Search NASA⌕ Search

SEARCH · Search NASA

Results for “Security Considerations”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3
All sourcesNASA NTRSDOE OSTI
NASA NTRS1973

Feasibility study of an Integrated Program for Aerospace vehicle Design (IPAD). Volume 4: IPAD system design

The computing system design of IPAD is described and the requirements which form the basis for the system design are discussed. The system is presented in terms of a functional design description and technical design specifications. The functional design specifications give the detailed description of the system design using top-down structured programming methodology. Human behavioral characteristics, which specify the system design at the user interface, security considerations, and standards for system design, implementation, and maintenance are also part of the technical design specifications. Detailed specifications of the two most common computing system types in use by the major aerospace companies which could support the IPAD system design are presented. The report of a study to investigate migration of IPAD software between the two candidate 3rd generation host computing systems and from these systems to a 4th generation system is included.

Goldfarb, W.↗
NASA NTRS1984

Operation of a single-channel, sequential Navstar GPS receiver in a helicopter mission environment

It is pointed out that the future utilization of the Navstar Global Positioning System (GPS) by civil helicopters will provide an enhanced performance not obtainable with current navigations systems. GPS will supply properly equipped users with extremely accurate three-dimensional position and velocity information anywhere in the world. Preliminary studies have been conducted to investigate differential GPS concept mechanizations and cost, and to theoretically predict navigation performance and the impact of degradation of the GPS C/A code for national security considerations. The obtained results are encouraging, but certain improvements are needed. As a second step in the program, a single-channel sequential GPS navigator was installed and operated in the NASA SH-3G helicopter. A series of flight tests were conducted. It is found that performance of the Navstar GPS Z-set is quite acceptable to support area navigation and nonprecision approach operations.

Edwards, F. G.↗
NASA NTRS1993

The Database Query Support Processor (QSP)

The number and diversity of databases available to users continues to increase dramatically. Currently, the trend is towards decentralized, client server architectures that (on the surface) are less expensive to acquire, operate, and maintain than information architectures based on centralized, monolithic mainframes. The database query support processor (QSP) effort evaluates the performance of a network level, heterogeneous database access capability. Air Force Material Command's Rome Laboratory has developed an approach, based on ANSI standard X3.138 - 1988, 'The Information Resource Dictionary System (IRDS)' to seamless access to heterogeneous databases based on extensions to data dictionary technology. To successfully query a decentralized information system, users must know what data are available from which source, or have the knowledge and system privileges necessary to find out this information. Privacy and security considerations prohibit free and open access to every information system in every network. Even in completely open systems, time required to locate relevant data (in systems of any appreciable size) would be better spent analyzing the data, assuming the original question was not forgotten. Extensions to data dictionary technology have the potential to more fully automate the search and retrieval for relevant data in a decentralized environment. Substantial amounts of time and money could be saved by not having to teach users what data resides in which systems and how to access each of those systems. Information describing data and how to get it could be removed from the application and placed in a dedicated repository where it belongs. The result simplified applications that are less brittle and less expensive to build and maintain. Software technology providing the required functionality is off the shelf. The key difficulty is in defining the metadata required to support the process. The database query support processor effort will provide quantitative data on the amount of effort required to implement an extended data dictionary at the network level, add new systems, adapt to changing user needs, and provide sound estimates on operations and maintenance costs and savings.

Source record↗
NASA NTRS2012

An Evaluation of Protocols for UAV Science Applications

This paper identifies data transport needs for current and future science payloads deployed on the NASA Global Hawk Unmanned Aeronautical Vehicle (UAV). The NASA Global Hawk communication system and operational constrains are presented. The Genesis and Rapid Intensification Processes (GRIP) mission is used to provide the baseline communication requirements as a variety of payloads were utilized in this mission. User needs and desires are addressed. Protocols are matched to the payload needs and an evaluation of various techniques and tradeoffs are presented. Such techniques include utilization rate-base selective negative acknowledgement protocols and possible use of protocol enhancing proxies. Tradeoffs of communication architectures that address ease-of-use and security considerations are also presented.

