Search NASA⌕ Search

SEARCH · Search NASA

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

Challenges in Securing UAM Operations

Urban air mobility (UAM) is a concept that proposes to develop short-range, point-to-point transportation systems in metropolitan areas using vertical takeoff and landing (VTOL) or short takeoff and landing (STOL) aircraft to overcome increasing surface congestion. To realize the potential of UAM, an assurance of cybersecurity is critical for public acceptance. Cybersecurity has come to the forefront highlighting the need to protect these networks and systems from cyberattacks. The growth in the development of UAM systems, and the associated data exchange and service interactions will create abundant challenges due to numerous types of cybersecurity attacks. As these threats evolve, the UAM cybersecurity capabilities must adapt to these changes as well.

Urban Air Mobility,↗

How Autonomous Intelligent Systems Can Facilitate Earth-independent Medical Care: Going Beyond Telepresence

During the last decade, teleoperated robotic systems have extended humans’ sensorimotor competence to digitally fly beyond the physical barrier of distance and scale and thus transmit sensorimotor skills of the human through direct communication. Telepresence capabilities have enabled tele-physical remote access at small scales thanks to telerobotic mediums. Although the concept was initially motivated by space applications, such technologies quickly have expanded into the medical domain and resulted in teleoperated medical robots, including telerobotic surgical systems (such as the da Vinci surgical system). Effective telepresence fundamentally depends on an agile, reliable, and secure communication medium that can transmit real-time information between the operator and a remote device. However, direct telepresence may not be achievable for long-duration exploration spaceflight missions. Thus, autonomous systems and local intelligence represent potential solutions to the aforementioned issues. One example solution employs demonstration systems which enable learning from the pre-captured inputs of a skilled human operator. These will be computationally modeled and later probabilistically replicated toward the completion of remote physical tasks when direct telepresence is not viable - such as under communication blackout conditions. In other words, trained autonomous systems (e.g., robots) can perform remote operations that mimic the physical performance of experts during remote operations/training. Beyond learning the physics of the task, autonomous agents can also be used to conduct algorithmic decision-making that mimics the higher-level cognition of the expert. Thus, using an autonomous system, pre-trained cognitive and manipulation-based skills can be leveraged (acquired during pre-mission events) to produce digital twins of an intelligent operator. Such systems can be used for the real-time conduction of intricate tasks in complex and unstructured environments. Such systems will operationalize “cognitive digital twins” and can expand the reach of human cognition and manipulation through the power of data-driven learning from demonstration algorithms. This system category will be discussed as a fully autonomous operation in this talk. In addition to the above, we will also propose and discuss the possibility of partial-automation using remote intelligence and remote sensing. In contrast to full automation, partial automation can close the loop through a local operator equipped with augmented sensory awareness through wearable systems. Such technologies will allow the local operator to conduct delicate tasks while being guided using sensory augmentation and being monitored to gauge her/his level of cognitive focus and performance. The difference with the previous category is that a remote human will conduct the task. Further, rather than making a digital twin of human cognition, we will augment the control inputs of the local human to match those of the skilled expert operator who is not accessible in real-time. Going beyond classic telepresence and thus approaching intelligent telepresence, our vision is that autonomous agents will eventually enable the safe, consistent and efficient delivery of complex, remote and smart medical care during space exploration across operators in an Earth-independent fashion. We will discuss our collective vision from NASA and MERIIT@NYU lab in this talk.

