Search NASA⌕ Search

SEARCH · Search NASA

Results for “SECURITY MANAGEMENT”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 433 records · Page 24
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Incremental Threshold Scheme Enabled IoT Group Key Management

Cyber landscape evolves rapidly. Internet of Things (IoT) and Edge Computing (EC) have rapidly become an integral part of the modern computing infrastructure. It is expected that there will be more than 50 billion active and connected IoT devices by 2025 [1]. Pervasive IoT/EC creates unprecedented opportunities bridging the gap between previously segregated cyber and physical spaces. However, this progress also brings along new security challenges. IoT devices typically have limited computation, communication, and storage resources. This leads to security architecture designs such as using symmetric keys for group communication. While secure and efficient in stable network settings, symmetric key solutions are ill-adapted for IoT's highly dynamic device mobility behavior and frequent group membership turnover. Whenever IoT members leave a group, the known symmetric keys cannot be made forgotten, posing a serious vulnerability. This leads to frequent re-groupings that require expensive re-authentication, key regeneration, and key redistribution in order to maintain IoT/EC security. We present a novel symmetric key management framework that integrate an Incremental Threshold Scheme (ITS) cryptographical function into communication protocol's key rotation mechanism to allow for secure and efficient symmetric key communication group member node revocation. This ITS-enabled key management framework alleviates the need of frequent and expensive re-grouping and re-keying needed by today's large and dynamic IoT/EC operations. We further applied this ITS-enabled key management framework to a distributed IoT/EC-integrated publish and subscribe framework for applicability validation.

Li, Mingyan↗
DOE OSTI2020

IMPLEMENTING CYBERSECURITY INTO AN EXISTING NATIONAL NUCLEAR NON-PROLIFERATION PROGRAMME – A CASE STUDY

Cyber threat profiling and risk mitigation is critical to any nuclear state organization and should be considered as part of any comprehensive nuclear security programme. Defining and evaluating the impact of the cyber threat to mission can be challenging. An existing national nuclear non-proliferation organization undertook an effort to incorporate computer security activities into its programme to address cyber risk. One of the primary goals of this endeavour was to develop a set of prioritised recommendations for organizational follow-through. The organization dedicated subject matter expert resources in the form of a cyber task force to support this goal. Opportunities were identified where computer security could be built into each programme including office-level strategies and tools. Of course, no new identified threat vector is easily considered and incorporated into existing programmes without impact. There are many obstacles to be overcome. Technically literate subject matter experts are difficult to find, management has comparatively less experience applying computer security into its programmes, and trying to change the culture to consider computer security risk at policy and programmatic levels takes time and management attention. As an outcome of this process, a roadmap for program integration was developed, including the establishment of a cyber support team. This paper will discuss the challenges and successes associated with establishing such a team.

Cyber Security, Nuclear, Non-proliferation↗
NASA NTRSDate not supplied

Openet: Applications of Satellite-Based Evapotranspiration Data for Water Resources Management in the Western United States

Advancing water security in overallocated river basins globally requires consistent and reproducible information on consumptive use of water that can anchor the development of data-driven solutions to the challenge of balancing water supply and demand. OpenET is a fully automated system for field-scale (30 m), satellite-based mapping of evapotranspiration (ET) at daily, monthly and annual timesteps. OpenET currently provides spatially contiguous data throughout the 23 westernmost states in the continental US, and includes both current information as well as multi-year timeseries of ET. The OpenET consortium has implemented an ensemble of satellite-based ET models (ALEXI/DisALEXI, eeMETRIC, PT-JPL, geeSEBAL, SIMS and SSEBop) on Google Earth Engine, which provides a shared computing platform for collaboration on processing of data from Landsat and other satellites, land cover and meteorological inputs, leading to increased consistency and accuracy across the ensemble of models. Earth Engine also facilitates hosting and distribution of data via open data collections and an application programming interface. We provide updates on the OpenET framework, open data services and data access tools, approach to geographic expansion, recent accuracy assessments, and describe how a user-driven design approach has facilitated successful applications of OpenET data for a wide range of water resource management activities. Applications to date include: use of ET data to improve quantification of ET and consumptive use in Oregon, Utah and the Upper Colorado River Basin; streamlining of water use reporting requirements in the California Delta; support for calculation of water budgets for the implementation of the Sustainable Groundwater Management Act in California; and integration into decision support tools for irrigation management. The use cases demonstrate how satellite-derived ET data that are easily accessed and seen as broadly accepted can accelerate adoption of innovative water management practices at scale, and support advances in the sustainability of water supplies. Uptake and use of data by the OpenET science community has also led to advances in our understanding of the impacts of landcover change, irrigation intensification and wildfire events on hydrology and the water security.

