Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 523 records · Page 29

Quasi-Wireless Capacitive Power Transfer with Secure Data Acquisition for Robotic Systems in Space Infrastructure

Space exploration is dependent on robotic systems that utilize end-effectors to collect samples, probe surfaces, and manipulate objects. These systems can rarely be designed to do all three, forcing engineers to make tradeoffs based on the mission parameters - i.e. should the robotic appendage have a claw, drill, or shovel, and which would be best suited for the mission? Additionally, as more industrial and government entities partake in space exploration, data protection is needed in transit and at rest. To address these challenges, we present a first-of-its- kind robotic linkage that has no wiring between the joints. Instead, quasi-wireless capacitive (QWiC) power transfer is used to send energy over the robot’s chassis without a return wire. This enables the system to be completely modular through the use of single-contact permanent magnet connections, allowing rapid alterations in joint kinematics and/or the changing of end-effectors. For collecting sensor data from the robotic arm and to send remote commands to it, we use a Supervisory Control and Data Acquisition (SCADA) system. Data transmission relies on MQTT and OPC UA communication protocols with encryption. The SCADA server logs and archives sensor data and provides the functionality for authorized users to send remote commands from SCADA client(s) to motors. A SCADA client can be any of the web browsers that connects to a server via a secure communication channel using SSL protocol. Furthermore, as an extra data protection mechanism, we inject noise to the sensor data traffic, which obfuscates the timing of sensor data packets and adds confusion about which data packet represents which motor.

wireless sensor networks↗

AI-based Cyber Event OSINT via Twitter Data

Open-Source Intelligence (OSINT) is largely regarded as a necessary component for cybersecurity intelligence gathering to secure network systems. With the advancement of artificial intelligence (AI) and increasing usage of social media, like Twitter, we have a unique opportunity to obtain and aggregate information from social media. In this study, we propose an AI-based scheme capable of automatically pulling information from Twitter, filtering out security-irrelevant tweets, performing natural language analysis to correlate the tweets about each cybersecurity event (e.g., a malware campaign), and validating the information. This scheme has many applications, such as providing a means for security operators to gain insight into ongoing events and helping them prioritize vulnerabilities to deal with. To give examples of the possible uses, we present three case studies demonstrating the event discovery and investigation processes.

Dale, Dakota↗

Development of cyber security test scenario for non-safety display system - 226

In order to test the cyber security of NPP related to safety, the results of probabilistic safety assessment were used. The fault tree (FT) is used to reflect the impact of the cyber-attack on the operator. The cyber security test should be performed focusing on the scenario derived from the FT. The concept of a security case has been introduced. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Chance-Constrained Optimization for Critical Infrastructure Protection

Stochastic optimization deals with making highly reliable decisions under uncertainty. Chance constraints are a crucial tool of stochastic optimization to develop mathematical optimization models; they form the backbone of many important national security data science applications. These include critical infrastructure resiliency, cyber security, power system operations, and disaster relief management. However, existing algorithms to solve chance-constrained optimization models are severely limited by problem size and structure. In this investigative study, we (i) develop new algorithms to approximate chance-constrained optimization models, (ii) demonstrate the application of chance-constraints to a national security problem, and (iii) investigate related stochastic optimization problems. We believe our work will pave way for new research is stochastic optimization as well as secure national infrastructures against unforeseen attacks.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Enhanced Control, Optimization, and Integration of Distributed Energy Applications (ECO-IDEA)