Telepresence↗

Transactive Energy System Deployment Over Insecure Communication Links

Here, in this paper, the privacy and security issues associated with the transactive energy system (TES) deployment over insecure communication links are addressed. In particular, it is ensured that 1) individual agents’ bidding information is kept private throughout hierarchical market-based interactions; and 2) any extraneous data injection attack can be quickly and easily detected. An implementation framework is proposed to enable the cryptography-based enhancement of privacy and security for the deployment of any general hierarchical systems including TESs. Under the proposed framework, a unified cryptography-based approach is developed to achieve both privacy and security simultaneously. Specifically, privacy preservation is realized by an enhanced Paillier encryption scheme, where a block design is proposed to significantly improve computational efficiency. Attack detection is further achieved by an enhanced Paillier digital signature scheme, where a stamp-concatenation mechanism is proposed to enable detection of data replace and reorder attacks. Simulation results verify the effectiveness of the proposed cyber-resilient design for transactive energy systems. Note to Practitioners—This paper is motivated by addressing the issues of cyber resiliency for practically deploying transactive energy system (TES) but it is also applicable to the problem of enhancing the privacy and security for any general hierarchical control systems. TES is an emerging control approach that engages energy suppliers and customers through market operations and uses the price to optimally allocate energy resources. While it has been shown to be promising for power system applications, the underlying market-based interactions raise significant concerns of privacy (data leakage) and security (data tampering). However, existing TES works only focus on the coordination mechanism instead of privacy and security issues. This paper proposes a new cryptography-based TES design for practical deployment. Specifically, to protect privacy, individual supply and demand amounts to be exchanged are all encrypted in a particular way such that the original amounts cannot be inferred from the encrypted amounts, while the desired computation for setting the market clearing price can be carried out over the encrypted amounts, thus generating an encrypted result which, when decrypted, matches that of the same computation over the original amounts. To achieve security, for each exchanged data, its sender generates a particular digital signature which is exchanged together with the data. This enables the receiver to automatically detect the integrity by checking whether a mathematical relationship holds for the pair of data and signature. In our future research, we will investigate more challenging scenarios where some suppliers and customers themselves could be corrupted and purposely submit distorted amounts.

97 MATHEMATICS AND COMPUTING↗

Deep Learning Based Frequency Stability Assessment in Power Grid with High Renewables

Frequency stability assessment is one critical aspect of power system security assessment. Traditional N-1 screening method is based on the simulations of a few typical daily and seasonal operation scenarios. However, the increasing integration of inverter-based renewables and the retirement of conventional synchronous generators result in decreasing system inertia and growing complexity of system operating conditions. Selecting a few typical operation scenarios cannot cover all operating conditions, and the time-domain simulation of all operation conditions requires tremendous time. This paper proposes a more efficient frequency stability assessment method based on deep learning. The affinity propagation clustering algorithm is used to divide the dataset into different clusters, so the selected dataset for training can cover the diversified operating conditions as much as possible. Also, feature normalization is applied to both the training dataset and testing dataset in order to remove any unnecessary bias. Especially, trained model based on full dataset normalization has bounded error in the prediction. The case study on the reduced 240-bus WECC system demonstrates that the proposed method can predict accurate frequency nadir with limited training dataset. The deep learning model using the revised feature normalization can predict more accurate frequency nadir than that using the traditional feature normalization and has very small maximum prediction error.

affinity propagation↗

Operational Concepts for a Generic Space Exploration Communication Network Architecture

This document is one of three. It describes the Operational Concept (OpsCon) for a generic space exploration communication architecture. The purpose of this particular document is to identify communication flows and data types. Two other documents accompany this document, a security policy profile and a communication architecture document. The operational concepts should be read first followed by the security policy profile and then the architecture document. The overall goal is to design a generic space exploration communication network architecture that is affordable, deployable, maintainable, securable, evolvable, reliable, and adaptable. The architecture should also require limited reconfiguration throughout system development and deployment. System deployment includes: subsystem development in a factory setting, system integration in a laboratory setting, launch preparation, launch, and deployment and operation in space.

