Search NASA⌕ Search

SEARCH · Search NASA

Results for “SECURITY MANAGEMENT”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3
All sourcesNASA NTRSDOE OSTI
NASA NTRS2004

Security engineering: systems engineering of security through the adaptation and application of risk management

Information Technology (IT) Security Risk Management is a critical task in the organization, which must protect its resources and data against the loss of confidentiality, integrity, and availability. As systems become more complex and diverse, and more vulnerabilities are discovered while attacks from intrusions and malicious content increase, it is becoming increasingly difficult to manage IT security. This paper describes an approach to address IT security risk through risk management and mitigation in both the institution and in the project life cycle.

security↗
DOE OSTI2022

Modular Security Apparatus for Managing Distributed Cryptography for Command-and-Control Messages on Operational Technology Networks (Module-OT)

Module-OT is a bump- in- the- wire solution acting as a secure conduit for data between devices or systems across a network. Using the latest in open-source cryptographic libraries, all defined communications undergo authentication, authorization, and encryption. The core system can be easily installed through industry standard processes, and the use of popular open-source packages allows for it to be customizable customized by the developer community or deployed in unique embedded environments.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Lifecycle Management of Nuclear Security Radiation Detection Systems: Testing and Evaluation

The lifecycle of radiation detection systems functioning within a State’s Nuclear Security Detection Architecture encompasses all activities associated with acquisition, deployment, and eventual disposal. Throughout a system’s lifecycle, testing and evaluation activities are needed to ensure requirements are continually met, as underscored by recent experiences.This paper provides:1.A discussion of reasons why testing should be part of the radiation detection equipment lifecycle before, during, and after acquisition.2.A general process for determining applicable evaluation methods.3.A discussion of issues related to integrating testing and evaluation into procurement and operational processes and mitigation strategies.

Harris, Tyrone↗
NASA NTRS1983

Guidelines for development of NASA (National Aeronautics and Space Administration) computer security training programs

The report presents guidance for the NASA Computer Security Program Manager and the NASA Center Computer Security Officials as they develop training requirements and implement computer security training programs. NASA audiences are categorized based on the computer security knowledge required to accomplish identified job functions. Training requirements, in terms of training subject areas, are presented for both computer security program management personnel and computer resource providers and users. Sources of computer security training are identified.

Tompkins, F. G.↗
DOE OSTI2022

An Intelligent Distributed Ledger Construction Algorithm for IoT

Blockchain is the next generation of secure data management that creates near-immutable decentralized storage. Secure cryptography created a niche for blockchain to provide alternatives to well-known security compromises. However, design bottlenecks with traditional blockchain data structures scale poorly with increased network usage and are extremely computation-intensive. This made the technology difficult to combine with limited devices, like those in Internet of Things networks. In protocols like IOTA, replacement of blockchain's linked-list queue processing with a lightweight dynamic ledger showed remarkable throughput performance increase. However, current stochastic algorithms for ledger construction suffer distinct trade-offs between efficiency and security. This work proposed a machine-learning approach with a multi-arm bandit that resolved these issues and was designed for auditing on limited devices. This algorithm was tested in a reinforcement-learning environment simulating the IOTA ledger's construction with a decision tree. This study showed through regret analysis and experimentation that this approach was secure against impulse manipulation attacks while remaining energy-efficient. Although the IOTA protocol was a pioneer for lightweight distributed ledgers, it is expected that future blockchain protocols will adopt techniques similar to those presented in this work.

multi-arm bandit↗
DOE OSTI2020

Waste Shipments to and from the Nevada National Security Site, Radioactive Waste Management Complex (Transportation Report, Q1 FY2020)

This report satisfies the U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office commitment to prepare a quarterly summary of waste shipments to the Nevada National Security Site Radioactive Waste Management Complex in Area 5. This report summarizes the first quarter of fiscal year 2020.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

Document Management: A Focused Analysis on the Configuration Management Process at Y-12 National Security Complex

The configuration management process at Y-12 is a crucial process to ensure safe operations and compliance with Department of Energy (DOE) regulations and requirements. This process is evaluated utilizing systems-thinking methodology in order to understand the current operational flow, with the ultimate goal of building an easily understandable, representative model. This model offers insights on key areas of waste and provides a potential solution by modernizing rate limiting steps: a software implementation to update the traditional document management system and make it paperless. Stakeholders of the software implementation are identified in order to define characteristic requirements of an effective product and the anticipated benefit is evaluated. Ultimately, this project is an effort to increase the quality of life for all stakeholders, while improving the capacity, throughput, and effectiveness of a necessary process at Y-12.