With support from the U.S. Department of Energy Solar Energy Technologies Office, the National Renewable Energy Laboratory (NREL) partnered with Xcel Energy, Schneider Electric, Varentec, and Electric Power Research Institute (EPRI) to meet the goals of the Enabling Extreme Real-Time Grid Integration of Solar Energy (ENERGISE) program. This project developed and validated an innovative data-enhanced hierarchical control architecture that enables the efficient, reliable, resilient, and secure operation of future distribution systems with a high penetration of distributed energy resources like solar energy. The architecture enables a hybrid control approach where a centralized control layer is complemented by distributed control algorithms for solar inverters and autonomous control of grid edge devices. It is fully interoperable and includes all the cybersecurity aspects necessary for reliable and secure system operation. The hybrid approach can seamlessly integrate multiple voltage-regulation technologies, both at central and grid-edge levels, which enables reliable and efficient system operation in the face of unpredictable conditions. The overarching goal of the Eco-Idea project is to develop, validate, and deploy a unique and innovative Data-Enhanced Hierarchical Control (DEHC) architecture that comprehensively addresses the formidable challenges associated with proliferation of high penetration of distributed PV such as reverse power flows, transients from variability of PV systems, feeder load balancing, and voltage stability. These issues are exposing the weaknesses of existing grid operations and controls - including, but not limited to, lack of grid situational awareness, heuristic and slow-acting control actions, latency of control for emergency situations, and points of failure in communications. The proposed architecture will comprehensively resolve the deficiencies of current operational settings - where monitoring and control solutions proposed across industry and academia may not be interoperable and may not coexist in the same system - and will enable an efficient, reliable, resilient, and secure operation of future distribution systems with penetration of solar energy well beyond current limits. The DEHC architecture was developed and validated rigorously through hardware-in-loop simulations in the laboratory environment and deployed on the field.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Towards Biological Inspiration in the Development of Complex Systems

Greater understanding of biology in modem times has enabled significant breakthroughs in improving healthcare, quality of life, and eliminating many diseases and congenital illnesses. Simultaneously there is a move towards emulating nature and copying many of the wonders uncovered in biology, resulting in "biologically inspired" systems. Significant results have been reported in a wide range of areas, with systems inspired by nature enabling exploration, communication, and advances that were never dreamed possible just a few years ago. We warn, that as in many other fields of endeavor, we should be inspired by nature and biology, not engage in mimicry. We describe some results of biological inspiration that augur promise in terms of improving the safety and security of systems, and in developing self-managing systems, that we hope will ultimately lead to self-governing systems.

Hinchey, Michael G.↗

System Studies for Global Nuclear Assurance and Security (GNAS): 3S Risk Analysis for Portable Nuclear Reactors (Volume II) -- Conclusions and Implications

Growing interest in compact, easily transportable sources of baseload electricity has manifested in the proposal and early deployment of portable nuclear reactors (PNRs). PNRs are sought because they are scalable, efficient, and cost-effective for meeting energy demands in unique, remote, or contested areas. For example, Russia's KLT-40S Akademik Lomonosov is a floating nuclear power plant (FNPP) that successfully reached the Arctic coastal city of Pevek. It began providing power to the local grid in December 2019. While providing such key advantages as having a highly flexible power generation mechanism, FNPPs appear to directly challenge international norms and conventions for nuclear safety, safeguards, and security. FNPPs are neither a purely fixed nuclear fuel cycle activity nor a purely transportation-based nuclear fuel cycle activity. In response, Sandia's Mitigating International Nuclear Enogy Risks (MINER) research perspective frames this discussion in terms of risk complexity and the interdependencies between safety, safeguards, and security in FNPPs, and PNRs more generally. This systems study is a technically rigorous analysis of the safety, safeguards, and security risks of FNPP technologies. This research's aims are three-fold. The first aim is to provide analytical evidence to support safety, safeguards, and security claims related to PNRs and FNPPs (Study Report Volume I). Second, this study aims to introduce a systems- theoretic approach for exploring interdependencies between the technical evaluations (Study Report Volume II). The third aim is to show Sandia's ability for prompt, rigorous, and technical analysis to support emerging complex MINER mission objectives.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

2016 Earth System Grid Federation Annual Report

The Earth System Grid Federation (ESGF) experienced a major setback in June 2015, when it experienced a security incident that brought all systems to a halt for more than half a year. However, federation developers and management committee members turned the incident into an opportunity to dramatically upgrade the system security and functionality and to develop planning and policy documents to guide ESGF evolution and success. Moreover, despite the incident, ESGF developer working teams continue to make strong and significant progress on various enhancement projects that will help ensure ESGF can meet the needs of the climate community in the coming years.

