Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Streaming authentication and multi-level security for communications networks using quantum cryptography

Message authenticators for quantum-secured communications facilitate low-latency authentication with assurances of security. Low-latency message authenticators are especially valuable in infrastructure systems where security and latency constraints are difficult to satisfy with conventional non-quantum cryptography. For example, a message transmitter receives a message and derives an authentication tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message transmitter outputs the message and its authentication tag. A message receiver receives a message and authentication tag for the message. The message receiver derives a comparison tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message receiver checks whether the message is authentic based on a comparison of the authentication tag and the comparison tag. In example implementations, the authenticator uses stream-wise cyclic redundancy code operations.

Hughes, Richard J.↗
DOE OSTI2018

Enhancing Energy Systems Cybersecurity using Blockchain (SBIR Final Phase I Report)

The goal of this SBIR research has been to investigate blockchain technology and its applications in the fossil fuel sector - with a focus on how this technology could be leveraged to improve the cybersecurity of these systems. The primary tasks that we carried out involved evaluating existing blockchain technology, identifying relevant and compelling use cases, researching the integration of blockchain technology into industrial systems, and the design and implementation of a proof of concept system. A key finding is that within industrial systems where many parties are involved, trust can be lacking. By providing technology that assures verifiable trust in the data, many processes may be able to be automated. We believe that verifiable trust in the data can only be provided if we trust the data from "cradle to grave." This means that we need to secure the systems that are creating the data, moving the data, and storing the data. The last of these is provided by blockchain. Blockchain technology will not only improve security and trust within these systems, in some cases it will also be able increase the operational tempo of some processes significantly. We are vendors of commercial communications software that is based upon the Open Management Group (OMG) data distribution service (DDS) standard; it secures data in motion. In addition to many defense, transportation, and medical systems, it is running in oil, gas, and coal systems. Over the course of this effort we have come to believe that blockchain technology could be an important enabler for this sector: we have engaged with a number of our customers and identified several compelling use cases beyond cryptocurrencies, which we document further within this report. Furthermore, as it turns out, we believe that many of these use cases are relevant across a wide swath of industries. This analysis provides necessary and important foundational work that could lead to new ways of securing oil and gas processing, and coal mining infrastructure against cyber threats.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2017

Smart Barrier Design and Evaluation (ReKonTM: An Integrated Detection and Assessment Perimeter System)

Many government and military sites continue to demand high performance security technologies such as those afforded by a traditional perimeter intrusion detection and assessment system (PIDAS), but require additional standoff beyond the existing perimeter. To meet such varied needs, a perimeter security system needs to be configurable to meet the demands unique to each site, adaptable to the latest sensor technology and security requirements, and scalable to provide for installation at short temporary perimeters just as well as large multi-mile perimeters. ReKonTM is an integrated perimeter security system solution, one that couples access delay with detection and assessment. A prototype system was designed and built that integrated fiber optic break sensors, active infrared sensors, fence disturbance sensors, video motion detection, ground sensors, and vehicle/human delay barriers. ReKonTM uses a machine learning fusion technique to determine whether an alarm event has occurred as opposed to the conventional system which simply triggers an alarm event when any one sensor is activated. This novel perimeter solution was designed to be configurable for use at facilities ranging from high-security military sites to commercial power plants, to petro/chemical facilities of various kinds. ReKonTM was evaluated against a conventional system and logical inference fusion system with a fixed dataset that was collected over five months from the perimeter. ReKon outperformed both systems with respect to nuisance alarm rate and had only one less alarm detection than the conventional system out of a total of 133 total true alarm events. The sensors on the ReKonTM perimeter generated approximately 8.86 nuisance alarms per day using the conventional system. Using the machine learning fusion these were greatly reduced to approximately 0.02 alarms per day. ReKonTM may enable the use of high performance perimeter security for reduced cost in environments previously incapable of achieving such performance due to budget or installation constraints.