42 ENGINEERING↗
DOE OSTI2022

NEVADA NATIONAL SECURITY SITE 2021 WASTE MANAGEMENT MONITORING REPORT AREA 3 AND AREA 5 RADIOACTIVE WASTE MANAGEMENT SITES

Environmental monitoring data are collected at and around the Area 3 and Area 5 Radioactive Waste Management Sites (RWMSs) within the Nevada National Security Site (NNSS). This report summarizes the 2021 environmental data to provide an overall evaluation of RWMS performance and to support environmental compliance and performance assessment (PA) activities.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

Nevada National Security Site 2019 Waste Management Monitoring Report Area 3 and Area 5 Radioactive Waste Management Sites

Environmental monitoring data are collected at and around the Area 3 and Area 5 Radioactive Waste Management Sites (RWMSs) within the Nevada National Security Site (NNSS). This report summarizes the 2019 environmental data to provide an overall evaluation of RWMS performance and to support environmental compliance and performance assessment (PA) activities. Some of these data (e.g., radiation exposure, air, and groundwater) are presented in other reports (Mission Support and Test Services, LLC 2019, 2020a, 2020b). Direct radiation monitoring data indicate exposure levels at the Area 3 and Area 5 RWMSs are within the range of background levels measured at the NNSS. Slightly elevated exposure levels outside the Area 3 RWMS are attributed to nearby historical aboveground nuclear weapons tests. Air monitoring data at the Area 3 and Area 5 RWMSs show that tritium concentrations in water vapor and americium and plutonium concentrations in air particles are below Derived Concentration Standards for these radionuclides. Groundwater monitoring data indicate the groundwater in the uppermost aquifer beneath the Area 5 RWMS is not impacted by RWMS operations. Results of groundwater analysis from wells around the Area 5 RWMS are below established investigation levels. Leachate samples collected from the leachate collection systems at the Area 5 mixed low-level waste disposal unit are below established contaminant regulatory limits. During 2019, precipitation at the Area 3 RWMS was 77 percent above average, and precipitation at the Area 5 RWMS was 69 percent above average. Water balance measurements indicate that evapotranspiration from the vegetated weighing lysimeter at the Area 5 RWMS dries the soil and prevents downward percolation of precipitation more effectively than evaporation as measured from the bare-soil weighing lysimeter. Vadose zone monitoring in the Area 3 and Area 5 RWMS soil covers shows no evidence of precipitation percolating through the covers to the waste. Moisture from precipitation did not percolate below 120 centimeters (3.9 feet [ft]) in the vegetated final cover on the U-3ax/bl disposal unit at the Area 3 RWMS during 2019. There was no drainage through 2.4 meters (8 ft) of soil as indicated from the Area 3 drainage lysimeters that received only natural precipitation. At the Area 3 RWMS, which received three times the natural precipitation, 57 percent of the applied precipitation and irrigation drained from the bare-soil drainage lysimeter. All 2019 monitoring data indicate that the Area 3 and Area 5 RWMSs are performing within expectations of the model and parameter assumptions for the facilities’ PAs.

2019↗
DOE OSTI2025

Federal Facility Agreement and Consent Order Nevada National Security Site Use Restriction Management Plan

This Use Restriction Management Plan (URMP) provides the information needed to create, modify, and manage use restrictions (URs) for sites on the Nevada National Security Site (NNSS), and sites accessed through the NNSS main gate, that were closed using the corrective action alternative (CAA) of closure in place under the Federal Facility Agreement and Consent Order (FFACO) (1996, as amended).

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2020

Waste Shipments to and from the Nevada National Security Site, Radioactive Waste Management Complex (Q3 Transportation Report, FY20) Transportation Report

This report satisfies the U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office (NNSA/NFO) commitment to prepare a quarterly summary of waste shipments to the Nevada National Security Site (NNSS) Radioactive Waste Management Complex (RWMC) in Area 5.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2024

Federal Facility Agreement and Consent Order: Nevada National Security Site Use Restriction Management Plan with ROTC 1

This Use Restriction Management Plan (URMP) provides the information needed to create, modify, and manage use restrictions (URs) for sites on the Nevada National Security Site (NNSS), and sites accessed through the NNSS main gate, that were closed using the corrective action alternative (CAA) of closure in place under the Federal Facility Agreement and Consent Order (FFACO) (1996, as amended). (Note: This pertains to those FFACO sites not managed by the U.S. Department of Energy [DOE], Legacy Management.) The closure in place alternative is used for sites closed with residual contamination at levels requiring corrective action as determined using the FFACO process. The URs contain and control all requirements for long-term monitoring. This URMP also serves as the single repository of the URs implemented under the FFACO that identify use restricted areas and contain the current requirements for inspections, maintenance, and monitoring of the UR. The requirements in these URs replace all requirements listed in previous documentation. This consolidates post-closure monitoring requirements into a single source that ensures completeness and consistency of UR requirements and information. Standardized UR forms were developed to clearly document post-closure requirements that are consistent with current protocols and to ensure consistent information is contained in the URs. Standard notification, summary, and site controls statements were developed for all URs with provisions to insert site-specific options in the text. Current protocols for Industrial Sites and Soils URs are defined in this document and in the Soils Risk-Based Corrective Action (RBCA) Evaluation Process (DOE/EMNV, 2018). The standardized UR forms that have been approved to date are listed in Appendix A. Additional UR forms will be added once the review and approval process has been completed.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Security Catch and Release Automation Manager (SCRAM) v1.0

This is a security automation tool heavily influenced by the tool written at NCSA https://github.com/ncsa/bhr-site. The tool is a web interface that aims to centralize information on blocking malicious traffic. There is a list of currently blocked traffic, a place for other tools to automatically add traffic they deem malicious, as well as for human users to input blocks. * Logging and auditing, to determine who made what change and when * Automated expiration of changes (e.g. an exception is added for 2 weeks, after which time it will be removed) * Validation of changes and verification that the change has been applied * Fine-grained role-based access

Oehlert, Samuel↗