and tailshaft is a one piece partially forged part which is carburized, heat treated and machined. A single row ball bearing restrains each of the eight blades in the hub, while the tailshaft secures the propeller to the engine shaft with two cone seats that are preloaded against each other by the Prop-fan retaining nut. The hub also forms the support for the pitch change actuator system, the control and the spinner. The retention transmits the loads from the blades to the hub while allowing the changes in blade pitch. The single row ball bearing retention provides ease of maintenance by allowing individual blade replacement without dissassembly of the hub. It has a through hardened inner race which seats against the aluminum blade shank and an outer race which is integral with the barrel. The outer race area is carburized to achieve the hardness necessary to support the ball loads. The balls are kept from contact with each other by a separator. The rotational speed of the propeller keeps the retention submerged in the oil which is contained in the hub by a seal. Stress and strain analysis, material hardness requirements, weight predictions, and stiffness characteristics are discussed.

Soule, Matthew↗

Experimental Investigation of a Model of a Two-Stage Turboblower

In the present paper an investigation is made of two stages of a multistage turboblower having a vaneless diffuser behind the impeller and guide vanes at the inlet to the nest stage. The method employed was that of investigating the performance of the successive elements of the blower (the impeller, vaneless diffuser, ets.) whereby the kinematics of the flow through the blower could be followed and the pressure at the different points computed. The character of the flow and the physical significance of the loss coefficients could thereby be determined so as to secure the best agreement of the computed with the actual performance of the blower. Since the tests were carried out for various delivery volumes, the dependence of the coefficients on a number of factors (angle of attack, velocities, etc.) could be obtained. The distribution of the losses that occur during the transformation of dynamic pressure at the impeller exit into static pressure could be found and likewise the range within which the friction coefficient varies in the vaneless diffuser. With the aid of factors having a certain physical significance, the centrifugal blower could be computed on the basis of a more or less schematical consideration of the phenomena occuring during the air flow through it, and the use of arbitrary factors and recourse to the geometrical similtude law thus avoided. The present investigation largely summarizes all the previous work af the CHI Blower Section on the different elements of a centrifugal blower. Some considerations on the analysis of model test data for application to full-scale are presented in the appendix.

Dovjik, s.↗

Decontamination of Genesis Array Materials by UV Ozone Cleaning

Shortly after the NASA Genesis Mission sample return capsule returned to earth on September 8, 2004, the science team discovered that all nine ultra-pure semiconductor materials were contaminated with a thin molecular organic film approximately 0 to 100 angstroms thick. The organic contaminate layer, possibly a silicone, situated on the surface of the materials is speculated to have formed by condensation of organic matter from spacecraft off-gassing at the Lagrange 1 halo orbit during times of solar exposure. While the valuable solar wind atoms are safely secured directly below this organic contamination and/or native oxide layer in approximately the first 1000 angstroms of the ultra-pure material substrate, some analytical techniques that precisely measure solar wind elemental abundances require the removal of this organic contaminate. In 2005, Genesis science team laboratories began to develop various methods for removing the organic thin film without removing the precious material substrate that contained the solar wind atoms. Stephen Sestak and colleagues at Open University first experimented with ultraviolet radiation ozone (UV/O3) cleaning of several non-flight and flown Genesis silicon wafer fragments under a pure flowing oxygen environment. The UV/O3 technique was able to successfully remove organic contamination without etching into the bulk material substrate. At NASA Johnson Space Center Genesis Curation Laboratory, we have installed an UV/O3 cleaning devise in an ambient air environment to further experimentally test the removal of the organic contamination on Genesis wafer materials. Preliminary results from XPS analysis show that the UV/O3 cleaning instrument is a good non-destructive method for removing carbon contamination from flown Genesis array samples. However, spectroscopic ellipsometry results show little change in the thickness of the surface film. All experiments to date have shown UV/O3 cleaning method to be the best non-destructive method for removing organic contamination from the surface of the Genesis materials. The UV/O3 cleaning process can also clean carbon contamination to levels below non-flight standards. This can be seen by comparing sample 60260's carbon 10667 cps with non-flight Si carbon 21675 cps. Therefore, surface carbon contamination should not hinder the analysis of solar wind.

