Search NASA⌕ Search

SEARCH · Search NASA

Results for “secure data”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 559 records · Page 31

File Management In Space

We propose that the user interact with the spacecraft as if the spacecraft were a file server, so that the user can select and receive data as files in standard formats (e.g., tables or images, such as jpeg) via the Internet. Internet technology will be used end-to-end from the spacecraft to authorized users, such as the flight operation team, and project scientists. The proposed solution includes a ground system and spacecraft architecture, mission operations scenarios, and an implementation roadmap showing migration from current practice to the future, where distributed users request and receive files of spacecraft data from archives or spacecraft with equal ease. This solution will provide ground support personnel and scientists easy, direct, secure access to their authorized data without cumbersome processing, and can be extended to support autonomous communications with the spacecraft.

Critchfield, Anna R.↗

Accessing protected data by a high-performance computing cluster

A data protection system is provided that allows applications to access protected data in a way that restricts applications from outputting to unauthorized targets any unprotected data derived from the protected data and that ensures that the applications do not have access to a key that allows access to the unprotected data. The data protection system provides a policy server that may execute on a service node of a high performance computing system and a data encryption process that may execute on each compute node that is allocated to an application or batch job. The policy server maintains policies of entities specifying access control for protected data. The data encryption process generates a secure execution environment for an application process and interfaces with the policy server to retrieve keys for decrypting protected data in accordance with a policy, and it decrypts and provides the decrypted data to the application process.

Barnes, Peter↗

PAS: Privacy Algorithms in Systems

Today we face an explosion of data generation, ranging from health monitoring to national security infrastructure systems. More and more systems are connected to the Internet that collects data at regular time intervals. These systems share data and use machine learning methods for intelligent decisions, which resulted in numerous real-world applications (e.g., autonomous vehicles, recommendation systems, and heart-rate monitoring) that have benefited from it. However, these approaches are prone to identity thief and other privacy related cyber-security attacks. So, how can data privacy be protected efficiently in these scenarios? More dedicated efforts are needed to propose the integration of privacy techniques into existing systems and develop more advanced privacy techniques to address the complex challenges of multi-system connectivity and data fusion. Therefore, we have introduced Privacy Algorithms in Systems (PAS) at CIKM which provides a venue to gather academic researchers and industry researchers/practitioners to present their research in an effort to advance the frontier of this critical direction of privacy algorithms in systems.

Kotevska, Olivera↗

Data Descriptor: A Land Data Assimilation System for Sub-Saharan Africa Food and Water Security Applications

Seasonal agricultural drought monitoring systems, which rely on satellite remote sensing and land surface models (LSMs), are important for disaster risk reduction and famine early warning. These systems require the best available weather inputs, as well as a long-term historical record to contextualize current observations. This article introduces the Famine Early Warning Systems Network (FEWS NET) Land Data Assimilation System (FLDAS), a custom instance of the NASA Land Information System (LIS) framework. The FLDAS is routinely used to produce multi-model and multi-forcing estimates of hydro-climate states and fluxes over semi-arid, food insecure regions of Africa. These modeled data and derived products, like soil moisture percentiles and water availability, were designed and are currently used to complement FEWSNETs operational remotely sensed rainfall, evapotranspiration, and vegetation observations. The 30+ years of monthly outputs from the FLDAS simulations are publicly available from the NASA Goddard Earth Science Data and Information Services Center (GES DISC) and recommended for use in hydroclimate studies, early warning applications, and by agro-meteorological scientists in Eastern, Southern, and Western Africa.

albedo↗

Cybersecurity for distributed energy resources and smart inverters

The increased penetration of distributed energy resources (DER) will significantly increase the number of devices that are owned and controlled by consumers and third parties. These devices have a significant dependency on digital communication and control, which presents a growing risk from cyber attacks. This paper proposes a holistic attack-resilient framework to protect the the integrated DER and the critical power grid infrastructure from malicious cyber attacks, helping ensure the secure integration of DER without harming the grid reliability and stability. Specifically, we discuss the architecture of the cyber-physical power system with a high penetration of DER and analyze the unique cybersecurity challenges introduced by DER integration. Next, we summarize important attack scenarios against DER, propose a systematic DER resilience analysis methodology, and develop effective and quantifiable resilience metrics and design principles. Lastly, we introduce attack prevention, detection, and response measures specifically designed for DER integration across cyber, physical device, and utility layers of the future smart grid.

