Search NASA⌕ Search

SEARCH · Search NASA

Results for “Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Security Evaluation of Smart Cards and Secure Tokens: Benefits and Drawbacks for Reducing Supply Chain Risks of Nuclear Power Plants

The supply chain attack pathway is being increasingly used by adversaries to bypass security controls and gain unauthorized access to sensitive networks and equipment (e.g., Critical Digital Assets). Cyber-attacks targeting supply chain generally aim to compromise the environments, products, or services of vendors and suppliers to inject, add, or substitute authentic software and hardware with malicious elements. These malicious elements are deemed to be authentic as they arise from the vendor or supplier (i.e., the supply chain). This research aims to leverage findings and assumptions made from the previous report to determine the security benefits and drawbacks of a smart card- based hardware root of trust. Smart cards can provide devices inside Nuclear Power Plants (NPP) with a secure environment to store keys in and perform sensitive operations such as digital signature generation. These abilities can be leveraged to increase supply chain cybersecurity by autonomously providing NPP Licensees with reports on device integrity, authenticity and measurements of executable and non-executable data.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
NASA NTRS2011

Computer Network Security- The Challenges of Securing a Computer Network

This article is intended to give the reader an overall perspective on what it takes to design, implement, enforce and secure a computer network in the federal and corporate world to insure the confidentiality, integrity and availability of information. While we will be giving you an overview of network design and security, this article will concentrate on the technology and human factors of securing a network and the challenges faced by those doing so. It will cover the large number of policies and the limits of technology and physical efforts to enforce such policies.

Scotti, Vincent, Jr.↗
NASA NTRS2017

Security Vulnerability Profiles of Mission Critical Software: Empirical Analysis of Security Related Bug Reports

While some prior research work exists on characteristics of software faults (i.e., bugs) and failures, very little work has been published on analysis of software applications vulnerabilities. This paper aims to contribute towards filling that gap by presenting an empirical investigation of application vulnerabilities. The results are based on data extracted from issue tracking systems of two NASA missions. These data were organized in three datasets: Ground mission IVV issues, Flight mission IVV issues, and Flight mission Developers issues. In each dataset, we identified security related software bugs and classified them in specific vulnerability classes. Then, we created the security vulnerability profiles, i.e., determined where and when the security vulnerabilities were introduced and what were the dominating vulnerabilities classes. Our main findings include: (1) In IVV issues datasets the majority of vulnerabilities were code related and were introduced in the Implementation phase. (2) For all datasets, around 90 of the vulnerabilities were located in two to four subsystems. (3) Out of 21 primary classes, five dominated: Exception Management, Memory Access, Other, Risky Values, and Unused Entities. Together, they contributed from 80 to 90 of vulnerabilities in each dataset.

Goseva-Popstojanova, Katerina↗
NASA NTRS2003

Reducing software security risk through an integrated approach research initiative model based verification of the Secure Socket Layer (SSL) Protocol

This document discusses the verification of the Secure Socket Layer (SSL) communication protocol as a demonstration of the Model Based Verification (MBV) portion of the verification instrument set being developed under the Reducing Software Security Risk (RSSR) Trough an Integrated Approach research initiative. Code Q of the National Aeronautics and Space Administration (NASA) funds this project. The NASA Goddard Independent Verification and Validation (IV&V) facility manages this research program at the NASA agency level and the Assurance Technology Program Office (ATPO) manages the research locally at the Jet Propulsion Laboratory (California institute of Technology) where the research is being carried out.

software security↗
DOE OSTI2024

Building Intelligence with Layered Defense Using Security-Constrained Optimization and Security Risk Detection (BUILD-SOS): A Probabilistic Approach

In this project, we employ a layered protection strategy incorporating advanced optimization and detection techniques using a probabilistic approach. The probabilistic approach is not only applied when detecting cyber attacks, but also incorporated in control strategies, which greatly increases the attacking difficulties. Hackers need to understand both probabilistic detection algorithms and uncertainty modeling methods in control in order to execute any effective attacks. The end-to-end solutions enable us to provide Building Intelligence with Layered Defense using Security-Constrained Optimization and Security Risk Detection (BUILD-SOS).

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2024

Water Security: Trends, Capabilities, and Research Directions to Secure Water Infrastructure

Water and wastewater sector is target rich and resource poor ~153k water utilities, serve 80% of US population ~16k publicly-owned wastewater systems in the US serve 75% of the population Need scalable solutions to fit small and medium to large systems Federal attention to critical infrastructure continues to grow – particularly in the water sector Increase in water sector incidents and threats for large scale disruption – particularly by nation-state actors and their proxies EPA is the SRMA DHS CISA focuses on critical infrastructure protection across sectors They must work together to secure WWW systems Research capabilities to enable secure water systems Current and future threats Resilience – natural disasters, accidents, cyber-physical attacks