Calaway, Michael J.↗

Technology Candidates for Air-to-Air and Air-to-Ground Data Exchange

Technology Candidates for Air-to-Air and Air-to-Ground Data Exchange is a two-year research effort to visualize the U. S. aviation industry at a point 50 years in the future, and to define potential communication solutions to meet those future data exchange needs. The research team, led by XCELAR, was tasked with identifying future National Airspace System (NAS) scenarios, determining requirements and functions (including gaps), investigating technical and business issues for air, ground, & air-to-ground interactions, and reporting on the results. The project was conducted under technical direction from NASA and in collaboration with XCELAR's partner, National Institute of Aerospace, and NASA technical representatives. Parallel efforts were initiated to define the information exchange functional needs of the future NAS, and specific communication link technologies to potentially serve those needs. Those efforts converged with the mapping of each identified future NAS function to potential enabling communication solutions; those solutions were then compared with, and ranked relative to, each other on a technical basis in a structured analysis process. The technical solutions emerging from that process were then assessed from a business case perspective to determine their viability from a real-world adoption and deployment standpoint. The results of that analysis produced a proposed set of future solutions and most promising candidate technologies. Gap analyses were conducted at two points in the process, the first examining technical factors, and the second as part of the business case analysis. In each case, no gaps or unmet needs were identified in applying the solutions evaluated to the requirements identified. The future communication solutions identified in the research comprise both specific link technologies and two enabling technologies that apply to most or all specific links. As a result, the research resulted in a new analysis approach, viewing the underlying architecture of ground-air and air-air communications as a whole, rather than as simple "link to function" paired solutions. For the business case analysis, a number of "reference architectures" were developed for both the future technologies and the current systems, based on three typical configurations of current aircraft. Current and future costs were assigned, and various comparisons made between the current and future architectures. In general, it was assumed that if a future architecture offers lower cost than the current typical architecture, while delivering equivalent or better performance, it is likely that the future solution will gain industry acceptance. Conversely, future architectures presenting higher costs than their current counterparts must present a compelling benefit case in other areas or risk a lack of industry acceptance. The business case analysis consistently indicated lower costs for the proposed future architectures, and in most cases, significantly so. The proposed future solutions were found to offer significantly greater functionality, flexibility, and growth potential over time, at lower cost, than current systems. This was true for overall, fleet-wide equipage for domestic and oceanic air carriers, as well as for single, General Aviation (GA) aircraft. The overall research results indicate that all identified requirements can be met by the proposed solutions with significant capacity for future growth. Results also illustrate that the majority of the future communication needs can be met using currently allocated aviation RF spectrum, if used in more effective ways than it is today. A combination of such optimized aviation-specific links and commercial communication systems meets all identified needs for the 50-year future and beyond, with the caveat that a new, overall function will be needed to manage all information exchange, individual links, security, cost, and other factors. This function was labeled "Delivery Manager" (DM) within this research. DM employs a distributed client/server architecture, for both airborne and ground communications architectures. Final research results included identifying the most promising candidate technologies for the future system, conclusions and recommendations, and identifying areas where further research should be considered.

Communications↗

An Analysis for an Internet Grid to Support Space Based Operations

Currently, and in the past, dedicated communication circuits and "network services" with very stringent performance requirements have been used to support manned and unmanned mission critical ground operations at GSFC, JSC, MSFC, KSC and other NASA facilities. Because of the evolution of network technology, it is time to investigate other approaches to providing mission services for space ground and flight operations. In various scientific disciplines, effort is under way to develop network/komputing grids. These grids consisting of networks and computing equipment are enabling lower cost science. Specifically, earthquake research is headed in this direction. With a standard for network and computing interfaces using a grid, a researcher would not be required to develop and engineer NASA/DoD specific interfaces with the attendant increased cost. Use of the Internet Protocol (IP), CCSDS packet spec, and reed-solomon for satellite error correction etc. can be adopted/standardized to provide these interfaces. Generally most interfaces are developed at least to some degree end to end. This study would investigate the feasibility of using existing standards and protocols necessary to implement a SpaceOps Grid. New interface definitions or adoption/modification of existing ones for the various space operational services is required for voice both space based and ground, video, telemetry, commanding and planning may play a role to some undefined level. Security will be a separate focus in the study since security is such a large issue in using public networks. This SpaceOps Grid would be transparent to users. It would be anagulous to the Ethernet protocol's ease of use in that a researcher would plug in their experiment or instrument at one end and would be connected to the appropriate host or server without further intervention. Free flyers would be in this category as well. They would be launched and would transmit without any further intervention with the researcher or ground ops personnel. The payback in developing these new approaches in support of manned and unmanned operations is lower cost and will enable direct participation by more people in organizations and educational institutions in space based science. By lowering the high cost of space based operations and networking, more resource will be available to the science community for science. With a specific grid in place, experiment development and operations would be much less costly by using standardized network interfaces. Because of the extensive connectivity on a global basis, significant numbers of people would participate in science who otherwise would not be able to participate.