97 MATHEMATICS AND COMPUTING↗

PROSPECT-II physics opportunities

We report the precision reactor oscillation and spectrum experiment, PROSPECT, has made world-leading measurements of reactor antineutrinos at short baselines. In its first phase, conducted at the high flux isotope reactor (HFIR) at Oak Ridge National Laboratory, PROSPECT produced some of the strongest limits on eV-scale sterile neutrinos, made a precision measurement of the reactor antineutrino spectrum from 235 U, and demonstrated the observation of reactor antineutrinos in an aboveground detector with good energy resolution and well-controlled backgrounds. The PROSPECT collaboration is now preparing an upgraded detector, PROSPECT-II, to probe yet unexplored parameter space for sterile neutrinos and contribute to a full resolution of the reactor antineutrino anomaly, a longstanding puzzle in neutrino physics. By pressing forward on the world’s most precise measurement of the 235 U antineutrino spectrum and measuring the absolute flux of antineutrinos from 235 U, PROSPECT-II will sharpen a tool with potential value for basic neutrino science, nuclear data validation, and nuclear security applications. Following a two-year deployment at HFIR, an additional PROSPECT-II deployment at a low enriched uranium reactor could make complementary measurements of the neutrino yield from other fission isotopes. PROSPECT-II provides a unique opportunity to continue the study of reactor antineutrinos at short baselines, taking advantage of demonstrated elements of the original PROSPECT design and close access to a highly enriched uranium reactor core.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗

Defining the Synthetic Biology Supply Chain

In this article, a team of experts in synthetic biology, data analytics, and national security describe the overall supply chain surrounding synthetic biology. The team analyzes selected interactions within that network to better understand the risks raised by synthetic biology and identifies opportunities for risk mitigation. To introduce the concept, the article will briefly describe how an understanding of supply chains has been important in promoting nuclear nonproliferation objectives. The article concludes by assessing the structure and networks identified in the supply chains to reveal potential opportunities for future biodefense research and development; options for additional information exchange; and means to interdict, detect, or deter suspicious activity.

nuclear supply chain↗

Reconfigurable Network Slicing Orchestration in Network Function Virtualization Compatible Operational Technology Environment

The ongoing transition to Industry 4.0, which is characterized by increased inter-connectivity of cyber-physical systems, requires having time-sensitive, high throughput, and secure transfer of critical data in industrial sites. In this context, network slicing emerges as a critical tool to ensure timely data delivery by provisioning the network resources to cater to specific applications’ requirements and mitigating potential cyber attacks. To address these challenges, this paper aims to tackle two key questions essential for the successful implementation of network slicing in industrial environments. First, it investigates architectural considerations for developing a network infrastructure capable of supporting network slicing functionalities effectively. The proposed approach significantly improves deployment efficiency over traditional manual configurations. Second, it delves into the automated orchestration process, elucidating the steps and components involved in transitioning from a static network management approach to dynamically leverage network function virtualization schemes for creating network slices in ad-hoc manner. The system demonstrates high throughput suitable for production-level solutions and maintains exceptionally low latency, making it ideal for ultra-reliable low-latency communications. Even with increased network demands, the system remains stable, with effective Quality of Service (QoS) management, ensuring reliable performance under varying conditions. The proposed architecture outlines the necessary components, services, and communication protocols required for a production-level orchestrator for network segmentation in SCADA environments.

Rodiles Delgado, Brian G.↗

Advanced Synchrophasor Protocol (ASP) Development and Demonstration Project

The Advanced Synchrophasor Protocol Project had two main objectives: To develop, document, and demonstrate a new standard communications protocol (that became named the Streaming Telemetry Transport Protocol, or STTP) to overcome the issues being encountered in large-scale synchrophasor data system deployments using existing protocols – specifically with issues of scalability, data loss, bandwidth utilization, data access control, transport security options, and cost of configuration management, and to work with standards bodies to put STTP on a track for consideration as a standard protocol.

42 ENGINEERING↗

Operationally-Relevant Cyber Situational Awareness Tool Development.

