Search NASA⌕ Search

SEARCH · Search NASA

Results for “security properties”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

Reducing Software Security Risk Through an Integrated Approach

This paper discusses new joint work by the California Institute of Technology's Jet Propulsion Laboratory and the University of California at Davis sponsored by the National Aeronautics and Space Administration to develop a security assessment instrument for the software development and maintenance life cycle.

risk matrix↗

Proof Compression and the Mobius PCC Architecture for Embedded Devices

The EU Mobius project has been concerned with the security of Java applications, and of mobile devices such as smart phones that execute such applications. In this talk, I'll give a brief overview of the results obtained on on-device checking of various security-related program properties. I'll then describe in more detail how the concept of certified abstract interpretation and abstraction-carrying code can be applied to polyhedral-based analysis of Java byte code in order to verify properties pertaining to the usage of resources of a down-loaded application. Particular emphasis has been on finding ways of reducing the size of the certificates that accompany a piece of code.

Jensen, Thomas↗

Securing Sensitive Flight and Engine Simulation Data Using Smart Card Technology

NASA Glenn Research Center has developed a smart card prototype capable of encrypting and decrypting disk files required to run a distributed aerospace propulsion simulation. Triple Data Encryption Standard (3DES) encryption is used to secure the sensitive intellectual property on disk pre, during, and post simulation execution. The prototype operates as a secure system and maintains its authorized state by safely storing and permanently retaining the encryption keys only on the smart card. The prototype is capable of authenticating a single smart card user and includes pre simulation and post simulation tools for analysis and training purposes. The prototype's design is highly generic and can be used to protect any sensitive disk files with growth capability to urn multiple simulations. The NASA computer engineer developed the prototype on an interoperable programming environment to enable porting to other Numerical Propulsion System Simulation (NPSS) capable operating system environments.

Blaser, Tammy M.↗

Security and Privacy in Cyber-Physical Systems

As you have seen from the previous chapters, cyber-physical systems (CPS) are broadly used across technology and industrial domains. While these systems enable process optimization and efficiency and allow previously impossible functionality, security and privacy are key concerns for their design, development, and operation. CPS have been key components utilized in some of the highest publicized security breaches over the last decade. In this chapter, we will look over the CPS described in the previous chapters from a security perspective. In this chapter, we explain classical information and physical security fundamentals in the context of CPS and contextualize them across application domains. We give examples where the interplay of functionality and diverse communication can introduce unexpected vulnerabilities and produce larger impacts. We will discuss how CPS security and privacy is inherently different from that of pure cyber or physical systems and what may be done to secure these systems, considering their emergent cyber-physical properties. Finally, we will discuss security and privacy implications of merging infrastructural and personal CPS. Our hope is to impart the knowledge of what CPS security and privacy are, why they are important, and explain existing processes and challenges.

Cyber-physical systems↗

Security analysis of RSA cryptosystem algorithm and it’s properties

The information technology rapidly development and dramatically changed the life style people, in addition to shortening the distance of communication, but also promote the smooth exchange of information flows. However, derivatives to facilitate the relative safety of these issues, since into the digital information age, the majority of the practitioners of engineering and technical personnel and technical workers in terms of technology, information security is increasingly becoming an important issue. The RSA algorithm was published in 1978. It is a kind of very popular and widely application modem cryptosystem in the world. Even though there are lots of articles to discuss about how to break the RSA, but it is still secure today. In this paper, the authors would like to introduce a variant attack to RSA.

97 MATHEMATICS AND COMPUTING↗

Managing information technology security risk

Information Technology (IT) Security Risk Management is a critical task for the organization to protect against the loss of confidentiality, integrity and availability of IT resources. As systems bgecome more complex and diverse and and attacks from intrusions and malicious content increase, it is becoming increasingly difficult to manage IT security risk. This paper describes a two-pronged approach in addressing IT security risk and risk management in the organization: 1) an institutional enterprise appraoch, and 2) a project life cycle approach.