47 OTHER INSTRUMENTATION↗
DOE OSTI2016

Security and Privacy in Cyber-Physical Systems

As you have seen from the previous chapters, cyber-physical systems (CPS) are broadly used across technology and industrial domains. While these systems enable process optimization and efficiency and allow previously impossible functionality, security and privacy are key concerns for their design, development, and operation. CPS have been key components utilized in some of the highest publicized security breaches over the last decade. In this chapter, we will look over the CPS described in the previous chapters from a security perspective. In this chapter, we explain classical information and physical security fundamentals in the context of CPS and contextualize them across application domains. We give examples where the interplay of functionality and diverse communication can introduce unexpected vulnerabilities and produce larger impacts. We will discuss how CPS security and privacy is inherently different from that of pure cyber or physical systems and what may be done to secure these systems, considering their emergent cyber-physical properties. Finally, we will discuss security and privacy implications of merging infrastructural and personal CPS. Our hope is to impart the knowledge of what CPS security and privacy are, why they are important, and explain existing processes and challenges.

Cyber-physical systems↗
NASA NTRS1995

Building a Successful Security Infrastructure: What You Want vs. What You Need vs. What You Can Afford

With the fast growing popularity of the Internet, many organizations are racing to get onto the on-ramp to the Information Superhighway. However, with frequent headlines such as 'Hackers' break in at General Electric raises questions about the Net's Security', 'Internet Security Imperiled - Hackers steal data that could threaten computers world-wide' and 'Stanford Computer system infiltrated; Security fears grow', organizations find themselves rethinking their approach to the on-ramp. Is the Internet safe? What do I need to do to protect my organization? Will hackers try to break into my systems? These are questions many organizations are asking themselves today. In order to safely travel along the Information Superhighway, organizations need a strong security framework. Developing such a framework for a computer site, whether it be just a few dozen hosts or several thousand hosts is not an easy task. The security infrastructure for a site is often developed piece-by-piece in response to security incidents which have affected that site over time. Or worse yet, no coordinated effort has been dedicated toward security. The end result is that many sites are still poorly prepared to handle the security dangers of the Internet. This paper presents guidelines for building a successful security infrastructure. The problem is addressed in a cookbook style method. First is a discussion on how to identify your assets and evaluate the threats to those assets; next are suggestions and tips for identifying the weak areas in your security armor. Armed with this information we can begin to think about what you really need for your site and what you can afford. In this stage of the process we examine the different categories of security tools and products that are available and then present some tips for deciding what is best for your site.

Crabb, Michele D.↗
DOE OSTI2017

Quantum Information Science: Factual Document for the Office of Basic Energy Sciences at the Department of Energy

For decades, scientists have known that devices to store and manipulate information in quantum physical systems such as atoms or photons would provide radical new capabilities in computing, communication, and sensing. These novel capabilities include speed-ups in scientific calculations of quantum materials and chemical systems, enhanced resolution in imaging and detection systems, and greater security for encrypted communication systems. Building these devices requires a detailed understanding of how quantum materials behave, accurate knowledge of how to integrate them, and high-fidelity control of the physical qubits that store information. These goals are fundamental research challenges for materials synthesis, fabrication, and characterization; and the science of quantum information intersects heavily with ongoing basic research into materials science, chemistry, and quantum physics. These systems represent state-of-the-art approaches to building and controlling the basic physical elements of quantum information. Research into quantum sensing and quantum communication strongly leverages these advances for next-generation technologies, e.g., measurements beyond the Heisenberg limit, while applications of quantum computing (QC) as a platform for understanding future quantum material systems highlight its potential for advanced scientific discovery. This factual status document for Quantum Information Science has been developed for the Department of Energy Office of Science, Basic Energy Sciences (BES). The following are several seminal or key references for interested readers; the reference section gives a more exhaustive, but still not complete, list of important papers in this area.

