Search NASA⌕ Search

SEARCH · Search NASA

Results for “security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 433 records · Page 24
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Security component with fiber Bragg grating

A fiber Bragg grating (FBG) security component for single-party and multi-party monitoring is provided. The security component includes an optical fiber having a plurality of Bragg gratings. The Bragg gratings provide a spectral response that is randomized based on the manufacture of the security component. For single-party use, the spectral response provides a reproducible spectral signature when interrogated with an optical signal. For multi-party use, each party applies a known optical interrogation signal to the security component and applies an external stress known only to the respective monitoring party. The resulting shift in the spectral signature is unique to each monitoring party, making it extremely difficult to successfully counterfeit the security component's response for all such parties.

Ziock, Klaus-Peter↗
DOE OSTI2023

Systems and methods for control system security

A component security device may be disposed at an interface between a component and a cyber-physical system. The disclosed component security device may be physically and/or electrically coupled between the component and infrastructure of the cyber-physical system, such as a backplane, bus, and/or the like. The component security device may be configured to monitor the component, and selectively isolate the component from the cyber-physical system. Since the component security device is interposed at the interface of the component, the component security device may be capable of isolating the component regardless of whether the component has been compromised (e.g., regardless of whether the component is capable of complying with system commands).

Rieger, Craig G.↗
DOE OSTI2013

Safety and security of radioactive sources in industrial radiography in Bangladesh

Malicious use of radioactive sources can involve dispersal of that material through an explosive device. There has been recognition of the threat posed by the potential malicious misuse of NDT radioactive source by terrorists. The dispersal of radioactive material using conventional explosives, referred to as a 'dirty bomb', could create considerable panic, disruption and area access denial in an urban environment. However, as it is still a relatively new topic among regulators, users, and transport and storage operators worldwide, international assistance and cooperation in developing the necessary regulatory and security infrastructure is required. The most important action in reducing the risk of radiological terrorism is to increase the security of radioactive sources. This paper presents safety and security considerations for the transport and site storage of the industrial radiography sources as per national regulations entitled 'Nuclear Safety and Radiation Control Rules-1997'.The main emphasis was put on the stages of some safety and security actions in order to prevent theft, sabotage or other malicious acts during the transport of the packages. As a conclusion it must be mentioned that both safety and security considerations are very important aspects that must be taking in account for the transport and site storage of radioactive sources used in the practice of industrial radiography. (authors)

07 ISOTOPE AND RADIATION SOURCES↗
DOE OSTI2024

Sustaining Nuclear Security Education Through INSEN

The International Nuclear Security Education Network (INSEN) was established in 2010 with a mission to enhance global nuclear security through nuclear security-focused educational initiatives. INSEN is a partnership through which the International Atomic Energy Agency (IAEA), academic and research institutions, and other stakeholders cooperate to promote effective and sustainable nuclear security education. INSEN currently comprises 206 members (institutions) from 72 member states and 14 observers. This paper provides an overview of its role in developing and promoting nuclear security education

Metwally, Walid↗
DOE OSTI2024

UAS IMPLEMENTATION CONSIDERATIONS FOR NUCLEAR SECURITY

Uncrewed aerial systems (UAS) have been an area of focus for the Office of International Nuclear Security within the US Department of Energy’s National Nuclear Security Administration and other foreign and domestic organizations for several years. This emerging technology provides significant capabilities to the nuclear security realm, but there are many things to consider when implementing them into an established security design or network. The goal of this paper is to discuss some of the benefits, challenges, and lessons learned with using UAS at nuclear facilities and during transport of material. Generic examples of UAS implementation will be used to facilitate a publicly releasable paper and presentation. The paper will start with a summary of the types and capabilities of UAS to provide a better understanding for people unfamiliar with current and new capabilities of these systems. Since there are many different types and sizes of UAS, this paper will focus on drones 55 lb and smaller. Then some of the use cases of UAS for security and challenges of employing them will be covered. Finally, lessons learned and some best practices that Oak Ridge National Laboratory has discovered from research, development, testing, and evaluation will be summarized.