security toolset↗

Comprehensive Land Use and Environmental Stewardship

Comprehensive Land Use and Environmental Stewardship (CLUES) Report serves as a summary document of the land use and environmental stewardship activities occurring on the Idaho National Laboratory (INL) Site (Desert) and the Research and Education Campus (REC) within Idaho Falls. Land and facility use planning and decisions at the INL Site are guided by a comprehensive planning process in accordance with the United States (U.S.) Department of Energy (DOE) Order 430.1C, “Real Property Asset Management,” which states "Establish a data-driven, risk-informed, performance-based approach to the life-cycle management of real property assets that aligns the real property portfolio with DOE mission needs; acquire, manage, positively account for, and dispose of real property assets in a safe, secure, cost-effective, and sustainable manner; and ensure the real property portfolio is appropriately sized, aligned, and in the proper condition to support efficient mission execution." Land use planning, like Campus Master Planning and 5-Year Facility Planning, provides a means for better, more sustainable use of the INL Site in a coordinated effort to ensure current and future mission needs are met, including acquisition, recapitalization, maintenance, disposition, real property utilization and long-term stewardship. This document and all functions of INL are guided by the DOE Vision for INL and the INL Mission and builds on the baseline established in the FY 2015 CLUES Report. However, it delivers a revised structure with focus on new resource management zones, which provide organization of key management considerations and access restrictions to optimize land use and environmental stewardship. A new set of thematic Guiding Principles presented in this report provide the intent and sustainable management direction to protect the INL Site natural environment. They demonstrate that the mission and vision of DOE and INL can be realized with inclusion of first of a kind technology, private sector development, and globally recognized testing and demonstration. This CLUES Report encourages comprehensive management decision-making with additional resource discussions for sustainability, the built environment, and the ecological landscape at the INL Site. Enhanced resource considerations and trends emphasize the importance of air, land use, environmental, subsurface, and cultural resources. The INL Site supports exceptional and interdependent resources. A diversity of bat species are accommodated by culturally significant caves distributed around the Site. Big game species like elk, deer, and moose seek vegetation communities which are protected by long-term stewardship and monitoring programs.

99 GENERAL AND MISCELLANEOUS↗

The Demographics, Stellar Populations, and Star Formation Histories of Fast Radio Burst Host Galaxies: Implications for the Progenitors

We present a comprehensive catalog of observations and stellar population properties for 23 highly secure host galaxies of fast radio bursts (FRBs). Our sample comprises 6 repeating FRBs and 17 apparent nonrepeaters. We present 82 new photometric and 8 new spectroscopic observations of these hosts. Using stellar population synthesis modeling and employing nonparametric star formation histories (SFHs), we find that FRB hosts have a median stellar mass of ≈10 9.9 M ⊙ , mass-weighted age ≈5.1 Gyr, and ongoing star formation rate ≈1.3 M ⊙ yr -1 but span wide ranges in all properties. Classifying the hosts by degree of star formation, we find that 87% (20 of 23 hosts) are star-forming, two are transitioning, and one is quiescent. The majority trace the star-forming main sequence of galaxies, but at least three FRBs in our sample originate in less-active environments (two nonrepeaters and one repeater). Across all modeled properties, we find no statistically significant distinction between the hosts of repeaters and nonrepeaters. However, the hosts of repeating FRBs generally extend to lower stellar masses, and the hosts of nonrepeaters arise in more optically luminous galaxies. While four of the galaxies with the clearest and most prolonged rises in their SFHs all host repeating FRBs, demonstrating heightened star formation activity in the last ≲100 Myr, one nonrepeating host shows this SFH as well. Our results support progenitor models with short delay channels (i.e., magnetars formed via core-collapse supernova) for most FRBs, but the presence of some FRBs in less-active environments suggests a fraction form through more delayed channels.

79 ASTRONOMY AND ASTROPHYSICS↗

Recovery Act. Sub-Soil Gas and Fluid Inclusion Exploration and Slim Well Drilling, Pumpernickel Valley, Nevada