36 MATERIALS SCIENCE↗
DOE OSTI2021

Cybersecurity for Grid Connected eXtreme Fast Charging (XFC) Station (CyberX) (Final Scientific/Technical Report)

This report summarizes the activities conducted under the DOE VTO funded project DE- EE0008451, where ABB Inc. (ABB), in collaboration with Idaho National Laboratory (INL), APS Global (APS), and XOS Trucks (XOS) pursued the development of a cyber-resilient extreme fast charging (XFC) management system. This project entitled Cybersecurity for Grid Connected eXtreme Fast Charging (XFC) Station (CyberX) focuses on a resilient architecture for smart charging EV Supply Equipment (EVSE) device control and Coordinated Anomaly Detection System (CADS) features that can be added at the charging site depot level to increase cybersecurity. The project was split into two budget periods focused first on developing the threat model and resilient control concepts and second on testing, improving, and validating those developed resilient control algorithms and features with a focus on key vulnerabilities identified during the threat assessment portion of the project. During the first budget period of the CyberX project, the ABB led team focused on activities to identify, model, and quantitatively prioritize high-impact attack scenarios with potential cyber-physical effects while also modeling and developing concepts for a resilient control system that could securely address integration of DERs and other resources with EV charging. Development of the security focused XFC management system (XMS) was accomplished first by offline simulation using a developed XFC station or depot with 480V input level and simulating measurement inputs to monitoring and control systems in concept development. A representative distribution grid model was developed supporting an EV charging site model with BESS and 6 general EV charging models. These EV charging models allowed multiple configurations of charging level, multiple connected protection and measurement devices, and simulation function to show general compromise of EV, BESS, and protection features based on parallel threat analysis. During the second budget period, the EV site and supporting systems model was developed in more detail and converted from offline model to real-time to real-time with EV charging hardware in the loop (HIL). The resilient control architecture developed as concept in the first part of the project was further tested and validated for integration of local energy resources and XFC charging station site equipment while maintaining cybersecure operating principles. The proposed resilient architecture for smart charging and cybersecurity features consists of two main concepts developed and tested within the project. The first concept is an XFC management system (XMS) consisting of a hardware gateway, software platform, and Supervisory Control and Data Acquisition (SCADA) or Distribution Management System integration components. The second concept is a Coordinated Anomaly Detection System (CADS) which forms a primarily software-related subsystem of the total CyberX solution focused on monitoring system measurements, estimation of measurement states, and predicting current at the utility point of interaction based on machine learning for anomaly detection.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2022

Net Zero World Initiative: Accelerating Global Energy System Decarbonization

The United States, partner countries and philanthropies are joining forces to accelerate the transition to clean, secure energy systems and build a Net Zero World. The Net Zero World Initiative leverages expertise across U.S. government agencies and Department of Energy (DOE) national laboratories, in partnership with other governments and philanthropies, to accelerate the decarbonization of global energy systems. This whole-of-government approach supports countries committed to raising their climate ambitions by creating and implementing highly tailored, actionable technical and investment strategies that put net zero within reach. The Net Zero World Initiative enables country partners to harness the power and technical expertise of U.S. and international industry, think tanks, and universities.

clean energy investment strategies↗
DOE OSTI2018

Multiple Linear Regression Based Disturbance Magnitude Estimations for Bulk Power Systems

Sudden trips of generation or large system load threaten bulk power systems (BPSs) secure and reliable operations. With the increasing deployment of Phasor Measurements Units (PMUs), system operators are thrilled to receive instant notifications of sudden disturbances and be aware of where, when, and what type of disturbances the system is experiencing. The amount of power imbalance is one of the fundamental information of the interests of both system operators and academic researchers. The PMU-based applications estimate the magnitude by interpreting the dynamic frequency responses immediately after a disturbance occurrence. However, the accuracy of the traditional method is unsatisfying because it oversimplifies the relation between the imbalance magnitude and the frequency response. This paper proposes to estimate the magnitudes of power imbalances based on multiple linear regression. It considers several other system and environmental factors and identifies those factors strongly associated with the disturbance magnitude. The approach is applied to actual generation trip events happened in two of the main power grids in North America. Compared with the traditional method, the proposed approach demonstrates improved accuracy.