Research was undertaken to gain an understanding of the interplay between cyber security professionals and the software tools utilized in performing their jobs. Substantial investments are devoted to purchasing and developing software tools targeting cyber security operations. However, development is largely based on anecdotal knowledge concerning the work processes, cognitive demands, and the needs and requirements of cyber security analysts. The current study first characterized the workflow of a Cyber Security Incidence Response (CSIRT) team, including their use of software tools, and instantiated this workflow within a simulation model. Next, data was collected during cyber security training exercises reflecting the use of software tools. It was discovered that while cyber security professionals rely heavily on specialized software tools, their jobs require that they effectively integrate the use of specialized software tools with the use of general- purpose software tools.

97 MATHEMATICS AND COMPUTING↗

Aerosol and Gas Transport in Ventilation Ducts in Nonreactor Nuclear Facilities

This document summarizes outcomes and finding in FY 2022 from a project sponsored by the Nuclear Safety Research and Development Program, which is managed by the Office of Nuclear Safety, within the Office of Environment, Health, Safety and Security. Literature survey and data collection are discussed in Sections 1 and 2, respectively. Numerical modeling of particulate transports in ventilation systems performed for standard geometries and a full-scale ventilation system is described in Section 3, and Section 4 summarizes the development of proof-of-concept sensors featuring ultrasound technology for particle deposition removal. Conclusions and recommendations are outlined in Section 5.

42 ENGINEERING↗

Studies in Nuclear and Nucleon Structure, and Neutrino Physics

We have provided training to students in skill sets relevant to job placement in areas of national needs. These trainings are tuned towards placing graduating students in the workforce related to sciences at national laboratories, national security, information systems, and data sciences. The support for undergraduate students will address the academic retention shortfalls by providing opportunities in mentored research experiences.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗

SHELS: Complete Redshift surveys of two widely separated fields

The Smithsonian Hectospec Lensing Survey (SHELS) is a complete redshift survey covering two well-separated fields (F1 and F2) of the Deep Lens Survey (DLS). Both fields are more than 94% complete to a Galactic extinction corrected R {sub 0} = 20.2. Here, we describe the redshift survey of the F1 field centered at R.A.{sub 2000} = 00{sup h}53{sup m}25.ˢ3 and decl.{sub 2000} = 12°33′55″; like F2, the F1 field covers ∼4 deg{sup 2}. The redshift survey of the F1 field includes 9426 new galaxy redshifts measured with Hectospec on the MMT (published here). As a guide to future uses of the combined survey, we compare the mass metallicity relation and the distributions of D {sub n}4000 as a function of stellar mass and redshift for the two fields. The mass–metallicity relations differ by an insignificant 1.6σ. For galaxies in the stellar mass range 10{sup 10}–10{sup 11} M {sub ⊙}, the increase in the star-forming fraction with redshift is remarkably similar in the two fields. The seemingly surprising 31%–38% difference in the overall galaxy counts in F1 and F2 is probably consistent with the expected cosmic variance given the subtleties of the relative systematics in the two surveys. We also review the DLS cluster detections in the two fields: poorer photometric data for F1 precluded secure detection of the single massive cluster at z = 0.35 that we find in SHELS. Taken together, the two fields include 16,055 redshifts for galaxies with R{sub 0}⩽20.2 and 20,754 redshifts for galaxies with R ≤ 20.6. These dense surveys in two well-separated fields provide a basis for future investigations of galaxy properties and large-scale structure.

79 ASTRONOMY AND ASTROPHYSICS↗

Skylab Experiment M516 - Crew Activities/Maintenance Study

Skylab required daily movement about the interior of a 340 cu m vehicle and the handling and transfer of numerous loose items. Planned and unplanned maintenance tasks were also included in the daily routine of activity. Experiment M516, Crew Activities/Maintenance Study, involved an investigation of crew activity during routine daily operations. The overall objective was to secure in-flight data relevant to the performance of tasks in the weightless environment. This paper will present an evaluation of man's ability to handle and transport items of various sizes and masses (logistics management) and to make equipment repairs (maintenance). Results and conclusions are based on subjective crew comments, motion-picture film, and television transmissions.