Stockwell, Brandon↗
DOE OSTI2024

Gender Mainstreaming in Nuclear Security: Strategies for Incorporating Gender Equality by Design in the IAEA Milestones Approach

Gender mainstreaming has emerged as a critical mechanism towards achieving gender equality in the development and implementation of laws, policies, and programs, including those related to national security. Gender mainstreaming is generally defined as the process of assessing the implications for women and men of any planned action, including legislation, policies, and programs, in all areas and at all levels, with the ultimate goal to achieve gender equality. Gender mainstreaming, which in essence can be thought of as “gender equality by design,” is an important element for building a robust nuclear security infrastructure. To date, however, gender mainstreaming has not been fully operationalized in the nuclear sector. For instance, the IAEA Milestones Approach, which provides important guidance to states seeking to develop nuclear power programs, has not yet incorporated or addressed gender considerations in its various phases or nuclear infrastructure issues, including those related to nuclear security. Therefore, this paper will argue that specifically for nuclear newcomer states, gender mainstreaming could serve as a powerful tool to integrate gender considerations into the design of laws, policies, programs, and entities necessary to successfully implement a nuclear power program. The objective of this study is twofold: first, to explore the concept of gender mainstreaming and its relevance to nuclear security, and second, to identify how gender can be incorporated into the IAEA Milestones Approach. The paper will emphasize the importance of developing guidance for the IAEA and nuclear newcomer states on how gender considerations could be incorporated throughout the development of a nuclear security program.

Siserman-Gray, Ioana-Cristina↗
DOE OSTI2026

Smart Inverters, Dumb Risk: Taking Control of IBR Security in the Digital Age

This presentation addresses the security challenges posed by Inverter-Based Resources (IBRs) in the modern energy landscape. The presentation highlights the vulnerabilities and risks associated with IBRs, including the potential for cyber-attacks, the impact of insecure defaults, and the systemic risks posed by supply chain dependencies. Key topics covered include: 1) The increasing digital transformation in energy systems and the associated security risks. 2) Specific vulnerabilities in IBRs, including weak passwords, hardcoded credentials, and insecure web application interfaces. 3) The implications of persistent connectivity and the strategic risks posed by foreign-manufactured components. 4) The role of regulatory frameworks, such as NERC CIP, in addressing these challenges and the limitations of current oversight. 5) Practical solutions for mitigating risks, including secure design practices, vendor risk assessments, and the importance of strong passwords and role-based access control. The presentation underscores the necessity of a comprehensive, system-of-systems approach to securing IBRs, emphasizing the need for collaboration across various stakeholders, including operators, developers, and regulators, to ensure the resilience and security of the energy grid.

24 - POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2026

Validating a Dynamic PWR Safety and Security Model?

Nuclear power plants (NPPs) are assessed for safety and security using separate models that cannot capture how an attacker's decisions and a plant's response unfold together in real time, leaving regulators and operators without a complete picture of true plant vulnerability. Traditional probabilistic risk assessment (PRA) methods treat adversarial events as fixed initiators with predetermined outcomes, and are structurally incapable of representing the time-dependent interplay between physical security events, safety system response, and operator mitigative actions. At Idaho National Laboratory (INL), I contributed to the development and validation of Modeling and Analysis for Safety and Security using the Dynamic EMRALD Framework (MASS-DEF). Where static PRA relies on event-tree logic that cannot evolve mid-scenario, MASS-DEF couples a time-dependent dynamic PRA tool EMRALD (Event Modeling Risk Assessment using Linked Diagrams) with attack simulation software, allowing attacker behavior, plant system states, and operator actions to interact across time. My work focused on validating a general Pressurized Water Reactor (PWR) model. I traced model logic against PWR plant to identified errors in logic and confirm accuracy. I then built and tested attack scenarios against a general PWR model to verify that the model produced expected outcomes across all logical pathways. I also contributed a section to a related technical paper applying the same EMRALD platform to radiation dose modeling. Results show that MASS-DEF can quantitatively demonstrate that many plants exceed their regulatory security thresholds. This demonstrated margin provides a technically defensible basis for reducing the number of guards without compromising regulatory compliance. Physical security costs represent roughly 10% of annual operating budgets, making such reductions directly meaningful to INL's mission of sustaining existing commercial NPPs. This internship strengthened my understanding of nuclear systems, probabilistic modeling, and technical writing, and has solidified my pursuit of a career at a national laboratory.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗
DOE OSTI2023