Wu, Ling↗
NASA NTRSDate not supplied

Runtime Analysis with R2U2: A Tool Exhibition Report

We present R2U2 (Realizable, Responsive, Unobtrusive Unit), a hardware- supported tool and framework for the continuous monitoring of safetycritical and embedded cyber-physical systems.With the widespread advent of autonomous systems such as Unmanned Aerial Systems (UAS), satellites, rovers, and cars, real-time, on-board decision making requires unobtrusive monitoring of properties for safety, performance, security, and system health. R2U2 models combine past-time and future-time Metric Temporal Logic, “mission time” Linear Temporal Logic, probabilistic reasoning with Bayesian Networks, and modelbased prognostics. The R2U2 monitoring engine can be instantiated as a hardware solution, running on an FPGA, or as a software component. The FPGA realization enables R2U2 to monitor complex cyber-physical systems without any overhead or instrumentation of the flight software. In this tool exhibition report, we present R2U2 and demonstrate applications on system runtime monitoring, diagnostics, software health management, and security monitoring for a UAS. Our tool demonstration uses a hardware-based processor-in-the-loop “iron-bird” configuration.

Johann Martin Schumann↗
DOE OSTI2018

Chefornak Energy Configuration Options: Energy Infrastructure Optimization to Reduce Fuel Cost and Dependence in Chefornak, Alaska

The U.S. Department of Energy is funding, through the Grid Modernization Program, the Alaska Microgrid Partnership (AMP), a multi-stakeholder collaborative comprised of national labs and Alaska based partners. The over-arching goal of AMP is to reduce the use of total imported fuel into communities to secure all energy services by at least 50% in Alaska's remote microgrids without increasing system lifecycle costs, while improving overall system reliability, security, and resilience. One goal of AMP is to investigate if a combination of Energy Efficiency (EE) and high contribution (from Renewable Energy (RE)) power systems can reduce total imported energy usage by 50% while lowering Life Cycle Costs (LCC) and improving reliability and resiliency. A techno-economic analysis was conducted for the community of Chefornak to investigate system architectures that could meet the goal of reducing imported fuel consumption by 50% or more.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2018

Microgrid Analysis Tools Summary

The over-arching goal of the Alaska Microgrid Partnership is to reduce the use of total imported fuel into communities to secure all energy services by at least 50% in Alaska's remote microgrids without increasing system life cycle costs while also improving overall system reliability, security, and resilience. One goal of the Alaska Microgrid Partnership is to investigate whether a combination of energy efficiency and high-contribution (from renewable energy) power systems can reduce total imported energy usage by 50% while reducing life cycle costs and improving reliability and resiliency. This presentation provides an overview of the following four renewable energy optimization tools. Information is from respective tool websites, tool developers, and author experience. Distributed Energy Resources Customer Adoption Model (DER-CAM) Microgrid Design Toolkit (MDT) Renewable Energy Optimization (REopt) Tool Hybrid Optimization Model for Electric Renewables (HOMER).

17 WIND ENERGY↗
NASA NTRS2014

MAVEN Information Security Governance, Risk Management, and Compliance (GRC): Lessons Learned

As the first interplanetary mission managed by the NASA Goddard Space Flight Center, the Mars Atmosphere and Volatile EvolutioN (MAVEN) had three IT security goals for its ground system: COMPLIANCE, (IT) RISK REDUCTION, and COST REDUCTION. In a multiorganizational environment in which government, industry and academia work together in support of the ground system and mission operations, information security governance, risk management, and compliance (GRC) becomes a challenge as each component of the ground system has and follows its own set of IT security requirements. These requirements are not necessarily the same or even similar to each other's, making the auditing of the ground system security a challenging feat. A combination of standards-based information security management based on the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), due diligence by the Mission's leadership, and effective collaboration among all elements of the ground system enabled MAVEN to successfully meet NASA's requirements for IT security, and therefore meet Federal Information Security Management Act (FISMA) mandate on the Agency. Throughout the implementation of GRC on MAVEN during the early stages of the mission development, the Project faced many challenges some of which have been identified in this paper. The purpose of this paper is to document these challenges, and provide a brief analysis of the lessons MAVEN learned. The historical information documented herein, derived from an internal pre-launch lessons learned analysis, can be used by current and future missions and organizations implementing and auditing GRC.