54 ENVIRONMENTAL SCIENCES↗

Data Descriptor: A Land Data Assimilation System for Sub-Saharan Africa Food and Water Security Applications

Seasonal agricultural drought monitoring systems, which rely on satellite remote sensing and land surface models (LSMs), are important for disaster risk reduction and famine early warning. These systems require the best available weather inputs, as well as a long-term historical record to contextualize current observations. This article introduces the Famine Early Warning Systems Network (FEWS NET) Land Data Assimilation System (FLDAS), a custom instance of the NASA Land Information System (LIS) framework. The FLDAS is routinely used to produce multi-model and multi-forcing estimates of hydro-climate states and fluxes over semi-arid, food insecure regions of Africa. These modeled data and derived products, like soil moisture percentiles and water availability, were designed and are currently used to complement FEWSNETs operational remotely sensed rainfall, evapotranspiration, and vegetation observations. The 30+ years of monthly outputs from the FLDAS simulations are publicly available from the NASA Goddard Earth Science Data and Information Services Center (GES DISC) and recommended for use in hydroclimate studies, early warning applications, and by agro-meteorological scientists in Eastern, Southern, and Western Africa.

albedo↗

Toward a North American Standard for Mobile Data Services

The rapid introduction of digital mobile communications systems is an important part of the emerging digital communications scene. These developments pose both a potential problem and a challenge. On one hand, these separate market driven developments can result in an uncontrolled mixture of analog and digital links which inhibit data modem services across the mobile/Public Switched network (PSTN). On the other hand, the near coincidence of schedules for development of some of these systems, i.e., Digital Cellular, Mobile Satellite, Land Mobile Radio, and ISDN, provides an opportunity to address interoperability problems by defining interfaces, control, and service standards that are compatible among these new services. In this paper we address the problem of providing data services interoperation between mobile terminals and data devices on the PSTN. The expected data services include G3 Fax, asynchronous data, and the government's STU-3 secure voice system, and future data services such as ISDN. We address a common architecture and a limited set of issues that are key to interoperable mobile data services. We believe that common mobile data standards will both improve the quality of data service and simplify the systems for manufacturers, data users, and service providers.

Dean, Richard A.↗

Gridtrust: Electricity Grid Root-of-Trust Decentralized Supply Chain Cyber-Security (Final Scientific/Technical Report)

GridTrust represents a departure from reliance on a single organization or a single person to multiple organizations and therefore multiple people across organizational structures. The motivating idea behind involving multiple organizations is the increase in security due to human factors. More specifically, the requirement that distinct people in different organizations sign off on a change or an update makes a cyberattack much less likely due to the inherent requirement that both organizations be penetrated and fooled. GridTrust focuses on the software update process as the primary exemplar for the research and development work. A novel hardware-based technology referred to as a Physical Unclonable Function (PUF) provides a microchip Root-of-Trust (RoT), i.e., a starting point for verifying that the hardware being communicated with is the hardware the control center believes the hardware to be. As a result, staff at power grid control centers can ensure the accurate and reliable identification of hardware devices from the outset. The GridTrust protocol introduces two key innovations, as detailed in this report. Firstly, the utilization of a PUF as a root-of-trust in the initial phase of a software or firmware update. Secondly, the application of multiple cryptographic signatures from two or more organizations to the update binary. These signatures are verified before implementing the update on a power grid device in the field. In terms of GridTrust hardware design, this report outlines two main components. The first is the GridTrust Native Device, integrating PUF technology intrinsically into the hardware device itself. The second is the GridTrust Interfacing Device, which incorporates PUF technology and multiple cryptographic signatures. These signatures are cross-checked within a separate hardware positioned between the power grid control center and the legacy power grid device, functioning as an intermediary. While the GridTrust Interfacing Device offers the advantage of being applicable to existing power grid equipment, it may have reduced security if the intermediary component is targeted. On the other hand, the GridTrust Native Device boasts increased security due to protocol integration within a unified form factor. The effectiveness of GridTrust technology has been extensively demonstrated, with multiple external red-team attackers unable to breach GridTrust's security measures. This was observed both in controlled laboratory settings during Phase 1 of the project and in real-world conditions within a City of Marietta substation during Phase 2 of the project.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Hydrogen Fire in a Storage Vessel

