Search NASA⌕ Search

SEARCH · Search NASA

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 577 records · Page 32
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Countering Weapons of Mass Destruction (CWMD) Device Cybersecurity Characterization Process and Profile

Countering Weapons of Mass Destruction (CWMD) recognizes that threats in the cyberspace domain continue to grow, which requires CWMD devices and supporting systems to be both cybersecure (ability to protect or defend from cyber-attacks) and resilient (ability to maintain required capability in the face of adversity) to cyber threats. The CWMD cybersecurity characterization approach in this document supports existing cyber resilience activities within the Acquisition Lifecycle Framework. Similarly, this process supports existing Department of Homeland Security Cyber Resilience Test and Evaluation activities, which consist of iterative processes, starting at the initiation of system acquisition and continuing throughout the entire device and system life cycle. Cyber resilience is the ability of an information system to continue to operate while under attack, even if in a degraded or debilitated state,1 and to rapidly recover operational capabilities for essential functions after a successful attack.2 The goal of the security characterization task for CWMD is to support the development of a CBRN device-dependent profile that aligns with device network capabilities and maps to recommended security controls to create a characterization security profile impact levels. The impact levels for CWMD devices should be characterized as Low (L), Moderate (M), High (H) to align with the low, moderate, high control baselines. To estimate the impact levels, the device’s security-related attributes are translated into the security objectives: Confidentiality (C), Integrity (I), and Availability (A), known as the CIA triad. The potential impact for each device can be L, M, H, for devices that connect and transmit different types of data and may have different impact levels. National Institute of Standards and Technology Federal Information Processing Standards Publication 199 states, “the potential impact values assigned to the respective security objectives shall be the highest value from among those security categories that have been determined for each type of information resident on the information system.”3 As CWMD is determining the cybersecurity impact levels of CBRN devices based on network connections and data transfers, the impact levels are aligned with the associated attributes of network connections and communications. For example, if the device system is connected to a wireless network and transmits different data types based on the confidentiality of the data, the highest impact value for each security objective should represent the device’s CIA impact level. This document is intended to be used by test managers, test team, and program managers.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2024

Securing Small Modular Reactors in Urban Environments

Current small modular reactor (SMR) deployment use cases consider both rural and urban deployments, depending on the operational in-country needs for clean and reliable sources of energy. Many studies have been conducted analyzing security in rural and remote deployment locations, but this study looks at the physical security implications of an SMR placed in an urban environment and its uses for electricity production, district heating, and process heating. SMRs used for electricity production, district heating, and process heating may be key sources of both energy infrastructure and commercial infrastructure within a city and a State. As a result, long-term shutdowns could have a serious impact on a State’s overall energy or commercial production. Therefore, operators may consider further security applications to protect an SMR plant from physical attacks against both radiological sabotage and sabotage acts that could result in the SMR facility being offline for a significant amount of time. In this study, the team designed and analyzed a physical protection system (PPS) for securing an urban SMR facility against acts of radiological sabotage and sabotage acts that could disrupt the facility’s long-term operation. Additionally, this work analyzed the nuanced security issues related to siting an SMR near an urban environment (versus in a rural environment). The result of these analyses includes recommendations for PPSs for urban SMR facilities used for energy production, district heating, and process heating.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2021

Cybersecurity Guide for Distributed Wind

Distributed wind sits at the intersection of grid-connected, off-grid and behind-the-meter cyber-physical electrical energy systems. The unique physical properties and communications requirements for distributed wind systems mean that there are unique cybersecurity considerations, but there is little to no existing guidance on best practices for cybersecurity. This document is intended to be a starting point for distributed wind stakeholders including manufacturers, installers and integrators, and operators (facility, aggregator, or utility). We discuss common distributed wind architectures and describe their role in the larger power system, pointing out some of the key connections to be aware of. Cybersecurity cannot exist in a vacuum, but rather must consider all the system and all its connections holistically. The role of distributed wind and the functions it can serve are described to gain understanding of the full range of capabilities. The purpose and application of relevant standards that may apply to certain distributed wind systems is presented. These standards may not apply to all installations, but even for systems that are not required to meet these standards they can be a good reference for best practices. A holistic threat perspective is used to describe the adversaries, threats, and potential impacts of cyberattacks, with special emphasis on what sets distributed wind systems apart from other distributed energy resources (DER). Finally, we present the recommendations for cybersecurity, both in terms of needs of the system and roles that specific stakeholders should fulfill. Distributed wind systems can come in a variety of architectures and applications, so there is no one-size-fits-all approach to cybersecurity. However, this document contains the relevant information for stakeholders to identify the cybersecurity needs of their system, refer to relevant standards, and apply best practices in a manner most consistent with their security and operational goals.

