Application of the Information Harm Triangle to inform defensive strategies for the protection of NPP I&C systems.
Abstract not provided.
Rowland, Michael Terence↗
SEARCH · Search NASA
Results for “information protection”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Cyber for Manufacturing [slides]
Protecting sensitive information is the number one national security challenge facing the United States. The US Manufacturing Industrial Base (MIB) information supply chain is extremely vulnerable to cyber attack from nation-state adversaries, criminal enterprises and insiders.
45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
Application of the IHT to inform defensive strategies for the protection of NPP I&C systems.
Abstract not provided.
Rowland, Michael Terence↗
Status of the HPRR Experiments Evaluation to Create a Published Shielding Benchmark [Slides]
The goal of this presentation is to use available data from Health Physics Research Reactor (HPRR) operation to create a benchmark report for inclusion in the ICSBEP, as a Criticality Accident Alarm System (CAAS) shielding benchmark.
96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
Initial CRADA Abstract
CRADA Abstract for publication on OSTI as required by DOE O 483.1B. Abstract does not contain protected CRADA information.
99 GENERAL AND MISCELLANEOUS↗
The Design and Evaluation of Zero Trust Architecture for Electric Vehicle Charging Infrastructure: EVs @ Scale Series on EV Charging Station Cybersecurity
Implementing a zero trust architecture can significantly bolster the security of electric vehicle (EV) charging infrastructure. EV charging infrastructure includes numerous networked interfaces, each of which can present potential vulnerabilities. When these vulnerabilities are exploited, they can compromise the entire system, leading to severe operational and security risks. Zero trust is a security model that operates on the principle of "never trust, always verify," which helps manage the attack surface and limit the scope of any potential compromises. Fundamentally, this model ensures that no entity, whether inside or outside the network, is trusted by default. The design principles of zero trust include continuous verification, strict deny-by-default access controls, and micro-segmentation. Continuous verification ensures that every request is thoroughly checked, regardless of its origin. Strict access controls enforce the principle of least privilege, allowing users and devices only the minimum necessary access to perform their functions. Micro-segmentation involves dividing the network into smaller, isolated segments to prevent lateral movement in case of a breach. In the context of EV charging infrastructure, zero trust can be implemented through various strategies. For example, multi-factor authentication (MFA) can be required for engineers to access the management interfaces and control systems of charging stations. Real-time monitoring and analysis of network traffic can help detect and respond to anomalies. Systems that do not need to communicate with each other can be micro-segmented to enhance security. All communications should adhere to predefined policies to be permitted. Additionally, encrypting communications can protect sensitive information exchanged between chargers and management systems. This paper presents a zero trust architecture specifically designed for EV charging infrastructure. Implementing zero trust not only mitigates risks but also builds a resilient infrastructure capable of withstanding and quickly recovering from cyber threats. The architecture addresses six defined security objectives. A comprehensive test plan is developed to assess the architecture against these objectives, and the results of the evaluation are reported. This approach is essential for maintaining the reliability and integrity of EV charging services in an increasingly interconnected and vulnerable digital landscape. This is the first in a planned series of papers exploring the implementation of zero trust in EV charging infrastructure. Each paper will delve into different aspects and applications of zero trust, highlighting how various work processes and requirements can lead to distinct architectural designs. These architectures will be tailored to address specific security challenges and operational needs within the EV charging ecosystem, ensuring a robust and adaptable security framework.
33 ADVANCED PROPULSION SYSTEMS↗
STARFIRE – Science and Technology Accelerated Research for Fusion Innovation and Reactor Engineering progress report
The STARFIRE hub leverages foundational science and technology (S&T) research and integrated plant modeling tools to advance Inertial Fusion Energy (IFE). S&T breakthroughs achieved in each thrust are incorporated into an integrated modeling tool to assess and prioritize remaining gaps to bridge for IFE to become viable. Scientific highlights span high-gain target design, diode-pumped solid-state lasers, and innovative target manufacturing. Key highlights include the investigation of shock propagation through various foam structures among other limiting factors of compression of IFE target, exploration of novel 3D printing techniques such as light-sheet additive manufacturing for 2-photon polymerization foams, and diode-pumped solid-state laser architectures required for several IFE approaches. In addition, the STARFIRE team has established two public-private working groups to address laser diode supply chain issues and test advanced laser diode configurations. Finally, a lite version of the integrated modeling tool has been developed to facilitate outreach and engage with private companies. STARFIRE’s management structure has been designed to ensure agile resource allocation, robust performance assessment, and alignment with the broader fusion energy mission. STARFIRE’s breakthroughs are disseminated to the community via reports, presentations, and publications, while agreements with private companies are set in place to protect proprietary information.