Nevada Geothermal Power Company (NGP) was awarded DOE Award DE-EE0002834 in January 2010 to conduct sub-soil gas and fluid inclusion studies and slim well drilling at its Black Warrior Project (now known as North Valley) in Washoe and Churchill Counties, Nevada. The project was designed to apply highly detailed, precise, low-cost subsoil and down-hole gas geochemistry methods from the oil and gas industry to identify upflow zone drilling targets in an undeveloped geothermal prospect. NGP ran into multiple institutional barriers with the Black Warrior project relating to property access and extensive cultural survey requirement. NGP requested that the award be transferred to NGP’s Pumpernickel Valley project, due to the timing delay in obtaining permits, along with additional over-budget costs required. Project planning and permit applications were developed for both the original Black Warrior location and at Pumpernickel. This included obtaining proposals from contractors able to conduct required environmental and cultural surveying, designing the two-meter probe survey methodology and locations, and submitting Notices of Intent and liaising with the Bureau of Land Management to have the two-meter probe work approved. The award had an expiry date of April 30, 2013; however, due to the initial project delays at Black Warrior, and the move of the project from Black Warrior to Pumpernickel, NGP requested that the award deadline be extended. DOE was amenable to this, and worked with NGP to extend the deadline. However, following the loss of the Blue Mountain geothermal power plant in Nevada, NGP’s board of directors changed the company’s mandate to one of cash preservation. NGP was unable to move forward with field work on the Pumpernickel property, or any of its other properties, until additional funding was secured. NGP worked to bring in a project partner to form a joint venture on the property, or to buy the property. This was unsuccessful, and NGP notified the DOE on February 13, 2014 that it would not be able to complete the project objectives before the recovery act awards deadline and submitted a mutual termination request to the DOE which was accepted.

15 GEOTHERMAL ENERGY↗

Simulation and Modeling of Optical Properties of U, Th, Pb, and Co Nanoparticles of Interest to Nuclear Security Using Finite Element Analysis

In this work, the optical characteristics of uranium (U), lead (Pb), cobalt (Co), and thorium (Th) nanoparticles are fashioned and simulated employing the finite element analysis (FEA) approach concerning multiple particle sizes. Applying finite element analysis, it was found that the simulated absorption peaks of electronic excitations of nuclear nanoparticles are red-shifted from 365 nm to 555 nm for U; from 355 nm to 550 nm for Pb; from 415 nm to 610 nm for Co; and from 350 nm to 540 nm for Th, comparing expanding particle sizes from 60 nm to 100 nm (except for Co, which varied from 70 nm to 100 nm). The FEA-simulated optical band gap energies and far-field radiation patterns were also obtained for nuclear materials. The simulation approach in this research enables the prediction of optical properties and design of nuclear materials before manufacture for nuclear security applications.

36 MATERIALS SCIENCE↗

GraphCH: A Deep Framework for Assessing Cyber-Human Aspects in Insider Threat Detection

Insider threat is one of the most damaging cyber attacks that could cause the loss of intellectual property and enterprise data security breaches. Action sequence data such as host logs are used to investigate such threats and develop anomaly-based AI detectors. However, insider threat actions are similar to legitimate user activities, causing AI detectors to fail and suffer from high false alarm rates. Therefore, user cyber activity logs are inadequate to fully unfold insider threats. In this study, we adopt human psychological principles of risk-taking and impulsiveness along with host data to assess the influence and usefulness of human behavioral aspects in insider threat detection. Here, we hypothesize that individuals' impulsive and risk-taking behavior correlates with cyberspace activities. To validate our hypothesis, we conducted an IRB-approved study recruiting 35 participants who work in a large U.S. university and collected their cyber and psychological data for 90 days. Host and human-behavioral data analysis and mapping indicate that impulsive and risk-taking users trigger more system errors causing (un)intentional insider threats and are susceptible to attackers' social engineering and cognitive hacking. Utilizing cyber-human aspects, we introduce a Cyber-Human Graph Neural Network (GNN) based framework GraphCH to identify abnormal user behaviors and detect insider threats.

97 MATHEMATICS AND COMPUTING↗

Development of Compositional Relationships for a Glassy Slag Material for Municipal Waste Residues Resulting from a Gasification Process.

Air Products (AP) is developing a technology that uses plasma-enhanced gasification to create syngas from municipal solid waste (MSW), for the purpose of generating electricity at a large scale. The inorganic components in the MSW need to form a glassy slag that flows easily through the bed material in the gasifier. Air Products has tasked the Savannah River National Laboratory (SRNL) – a leader in development of glassy materials technologies to support Department of Energy (DOE) missions in environmental management, nuclear security, and energy security – to improve the properties and performance of the glassy material produced from MSW gasification. The objectives of this study are to define an acceptable composition range over which the glassy slag can be produced while still meeting leaching (or durability) requirements as well as to advance the understanding of the fate of trace metals originally present in the MSW. The FY12 CRADA defined six tasks for the SRNL and Air Products joint effort.