FISMA↗
DOE OSTI2024

Report series: finding of effect and mitigation documentation for the mercury solar photovoltaic array and battery energy storage system, area 23, nevada national security site, nye county, nevada

The U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO) proposes to install solar photovoltaic (PV) power generation arrays and an associated battery energy storage system (BESS) for the town of Mercury at the Nevada National Security Site (NNSS) in Nye County, Nevada (Figure 1). The purposes of the development of this facility are to support long-term efforts to modernize Mercury and to provide energy-resilient infrastructure and address climate adaptation needs. Because it is within the boundary of the Mercury Historic District (MHD), it is subject to the terms of the Programmatic Agreement Between the National Nuclear Security Administration Nevada Field Office and the Nevada State Historic Preservation Officer Regarding Modernization and Operational Maintenance of the Nevada National Security Site, at Mercury in Nye County, Nevada (hereafter referred to as the Mercury PA). An identification and evaluation report prepared for this undertaking determined that a contributing element to the MHD, the Mercury airstrip (26NY15777), is within the APE (Haynes 2024). The Mercury airstrip was developed following the closure of Camp Desert Rock in 1957 and used until late 1963 or 1964 when the Camp Desert Rock Airport was renovated, and the Mercury Bypass road constructed. The town of Mercury and the immediate surrounding area have been determined eligible for listing in the National Register of Historic Places (NRHP) as the MHD (SHPO Resource No. D230) under Criteria A and C for its importance in supporting nuclear testing and scientific research from 1951 through 1992 (Reed 2019). Originally recorded in 2016, 26NY15777 was determined individually not eligible for listing in the NRHP because it lacked sufficient integrity to convey its significance (Palmer 2016). It was subsequently determined in 2018 to be a contributing element of the MHD in an architectural survey of the district (Palmer 2018) and identified in Appendix C of the Mercury PA as a Category I contributing element. However, as per Stipulation IV.B.2, because the airstrip had already been formally evaluated and determined not to be individually eligible for the NRHP in consultation with the SHPO, this categorization was an error. NNSA/NFO reported this to the SHPO in Haynes 2024 and the SHPO concurred on June 11, 2024 (Reed). Accordingly, the airstrip is a Category II Property for the purposes of complying with the Mercury PA. The Mercury airstrip is a historic property for the purposes of compliance with Section 106 of the National Historic Preservation Act (NHPA) and subject to the stipulations of the Mercury PA.

25 ENERGY STORAGE↗
DOE OSTI2024

Design of Defensive Cybersecurity Architectures for High Temperature, Gas-Cooled Reactors

This report presents the design of defensive cybersecurity architectures (DCSAs) for High Temperature, Gas-Cooled Reactors (HTGRs). A DCSA is a cybersecurity design feature that places systems into security zones in a graded approach according to the importance of the functions performed by the systems. DCSA design efforts for advanced reactors may commence as early as the system-level design phase. This design approach is consistent with the draft regulatory guide for advanced reactor cybersecurity programs (DG-5075) and enables advanced reactor designers to consider the effects of security-by-design (SeBD) features on their DCSAs. Integration of DCSA design and other cybersecurity activities with the traditional design process as part of a SeBD framework may enable advanced reactor designers to improve the security posture of their plants while reducing implementation and operating costs. This report provides a DCSA template for an exemplar HTGR and describes a DCSA design process using event tree analysis so that the template may be optimized for a given HTGR design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

Design of Defensive Cybersecurity Architectures for Sodium-Cooled Fast Reactors

This report presents the design of defensive cybersecurity architectures (DCSAs) for Sodium-Cooled Fast Reactors (SFRs). A DCSA is a cybersecurity design feature that places systems into security zones in a graded approach according to the importance of the functions performed by the systems. DCSA design efforts for advanced reactors may commence as early as the system-level design phase. This design approach is consistent with the draft regulatory guide for advanced reactor cybersecurity programs (DG-5075) and enables advanced reactor designers to consider the effects of security-by design (SeBD) features on their DCSAs. Integration of DCSA design and other cybersecurity activities with the traditional design process as part of a SeBD framework may enable advanced reactor designers to improve the security posture of their plants while reducing implementation and operating costs. This report provides a DCSA template for an exemplar SFR and how the template may be optimized for a given SFR design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