Applications↗
NASA NTRSDate not supplied

Software-Only Key Management and Cryptography (KMC) for Spacecraft Command Encryption

The Jet Propulsion Laboratory (JPL) Advanced Multi-Mission Operations System (AMMOS) in partnership with NASA’s Katherine Johnson Independent Verification and Validation (NASA IV&V) Jon McBride Software Testing and Research (JSTAR) laboratory have jointly developed a command encryption capability that provides a software-only encryption solution utilizing the CCSDS Space Data Link Security Protocol. This solution, named Key Management and Cryptography (KMC), incorporates JPL’s encryption service with the JSTAR open-source CryptoLib library, providing a solution for spacecraft command encryption, which is required per NASA standard NASA-STD-1006-A. This paper will focus on its design, usage, and operation for two SmallSat missions, along with its future expanded functionality of end-to-end spacecraft encryption.

command encryption↗
NASA NTRS1993

Security System Software

C Language Integration Production System (CLIPS), a NASA-developed expert systems program, has enabled a security systems manufacturer to design a new generation of hardware. C.CURESystem 1 Plus, manufactured by Software House, is a software based system that is used with a variety of access control hardware at installations around the world. Users can manage large amounts of information, solve unique security problems and control entry and time scheduling. CLIPS acts as an information management tool when accessed by C.CURESystem 1 Plus. It asks questions about the hardware and when given the answer, recommends possible quick solutions by non-expert persons.

Source record↗
DOE OSTI2021

Lawrence Livermore National Laboratory Site Annual Environmental Report 2020

Lawrence Livermore National Laboratory (LLNL) is a premier research laboratory that is part of the National Nuclear Security Administration (NNSA) within the U.S. Department of Energy (DOE). As a national security laboratory, LLNL is responsible for ensuring that the nation’s nuclear weapons remain safe, secure, and reliable. The Laboratory also meets other pressing national security needs, including countering the proliferation of weapons of mass destruction and strengthening homeland security, and conducting major research in atmospheric, earth, and energy sciences, bioscience and biotechnology, and engineering, basic science, and advanced technology. The Laboratory is managed and operated by Lawrence Livermore National Security, LLC (LLNS), and serves as a scientific resource to the U.S. government and a partner to industry and academia.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Lawrence Livermore National Laboratory (2022 Annual Site Environment Report (ASER))

Lawrence Livermore National Laboratory (LLNL) is a premier research laboratory that is part of the National Nuclear Security Administration (NNSA) within the U.S. Department of Energy (DOE). As a national security laboratory, LLNL is responsible for ensuring that the nation’s nuclear weapons remain safe, secure, and reliable. The Laboratory also meets other pressing national security needs including countering the proliferation of weapons of mass destruction, strengthening homeland security, and conducting major research in atmospheric, earth, and energy sciences, bioscience and biotechnology, and engineering, basic science, and advanced technology. The Laboratory is managed and operated by Lawrence Livermore National Security, LLC (LLNS) and serves as a scientific resource to the U.S. government and a partner to industry and academia.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2020