networking↗

Development of a Solar Heat and Power Co-Generation System. Final CRADA Report

Final Report CRADA No. TC02152.0 Date Technical Work Ended: October 28, 2013. This was a collaborative effort between Lawrence Livermore National Security, LLC as manager and operator of Lawrence Livermore National Laboratory (LLNL) and Tassajara Technologies, Inc. (TTI), to develop, fabricate and demonstrate a Solar Heat and Power Co-generation System. The technical objectives of this CRADA were to engineer, design and build a prototype Solar Thermal Process Heat and Power Demonstration System that would be suitable for use at the Arc of Hilo food processing facility. This would be accomplished in two phases. The first phase would entail the building of a prototype at Tassajara facilities. Base design parameters, including the subsystem interactions that would produce reliable performance at the lowest cost per watt of energy generated with the desired balance of power and heat to meet the requirements of the designated food processing applications from Arc of Hilo, would be provided by LLNL. The data and design development would be integrated into the second phase engine prototype and solar thermal system that would be built and delivered, with interface requirements to the Miko Building.

14 SOLAR ENERGY↗

Securing the Global Airspace System Via Identity-Based Security

Current telecommunications systems have very good security architectures that include authentication and authorization as well as accounting. These three features enable an edge system to obtain access into a radio communication network, request specific Quality-of-Service (QoS) requirements and ensure proper billing for service. Furthermore, the links are secure. Widely used telecommunication technologies are Long Term Evolution (LTE) and Worldwide Interoperability for Microwave Access (WiMAX) This paper provides a system-level view of network-centric operations for the global airspace system and the problems and issues with deploying new technologies into the system. The paper then focuses on applying the basic security architectures of commercial telecommunication systems and deployment of federated Authentication, Authorization and Accounting systems to provide a scalable, evolvable reliable and maintainable solution to enable a globally deployable identity-based secure airspace system.

Communications↗

Probability-Weighted LMP and RCP for Day-Ahead Energy Markets using Stochastic Security-Constrained Unit Commitment: Preprint

Variable renewable generation resources are increasing their penetration on electric power grids. These resources have weather-driven fuel sources that vary on different time scales and are difficult to predict in advance. These characteristics create challenges for system operators managing the load balance on different timescales. Research is looking into new operational techniques andstrategies that show great promise on facilitating greater integration of variable resources. Stochastic Security-Constrained Unit Commitment models are one strategy that has been discussed in literature and shows great benefit. However, it is rarely used outside the research community due to its computational limits and difficulties integrating with electricity markets. This paper discusses howit can be integrated into day-ahead energy markets and especially on what pricing schemes should be used to ensure an efficient and fair market.

17 WIND ENERGY↗

Adjustable and distributionally robust chance-constrained economic dispatch considering wind power uncertainty

This paper proposes an adjustable and distributionally robust chance-constrained (ADRCC) optimal power flow (OPF) model for economic dispatch considering wind power forecasting uncertainty. The proposed ADRCC-OPF model is distributionally robust because the uncertainties of the wind power forecasting are represented only by their first- and second-order moments instead of a specific distribution assumption. The proposed model is adjustable because it is formulated as a second-order cone programming (SOCP) model with an adjustable coefficient. This coefficient can control the robustness of the chance constraints, which may be set up for the Gaussian distribution, symmetrically distributional robustness, or distributionally robust cases considering wind forecasting uncertainty. The conservativeness of the ADRCC-OPF model is analyzed and compared with the actual distribution data of wind forecasting error. The system operators can choose an appropriate adjustable coefficient to tradeoff between the economics and system security.

17 WIND ENERGY↗

Limits of special material detectability fundamental to idealized dual-energy radiographic systems