70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
EVALUATING NUCLEAR SECURITY IMPLICATIONS OF THE SPLINTERNET
The internet, which for years has been viewed as a global online commons with standardized protocols but few regulations is, according to some experts, starting to mirror the contentious political and commercial contours of the physical world. Contributing to this is the rise in data breaches, cyber-enabled attacks on critical infrastructure, government surveillance operations, theft of intellectual property, manipulation of electoral processes, and perceived erosion of privacy, all of which are resulting in a growing skepticism that an open internet will naturally serve the best interests of users, communities, countries, and the global economy. In addition, the rapidly emerging and increasingly lucrative power of data has global superpowers scrambling to protect their informational sovereignty as an urgent matter of national security. Underscoring this urgency is the fact that, despite its global reach and cosmopolitan contributor base, internet infrastructure and governance of the World Wide Web remain largely under U.S. corporate auspices, which reinforces the perception of U.S. control. Whether fragmentation is politically, economically, or socially motivated, there appears to be a growing appetite for an internet that is partitioned and controlled at the national level. From “the Great Firewall of China” to the “Halal” internet of Iran, the trend towards a “Splinternet” has courts and governments embarking on what some call a "legal arms race" to impose a maze of national or regional rules, often conflicting, in the digital realm. The paper explores the emerging Splinternet phenomenon, analyses the implications of this trend on nuclear security, and identifies questions that present opportunities for future research.
Internet, Data Security, Cyber Security, Nuclear S↗
Application of Information Harm Triangle to inform defensive strategies for the protection of NPP I&C systems.
Abstract not provided.
Rowland, Michael Terence↗
Privacy-Aware RAG-Enabled LLMs for Collaborative AI in Organizations
Recent advancements in Large Language Models (LLMs) based on Transformer architectures have significantly improved capabilities in natural language processing and generation. However, deploying LLMs for inter-organizational communication poses challenges, in ensuring privacy and facilitating effective collaboration. This paper introduces a novel decentralized inference meta-agent chatbot that leverages privacy-aware Retrieval-Augmented Generation (RAG)-enabled LLMs for collaborative AI communication across organizations. Built on Microsoft’s Autogen, the platform enables LLMs to autonomously refine responses, enhancing accuracy and relevance. It incorporates advanced hallucination mitigation techniques using Uptrain and a privacy-focused RAG framework that employs synthetic document generation to protect sensitive information. Comprehensive evaluations demonstrate the platform’s effectiveness in maintaining contextual relevance and stringent privacy standards, effectively addressing critical challenges in LLM-enhanced collaborative AI communication. This work represents a significant step toward secure and efficient inter-organizational collaboration using advanced generative AI technologies.
97 - MATHEMATICS AND COMPUTING↗
Modeling protected species distributions and habitats to inform siting and management of pioneering ocean industries: A case study for Gulf of Mexico aquaculture
Marine Spatial Planning (MSP) provides a process that uses spatial data and models to evaluate environmental, social, economic, cultural, and management trade-offs when siting (i.e., strategically locating) ocean industries. Aquaculture is the fastest-growing food sector in the world. The United States (U.S.) has substantial opportunity for offshore aquaculture development given the size of its exclusive economic zone, habitat diversity, and variety of candidate species for cultivation. However, promising aquaculture areas overlap many protected species habitats. Aquaculture siting surveys, construction, operations, and decommissioning can alter protected species habitat and behavior. Additionally, aquaculture-associated vessel activity, underwater noise, and physical interactions between protected species and farms can increase the risk of injury and mortality. In 2020, the U.S. Gulf of Mexico was identified as one of the first regions to be evaluated for offshore aquaculture opportunities as directed by a Presidential Executive Order. We developed a transparent and repeatable method to identify aquaculture opportunity areas (AOAs) with the least conflict with protected species. First, we developed a generalized scoring approach for protected species that captures their vulnerability to adverse effects from anthropogenic activities using conservation status and demographic information. Next, we applied this approach to data layers for eight species listed under the Endangered Species Act, including five species of sea turtles, Rice’s whale, smalltooth sawfish, and giant manta ray. Next, we evaluated four methods for mathematically combining scores (i.e., Arithmetic mean, Geometric mean, Product, Lowest Scoring layer) to generate a combined protected species data layer. The Product approach provided the most logical ordering of, and the greatest contrast in, site suitability scores. Finally, we integrated the combined protected species data layer into a multi-criteria decision-making modeling framework for MSP. This process identified AOAs with reduced potential for protected species conflict. These modeling methods are transferable to other regions, to other sensitive or protected species, and for spatial planning for other ocean-uses.