Panel Session 13: D and D Collaboration Between US DOE EM and NNSA (R6.3)

This panel focused on the interaction and collaboration between US Department of Energy's Office of Environmental Management (DOE EM) and National Nuclear Security Administration (NNSA) offices and sites. Panelists with presentations: NNSA and DOE EM Collaboration on Facility Disposition (Deborah Couchman-Griswold); DOE EM and NNSA D and D Collaboration at the Y-12 National Security Complex (Diane McDaniel); Working Together to Achieve Environmental Cleanup Success in Oak Ridge (Laura Wilkerson, James Daffron); DOE-EM - NNSA (Rick Demmer)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2025

Advanced Transmission Technologies – GETs and HPCs Session 1: ATT Foundations and Dynamic Line Ratings (DLRs)

The INL TADA GETs Cohort Session 1, held on November 4, 2025, convened experts to address the integration of advanced transmission technologies, including Grid-Enhancing Technologies (GETs) and High Performance Conductors (HPCs), with a focus on digital assurance challenges. The session highlighted the growing importance of cybersecurity, supply chain transparency, reliability, and business risk management in deploying GETs, especially Dynamic Line Ratings (DLRs). Participants examined how expanded attack surfaces, limited vendor pools, and new regulatory requirements—such as FERC Orders 881, 2023, and 1920—are influencing utilities and technology providers. The workshop underscored the need for cyber-informed engineering, secure-by-design principles, and practical risk management strategies, while fostering collaboration and knowledge sharing among industry peers. Technical discussions covered the evolution from static to dynamic line ratings, complexities of cloud-based architectures, and NERC CIP compliance challenges. The session concluded with a collaborative risk exercise and a preview of future workshops on advanced power flow control and transmission topology optimization, reinforcing the cohort’s commitment to advancing digital assurance in the energy sector.

24 - POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Bench-Scale Electrolytic Dissolution of Quarter-Scale FCA Cans

In 2016, the Savannah River National Laboratory (SRNL) led, in support of and under sponsorship of the Department of Energy’s National Nuclear Security Administration (DOE/NNSA) Office of Material Management and Minimization (M3), the removal and transfer of the plutonium based Fast Critical Assembly (FCA) fuel from the Japan Atomic Energy Agency (JAEA) Tokai facility to the Savannah River Site (SRS). The team also included JAEA, multiple organizations in Savannah River Nuclear Solutions (SRNS), International Nuclear Services, and many other entities. The FCA fuel removal project completion was a key deliverable for M3 to the 2016 Nuclear Security Summit and constituted the largest inventory of weapons-usable plutonium removed under the nonproliferation program. The FCA materials consist of thousands of stainless steel (SS) clad plates and hundreds of SS clad rods. The FCA fuel elements were packaged in a carrier can and stored at SRS pending disposition of the fuel. Following an assessment of candidate disposition options, SRNS identified electrolytic dissolution (ED) as the most promising disposition option for the FCA plates and their preferred option was endorsed by DOE. This option entails electrochemically dissolving the entire FCA carrier can with fuel elements and was based on bench-scale laboratory testing and historical work on processing SS-clad and zirconium-clad uranium-based fuel in the H-Canyon electrolytic dissolver (last operated in 1980). The FCA plate consists of a plutonium-aluminum metal alloy core hermitically sealed in SS cladding.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRS2003

Disaster Response and Preparedness Application: Emergency Environmental Response Tool (EERT)