Ivancic, William D.↗
DOE OSTI2020

The Future of Fuels: Meeting Global Decarbonization Goals

Petroleum has served as the source of the vast majority of our transportation fuel for well over a century. During the past few decades, biofuels—primarily ethanol, biodiesel, renewable diesel/jet, and renewable natural gas—have steadily increased in volume though still represent a small portion of the total fuel mix. While initially driven by energy security considerations, recent policies promoting increased biofuel use have been motivated by greenhouse gas reductions. Within the past couple years, significant interest has emerged in “e-fuels”—fuels produced from a carbon source (e.g., CO2) and electricity. If sourced from renewable electrons, e-fuels have the potential to provide significant GHG reductions, though questions of scale and economics remain. This talk will discuss recent research into advanced fuels properties and production routs, as well as issues and challenges that fuels must overcome to power ICEs in the mid 21st century.

47 OTHER INSTRUMENTATION↗
DOE OSTI2021

Enabling Computation on Sensitive Data in International Safeguards with Privacy-Preserving Encryption Techniques

Privacy-preserving machine learning is a field of study that explores how to protect and preserve the privacy of sensitive data while allowing the data to be used by machine learning algorithms. This field has had substantial industry investment due to heightened concerns about privacy in the technology industry, with a focus in two broad application areas: financial services and healthcare. Numerous privacy-preserving methods have also been proposed for international safeguards, but they have been difficult to enact because the data they require is con- sidered sensitive or proprietary by the nuclear facility operator. This work examines how current privacy-preserving approaches might be used to enable the International Atomic Energy Agency (IAEA) to use that data to contribute to a safeguards conclusion about a state while giving nuclear operators confidence that their sensitive data is adequately protected. This paper begins by exploring several broad categories of privacy-preserving techniques including homomorphic encryption, secure multiparty computation, secure enclaves, and zero-knowledge proofs. Then we discuss some of the security considerations related to using these methods, potential use cases, and a conceptual system design for applying privacy-preserving methods in international safeguards.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2024

UAS IMPLEMENTATION CONSIDERATIONS FOR NUCLEAR SECURITY

Uncrewed aerial systems (UAS) have been an area of focus for the Office of International Nuclear Security within the US Department of Energy’s National Nuclear Security Administration and other foreign and domestic organizations for several years. This emerging technology provides significant capabilities to the nuclear security realm, but there are many things to consider when implementing them into an established security design or network. The goal of this paper is to discuss some of the benefits, challenges, and lessons learned with using UAS at nuclear facilities and during transport of material. Generic examples of UAS implementation will be used to facilitate a publicly releasable paper and presentation. The paper will start with a summary of the types and capabilities of UAS to provide a better understanding for people unfamiliar with current and new capabilities of these systems. Since there are many different types and sizes of UAS, this paper will focus on drones 55 lb and smaller. Then some of the use cases of UAS for security and challenges of employing them will be covered. Finally, lessons learned and some best practices that Oak Ridge National Laboratory has discovered from research, development, testing, and evaluation will be summarized.

Stockwell, Brandon↗
NASA NTRS1990

Considerations of persistence and security in CHOICES, an object-oriented operating system

The current design of the CHOICES persistent object implementation is summarized, and research in progress is outlined. CHOICES is implemented as an object-oriented system, and persistent objects appear to simplify and unify many functions of the system. It is demonstrated that persistent data can be accessed through an object-oriented file system model as efficiently as by an existing optimized commercial file system. The object-oriented file system can be specialized to provide an object store for persistent objects. The problems that arise in building an efficient persistent object scheme in a 32-bit virtual address space that only uses paging are described. Despite its limitations, the solution presented allows quite large numbers of objects to be active simultaneously, and permits sharing and efficient method calls.

Campbell, Roy H.↗
DOE OSTI2020

Regulatory Development Challenges and Opportunities for the Safe and Secure Transport of Radioactive Materials

Drafting regulations for transport safety and transport security achieve two separate objectives, which can lead to divergent outcomes. With transport safety, the principle goal is to protect the public and the environment from the effects of ionizing radiation, while in contrast, the principle goal of transport security is to protect the material from malicious actors. While many Member States may have transport safety regulations for radioactive materials, transport security regulatory development is still in its nascent stages globally. Trying to develop harmonized transport safety and transport security regulations could lead to challenges ranging from differences in terminology used in transport safety versus terminology uses in transport security, roles and responsibilities for the variety of stakeholders involved in transport, and finally, the possible role of multiple competent authorities in governing the transport of dangerous goods, which includes radioactive material. While the International Atomic Energy Agency (IAEA) is currently developing a process of a methodology for drafting transport security regulations, any process must address both safety considerations and security requirements. (As the most vulnerable part of the life cycle of radioactive materials, the need for harmonized transport safety/transport security regulations is essential.) This paper investigates the regulatory elements of the safety-security interface for nuclear and other radioactive material in transport. Examining challenges including use of terms, the role of multiple competent authorities, and practical challenges involved in the safe and secure transport of radioactive material, the paper analyzes the need for integrated regulatory development for the safe and secure transport of these materials.