On October 23, 2007, the operations team began a procedure to sample the Liquid Hydrogen (LH2) storage vessels ("tanks"), and associated transfer system. This procedure was being performed to determine the conditions within the system, and if necessary, to purge the system of any excess Gaseous Hydrogen (GH2) in preparation for reactivation of the system. The system had not been used since 2003. The LH2 storage system contains two (2) spherical pressure vessels of 225,000 gallons in volume, with a maximum working pressure (MAWP) of 50 psig. Eight inch transfer piping connects them to the usage point. Operations began with activation of the burnstack for the LH2 storage area. Pneumatic (GN2) systems in the storage area were then activated and checked. Pressurization of storage tank number 1 with gaseous nitrogen (GN2) was initiated, with a target pressure of 10 psig, at which point samples were planned to be taken. At 5 psig, a loud noise was heard in the upper area of tank number 2. Smoke was seen exiting the burnstack and from the insulation on vent lines for both tanks. At this time tank number 1 was vented and the pressurization system was secured. The mishap resulted in physical damage to both storage tanks, as well as to some of the piping for both tanks. Corrective action included repair of the damaged hardware by a qualified contractor. Preventive action included documented organizational policy and procedures for establishing standby and mothball conditions for facilities and equipment, including provisions as detailed in the investigation report recommendations: Recommendation 1: The using organization should define necessary activities in order to place hydrogen systems in long term periods of inactivity. The defined activities should address requirements for rendering inert, isolation (i.e., physical disconnect, double block and bleed, etc.) and periodic monitoring. Recommendation 2: The using organization should develop a process to periodically monitor hazardous systems for proper configuration (i.e., a daily/weekly/monthly check sheet to verify critical purges are active).

Hester, Zena M.↗

On the global limits of bioenergy and land use for climate change mitigation

Across energy, agricultural and forestry landscapes, the production of biomass for energy has emerged as a controversial driver of land-use change. We present a novel, simple methodology, to probe the potential global sustainability limits of bioenergy over time for energy provision and climate change mitigation using a complex-systems approach for assessing land-use dynamics. Primary biomass that could provide between 70 EJ year -1 and 360 EJ year -1 , globally, by 2050 was simulated in the context of different land-use futures, food diet patterns and climate change mitigation efforts. Our simulations also show ranges of potential greenhouse gas emissions for agriculture, forestry and other land uses by 2050, including not only above-ground biomass-related emissions, but also from changes in soil carbon, from as high as 24 GtCO 2 eq year-1 to as low as minus 21 GtCO 2 eq year -1 , which would represent a significant source of negative emissions. Based on the modelling simulations, the discussions offer novel insights about bioenergy as part of a broader integrated system. As a result, there are sustainability limits to the scale of bioenergy provision, they are dynamic over time, being responsive to land management options deployed worldwide.