Bond, R. L.↗

Automation of review/approval cycle of MCAUTO CAD/CAM generated drawings and documents

The review/approval of MCAUTO/UNIGRAPHICS CAD/CAM generated drawings and documents is done through routing of hard copies of drawings and memos via mail, a process both time consuming and expensive. It is proposed that a set of procedures and the required software tools be designed for transmission, revision, and signing-off of such documents via electronic data transfer, while maintaining a sufficient degree of data integrity and individual security. A main resistance to such a technique will be the limited size of the display screen (19 inch class) and infrequent layer switching with the attendant time delay during the process of reviewing the drawing. Such opposition should diminish as the users become familiar with the hardwares and its operation. It is suggested that user profiles be set so that the protection class list of the originator of the drawing include at least one common class with each of the individuals who will be involved in the Revision/Approval cycle. In this way the originator will be able to tranfer a file for their review and also be able to copy back the file to make the necessary permanent changes. Individual security is maintained by restricted access to signature files and by restricting the list of individuals who will be authorized to sign off. This is accomplished through two software tools:LAYCOPY and SIGN. It is felt that these proposed procedures and techniques will adequately maintain both the file integrity and individual security during Review/Approval Cycle of MCAUTO generated drawings without the need for hardcopy routing.

Minn, H. S.↗

Shaft mount for data coupler system

A device for mounting a data transmission apparatus to a rotating, tapered, and instrumented shaft is provided. This device permits attachment without interfering with shaft rotation or the accuracy of data output, and prevents both radial and axial slippage of the data transmission apparatus. The mounting device consists of a sleeve assembly which is attached to the shaft by means of clamps that are situated at some distance removed from the instrumented area of the shaft. The data transmission device is secured to the sleeve such that the entire assembly rotates with the shaft. Shim adjustments between sleeve sections assure that a minimum compressive load is transferred to the instrumented area of the shaft and a rubber lining is affixed to a large portion of the interior surface of the sleeve to absorb vibration.

Elliott, James R., Jr.↗

Secure Networks for First Responders and Special Forces

When NASA needed help better securing its communications with orbiting satellites, the Agency called on Western DataCom Co., Inc., to help develop a prototype Internet Protocol (IP) router. Westlake, Ohio-based Western DataCom designs, develops, and manufactures hardware that secures voice, video, and data transmissions over any IP-based network. The technology that it jointly developed with NASA is now serving as a communications solution in military and first-response situations.

Source record↗

Software Defined Radio Architecture Contributions to Next Generation Space Communications

Space communications architecture concepts, comprising the elements of the system, the interactions among them, and the principles that govern their development, are essential factors in developing National Aeronautics and Space Administration (NASA) future exploration and science missions. Accordingly, vital architectural attributes encompass flexibility, the extensibility to insert future capabilities, and to enable evolution to provide interoperability with other current and future systems. Space communications architectures and technologies for this century must satisfy a growing set of requirements, including those for Earth sensing, collaborative observation missions, robotic scientific missions, human missions for exploration of the Moon and Mars where surface activities require supporting communications, and in-space observatories for observing the earth, as well as other star systems and the universe. An advanced, integrated, communications infrastructure will enable the reliable, multipoint, high-data-rate capabilities needed on demand to provide continuous, maximum coverage for areas of concentrated activity. Importantly, the cost/value proposition of the future architecture must be an integral part of its design; an affordable and sustainable architecture is indispensable within anticipated future budget environments. Effective architecture design informs decision makers with insight into the capabilities needed to efficiently satisfy the demanding space-communication requirements of future missions and formulate appropriate requirements. A driving requirement for the architecture is the extensibility to address new requirements and provide low-cost on-ramps for new capabilities insertion, ensuring graceful growth as new functionality and new technologies are infused into the network infrastructure. In addition to extensibility, another key architectural attribute of the space communication equipment's interoperability with other NASA communications systems, as well as those communications and navigation systems operated by international space agencies and civilian and government agencies. In this paper, we review the philosophies, technologies, architectural attributes, mission services, and communications capabilities that form the structure of candidate next-generation integrated communication architectures for space communications and navigation. A key area that this paper explores is from the development and operation of the software defined radio for the NASA Space Communications and Navigation (SCaN) Testbed currently on the International Space Station (ISS). Evaluating the lessons learned from development and operation feed back into the communications architecture. Leveraging the reconfigurability provides a change in the way that operations are done and must be considered. Quantifying the impact on the NASA Space Telecommunications Radio System (STRS) software defined radio architecture provides feedback to keep the standard useful and up to date. NASA is not the only customer of these radios. Software defined radios are developed for other applications, and taking advantage of these developments promotes an architecture that is cost effective and sustainable. Developments in the following areas such as an updated operating environment, higher data rates, networking and security can be leveraged. The ability to sustain an architecture that uses radios for multiple markets can lower costs and keep new technology infused.

Lessons Learned↗