Search NASA⌕ Search

SEARCH · Search NASA

Results for “Operations Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 523 records · Page 29

Secure Payload Access to the International Space Station

The ISS finally reached an operational state and exists for local and remote users. Onboard payload systems are managed by the Huntsville Operations Support Center (HOSC). Users access HOSC systems by internet protocols in support of daily operations, preflight simulation, and test. In support of this diverse user community, a modem security architecture has been implemented. The architecture has evolved over time from an isolated but open system to a system which supports local and remote access to the ISS over broad geographic regions. This has been accomplished through the use of an evolved security strategy, PKI, and custom design. Through this paper, descriptions of the migration process and the lessons learned are presented. This will include product decision criteria, rationale, and the use of commodity products in the end architecture. This paper will also stress the need for interoperability of various products and the effects of seemingly insignificant details.

Pitts, R. Lee↗

Report on the deployment of the National Geothermal Data System 2.0

This reports includes a video description of recent upgrades and changes to the National Geothermal Data System (geothermaldata.org) and a text report of its relevant security upgrades. Improvements include a new operating system, implementation of HTTPS, implementation of a standard firewall, PostgreSQL upgrades, an ESRI ArcGIS server, new registration policies, and a non-public API.

15 GEOTHERMAL ENERGY↗

Investigating the impact of a multi-module operation environment on the task performance time of human operators – An explanatory study

The worldwide demand for Small Modular Reactors (SMRs) has surged in recent years due to their enhanced safety and versatility in supporting diverse industrial sectors. A unique feature of SMR operation is that a single human operator is responsible for managing multiple modules. Therefore, securing a sufficient amount of human performance data pertaining to this new environment is essential for the safe operation of SMRs. In this explanatory study, a series of experiments were conducted using the NuScale simulator, a representative SMR design, with student operators. A total of 12 student operators were assigned two types of off-normal events and asked to cope with them using paper-based procedures. Subsequently, their task performance times were compared with those of student operators responsible for a single unit based on the Task Complexity (TACOM) measure. Results indicate that the performance of student operators under the experimental conditions of this study degraded by a factor of 2 to 3, depending on the characteristics of the off-normal events.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

The Always/Never Safety Framework for Satellite Rendezvous and Proximity Operations and On-Orbit Servicing

Space rendezvous and proximity operations are increasing in numbers, enabling inspections, diagnostics, and maintenance of on-orbit systems. Because collision, loss of control, and unintended damage can impact the system under examination -- and at the extreme, cause system break-up and space debris -- the safety practices for rendezvous and proximity operations can have significant implications for national security. This study examines the applicability of the Always/Never surety framework, which was developed for United States nuclear weapons, as a model safety basis for unmanned space proximity operations. This unclassified framework has understandable safety approaches and principles and focuses on a system being always safenever unsafe. The authors consider that the adapting the framework might present a means for standardization across government and commerce, encouraging a consistent approach and a set of clarifying safety principles and applications for rendezvous and proximity operations. The framework also offers a consistent taxonomy, presents safety and reliability requirements organized by four environment categories, defines accident or abnormal conditions, contributes a strategy for identifying hostile and tactical environments, and enables decision-making for determining if conditions are safe for proximity space operations.

42 ENGINEERING↗

Fit2Fly: A Proof of Concept for Testing the Commercial Feasibility of Unmanned Aerial System Operations

As autonomous Unmanned Aerial Systems (UAS) become more prevalent, improvements in airworthiness assessments, data security, establishing vehicle trust, and more will become necessary to make fleet operations of these systems routine. Currently, these are verified for every UAS vehicle through a time-intensive manual inspection performed by human individuals. This process becomes infeasible when introduced into large-scale operations, so the Fit2Fly project is attempting to address these concerns. Fit2Fly is a multi-year project with a large scope, so we chose to narrow our focus to building a proof-of-concept feasibility simulation in tandem with physical UAS demonstration. This work resulted in a software simulation capable of running asynchronous commercial operations with persistent data modeling in coordination with several autonomous drones using integrated radio and GPS configurations.