09 BIOMASS FUELS↗

Autonomous Tools for Attack Surface Reduction

The electric power grid is a complex critical infrastructure that forms the lifeline of modern society, and its secure and reliable operation is of paramount importance to national security and economic well being. However, recent findings documented in authoritative sources indicate the threat of cyber-based attacks growing in numbers and sophistication. However, securing the grid against stealthy cyber attacks is a challenging task due to legacy nature of the infrastructure coupled with dynamic nature of threat landscape and ever growing sophistication of the adversaries. Additionally, the grid’s attack surface continues to grow with the increased dependence on digital communications and control that now extends to each consumer through smart meters and distributed energy resources. Unfortunately, this expansive surface increases the grid’s vulnerability and further exposes critical control systems in both substations and control centers. To respond to this emerging need, we had successfully assembled an interdisciplinary team with academic- industry partnership to successfully conduct research, development, evaluation, demonstration, and commercialization of attack surface reduction tools, whose goal is to significantly reduce the cyber attack surface in the North American power grid. Our proposed project was a synergistic collaborative effort leveraging the synergistic expertise of the team members across power systems, cyber security and CPS security, testbeds, field deployments and demonstration, and successful commercialization. The team consisted of leading experts from two major universities – Iowa State University, Washington State University – complemented by reputed researchers from two DOE national laboratories – Pacific Northwest National Lab, and Argonne National Lab, one major utility vendor GE Global Research, and one utility partner – Cedar Falls Utilities (CFU). The team members have proven track record of successful academic-industry collaboration in interdisciplinary R&D projects, and bring onboard some of the best state-of-the-art testbed resources, industry-grade SCADA/EMS/DMS environment for experimentation and field demonstration.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Deployment of an Advanced Electrocardiographic Analysis (A-ECG) to Detect Cardiovascular Risk in Career Firefighters

INTRODUCTION Sudden cardiac death is the leading cause of line of duty death among firefighters, accounting for approximately 45% of fatalities annually. Firefighters perform strenuous muscular work while wearing heavy, encapsulating personal protective equipment in high ambient temperatures, under chaotic and emotionally stressful conditions. These factors can precipitate sudden cardiac events like myocardial infarction, serious dysrhythmias, or cerebrovascular accidents in firefighters with underlying cardiovascular disease. Screening for cardiovascular risk factors is recommended but not always followed in this population. PHASER is a project charged with identifying and prioritizing risk factors in emergency responders. We have deployed an advanced ECG (A-ECG) system developed at NASA for improved sensitivity and specificity in the detection of cardiac risk. METHODS Forty-four professional firefighters were recruited to perform comprehensive baseline assessments including tests of aerobic performance and laboratory tests for fasting lipid profiles and glucose. Heart rate and conventional 12-lead ECG were obtained at rest and during incremental treadmill exercise testing (XT). In addition, a 5-min resting 12-lead A-ECG was obtained in a subset of firefighters (n=18) and transmitted over a secure networked system to a physician collaborator at NASA for advanced-ECG analysis. This A-ECG system has been proven, using myocardial perfusion and other imaging, to accurately identify a number of cardiac pathologies including coronary artery disease (CAD), left ventricular hypertrophy, hypertrophic cardiomyopathy, non-ischemic cardiomyopathy, and ischemic cardiomyopathy. RESULTS Subjects mean (SD) age was 43 (8) years, weight 91 (13) kg, and BMI of 28 (3) kg/square meter. Maximum oxygen uptake (VO2max) was 39 (9) ml/kg/min. This compares with the 45th %ile in healthy reference values and a recommended standard of 42 ml/kg/min for firefighters. The metabolic threshold (VO2Theta) above which lactate accumulates was 23 (8) ml/kg/min. The chronotropic index, a measure of cardiovascular strain during XT was 35 (8) /L compared with reference values for men of 40 /L. Total cholesterol, LDL-C and HDL-C were 202 (34),126 (29), and 55 (15) mg/dl, respectively. Fifty-one percent of subjects had .3 cardiovascular risk factors, 2 subjects had resting hypertension (BP.140/90), and 23 had pre-hypertension (.120/80 but <140/90). Seven had exaggerated exercise induced hypertension but only one had ST depression on XT ECG, at least one positive A-ECG score for CAD, and documented CAD based on cardiology referral. While all other subjects, including those with fewer risk factors, higher aerobic fitness, and normal exercise ECGs, were classified as healthy by A-ECG, there was no trend for association between risk factors and any of 20 A-ECG parameters in the grouped data. CONCLUSIONS A-ECG screening correctly identified the individual with CAD although there was no trend for A-ECG parameters to distinguish those with elevated BP or multiple risk factors but normal XT ECG. We have demonstrated that a new technology, advanced-ECG, can be introduced for remote firefighter risk assessment. This simple, time and cost-effective approach to risk identification that can be acquired remotely and transmitted securely can detect individuals potentially at risk for line-of-duty death. Additional research is needed to further document its value.