Anderson, Kimberly↗
NASA NTRSDate not supplied

NASA Aeronautics Research Mission Directorate System Security Engineering Approaches

System security engineering (SSE) is a set of formal engineering methods and is considered a subset of systems engineering. It is a relatively new development in systems engineering with the initial NIST (National Institute of Standards) standard published in November of 2016 with updates in 2018, and 2022. The guiding principles in our methodology are based in NIST Special Publication 800-160 Vol. 1 “Systems Security Engineering: Considerations For A Multidisciplinary Approach In The Engineering Of Trustworthy Secure Systems” and integrate methodologies from common IT (Information Technology) threat modeling approaches utilizing MBSE (Model-Based Systems Engineering). The presentation will discuss how our teams utilize SSE and MBSE (Model-Based Systems Engineering) to develop secure architectures for systems under development in our NASA aeronautics research environment. This includes the activities to develop Protection Needs (PN) that, in turn result in security requirements in the design context and policies for the future state operational context for system protection. The process of applying SSE to analyze project architectures and ConOps (Concept of Operations) is intended to ensure the transferred research is both secure and securable in a “real-world” setting.

Systems Security Engineering↗
DOE OSTI2022

Security Architecture for Microgrid Integration

The purpose of this document is to present cyber security risk considerations and mitigations for community microgrids. The mitigations discussed herein specifically focus on cyber security technical requirements for the De-centralized Autonomous Community Controller (DAC) as part of the SECURE project’s technology development effort. These requirements also consider the associated security implementation challenges involved with the decentralized characteristics of microgrids where upstream communications to utility security management functions are lost. These security recommendations and technical requirements may be used by microgrid implementers and technology vendors to specify the security design of the microgrid systems and their components.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Advanced Reactor Designs Security Analysis, Risk, and Recommendations: Risks, Consequences, and Possible by-Design Mitigation Approaches Associated with Select Advanced Reactors

Next-generation advanced reactors (ARs) incorporate enhanced safety systems, have smaller source terms, and feature compact modular designs, which should lessen their collective risk profiles. However, to fully evaluate risk, security needs to be a part of the equation. Without taking security into consideration, safety systems and components in the new ARs may be vulnerable to sabotage. These base attributes, coupled with enhanced security features specific to AR design through sound engineering and security-by-design (SeBD), should provide developers and operators with lower inherent security risk profiles. Building security early into the AR design may remove or passively secure potential critical targets from an adversary’s reach , thereby increasing overall safety and security. An integrated approach and diverse design team that includes engineering, operations, and security experts are fundamental to building security into the design without sacrificing fundamental operational efficiencies and principles. The objective of this project was to evaluate the security and safety interfaces for five classes of reactors, identify potential security vulnerabilities of structures, systems, and components (SSC), and underscore the need to consider security alongside safety in the design o f these concepts. The five reactor classes evaluated in this project and presented in this report are molten-salt reactors (MSR), high temperature gas reactors (HTGR), sodium-fast reactors (SFR), advanced light-water reactors (ALWR), and microreactors. These designs were selected because they reflect the concepts that are closest to market deployment and have received significant resource investments from the public and private sector. This project assesses the inherent security risks posed by common classes of ARs, provides a methodology and framework to assess security along with safety, and offers an analysis of potential mitigation strategies that could be incorporated. For each AR technology, the SSCs that relate to radionuclide source safety functions are discussed to understand the SSC contribution to safety and relative importance in the protective strategy for the design. The assumptions that went into evaluating each reactor concept originated from generic publicly available nonproprietary information and should not directly be used to qualify an absolute risk profile nor to rank specific AR designs. Instead, the purpose of the analysis is to understand and compare the generic inherent security risks of different AR technologies.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗
DOE OSTI2013