Ryan Bonk↗

UNIX security in a supercomputing environment

The author critiques some security mechanisms in most versions of the Unix operating system and suggests more effective tools that either have working prototypes or have been implemented, for example in secure Unix systems. Although no computer (not even a secure one) is impenetrable, breaking into systems with these alternate mechanisms will cost more, require more skill, and be more easily detected than penetrations of systems without these mechanisms. The mechanisms described fall into four classes (with considerable overlap). User authentication at the local host affirms the identity of the person using the computer. The principle of least privilege dictates that properly authenticated users should have rights precisely sufficient to perform their tasks, and system administration functions should be compartmentalized; to this end, access control lists or capabilities should either replace or augment the default Unix protection system, and mandatory access controls implementing multilevel security models and integrity mechanisms should be available. Since most users access supercomputing environments using networks, the third class of mechanisms augments authentication (where feasible). As no security is perfect, the fourth class of mechanism logs events that may indicate possible security violations; this will allow the reconstruction of a successful penetration (if discovered), or possibly the detection of an attempted penetration.

Bishop, Matt↗

Tactical Analysis for Calculating Contextual Risk at Boundaries: Summary of Laboratory Directed Research & Development Effort

The Tactical Analysis for Calculating Contextual Risk at Boundaries (TACCRAB) tool is an innovative digital twin (DT) platform and automated risk algorithm designed to transform operational decision-making in structured screening environments, with an initial focus on Southern Border Land Ports of Entry (POEs). The invention provides integration points for advanced artificial intelligence, predictive modeling, and real-time data analysis to produce a comprehensive risk management tool that enables proactive, data-informed security strategies. The core inventive features of TACCRAB center on its unique risk algorithm, which dynamically calculates contextual risk by synthesizing historical data, near real-time streaming data from the checkpoints themselves, and AI-generated predictions. Unlike traditional risk assessment methods, TACCRAB utilizes a DT to provide comprehensive operational insights, allowing stakeholders to visualize, simulate, and optimize checkpoint configurations with unprecedented speed and contextual awareness. TACCRAB's key innovation lies in its ability to combine multiple complex inputs - including technology detection probabilities, resource availability, screening pathway characteristics, and threat actor behavioral patterns - into a unified risk calculation and update these inputs based on changing operational and environmental conditions. By leveraging a DT that continuously updates and learns from linked data, TACCRAB can suggest adaptive mitigation strategies that minimize risk while maintaining operational efficiency. Particularly novel is the platform's approach to decision support, which goes beyond static risk assessment. The DT provides dynamic metrics such as wait times, resource allocation effectiveness, and potential emerging threat scenarios, enabling users to view sophisticated, relevant what-if simulations and optimize checkpoint operations in near real-time. The system's architecture allows for generalized application across different screening environments, such as secure facilities, ports of entry, and soft targets, making it a versatile tool for security and operational management. The invention distinguishes itself through its comprehensive integration of predictive modeling, AI-driven pattern discovery, and user-friendly interface design. By combining these elements, TACCRAB transforms complex risk data into actionable insights, supporting decision-makers at various organizational levels - from booth agents making split-second screening decisions to checkpoint managers optimizing the day's resource allocation to strategic planners managing long-term investments.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Multi-beam operation of LANSCE accelerator facility

The Los Alamos Neutron Science Center (LANSCE) accelerator facility has been in operation for 50 years performing important scientific support for national security. The unique feature of the LANSCE accelerator facility is multi-beam operation, delivering beams to five experimental areas. The near-term plans are to replace obsolete and almost end-of-life systems of the LANSCE linear accelerator with a modern 100-MeV Front End with significant improvement in beam quality. This paper summarizes experimental results obtained during the operation of the LANSCE accelerator facility and considers plans to expand the performance of the accelerator for near- and long-term operations.

47 OTHER INSTRUMENTATION↗

EMERGING CYBER-PHYSICAL LANDSCAPE OF TRANSPORTATION TECHNOLOGY

Technology is rapidly progressing in transportation and shipping industries across the globe, including the nuclear, radioactive and hazardous material transportation sectors. With this progress comes unprecedented opportunities for improved transparency, safety, and security in transportation, as well as novel threat surfaces and attack vectors. Therefore, the transport safety and security interface is affected through the application of these technologies. We provide an investigative overview of the developing fields of “trans-tech” or “freight- tech” with a look towards technology development and adoption over the next 3-5 years across three primary categories: Transportation IoT (Internet of Things), Smart Infrastructure, and digitization of transportation management. We also investigate the safety and security implications of utilizing these technologies. Each of these categories presents novel threats as well as opportunities. We examine the role of technology in each as an emerging cyber-physical threat to nuclear and radioactive material transportation security, and plausible mitigation considerations at both the state and operator levels in additional to opportunities for addressing the interface between safety and security.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Caribbean Energy Sector Cybersecurity Forum: Modernizing and Securing the Grid

This presentation on Modernizing and Securing the Grid brought together regional and NREL cybersecurity expertise for USAID's Caribbean Energy Sector Cybersecurity Forum. The presentation's overall purpose was to provide a deep dive into the changes underway in the electric grid, including the greater integration of renewables and distributed energy resources. The presentation also reviewed best practices for building cybersecurity into modern energy systems, including in the areas of vendor assessment and supply chain cybersecurity.