In 2000, the National Aeronautics and Space Administration (NASA) Environmental Office at the John C. Stennis Space Center (SSC) developed an Environmental Geographic Information Systems (EGIS) database. NASA had previously developed a GIS database at SSC to assist in the NASA Environmental Office's management of the Center. This GIS became the basis for the NASA-wide EGIS project, which was proposed after the applicability of the SSC database was demonstrated. Since its completion, the SSC EGIS has aided the Environmental Office with noise pollution modeling, land cover assessment, wetlands delineation, environmental hazards mapping, and critical habitat delineation for protected species. At SSC, facility management and safety officers are responsible for ensuring the physical security of the facilities, staff, and equipment as well as for responding to environmental emergencies, such as accidental releases of hazardous materials. All phases of emergency management (planning, mitigation, preparedness, and response) depend on data reliability and system interoperability from a variety of sources to determine the size and scope of the emergency operation. Because geospatial data are now available for all NASA facilities, it was suggested that this data could be incorporated into a computerized management information program to assist facility managers. The idea was that the information system could improve both the effectiveness and the efficiency of managing and controlling actions associated with disaster, homeland security, and other activities. It was decided to use SSC as a pilot site to demonstrate the efficacy of having a baseline, computerized management information system that ultimately was referred to as the Emergency Environmental Response Tool (EERT).

Smoot, James↗
DOE OSTI2025

Metadata Standards for the NSE: Core Fields

This standard presents a core set of metadata fields required for each managed digital object within the Nuclear Security Enterprise (NSE). Metadata standardization is a critical enabler for two primary objectives: 1) effectively sharing data, documents, and other digital objects between NSE sites; and 2) supporting digital engineering through the digital thread at the object level. Standardization is necessary for both schemas and vocabularies, meaning that both field standards and value standards must be specified. This document serves as a foundational field standard, recommending a core set of fields that should be uniformly required for all managed digital objects within the NSE.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2025

Underground Test Area Activity Waste Management Plan; and Attachment 1 Fluid Management Plan for the Underground Test Area Activity

The U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office initiated the Underground Test Area Activity to characterize the risk posed to human health and the environment as a result of underground nuclear testing activities at the Nevada National Security Site. The UGTA Activity is now administered by the DOE Environmental Management Nevada Program. This document is a revision to NNSA/NSO (2009). The new document and revision number reflect EM Nevada Program as the current UGTA Activity administrator.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS2019

UAS Service Supplier Framework for Authentication and Authorization

The Unmanned Aircraft Systems (UAS) Traffic Management (UTM) Service Supplier (USS) Framework for Authentication and Authorization (UFAA) is the basis for secure and confident data exchanges between the Flight Information Management System (FIMS) and the USS Network and within the USS Network itself. UFAA is built upon the OAuth 2.0 approach to federated authorization, with details supplied by various Internet Engineering Task Force (IETF) Request for Comment documents (RFCs). Whenever possible, a specific standard is used to support a design decision within UFAA, and when an applicable standard is not found/used, the technical decision is explained as much as possible. This document describes UFAA in detail. It is intended to serve as a reference for other key UTM documents and should be useful to many UTM stakeholders. This is an informative document. The requirements stated or implied in this document will need to be fully vetted and reviewed by appropriate stakeholders before becoming operational. It is highly encouraged that in any design decisions for future applicable standards that are counter to or missing from the decisions presented herein be justified in that future standard.

UTM↗
DOE OSTI2020

Module-OT: A Hardware Security Module for Operational Technology

Increased penetration levels of renewable energy and other types of distributed energy resources (DERs) on the modern electric grid-combined with technological advancements for electric system monitoring and control-introduce new cyberattack vectors and increase the cyberattack surface of energy systems. According to the IEEE Std. 1547-2018, DERs must use Modbus, Distributed Network Protocol 3 (DNP3), or Smart Energy Profile 2.0 (SEP2) as their communication protocol. Previous research identified several vulnerabilities and security breaches in each one of these communication protocols; despite this, existing standards for DERs do not recommend cybersecurity measures. In order to reduce vulnerabilities in power distribution systems, this paper presents a novel open-source hardware security module that improves both information and operational security to better protect data and communications on the distribution grid. The security hardware is called “module for operational technology,” or simply Module-OT, and it has been validated and tested in an emulated distribution system application. Module-OT is integrated within a communication system in the transport layer of the Open Systems Interconnection (OSI) model. It improves system security through encryption, authentication, authorization, certificate management, and user access control. The main advancement of Module-OT is the addition of hardware cryptographic acceleration that improves the overall communication performance in terms of end-to-end latency.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2024