Analysis of dual-energy radiographic approaches to the detection of “special” material, i.e. contraband, in otherwise innocuous scenes, such as maritime cargo containers encountered at ports of entry, reveals fundamental limitations of data obtained along a single line-of-sight. The basic equations that describe idealized systems are presented and analyzed so as to identify challenges that are only exacerbated by scatter, noise, and measurement uncertainty. In the mono-energetic limit, the instrumentation and measurement methods reduce to a system of linear equations that are simple to treat: it is observed that there exists a threshold for the minimum amount of high-Z material that can be detected unambiguously (without the risk of false positive or false negative indications), even when the background materials are of finite and of well-known variety. The threshold depends on the quality of prior information about the cargo and the selection of probing energies, and can therefore be minimized by good system design practices and measurement procedures, but persists as a general challenge to security operations. In discussion of this result, it is noted that techniques incorporating other prior information, such as the geometry of cargo and potential contraband, along with data from 2D imaging, have far greater potential. For instance, a simple data analysis method capable of differentiating high-Z spheres from those of more common material is presented. This simple example demonstrates that, although simple line-of-sight transmission radiography may suffer fundamental limitations, there remains good cause to be optimistic about the potential for image analysis in radiographic material identification.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Optimal Dispatch for the US Virgin Islands to Increase Renewable Rates in Saint Croix

The US Virgin Islands, like many other small island nations, face significant challenges related to its energy supply. Their dependency on imported fossil fuels not only drives up energy costs, but also contributes to different environmental problems. Nevertheless, their generally sunny and windy climate makes this archipelago an ideal location for renewable energy development. Increasing the use of sources such as wind, and solar can help reduce their energy dependency, lower their levelized cost of electricity, and improve the health and wellbeing of local communities. In this paper, an optimal dispatcher is employed to analyze the implications on energy security of employing different technology options according to the plans of the local system operator. In this context, short term stability is ensured by inserting operational constraints in the energy management system based on stability analysis developed in PSCAD. The results highlight the usefulness of integrating PV and battery system, while further analysis are required to justify integrating wind power.

energy islands↗

Consequence Based Framework for Deployment of Cloud Solutions in the Digital Energy Transition

This study proposes a framework for evaluating cloud computing deployment in the electric sector, focusing on the digital transition of energy systems. It assesses the implications of cloud technology adoption, particularly in terms of security, operational resilience, and efficiency. The paper introduces a method for consequence-driven risk analysis, enabling utilities to prioritize and mitigate potential threats effectively. It also discusses the shared responsibility model in cloud computing, highlighting the need for collaborative security efforts. The research aims to provide utilities with a strategic assessment tool for cloud adoption, emphasizing the importance of security culture in enhancing cloud computing's role in critical infrastructure.

99 GENERAL AND MISCELLANEOUS↗

Calibrating Multi-machine Power System Parameters with the Extended Kalman Filter

Large-scale renewable resources and novel smart-grid technologies continue to increase the complexity of power systems. As power systems continue to become more complex, accurate modeling for planning and operation becomes a necessity. Inaccurate system models would result in an unreliable assessment of system security conditions and could cause large-scale blackouts. This motivates the need for model parameter calibration, since some or all of the model parameters could be unknown or inaccurate. In this paper, the extended Kalman filter is used to calibrate the parameters of a multi-machine power system. The calibration performance is tested under varying fault locations, parameter errors and measurement noise giving an insight into how many generators and which generators could be difficult to calibrate.

24 POWER TRANSMISSION AND DISTRIBUTION↗

GridSTIX

SF-25-112 Grid-STIX is a comprehensive extension of the STIX (Structured Threat Information Expression) 2.1 ontology specifically designed for electrical grid cybersecurity applications. This ontology provides a standardized, machine-readable framework for modeling grid assets, operational technology devices, threats, vulnerabilities, supply chain risks, and security relationships in electrical power systems. ## Key Features - **Comprehensive Grid Coverage**: Physical assets, OT devices, grid components, sensors, and energy storage systems - **Zero Trust Architecture**: Policy decision points, enforcement points, trust brokers, and continuous monitoring - **AMI Infrastructure**: Advanced metering networks, head-end systems, mesh gateways, and MDM systems - **Advanced Security Modeling**: Attack patterns, vulnerabilities, mitigations, and supply chain risks - **Critical Grid Relationships**: Power flow, protection, control, and synchronization relationships - **Supply Chain Security**: Supplier modeling, country of origin tracking, and risk assessment - **Protocol Support**: DNP3, Modbus, IEC 61850, IEC 60870-5-104, OPC-UA, and IEEE standards - **Python Code Generation**: Automated STIX-compliant Python class generation from ontologies - **Interactive Visualization**: Enhanced HTML network graphs with grid-specific categorization - **STIX 2.1 Compliance**: Full compatibility with STIX threat intelligence ecosystem