09 BIOMASS FUELS↗

Performance of Scintillation Detectors Based on Quantum Dots in a Semiconductor Matrix (Final Technical Report)

InAs Quantum Dots (QDs) embedded into GaAs semiconductor waveguide have unique scintillation properties, valuable for nuclear security, medical imaging, and high energy physics. In this work, we developed thick (~25um) epitaxial heterostructres with high luminescence efficiency composed of self-assembled nano-engineered InAs QDs grown by molecular beam epitaxy. In this type of detector, the GaAs matrix acts as a stopping material for charged particles or photons generating electrons captured by the QDs acting as luminescence centers. The QD medium is designed to provide fast capture of electrons into QDs (few ps), high QD luminescence efficiency at room temperature (>50%), and strong red-shift of photoluminescence (PL) from the GaAs absorption edge (>250nm). Typical devices consist of a 10-25um thick GaAs layer with embedded sheets of modulation p-type doped InAs QDs and an InGaAs photodetector tuned to the QD emission wavelength. The thick GaAs layer acts also as a waveguide when layer-transferred onto a low-index substrate. Waveguiding and self-absorption (~1cm -1 ) were studied using photoluminescence with scanning laser excitation and modeled with ray optics approximation and geometrical coupling of high-index waveguide to a collection fiber. Scintillating signals from α-particles were analyzed with both an external photodiode (PD) and an integrated PD which provided an improved optical coupling. In the former case, the external InGaAs PD was air-coupled to the scintillator and had the light collection efficiency of about 1% corresponding to limited light extraction through a planar interface with air due to total internal reflection. The mean charge collected by the integrated PD was in the range of (3÷5)×10 4 photoelectrons per 1 MeV of deposited energy, or ~13-20% of the theoretically achievable light yield. Timing of the integrated device was measured by wire-bonding it to the input of an 8 GHz IC. The scintillation response shows an extremely fast 0.3-0.6 ns decay constant and about 40-70 ps time resolution, limited by the system noise. The combined light yield and decay time makes the InAs/GaAs QD heterostructures the fastest high yield scintillation material reported making it valuable for high energy physics and medical imaging applications.

77 NANOSCIENCE AND NANOTECHNOLOGY↗

Decision Engines for Software Analysis Using Satisfiability Modulo Theories Solvers

The area of software analysis, testing and verification is now undergoing a revolution thanks to the use of automated and scalable support for logical methods. A well-recognized premise is that at the core of software analysis engines is invariably a component using logical formulas for describing states and transformations between system states. The process of using this information for discovering and checking program properties (including such important properties as safety and security) amounts to automatic theorem proving. In particular, theorem provers that directly support common software constructs offer a compelling basis. Such provers are commonly called satisfiability modulo theories (SMT) solvers. Z3 is a state-of-the-art SMT solver. It is developed at Microsoft Research. It can be used to check the satisfiability of logical formulas over one or more theories such as arithmetic, bit-vectors, lists, records and arrays. The talk describes some of the technology behind modern SMT solvers, including the solver Z3. Z3 is currently mainly targeted at solving problems that arise in software analysis and verification. It has been applied to various contexts, such as systems for dynamic symbolic simulation (Pex, SAGE, Vigilante), for program verification and extended static checking (Spec#/Boggie, VCC, HAVOC), for software model checking (Yogi, SLAM), model-based design (FORMULA), security protocol code (F7), program run-time analysis and invariant generation (VS3). We will describe how it integrates support for a variety of theories that arise naturally in the context of the applications. There are several new promising avenues and the talk will touch on some of these and the challenges related to SMT solvers. Proceedings

Bjorner, Nikolaj↗

Collaborative Approaches in Developing Environmental and Safety Management Systems for Commercial Space Transportation

The Federal Aviation Administration (FAA), Office of Commercial Space Transportation (AST) licenses and permits U.S. commercial space launch and reentry activities, and licenses the operation of non-federal launch and reentry sites. ASTs mission is to ensure the protection of the public, property, and the national security and foreign policy interests of the United States during commercial space transportation activities and to encourage, facilitate, and promote U.S. commercial space transportation. AST faces unique challenges of ensuring the protection of public health and safety while facilitating and promoting U.S. commercial space transportation. AST has developed an Environmental Management System (EMS) and a Safety Management System (SMS) to help meet its mission. Although the EMS and SMS were developed independently, the systems share similar elements. Both systems follow a Plan-Do-Act-Check model in identifying potential environmental aspects or public safety hazards, assessing significance in terms of severity and likelihood of occurrence, developing approaches to reduce risk, and verifying that the risk is reduced. This paper will describe the similarities between ASTs EMS and SMS elements and how AST is building a collaborative approach in environmental and safety management to reduce impacts to the environment and risks to the public.