Dolezal, B. A.↗

Method for scrambling satellite communications

A secure communications system multiplexes segments of the information signal for keyed encoding and modulation onto a plurality of different carrier frequencies and/or polarizations, and transmits the encoded carriers to multi-channel signal summing receivers that decode the segments from all channels, to reassemble the information signal for use by authorized stations with a key. The use of the multi-channel link and the summing receiver allows the greatest number of different coding algorithms for accommodating the greatest number of discrete secure channels.

Brockman, Milton H.↗

NASA Tech Briefs, March 2007

Topics include: Advanced Systems for Monitoring Underwater Sounds; Wireless Data-Acquisition System for Testing Rocket Engines; Processing Raw HST Data With Up-to-Date Calibration Data; Mobile Collection and Automated Interpretation of EEG Data; System for Secure Integration of Aviation Data; Servomotor and Controller Having Large Dynamic Range; Digital Multicasting of Multiple Audio Streams; Translator for Optimizing Fluid-Handling Components; AIRSAR Web-Based Data Processing; Pattern Matcher for Trees Constructed From Lists; Reducing a Knowledge-Base Search Space When Data Are Missing; Ground-Based Correction of Remote-Sensing Spectral Imagery; State-Chart Autocoder; Pointing History Engine for the Spitzer Space Telescope; Low-Friction, High-Stiffness Joint for Uniaxial Load Cell; Magnet-Based System for Docking of Miniature Spacecraft; Electromechanically Actuated Valve for Controlling Flow Rate; Plumbing Fixture for a Microfluidic Cartridge; Camera Mount for a Head-Up Display; Core-Cutoff Tool; Recirculation of Laser Power in an Atomic Fountain; Simplified Generation of High-Angular-Momentum Light Beams; Imaging Spectrometer on a Chip; Interferometric Quantum-Nondemolition Single-Photon Detectors; Ring-Down Spectroscopy for Characterizing a CW Raman Laser; Complex Type-II Interband Cascade MQW Photodetectors; Single-Point Access to Data Distributed on Many Processors; Estimating Dust and Water Ice Content of the Martian Atmosphere From THEMIS Data; Computing a Stability Spectrum by Use of the HHT; Theoretical Studies of Routes to Synthesis of Tetrahedral N4; Estimation Filter for Alignment of the Spitzer Space Telescope; Antenna for Measuring Electric Fields Within the Inner Heliosphere; Improved High-Voltage Gas Isolator for Ion Thruster; and Hybrid Mobile Communication Networks for Planetary Exploration.

Source record↗

Frequency Injection Based HVDC Attack-Defense Control Via Squeeze-Excitation Double CNN

Due to the independent controllability and fast power regulation capability, the High Voltage Direct Current (HVDC) system could be a prospective technology to provide multiple ancillary services to the system besides conventional bulk power transmission. However, with the increase of False Data Injection Attacks (FDIAs) on PMU data, the HVDC system could have the wrong response once the collected data that the HVDC system relied on is attacked, thus threatening the system operating security. How to ensure the security of the PMU-based HVDC ancillary service control become an urgent issue. To mitigate the risk, this paper proposed an HVDC attack-defense control based on the FDIAs detection method. Firstly, the Squeeze-Excitation based Double Convolutional Neural Networks (SE-DCNN) is proposed to realize fast identification of the attacking frequency type based on the time and frequency domain signals. Furthermore, the duration time of FDIAs is detected by the local outlier factor. Then, utilizing the results from SE-DCNN, HVDC ancillary service control framework is reorganized and an HVDC attack defense control is proposed for suppressing the potential influence of various types of FDIAs on the HVDC system ancillary service. Different experiments results demonstrate that the proposed method has the ability to significantly mitigate the frequency deviation and oscillation under the FDIA.

42 ENGINEERING↗