Caribbean↗

Protecting and Defending against Autonomous Control Systems and Digital Twin Cyber Attacks: Response Strategy for Hyperparameter attacks of Digital Twin Machine Learning Models in Nuclear Power Plants (Final)

Navigating through the complex tapestry of technological advancements, "Response Strategy for Hyperparameter attacks of Digital Twin Machine Learning Model in Nuclear Power Plants" stands at the intersection of cybersecurity and nuclear power plant operations, embarking on a journey through the intricacies of securing digital twins against malicious cyber activities. As nuclear power plants progressively integrate digital twin technology and machine learning models to optimize operations and ensure system reliability, they inadvertently expose themselves to a new spectrum of vulnerabilities, notably in the realm of hyperparameter attacks. Hyperparameters, integral in machine learning model tuning and optimal performance of digital twins, have emerged as a target for adversaries aiming to destabilize the predictive capabilities and therefore, the operational accuracy of these digital entities within critical infrastructures like nuclear plants. This paper, therefore, meticulously threads the needle through the development of a robust response strategy, poised to shield these digital reflections against calculated hyperparameter manipulations, ensuring that the digital twin can effectively and securely function as a reliable proxy for its physical counterpart. The ensuing sections delve into the orchestrated maelstrom of multi-rate time-changing intelligent coordinated hyperparameter attacks and the implementation of event-triggered predictive control, laying down a structured, predictive, and responsive framework that safeguards the nexus where the digital and physical realms of nuclear power plants coalesce. The operational integrity of digital twins in nuclear power plants depends critically on the security of machine learning hyperparameters. This study makes two different contributions. First, a decision-based idea known as a multi-rate time changing intelligent coordinated hyperparameter attack is put forth. In this attack, many hyperparameters are repeatedly changed using both random and intelligent optimal techniques by the attacker. These assaults introduce varied rates at different attack steps, compromise various amounts of hyperparameters, and improve stealth and flexibility. Second, a technique is developed for event triggered predictive control to rapidly respond to potential hyperparameter attacks. This control integrates a sliding window framework, retaining a history of previous data points and employing linear regression to predict the next data point from the current dataset. The control gain K is determined using the Lyapunov-Krasovskii method, and subsequently, an action is developed. Finally, the outcome of the simulation demonstrates the viability of the proposed method for defending nuclear power plant digital twins from hyperparameter attacks.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Special Issue of Nuclear Science and Engineering celebrates the Tenth Anniversary of Operations at NCERC

The National Criticality Experiments Research Center (NCERC) is a general-purpose critical experiment facility, the only one in the US and one a few that remain operational throughout the world. NCERC is located at the Nevada National Security Site (NNSS), formerly known as the Nevada Test Site, and is operated by Los Alamos National Laboratory (LANL). This year, NCERC celebrated its 10th year of operation. To commemorate the first ten years of operations and experiments, a special issue of Nuclear Science and Engineering was prepared with papers focusing on each of the four critical assemblies and one on Radiation Test Object (RTO) measurements.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Defense Technical Assistance - Infographic 4/24/25

Defense Technical Assistance (TA) Infographic designed to inform potential pilot partnerships with military installation about the TA opportunities available. - Secure and reliable energy is crucial for the operational readiness and resilience of military installations. The Department of Energy’s Grid Deployment Office has funded a new initiative at Idaho National Laboratory to conduct technical, on-site assessments that aim to secure the power infrastructure of military bases reliant on civilian utilities for their operations, both CONUS and OCONUS. Including how the assessments work and INL capabilities, partnership model as well as outcomes.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗

Secure Remote Access Issues in a Control Center Environment

The ISS finally reached an operational state and exists for local and remote users. Onboard payload systems are managed by the Huntsville Operations Support Center (HOSC). Users access HOSC systems by internet protocols in support of daily operations, preflight simulation, and test. In support of this diverse user community, a modem security architecture has been implemented. The architecture has evolved over time from an isolated but open system to a system which supports local and remote access to the ISS over broad geographic regions. This has been accomplished through the use of an evolved security strategy, PKI, and custom design. Through this paper, descriptions of the migration process and the lessons learned are presented. This will include product decision criteria, rationale, and the use of commodity products in the end architecture. This paper will also stress the need for interoperability of various products and the effects of seemingly insignificant details.