A critical review of cyber-physical security for building automation systems

Modern Building Automation Systems (BASs), as the brain that enable the smartness of a smart building, often require increased connectivity both among system components as well as with outside entities, such as the cloud, to enable low-cost remote management, optimized automation via outsourced cloud analytics, and increased building-grid integrations. As smart buildings move towards open communication technologies, providing access to BASs through the building's intranet, or even remotely through the Internet, has become a common practice. However, increased connectivity and accessibility come with increased cyber security threats. BASs were historically developed as closed environments with limited cyber-security considerations. As a result, BASs in many buildings are vulnerable to cyber-attacks that may cause adverse consequences, such as occupant discomfort, excessive energy usage, and unexpected equipment downtime. Therefore, there is a strong need to advance the state-of-the-art in cyber-physical security for BASs and provide practical solutions for attack mitigation in buildings. However, an inclusive and systematic review of BAS vulnerabilities, potential cyber-attacks with impact assessment, detection & defense approaches, and cyber resilient control strategies is currently lacking in the literature. This review paper fills the gap by providing a comprehensive up-to-date review of cyber-physical security for BASs at three levels in commercial buildings: management level, automation level, and field level. The general BASs vulnerabilities and protocol-specific vulnerabilities for the four dominant BAS protocols (i.e., BACnet, KNX, LonWorks, and Modbus) are reviewed, followed by a discussion on four attack targets and seven potential attack scenarios. Furthermore, the impact of cyber-attacks on BASs is summarized as signal corruption, signal delaying, and signal blocking. The typical cyber-attack detection and defense approaches are identified at the three levels. Cyber resilient control strategies for BASs under attack are categorized into passive and active resilient control schemes. Open challenges and future opportunities are finally discussed.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2015

SPSP Phase III Recruiting, Selecting, and Developing Secure Power Systems Professionals. Job Profiles

The Secure Power Systems Professional Phase III final report was released last year which an appendix of Job Profiles. This new report is that appendix broken out as a standalone document to assist utilities in recruiting and developing Secure Power Systems Professionals at their site. A major accomplishment during Phase III of the project was the development of psychometrically validated job profiles for four identified SPSP job roles: the secure power systems engineer, incident responder, intrusion analyst, and security operator. The job profiles were produced by integrating the results of Phases I and II to capture the relevant job requirements that would be necessary to accurately predict job performance. They can be immediately applied by human resources professionals, recruiters, and hiring managers to assist in the recruitment, selection, and training of SPSPs, as well as to identify needed skills to qualify and equip existing employees to work as SPSPs.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2019

The Historic Water, Sewer, and Steam/HTHW Systems in Mercury, Area 23, Nevada National Security Site, Nye County, Nevada (Appendix B - Resource Forms)