Blakely, Benjamin [Argonne National Laboratory (AN↗

HPC - Platforms Penta Chart

Strategy, Planning, Acquiring- very large scale computing platforms come and go and planning for immensely scalable machines often precedes actual procurement by 3 years. Procurement can be another year or more. Integration- After Acquisition, machines must be integrated into the computing environments at LANL. Connection to scalable storage via large scale storage networking, assuring correct and secure operations. Management and Utilization – Ongoing operations, maintenance, and trouble shooting of the hardware and systems software at massive scale is required.

Computer Hardware↗

Integrating Data Sources for Improved Safeguards and Accountancy of Electrochemical Fuel Reprocessing Systems. Final Report

Electrochemical reprocessing (also commonly known as “pyroprocessing”) of used nuclear fuel is an alternative to aqueous reprocessing that confers a number of advantages, including the ability to process more recently-discharged fuel, smaller resultant waste volumes, and the lack of isolation of plutonium in the product stream. While electrochemical reprocessing systems have seen a significant research and development effort, nuclear safeguards and security of these systems remains under-developed, particularly given the significant differences in operating environment and process flowsheet compared with established aqueous methods. Objective 4 of DOE’s nuclear energy research and development activities in Nuclear Energy Research and Development Roadmap is: “Understand and minimize the risks of nuclear proliferation and terrorism.” Material Control & Accountancy (MC&A) programs at nuclear processing plants deter and detect theft and diversion of nuclear material by both outside and inside adversaries. Empirical modeling and data analytics of online measurements and state indicators can improve the timeliness of detection and reduce the uncertainty in accountancy measures. To support the development and demonstration of such methods, data are needed that capture expected measurement values collected throughout electrochemical reprocessing facilities. A review of the available literature of current research in measurements for electrochemical reprocessing systems identified twenty-two candidate measurement methodologies, which characterize fuel/salt composition, concentrations of various isotopes and elements, and operational parameters throughout the reprocessing facility. Four primary measurement methodologies have been simulated based on either physical simulations or empirical correlations: gamma emissions, neutron emissions, hybrid k-edge densitometry (HKED), and cyclic voltammetry. Initial investigation into the use of these measures for process monitoring and detection suggests the approach is viable and worthy of further investigation. This report summarizes efforts to generate signatures of key measurements during operation of electrochemical reprocessing facilities and initial investigation of data analytics to support process monitoring, diversion detection, and accountancy.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Space station needs, attributes and architectural options. Volume 1, attachment 1: Executive summary NASA

User alignment plan, physical and life sciences and applications, commercial requirements national security, space operations, user needs, foreign contacts, mission scenario analysis and architectural concepts, alternative systems concepts, mission operations architectural development, architectural analysis trades, evolution, configuration, and technology development are discussed.

Source record↗

Protecting intellectual property in space; Proceedings of the Aerospace Computer Security Conference, McLean, VA, March 20, 1985

The primary purpose of the Aerospace Computer Security Conference was to bring together people and organizations which have a common interest in protecting intellectual property generated in space. Operational concerns are discussed, taking into account security implications of the space station information system, Space Shuttle security policies and programs, potential uses of probabilistic risk assessment techniques for space station development, key considerations in contingency planning for secure space flight ground control centers, a systematic method for evaluating security requirements compliance, and security engineering of secure ground stations. Subjects related to security technologies are also explored, giving attention to processing requirements of secure C3/I and battle management systems and the development of the Gemini trusted multiple microcomputer base, the Restricted Access Processor system as a security guard designed to protect classified information, and observations on local area network security.

Source record↗