54 ENVIRONMENTAL SCIENCES↗
Barriers and Alternatives to Encryption in Critical Nuclear Systems
Over the past decade, cybersecurity researchers have released multiple studies highlighting the insecure nature of I&C system communication protocols. In response, standards bodies have addressed the issue by adding the ability to encrypt communications to some protocols in some cases, while control system engineers have argued that encryption within these kinds of high consequence systems is in fact dangerous. Certainly, control system information between systems should be protected. But encrypting the information may not be the best way to do so. In fact, while in IT systems vendors are concerned with confidentiality, integrity, and availability, frequently in that order, in OT systems engineers are much more concerned with availability and integrity that confidentiality. In this paper, we will counter specific arguments against encrypting control system traffic, and present potential alternatives to encryption that support nuclear OT system needs more strongly that commodity IT system needs while still providing robust integrity and availability guarantees.
42 ENGINEERING↗
A secure measurement unit for an inspection system used in nuclear arms-control verification
Verification of arms control treaties may require information barriers to protect sensitive data acquired during the verification process. These information barriers are commonly implemented in software, but must store and operate on data that are vulnerable to attack and tampering. Here, we present a new Secure Measurement Unit based on a modified pipeline SAR ADC architecture. The idea is to move the information barrier back into the digitization process so that prohibited data is never created. A prototype 65nm CMOS Secure Measurement Unit (SMU) was tested using U-235, U-238, Co-60, Cs-137 and Am-241 sources. Here, the prototype accurately digitized allowable signals while being immune to side-channel attacks on signals within preset forbidden regions.
46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
Hanford Site Bald Eagle Monitoring Report for Fiscal Year 2022
A national symbol of the United States, the Bald Eagle (Haliaeetus leucocephalus) plays an important role in the riverine ecosystem at the U. S. Department of Energy’s (DOE) Hanford Site. Historically, Bald Eagles have occupied the Hanford Site during the winter and early spring and have more recently remained through the nesting season. Monitoring is essential to maintain current biological information about Bald Eagle abundance and distribution on the Hanford Site, to ensure compliance with protection regulations, and to inform future protection and management efforts. This monitoring report provides an overview of Bald Eagle activity on the Hanford Site, along with Bald Eagle management guidelines and monitoring objectives between November 2021 and June 2022.
54 ENVIRONMENTAL SCIENCES↗
Hanford Site Bald Eagle Monitoring Report for Fiscal Year 2021
A national symbol of the United States, the Bald Eagle (Haliaeetus leucocephalus) plays an important role in the riverine ecosystem at the U. S. Department of Energy (DOE) Hanford Site. Historically, Bald Eagles have occupied the Hanford Site during the winter and early spring and have more recently remained through the nesting season. Monitoring is essential to maintain current biological information about Bald Eagle abundance and distribution on the Hanford Site, to ensure compliance with protection regulations, and to inform future protection and management efforts. This monitoring report provides an overview of Bald Eagle activity on the Hanford Site, along with Bald Eagle management guidelines and monitoring objectives between November 2020 and June 2021.
54 ENVIRONMENTAL SCIENCES↗
Hanford Site Bald Eagle Monitoring Report for Fiscal Year 2020
A national symbol of the United States, the Bald Eagle ( Haliaeetus leucocephalus ) plays an important role in the riverine ecosystem at the U. S. Department of Energy (DOE) Hanford Site. Historically, Bald Eagles have occupied the Hanford Site during the winter and early spring and have more recently remained through the nesting season. Monitoring is essential to maintain current biological information about Bald Eagle abundance and distribution on the Hanford Site, to ensure compliance with protection regulations, and to inform future protection and management efforts. This monitoring report provides an overview of Bald Eagle activity on the Hanford Site, along with Bald Eagle management guidelines and monitoring objectives between November 2019 and June 2020.
54 ENVIRONMENTAL SCIENCES↗
Hanford Site Bald Eagle Monitoring Report for Fiscal Year 2019
A national symbol of the United States, the Bald Eagle ( Haliaeetus leucocephalus ) plays an important role in the riverine ecosystem on the U. S. Department of Energy’s (DOE) Hanford Site. Historically, Bald Eagles have occupied the Hanford Site during the winter and early spring, and have more recently remained through the nesting season. Monitoring is essential to maintain current biological information about Bald Eagle abundance and distribution on the Hanford Site, to ensure compliance with protection regulations, and to inform future protection and management efforts. This monitoring report provides an overview of Bald Eagle activity on the Hanford Site, along with Bald Eagle management guidelines and monitoring objectives between November 2018 and July 2019.
54 ENVIRONMENTAL SCIENCES↗
The endosymbiotic box of protective tricks
This month’s Genome Watch underscores how genome and transcriptome sequencing of newly identified endosymbionts helps to connect genetic information to their protective functions.
59 BASIC BIOLOGICAL SCIENCES↗