Communication Simulations for Power System Applications

New smart grid technologies and concepts, such as dynamic pricing, demand response, dynamic state estimation, and wide area monitoring, protection, and control, are expected to require considerable communication resources. As the cost of retrofit can be high, future power grids will require the integration of high-speed, secure connections with legacy communication systems, while still providing adequate system control and security. While considerable work has been performed to create co-simulators for the power domain with load models and market operations, limited work has been performed in integrating communications directly into a power domain solver. The simulation of communication and power systems will become more important as the two systems become more inter-related. This paper will discuss ongoing work at Pacific Northwest National Laboratory to create a flexible, high-speed power and communication system co-simulator for smart grid applications. The framework for the software will be described, including architecture considerations for modular, high performance computing and large-scale scalability (serialization, load balancing, partitioning, cross-platform support, etc.). The current simulator supports the ns-3 (telecommunications) and GridLAB-D (distribution systems) simulators. Ongoing and future work will be described, including planned future expansions for a traditional transmission solver. A test case using the co-simulator, utilizing a transactive demand response system created for the Olympic Peninsula and AEP gridSMART demonstrations, requiring two-way communication between distributed and centralized market devices, will be used to demonstrate the value and intended purpose of the co-simulation environment.

co-simulation↗
NASA NTRS2018

Engineering Trade-off Considerations Regarding Design-for-Security, Design-for-Verification, and Design-for-Test

The United States government has identified that application specific integrated circuit (ASIC) and field programmable gate array (FPGA) hardware are at risk from a variety of adversary attacks. This finding affects system security and trust. Consequently, processes are being developed for system mitigation and countermeasure application. The scope of this tutorial pertains to potential vulnerabilities and countermeasures within the ASIC/FPGA design cycle. The presentation demonstrates how design practices can affect the risk for the adversary to: change circuitry, steal intellectual property, and listen to data operations. An important portion of the design cycle is assuring the design is working as specified or as expected. This is accomplished by exhaustive testing of the target design. Alternatively, it has been shown that well established schemes for test coverage enhancement (design-for-verification (DFV) and design-for-test (DFT)) can create conduits for adversary accessibility. As a result, it is essential to perform a trade between robust test coverage versus reliable design implementation. The goal of this tutorial is to explain the evolution of design practices; review adversary accessibility points due to DFV and DFT circuitry insertion (back door circuitry); and to describe common engineering trade-off considerations for test versus adversary threats.

Design for reliability (DFR)↗
DOE OSTI2021

Experimental decoy-state Bennett-Brassard 1984 quantum key distribution through a turbulent channel

In free-space quantum key distribution (QKD) in turbulent conditions, scattering and beam wandering cause intensity fluctuations which decrease the detected signal-to-noise ratio. This effect can be mitigated by rejecting received bits when the channel's transmittance is below a threshold. Thus, the overall error rate is reduced and the secure key rate increases despite the deletion of bits. In this work, we implement recently proposed selection methods focusing on the prefixed-threshold real-time selection (P-RTS) where a cutoff can be chosen prior to data collection and independently of the transmittance distribution. We perform finite-size decoy-state Bennett-Brassard 1984 QKD in a laboratory setting where we simulate the atmospheric turbulence using an acousto-optical modulator. We show that P-RTS can yield considerably higher secure key rates for a wide range of the atmospheric channel parameters. In addition, we evaluate the performance of the P-RTS method for a realistically finite sample size. We demonstrate that a near-optimal selection threshold can be predetermined even with imperfect knowledge of the channel transmittance distribution parameters.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2021

Securing Distributed Energy Resource Integration

The penetration of distributed energy resources (DER) is growing at much higher rates than predicted 20 years ago. Far from being used only in residential settings, DER are now installed on distribution and transmission circuits. In this position, they do not have the same properties as traditional generators and are more flexible in many cases. The growing penetration and range of uses for DER motivate the need to reliably and safely integrate them into the grid. Operators must be able to rely on them not only for normal operation, but also during abnormal conditions like black starts or adverse cyber scenarios. To that end, we study the communications, device interfaces, and potential consequences of DER operation under abnormal and adversarial conditions. The weaknesses of communications networks are studied based on the industrial protocols used, and the benefits of security features are examined. The device interfaces are found to be vulnerable to attack based on the requirements in the IEEE-1547 standard for DER interconnection and interoperability, which is expected to be adopted in the next ten years. In addition to exploring the requirements of the standard, we show that these vulnerabilities and others do exist and can be used maliciously in a modern storage system DER. Consequences of these vulnerabilities range from exacerbated grid instability, to simultaneous loss of large portions of DER penetration, to physical damage to inverters or DER themselves and other sensitive equipment. We tie these outcomes to specific attacker actions in an effort to give operators a better threat intelligence view that allows them to prioritize mitigations. Finally, we discuss mitigations that could prevent many of the adversarial scenarios described. Some solutions can be added to existing infrastructure, while others may require longer term planning for grid modernization with consideration for security.