Bradford, Robert↗

New York Ecological Conservation: Evaluating Agricultural Conservation Easement Impact Using Earth Observations to Examine Avoided Soil Carbon Loss to Development

Farmland provides ecosystems and communities with services ranging from habitat conservation to food security. As total U.S. farmland continues to decline, agricultural lands near urban areas are especially vulnerable. Our project partners—Finger Lakes Land Trust, Genesee Land Trust, and Saratoga Preserving Land and Nature (PLAN)—can use study results to better profile farmland vulnerability, issuing conservation easements to protect maximum acreage in Saratoga County and the Finger Lakes Region of New York. Multiple existing studies effectively use remote sensing imagery to analyze historical land cover and forecast future change. This study examined soil carbon stocks and land cover change to estimate avoided soil carbon loss. We also predicted farmland vulnerability. We completed these analyses using European Space Agency (ESA) and NASA Earth observations that include Landsat 5 Thematic Mapper (TM), Landsat 8 Operational Land Imager (OLI), Landsat 9 OLI-2, Sentinel-2 Multispectral Instrument (MSI), and Suomi National Polar-Orbiting Partnership (NPP) Visible Infrared Imaging Radiometer Suite (VIIRS) for nighttime lights data that aided in the land change model analysis. We determined that the conversion of agriculture to development from 1990 to 2022 occurred at rates of 0.91% (Finger Lakes) and 7% (Saratoga). Urban development is predicted to increase surrounding urban centers through 2030 and 2050. We also estimate that between 26.5 and 348,101 kilotons (Finger Lakes) and 3.7 and 58,006 kilotons (Saratoga) of soil carbon losses have been avoided through agricultural easements. Findings from this study will support our partners in determining agricultural conservation easement benefits and prioritizing the acquisition of future easement sites.

Agriculture↗

The DEEP2 Galaxy Redshift Survey: Design, Observations, Data Reduction, and Redshifts

We describe the design and data analysis of the DEEP2 Galaxy Redshift Survey, the densest and largest high-precision redshift survey of galaxies at z approx. 1 completed to date. The survey was designed to conduct a comprehensive census of massive galaxies, their properties, environments, and large-scale structure down to absolute magnitude MB = −20 at z approx. 1 via approx.90 nights of observation on the Keck telescope. The survey covers an area of 2.8 Sq. deg divided into four separate fields observed to a limiting apparent magnitude of R(sub AB) = 24.1. Objects with z approx. < 0.7 are readily identifiable using BRI photometry and rejected in three of the four DEEP2 fields, allowing galaxies with z > 0.7 to be targeted approx. 2.5 times more efficiently than in a purely magnitude-limited sample. Approximately 60% of eligible targets are chosen for spectroscopy, yielding nearly 53,000 spectra and more than 38,000 reliable redshift measurements. Most of the targets that fail to yield secure redshifts are blue objects that lie beyond z approx. 1.45, where the [O ii] 3727 Ang. doublet lies in the infrared. The DEIMOS 1200 line mm(exp −1) grating used for the survey delivers high spectral resolution (R approx. 6000), accurate and secure redshifts, and unique internal kinematic information. Extensive ancillary data are available in the DEEP2 fields, particularly in the Extended Groth Strip, which has evolved into one of the richest multiwavelength regions on the sky. This paper is intended as a handbook for users of the DEEP2 Data Release 4, which includes all DEEP2 spectra and redshifts, as well as for the DEEP2 DEIMOS data reduction pipelines. Extensive details are provided on object selection, mask design, biases in target selection and redshift measurements, the spec2d two-dimensional data-reduction pipeline, the spec1d automated redshift pipeline, and the zspec visual redshift verification process, along with examples of instrumental signatures or other artifacts that in some cases remain after data reduction. Redshift errors and catastrophic failure rates are assessed through more than 2000 objects with duplicate observations. Sky subtraction is essentially photon-limited even under bright OH sky lines; we describe the strategies that permitted this, based on high image stability, accurate wavelength solutions, and powerful B-spline modeling methods. We also investigate the impact of targets that appear to be single objects in ground-based targeting imaging but prove to be composite in Hubble Space Telescope data; they constitute several percent of targets at z approx. 1, approaching approx. 5%-10% at z > 1.5. Summary data are given that demonstrate the superiority of DEEP2 over other deep high-precision redshift surveys at z approx. 1 in terms of redshift accuracy, sample number density, and amount of spectral information. We also provide an overview of the scientific highlights of the DEEP2 survey thus far.