This report provides documentation intended to satisfy the mitigation requirements for a substantial portion of the above- and belowground utilities in Mercury on the Nevada National Security Site (NNSS) outlined in the associated Memorandum of Agreement (MOA). The U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office (NNSA/NFO) manages the property and anticipates conducting activities in the future that will affect these resources. These structures are entirely within the Mercury Historic District, which is eligible to the National Register of Historic Places. The district is considered eligible under Criteria A and C for the theme of nuclear testing, with a period of significance from 1951 through 1992. The utilities addressed here include the systems related to potable water and steam/high temperature hot water distribution, as well as the sewage system. More specifically, this documentation covers these underground utilities that were installed in Mercury from 1951 through 1977 and above-ground components installed from 1951 through 1992. Introduction The information in this report is intended to meet the requirements of the Memorandum of Agreement between the National Nuclear Security Administration Nevada Field Office (NNSA/NFO) and the Nevada State Historic Preservation Officer Regarding Water and Sewer Upgrades at Mercury in Nye County, Nevada (MOA) signed on January 30, 2018. The purpose of the MOA is to mitigate the adverse effects of proposed activities on utilities in the Mercury Historic District. The MOA covers the potable water, sewage, and steam/high temperature hot water (HTHW) systems in Mercury. A historic context related to the district as a whole is documented in Reno et al. The State Historic Preservation Officer (SHPO) has concurred with NNSA/NFO’s determination that the district is eligible for listing in the National Register of Historic Places (NRHP) under Criteria A and C at the national level, with a period of significance of 1951 to 1992, which encompasses the period of nuclear testing at the Nevada National Security Site. The utility systems are not considered individually eligible for the National Register, but are contributing components to the eligibility of the district. This report combines information from an unpublished preliminary historic context on the underground utilities written prior to the initiation of recording activities and included as an attachment to the MOA and new data acquired during the course of meeting the MOA requirements. In addition to documenting the underground utility components exposed during excavation of discovery holes to verify pipe locations, Desert Research Institute (DRI) also recorded numerous above-ground elements and equipment in accessible vaults to develop a more complete representation of the historic utilities in Mercury. The information below is organized in the order it is discussed in the MOA.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS2004

Model based verification of the Secure Socket Layer (SSL) Protocol for NASA systems

The National Aeronautics and Space Administration (NASA) has tens of thousands of networked computer systems and applications. Software Security vulnerabilities present risks such as lost or corrupted data, information theft, and unavailability of critical systems. These risks represent potentially enormous costs to NASA. The NASA Code Q research initiative 'Reducing Software Security Risk (RSSR) Trough an Integrated Approach' offers formal verification of information technology (IT), through the creation of a Software Security Assessment Instrument (SSAI), to address software security risks.

software security↗
DOE OSTI2020

Evaluating software defined networking solutions to reduce the digital attack surface of nuclear security systems

Most nuclear security systems used today were not designed for today’s threat environment. Systems that were intended to be stand alone are now interconnected. Devices that have a single purpose are built on multi-purpose platforms and communication protocols that, while effective, have no ability to authenticate authorized versus unauthorized commands. These attributes provide an attacker significant ability to affect the system, pivot throughout the interconnected networks, and remain undetected if he/she is able to compromise a single node. Software defined networking (SDN) has been used for years by information technology (IT) cloud service providers to quickly provision or remove servers or other systems to meet changing demand. The same concept has recently been applied to operational technology (OT) systems to enable very fast failover on critical systems that have stringent and deterministic (<5ms) transmit/receive times. By carefully engineering the communication flows through a network using preplanned routes and specific pathways it is possible to achieve deterministic and extremely reliable message delivery even when components fail. This engineering approach to network design has added security benefits including securing the networking control plane, eliminating network scanning and mapping, inhibiting ARP spoofing and host masquerading, eliminating unauthorized network pivoting and enabling greater situational awareness on the network. SDN in OT environments is new but early testing in electrical power and other critical infrastructure has shown it to be a very powerful tool for building reliable networks and reducing the digital attack surface of the network. The authors tested a software defined network switch on a simple physical protection system with components commonly found in nuclear security systems and found improved mitigations to denial of service attacks, lateral movement and network reconnaissance. The paper details the tests and their results.

Cyber security, Nuclear security, software defined↗
DOE OSTI2025

Strengthening U.S. National Security Through Advanced Energy Innovation

NREL's work in strategic energy security is focused on keeping the United States secure and its citizens safe by applying expertise in advanced energy systems and technologies to prevent energy system disruptions from any source, natural or human. NREL pursues national security objectives by providing partners an accurate understanding of national and international security implications of global energy trends; novel installation, facility, and operational energy solutions; access to NREL R&D capabilities to incorporate advanced energy technologies and biomaterials into mission requirements; and the ability to test future technologies using large-scale grid modeling.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2016