Emergency Management of Tomorrow Research: Emergency Operations Center of the Future Madison, WI Tabletop Exercise

As part of the Emergency Management (EM) of Tomorrow Research (EMOTR) program, sponsored by the Department of Homeland Security (DHS) Science and Technology (S&T) Directorate, Pacific Northwest National Laboratory (PNNL) developed concepts for the Emergency Operations Center (EOC) of the Future to provide recommendations to assist DHS S&T in future decision-making with regards to research and development (R&D) and investments toward establishing a framework for a national, coordinated approach to EM. PNNL is conducting tabletop exercises (TTXs) designed to assess the impacts and benefits of emerging technologies on EM organizations.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2024

Security of Mobile Radiological Sources: Overview of Industry Applied Technologies

Small radiological sources used in industrial settings recurrently require transit between job sites. Securing these sources, while stationary, can be addressed with standard security approaches and equipment. Transport of these sources increases the risk and complexity of managing and maintaining control of these sources. Implementing methodologies to securely monitor and locate sources improves response and resolution of anomalous events during transit. The Mobile Source Transit Security (MSTS) system was developed to improve security and provide situational awareness of these mobile sources throughout their job cycle. The MSTS development effort focused on creating a set of systems that could be successfully implemented in industrial radiography and well-logging applications. The MSTS team worked to address source presence and location through use and storage. The MSTS system monitors radiological sources as they move from the base of operations to the job site and back. The system provides near-real-time monitoring of the mobile source location and status and early notification of source loss or theft by transmitting operational status and alerting anomalous conditions over telematic links worldwide. The MSTS system can trigger an armed response or initiation of search and recovery operations and will automatically alert management and responsible staff if a radioactive source is lost or stolen whether it is on-site, in transport, or in storage.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
NASA NTRS2003

Safe Grid

The biggest users of GRID technologies came from the science and technology communities. These consist of government, industry and academia (national and international). The NASA GRID is moving into a higher technology readiness level (TRL) today; and as a joint effort among these leaders within government, academia, and industry, the NASA GRID plans to extend availability to enable scientists and engineers across these geographical boundaries collaborate to solve important problems facing the world in the 21 st century. In order to enable NASA programs and missions to use IPG resources for program and mission design, the IPG capabilities needs to be accessible from inside the NASA center networks. However, because different NASA centers maintain different security domains, the GRID penetration across different firewalls is a concern for center security people. This is the reason why some IPG resources are been separated from the NASA center network. Also, because of the center network security and ITAR concerns, the NASA IPG resource owner may not have full control over who can access remotely from outside the NASA center. In order to obtain organizational approval for secured remote access, the IPG infrastructure needs to be adapted to work with the NASA business process. Improvements need to be made before the IPG can be used for NASA program and mission development. The Secured Advanced Federated Environment (SAFE) technology is designed to provide federated security across NASA center and NASA partner's security domains. Instead of one giant center firewall which can be difficult to modify for different GRID applications, the SAFE "micro security domain" provide large number of professionally managed "micro firewalls" that can allow NASA centers to accept remote IPG access without the worry of damaging other center resources. The SAFE policy-driven capability-based federated security mechanism can enable joint organizational and resource owner approved remote access from outside of NASA centers. A SAFE enabled IPG can enable IPG capabilities to be available to NASA mission design teams across different NASA center and partner company firewalls. This paper will first discuss some of the potential security issues for IPG to work across NASA center firewalls. We will then present the SAFE federated security model. Finally we will present the concept of the architecture of a SAFE enabled IPG and how it can benefit NASA mission development.

Chow, Edward T.↗