Galaxy↗

Inelastic response of metal matrix composites under biaxial loading

Elements of the analytical/experimental program to characterize the response of silicon carbide titanium (SCS-6/Ti-15-3) composite tubes under biaxial loading are outlined. The analytical program comprises prediction of initial yielding and subsequent inelastic response of unidirectional and angle-ply silicon carbide titanium tubes using a combined micromechanics approach and laminate analysis. The micromechanics approach is based on the method of cells model and has the capability of generating the effective thermomechanical response of metal matrix composites in the linear and inelastic region in the presence of temperature and time-dependent properties of the individual constituents and imperfect bonding on the initial yield surfaces and inelastic response of (0) and (+ or - 45)sub s SCS-6/Ti-15-3 laminates loaded by different combinations of stresses. The generated analytical predictions will be compared with the experimental results. The experimental program comprises generation of initial yield surfaces, subsequent stress-strain curves and determination of failure loads of the SCS-6/Ti-15-3 tubes under selected loading conditions. The results of the analytical investigation are employed to define the actual loading paths for the experimental program. A brief overview of the experimental methodology is given. This includes the test capabilities of the Composite Mechanics Laboratory at the University of Virginia, the SCS-6/Ti-15-3 composite tubes secured from McDonnell Douglas Corporation, a text fixture specifically developed for combined axial-torsional loading, and the MTS combined axial-torsion loader that will be employed in the actual testing.

Mirzadeh, F.↗

Navigation Prediction Performance During OSIRIS-REx Proximity Operations at (101955) Bennu

The OSIRIS-REx (Origins, Spectral Interpretation, Resource Identification and Security–Regolith Explorer) Orbit Determination team performed covariance analyses prior to the commencement of proximity operations (ProxOps) at (101955) Bennu to determine the expected predicted trajectory performance in order to meet trajectory knowledge requirements throughout each phase of the mission. One of the primary requirements placed on the predicted trajectory performance was based on the performance during orbital phases leading up to the maneuver to initiate the Touch-and-Go (TAG) trajectory descent. Throughout ProxOps the nominal force models being used to predict the spacecraft trajectory were updated in an effort to improve the prediction performance. The most significant models that contributed to prediction performance were of solar radiation pressure, thermal reradiation of the spacecraft, predicted attitude errors, and desaturation maneuvers. Efforts were made throughout all of ProxOps to monitor, trend, predict, and update spacecraft modeling to improve the prediction performance. These efforts were vital to reduce the spacecraft knowledge errors necessary to achieve a TAG target smaller than pre-launch analysis allowed due to the rough terrain of Bennu. Increased precision in predicted trajectory errors allowed for refined uncertainties to be used for future phase planning throughout the mission. The navigation team successfully predicted the spacecraft trajectory throughout all of ProxOps achieving predicted trajectories errors less than originally analyzed.

Jason M. Leonard↗

Proceedings of the Third International Workshop on Proof-Carrying Code and Software Certification

This NASA conference publication contains the proceedings of the Third International Workshop on Proof-Carrying Code and Software Certification, held as part of LICS in Los Angeles, CA, USA, on August 15, 2009. Software certification demonstrates the reliability, safety, or security of software systems in such a way that it can be checked by an independent authority with minimal trust in the techniques and tools used in the certification process itself. It can build on existing validation and verification (V&V) techniques but introduces the notion of explicit software certificates, Vvilich contain all the information necessary for an independent assessment of the demonstrated properties. One such example is proof-carrying code (PCC) which is an important and distinctive approach to enhancing trust in programs. It provides a practical framework for independent assurance of program behavior; especially where source code is not available, or the code author and user are unknown to each other. The workshop wiII address theoretical foundations of logic-based software certification as well as practical examples and work on alternative application domains. Here "certificate" is construed broadly, to include not just mathematical derivations and proofs but also safety and assurance cases, or any fonnal evidence that supports the semantic analysis of programs: that is, evidence about an intrinsic property of code and its behaviour that can be independently checked by any user, intermediary, or third party. These guarantees mean that software certificates raise trust in the code itself, distinct from and complementary to any existing trust in the creator of the code, the process used to produce it, or its distributor. In addition to the contributed talks, the workshop featured two invited talks, by Kelly Hayhurst and Andrew Appel. The PCC 2009 website can be found at http://ti.arc.nasa.gov /event/pcc 091.