25 ENERGY STORAGE↗
DOE OSTI2021

National and Regional Initiatives to Promote Energy Efficiency and Renewable Energy Through State Energy Offices

The National Association of State Energy Officials (NASEO) worked with the U.S. Department of Energy’s (DOE) Office of Energy Efficiency and Renewable Energy (EERE), Weatherization and Intergovernmental Programs Office (WIP) over a ten year period to provide technical assistance, research and analyses, and enhanced coordination between DOE and the State and Territory Energy Offices. Over the life of the agreement, NASEO worked with WIP and the states to provide statewide strategic energy plan analyses and recommendations, including customized technical assistance to the states; peer to peer financing assistance via NASEO’s Financing Committee and supporting activities; training on core energy policies and programs, including dialogues and resources to support energy-air coordination, a training for new State Energy Office Directors, peer to peer exchange via a rural energy taskforce, and support to states to enhance buildings efficiency, home energy labeling, and technology deployment opportunities; support for State Energy Program metrics; and regional coordination via regional coordinators and peer exchange opportunities both in-person and online. Over the life of the project, the position and role of State Energy Offices within state government has changed, with now 80 percent of State Energy Office Directors serving as their Governor’s energy advisor, or reporting directly to their Governor’s energy advisor. This shift in stature has made it ever more crucial for State Energy Offices to receive timely and relevant technical assistance across a range of energy issue areas. NASEO, in collaboration with WIP, was able to deliver this technical assistance, and energy efficiency and renewable energy deployment has accelerated across the country. The State Energy Office Directors and their staff continue to engage in NASEO’s Committees – many of which were supported through this agreement – and have provided formal and informal feedback on the value of the programs supported through this award (e.g., reporting via survey increased understanding of their roles and technical assistance offerings provided by WIP and NASEO following the New Director Trainings). Moreover, resources developed through this award (e.g., Comprehensive State Energy Planning Guidelines, State Energy Loan Fund Database, Rural Data Resources for State Energy Planning and Programs, The Value of Adding home Energy Score to Low-Income Energy Efficiency Programs, etc.) have been cited by states as instrumental to their understanding of specific energy issue areas and in many cases led directly to enhanced program design within a state (e.g. Iowa citing their review of NASEO’s Comprehensive State Energy Planning Guidelines as a necessary first step in their planning process, later following may of the steps outlined in the guidelines). The priorities of the states and federal government have evolved over the last decade, with an increasing focus on climate mitigation and adaptation, equity impacts and considerations, energy security and resilience, and enhanced energy efficiency and renewable energy technology deployment, but the roots of these new priorities are based in the state and federal policies and programs, and research and analyses, that were supported in part through this award and other complementary initiatives. NASEO looks forward to continuing to support the states, and collaborate and coordinate with DOE, as we build on this important foundation in the years ahead.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2020

Generic characterization of electrical test benches for AC- and HVDC-connected wind power plants

The electrical test and assessment of wind turbines go hand in hand with standards and network connection requirements. In this paper, the generic structure of advanced electrical test benches, including grid emulator or controllable grid interface, wind torque emulator, and device under test, is proposed to harmonize state-of-the-art test sites. On the other hand, modern wind turbines are under development towards new features, concerning grid-forming, black-start, and frequency support capabilities as well as harmonic stability and control interaction considerations, to secure the robustness and stability of renewable-energy-based power systems. Therefore, it is necessary to develop new and revised test standards and methodologies to address the new features of wind turbines. This paper proposes a generic test structure within two main groups, including open-loop and closed-loop tests. The open-loop tests include the IEC 61400-21-1 standard tests as well as the additional proposed test options for the new capabilities of wind turbines, which replicate grid connection compliance tests using open-loop references for the grid emulator. In addition, the closed-loop tests evaluate the device under test as part of a virtual wind power plant and perform real-time simulations considering the grid dynamics. The closed-loop tests concern grid connection topologies consisting of AC and HVDC, as well as different electrical characteristics, including impedance, short-circuit ratio, inertia, and background harmonics. The proposed tests can be implemented using available advanced test benches by adjusting their control systems. The characteristics of a real power system can be emulated by a grid emulator coupled with real-time digital simulator systems through a high-bandwidth power-hardware-in-the-loop interface.

17 WIND ENERGY↗