Detection of CdSe quantum dot photoluminescence for security label on paper

CdSe quantum dot has great potential in various applications especially for emitting devices. One example potential application of CdSe quantum dot is security label for anti-counterfeiting. In this work, we present a practical approach of security label on paper using one and two colors of colloidal CdSe quantum dot, which is used as stamping ink on various types of paper. Under ambient condition, quantum dot is almost invisible. The quantum dot security label can be revealed by detecting emission of quantum dot using photoluminescence and cnc machine. The recorded quantum dot emission intensity is then analyzed using home-made program to reveal quantum dot pattern stamp having the word ’RAHASIA’. We found that security label using quantum dot works well on several types of paper. The quantum dot patterns can survive several days and further treatment is required to protect the quantum dot. Oxidation of quantum dot that occurred during this experiment reduced the emission intensity of quantum dot patterns.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2021

A coupled human–natural system analysis of freshwater security under climate and population change

Limited water availability, population growth, and climate change have resulted in freshwater crises in many countries. Jordan’s situation is emblematic, compounded by conflict-induced population shocks. Integrating knowledge across hydrology, climatology, agriculture, political science, geography, and economics, we present the Jordan Water Model, a nationwide coupled human–natural-engineered systems model that is used to evaluate Jordan’s freshwater security under climate and socioeconomic changes. The complex systems model simulates the trajectory of Jordan’s water system, representing dynamic interactions between a hierarchy of actors and the natural and engineered water environment. A multiagent modeling approach enables the quantification of impacts at the level of thousands of representative agents across sectors, allowing for the evaluation of both systemwide and distributional outcomes translated into a suite of water-security metrics (vulnerability, equity, shortage duration, and economic well-being). Model results indicate severe, potentially destabilizing, declines in freshwater security. Per capita water availability decreases by approximately 50% by the end of the century. Without intervening measures, >90% of the low-income household population experiences critical insecurity by the end of the century, receiving <40 L per capita per day. Widening disparity in freshwater use, lengthening shortage durations, and declining economic welfare are prevalent across narratives. To gain a foothold on its freshwater future, Jordan must enact a sweeping portfolio of ambitious interventions that include large-scale desalinization and comprehensive water sector reform, with model results revealing exponential improvements in water security through the coordination of supply- and demand-side measures.

42 ENGINEERING↗
DOE OSTI2024

A Four-Layer Cyber-Physical Security Model for Electric Machine Drives Considering Control Information Flow

Despite the IEEE Power Electronics Society (PELS) establishing Technical Committee 10 on Design Methodologies with a focus on the cyber-physical security of power electronics systems, a holistic design methodology for addressing security vulnerabilities remains underdeveloped. This gap largely stems from the limited integration of computer science and power/control engineering studies in this interdisciplinary field. Addressing the inadequacy of unilateral cyber or control perspectives, this article presents a novel four-layer cyber-physical security model specifically designed for electric machine drives. Central to this model is the innovative control information flow (CIF) model, residing within the control layer, which serves as a pivotal link between the cyber layer's vulnerable resources and the physical layer's state-space models. By mapping vulnerable resources to control variable space and tracing attack propagation, the CIF model facilitates accurate impact predictions based on tainted control laws. The effectiveness and validity of this proposed model are demonstrated through hardware experiments involving two typical cyber-attack scenarios, underscoring its potential as a comprehensive framework for multidisciplinary security strategies.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2012

Realizing Scientific Methods for Cyber Security

There is little doubt among cyber security researchers about the lack of scientic rigor that underlies much of the liter-ature. The issues are manifold and are well documented. Further complicating the problem is insufficient scientic methods to address these issues. Cyber security melds man and machine: we inherit the challenges of computer science, sociology, psychology, and many other elds and create new ones where these elds interface. In this paper we detail a partial list of challenges imposed by rigorous science and survey how other sciences have tackled them, in the hope of applying a similar approach to cyber security science. This paper is by no means comprehensive: its purpose is to foster discussion in the community on how we can improve rigor in cyber security science.

Cyber, Security, Science, Methods, Challenges↗