Federal Aviation Administration (FAA)↗

Runtime Analysis with R2U2: A Tool Exhibition Report

We present R2U2 (Realizable, Responsive, Unobtrusive Unit), a hardware- supported tool and framework for the continuous monitoring of safetycritical and embedded cyber-physical systems.With the widespread advent of autonomous systems such as Unmanned Aerial Systems (UAS), satellites, rovers, and cars, real-time, on-board decision making requires unobtrusive monitoring of properties for safety, performance, security, and system health. R2U2 models combine past-time and future-time Metric Temporal Logic, “mission time” Linear Temporal Logic, probabilistic reasoning with Bayesian Networks, and modelbased prognostics. The R2U2 monitoring engine can be instantiated as a hardware solution, running on an FPGA, or as a software component. The FPGA realization enables R2U2 to monitor complex cyber-physical systems without any overhead or instrumentation of the flight software. In this tool exhibition report, we present R2U2 and demonstrate applications on system runtime monitoring, diagnostics, software health management, and security monitoring for a UAS. Our tool demonstration uses a hardware-based processor-in-the-loop “iron-bird” configuration.

Johann Martin Schumann↗

Mitigation for the demolition of the foundation of building 25-3113/3113a, area 25, Nevada national security site, NYE county, Nevada

The purpose of this letter report is to document the mitigation of adverse effects of a proposed undertaking that would demolish the foundation of Building 25-3113/3113A and the adjoining test pad at Test Cell A in Area 25 of the Nevada National Security Site (NNSS) in compliance with the terms of the 2024 Programmatic Agreement among the U.S. Department of Energy and the Nevada State Historic Preservation Officer and the Advisory Council on Historic Preservation Concerning the Protection of Historic Properties on the Nevada National Security Site, Nye County, Nevada (NNSS PA). The foundation of Building 25-3113/3113A (State Historic Preservation Office [SHPO] Resource # B2443) is a contributing element to the Nuclear Rocket Development Station (NRDS) Historic District (SHPO Resource # D424), which has been determined eligible for listing in the National Register of Historic Places (NRHP) under Criteria A, B, C, and D (Reno et al. 2023). The proposed demolition constitutes an adverse effect. The U.S. Department of Energy (DOE) National Nuclear Security Administration Nevada Field Office (NNSA/NFO) consulted with the SHPO on an adverse effect finding for the undertaking and notified the SHPO of its intent to use the standard mitigation in the NNSS PA on December 11, 2024 (Julian to Reed). The SHPO concurred on December 30, 2024 (Reed to Julian). Therefore, NNSA/NFO has prepared mitigation pursuant to the standard mitigation in the NNSS PA Appendix D.I.A for contributing elements to recorded, NRHP-eligible districts.

#B2443↗

Mitigation for the demolition of building 25-3124,equipment testing laboratory, area 25, Nevada national security site, NYE county, Nevada

The purpose of this letter report is to document the mitigation of adverse effects of a proposed undertaking that would demolish Building 25-3124 in Area 25 of the Nevada National Security Site (NNSS) in compliance with the terms of the 2024 Programmatic Agreement among the U.S. Department of Energy and the Nevada State Historic Preservation Officer and the Advisory Council on Historic Preservation Concerning the Protection of Historic Properties on the Nevada National Security Site, Nye County, Nevada (NNSS PA). Building 25-3124 (State Historic Preservation Office [SHPO] Resource # B19009) is a contributing element to the Nuclear Rocket Development Station (NRDS) Historic District (SHPO Resource # D424), which has been determined eligible for listing in the National Register of Historic Places (NRHP) under Criteria A, B, C, and D (Reno et al. 2023). The proposed demolition constitutes an adverse effect. The U.S. Department of Energy (DOE) National Nuclear Security Administration Nevada Field Office (NNSA/NFO) consulted with the SHPO on an adverse effect finding for the undertaking and notified the SHPO of its intent to use the standard mitigation in the NNSS PA on December 11, 2024 (Julian to Reed). The SHPO concurred on December 30, 2024 (Reed to Julian). Therefore, NNSA/NFO has prepared mitigation pursuant to the standard mitigation in the NNSS PA Appendix D.I.A for contributing elements to recorded, NRHP-eligible districts.

#B19009↗