99 - GENERAL AND MISCELLANEOUS↗
DOE OSTI2018

EISA (Energy Independence and Security Act) compliant ethanol fuel from corn stover in a depot-based decentralized system

Cellulosic biofuels face significant problems of feedstock aggregation and logistics leading to poor economies of scale. The current model is based on relatively small biorefineries using locally-gathered feedstocks. Here, we examine the potential capacity of a hypothetically distributed, depot-based, biorefinery system to produce cellulosic ethanol from corn stover in the United States Midwest. The local depots serve to aggregate, pretreat and densify biomass (via pellets), which are collected, transported, and fed to a few very large, cellulosic ethanol biorefineries. We found that a corn stover-based depot system would help establish one or two very large-scale biorefineries capable of processing about 8-12% of total corn stover available in the United States Midwest. About 55-153 depots could supply the pretreated pellets to each distributed biorefinery leading to an annual production of 1.02 - 2.91 billion liters of cellulosic ethanol. Most of the participating depots would be located in Illinois and Iowa. The ethanol selling price in this depot-based biorefinery system would varys between U$S 0.67 and U$S 0.72 liter-1. The estimated range of GHG savings from cellulosic ethanol in the depot system compared to gasoline was 3.35-4.84 Tg CO2 year-1. In addition of being economically competitive, a distributed, depot-based, biorefinery system could meet the 60% GHG reduction requirement of the U.S. Energy Independence and Security Act (EISA).

Biorefinery, Cellulosic biofuel, Corn stover, Dist↗
DOE OSTI2020

Secure Design and Development Cyber Security Capability Maturity Model” (SD2-CM2)

The "Secure Design and Development Cyber Security Capability Maturity Model" (SD2-CM2) allows electrical system managers to assess the maturity of their cybersecurity systems, including designs reflecting internet of things devices (IOT). The content provides best practices in the field and users can assess the level of their designs. Modules are "Content" and "Infrastructure"

Gourisetti, Sri Nikhil Gupta↗
DOE OSTI2018

Unreviewed Disposal Question Evaluation: Disposal of the Nevada National Security Site Uranium Powder at the Area 5 Radioactive Waste Management Site, Nevada National Security Site

This Unreviewed Disposal Question Evaluation (UDQE) assesses whether the Nevada National Security Site (NNSS) Uranium Powder (Normal, depleted uranium [DU], low-enriched uranium [LEU]) is suitable for shallow land burial (SLB) at the Area 5 Radioactive Waste Management Site (RWMS) on the Nevada National Security Site.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2019

Unreviewed Disposal Question Evaluation: Disposal of the Consolidated Nuclear Security, LLC Classified Mixed Waste Asbestos Neutron Generators at the Area 5 Radioactive Waste Management Site, Nevada National Security Site, Nye County, Nevada

This Unreviewed Disposal Question Evaluation assesses whether the Consolidated Nuclear Security, LLC (CNS) Classified Mixed Waste (MW) Asbestos Neutron Generators is suitable for shallow land burial at the Area 5 Radioactive Waste Management Site on the Nevada National Security Site. Disposal of the waste stream meets all performance objectives in DOE M 435.1-1, Radioactive Waste Management Manual, Chapter IV, Section P. The CNS Classified MW Asbestos Neutron Generators waste stream is recommended for acceptance without conditions.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2021

Statement of Work. Y-12 National Security Complex Security Infrastructure Revitalization Program Project - Combination Inspector

The Y-12 SIRP Quadrant 1, Quadrant 2, and Vehicle Barrier project involves the following summary elements. The perimeter intrusion detection and assessment system (PIDAS) is an existing system at the Y-12 National Security Complex, which is a government-owned facility located in Oak Ridge, Tennessee, and managed by Consolidated Nuclear Security, LLC (CNS) for the Department of Energy (DOE). National Technology and Engineering Solutions of Sandia, LLC (NTESS) is the engineering design agent and construction manager (CM) for the Y-12 SIRP effort. The Quadrants 1 and 2 portion of the project involves the replacement of the PIDAS, and the vehicle barrier portion of the project involves the installation of a continuous passive vehicle barrier alongside the inner PIDAS fence.

42 ENGINEERING↗
NASA NTRS2000

Endpoint Security Using Biometric Authentication for Secure Remote Mission Operations

We propose a flexible security authentication solution for the spacecraft end-user, which will allow the user to interact over Internet with the spacecraft, its instruments, or with the ground segment from anywhere, anytime based on the user's pre-defined set of privileges. This package includes biometrics authentication products, such as face, voice or fingerprint recognition, authentication services and procedures, such as: user registration and verification over the Internet and user database maintenance, with a configurable schema of spacecraft users' privileges. This fast and reliable user authentication mechanism will become an integral part of end-to-end ground-to-space secure Internet communications and migration from current practice to the future. All modules and services of the proposed package are commercially available and built to the NIST BioAPI standard, which facilitates "pluggability" and interoperability.

Donohue, John T.↗