Ewen, Denney, W.↗

Development of a Point of Care Technology for Military Medical Applications in Austere Environments

NASA, Lawrence Livermore National Laboratory (LLNL) and the Department of Defense (DoD) share a common interest in compact medical diagnostic technologies—also known as “point of care testing” (POCT) technologies. For NASA, the need is to take care of astronauts on deep space missions. For LLNL, the focus is on technologies needed to support homeland security applications. For DoD, the need is to support warfighters in military theaters of operation, especially for prolonged field care and en route care. A recently patented technology, “Portable Medical Diagnosis Instrument” (U.S. Patent 9824870), co-invented by NASA and LLNL, is being developed further in a partnership between NASA, LLNL and Travis Air Force Base, with a focus on military applications. This instrument, the NASA-LLNL Medical Tricorder, can be used for a wide range of clinical samples including breath, saliva and blood. One component of the Tricorder is the NASA E-Nose, a carbon nanotube-based chemical sensor, integrated into a hand-held smart phone, that can detect and measure “breath biomarkers” in the gas phase of exhaled breath. The response of the NASA E-Nose is rapid, which makes it possible to detect various gas-phase substances in real time. The NASA E-Nose, with modification, can also be used for breath condensate analysis. Another component of the Tricorder is a miniaturized microfluidic analyzer, under development by LLNL, that does not require any pumps. The microfluidic analyzer can detect and measure biomarkers in liquid samples, such as blood, saliva and breath condensate. This microfluidic system requires small quantities of liquid sample and can perform analysis very rapidly (seconds to minutes), which makes it possible to detect relevant biomarkers in near real time in the field. The Clinical Investigation Facility (CIF) at Travis Air Force Base is currently conducting research with the goal to develop improved field-able technologies and procedures for the emergency response to life threatening injuries soldiers may receive in theater. This work includes experimental large animal systems and comprehensive collection of clinical specimens and physiological data. NASA and LLNL are partnering with Travis to test and further develop the Tricorder technology for high priority military applications, initially focused on lung injury models and traumatic brain injury.

Loftus, David J.↗

The Mars 2020 Ground Data System Architecture

The Mars 2020 Mission’s primary objective is to collect 20 geographically unique samples during its prime mission of one and a quarter Martian years, or just over 2 Earth years. Mission planners determined the project needed to develop a system that would enable the operations team to analyze engineering and science data, make science decisions, select viable rover targets at a millimeter resolution and validate an uplink bundle for a car sized rover with more complex science instruments than any previous Mars surface mission. All this had to be done within a five hour time frame. Doing this with a small team would be a challenge, but this had to be accomplished by a large team of engineers and scientists located across North America and Europe. Achieving this level of operational efficiency was unheard of in the prime mission. In addition, the mission had another set of requirements that had nothing to do with surface operations; the Mars 2020 Ground Data System (GDS) was also expected to comply with a new set of security requirements to keep up with the ever changing cybersecurity landscape. The Mars 2020 Ground Data System (GDS) is a re-architected version of the Mars Science Laboratory GDS. The primary goal was to integrate the lessons learned from previous Mars surface missions, accommodate a set of new requirements and capabilities required to ensure mission success, and comply with a new set of cybersecurity controls. The new architecture includes several unique qualities including a data lake, language-agnostic system-wide event-based operations, containerization, automated deployment, network segmentation, infrastructure-as-code, API-driven interfaces, and the first Mars surface GDS to operate primarily in the cloud. The new architecture enabled greater access to the system’s data, tighter integration with the operations team, and a higher level of traceability. The availability of the data also enabled a new set of capabilities previously not possible on surface missions. These new capabilities include an autonomous data to information, pipeline for downlink analysis, horizontal scaling of science data processing capabilities, autonomous round trip data tracking of science and engineering data, integration of flight system state into the tactical planning cycle, high fidelity targeting utilizing kinematic data, and hierarchical image and 3d meshes data representations. This paper will introduce the requirements for the Mars 2020 Mission, the heritage architecture, and the rationale for the changes to achieve the new architecture. The paper will continue to describe the fundamental changes made to the GDS architecture, how these changes enabled a more tightly integrated GDS, and the new capabilities that were enabled by the new architecture. The paper will conclude with the lessons learned from the process of rearchitecting a heritage GDS system and from the first 200 days of operations supporting over 800 users from around the world.

Lopez-Roig, Reynaldo↗