Pitts, Lee↗

Comparative life cycle assessment of remote potable water supply for the Department of Defense

The Department of Defense (DOD) and other agencies, including relief organizations, require potable water for remote missions around the globe. As part of recent initiative by the U.S. Federal government through Executive Order 14057, the DOD has been instructed to investigate the sustainability of operations and practices within the context of climate change. One such practice that needs to be addressed is the procurement of potable water, an essential requirement of any remote mission or location. Currently, there are three primary means of procuring potable water at remote locations: bottled water, on-site purification, or tie-in to existing, local infrastructure. The first two operations are often considered the most secure options, but have sustainability concerns. The purpose of this study is to compare the environmental impacts of bottled water procurement versus on-site treatment via a mobile Reverse Osmosis Water Purification Unit (ROWPU), which uses multiple levels of filtration to make potable water from a local source. A cradle-to-gate assessment was developed for both systems to compare different options for potable water supply. An in person inventory was paired with data taken from the Ecoinvent 3.8 database to directly compare the two systems. The two systems are compared on a 5-year timeline to analyze the environmental impact of repeated bottled water transport versus diesel generator-fueled on-site treatment. Across all impact categories, the results indicate that high energy costs of the reverse osmosis process have significantly less impact on the environment than the repetitive transport and procurement of bottled water. The results of the study have important implications for advancing sustainable operations for remote communities or temporary settlements.

54 ENVIRONMENTAL SCIENCES↗

OSIRIS-REx Earth Return & Entry: Navigation Operations & Lessons Learned

The Origins, Spectral Interpretation, Resource Identification, and Security–Regolith Explorer (OSIRIS-REx) spacecraft successfully returned to Earth on September24, 2024, safely delivering its Sample Return Capsule (SRC) to the Utah Test and Training Range (UTTR). This paper describes the navigation operations that occurred between the departure from Bennu and the return of the SRC. An overview is given of the Flight Dynamics System (FDS) that includes tracking, orbit determination (OD), maneuver planning, and interfaces with entry, descent, and landing. Operational details on the SRC release criteria and conjunction assessment considerations are also provided. Lessons learned are presented that may help future sample return or interplanetary entry missions.

Kenneth M. Getzandanner↗

Securing The Future: 2026 Manufacturing & Critical Infrastructure Threat Landscape

This report outlines the current state of manufacturing weaknesses introduced by the complexities of modern environments, including cloud services and Internet of Things (IoT) devices, with particular attention paid to the unique vulnerabilities encountered by SMMs. It also highlights CyManII’s strategic initiatives and collaborative solutions to mitigate these risks and strengthen the cybersecurity posture of the manufacturing ecosystem. Utilizing data from 2025 to inform forward-looking mitigation strategies, this report provides manufacturers with a clear understanding of both current and emerging cybersecurity threats, as well as practical opportunities to strengthen their cyber ecosystems. The following sections detail key vulnerabilities and threat vectors, along with actionable mitigation strategies, many of which have been developed or piloted through CyManII-led efforts. A thorough understanding of these risks and mitigation strategies is essential for manufacturers seeking to strengthen the security and resilience of their manufacturing operations.

3D Printing↗

C-Band Airport Surface Communications System Engineering-Initial High-Level Safety Risk Assessment and Mitigation

This document is being provided as part of ITT's NASA Glenn Research Center Aerospace Communication Systems Technical Support (ACSTS) contract: "New ATM Requirements--Future Communications, C-Band and L-Band Communications Standard Development." ITT has completed a safety hazard analysis providing a preliminary safety assessment for the proposed C-band (5091- to 5150-MHz) airport surface communication system. The assessment was performed following the guidelines outlined in the Federal Aviation Administration Safety Risk Management Guidance for System Acquisitions document. The safety analysis did not identify any hazards with an unacceptable risk, though a number of hazards with a medium risk were documented. This effort represents an initial high-level safety hazard analysis and notes the triggers for risk reassessment. A detailed safety hazards analysis is recommended as a follow-on activity to assess particular components of the C-band communication system after the profile is finalized and system rollout timing is determined. A security risk assessment has been performed by NASA as a parallel activity. While safety analysis is concerned with a prevention of accidental errors and failures, the security threat analysis focuses on deliberate attacks. Both processes identify the events that affect operation of the system; and from a safety perspective the security threats may present safety risks.

Zelkin, Natalie↗