17 WIND ENERGY↗
DOE OSTI2017

Phase I Project: Fiber Optic Distributed Acoustic Sensing for Periodic Hydraulic Tests

The extraction of heat from hot rock requires circulation of fluid through fracture networks. Because the geometry and connectivity of these fractures determines the efficiency of fluid circulation, many tools are used to characterize fractures before and after development of the reservoir. Under this project, a new tool was developed that allows hydraulic connectivity between geothermal boreholes to be identified. Nanostrain in rock fractures is measured using fiber optic distributed acoustic sensing (DAS). This strain is measured in one borehole in response to periodic pressure pulses induced in another borehole. The strain in the fractures represents hydraulic connectivity between wells. DAS is typically used at frequencies of Hz to kHz, but strain at mHz frequencies were measured for this project. The tool was demonstrated in the laboratory and in the field. In the laboratory, strain in fiber optic cables was measured in response to compression due to oscillating fluid pressure. DAS recorded strains as small as 10 picometer/m in response to 1 cm of water level change. At a fractured crystalline rock field site, strain was measured in boreholes. Fiber-optic cable was mechanically coupled borehole walls using pressured flexible liners. In one borehole 30 m from the oscillating pumping source, pressure and strain were measured simultaneously. The DAS system measured fracture displacement at frequencies of less than 1 mHz (18 min periods) and amplitudes of less than 1 nm, in response to fluid pressure changes of less 20 Pa (2 mm of water). The attenuation and phase shift of the monitored strain signal is indicative of the permeability and storage (compliance) of the fracture network that connects the two wells. The strain response as a function of oscillation frequency is characteristic of the hydraulic structure of the formation. This is the first application of DAS to the measurement of low frequency strain in boreholes. It has enormous potential for monitoring geothermal reservoirs for purposes of understanding reservoir compliance and for assuring security of injection fluids. Periodic pressure pulses can be induced by oscillating injection or pumping during operation so the system could provide real time reservoir data. DAS cable may already be installed at a site as it is becoming increasingly used for seismic observation. Simulations conducted for this project indicate that strain should be propagated through borehole cements, so observations can be made outside of well casing. In uncased holes, the cable would need to be mechanically coupled to the borehole wall to provide measurements. One option would be to install fiber into cemented and abandoned boreholes to extend their utility.

15 GEOTHERMAL ENERGY↗
DOE OSTI2020

Facility Cybersecurity Framework Best Practices

Federal facilities are increasingly adopting automation and connecting to the Internet creating an energy-internet-of-things environment that converges operational technology (OT) and information technology (IT). Today's buildings increasingly weave together networked sensors and cyber and physical systems that enable data to be collected, aggregated, exchanged, stored and monetized in new ways. Building technological advances have created new energy technology, services, markets and value creation opportunities (e.g. transactive energy, two-way grid communications, machine learning, and increased use of renewable and distributed energy resources). But as larger data sets are being exchanged at faster speeds between an increasing number of OT systems, it becomes more difficult to protect the security of the data lifecycle and the physical equipment it interacts with. These challenges are especially difficult to overcome because the economic and environmental gain (interoperability, big data, social networks and ubiquitous information sharing) are driving these prominent trends in the digital age. Often cybersecurity is an afterthought. The U.S. Department of Energy’s (DOE) Federal Energy Management Program (FEMP) funded the Pacific Northwest National Laboratory (PNNL) to develop various cybersecurity tools, trainings, and reports to aid federal facility managers – and other building owners and operators – in better applying frameworks and lessons learned from the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), risk management framework (RMF), DOE’s cybersecurity capability maturity model (C2M2), and a wide variety of industry best practices and guidance documents (i.e., NIST 800 series, Department of Defense United Facilities Criteria). This set of tools, collectively known as the FEMP Facility-Related Control System Cyber Toolkit (FRCS Cyber Toolkit)2, is focused on cybersecurity concerns from facility-related control systems and other operational technology (OT), such as industrial control systems (ICS). The FRCS Cyber Toolkit can be applied across six of the sixteen critical infrastructure sectors designated by the Department of Homeland Security, including government facilities, healthcare and public health, commercial facilities (e.g., public assembly, offices, lodging), financial services (e.g., banking and insurance), emergency services (e.g., fire and police stations), and information technology. With increasingly converged IT and OT systems, it is crucial to address OT cybersecurity considerations and assess how the seam of these two systems could impact the overall cybersecurity posture of a facility. The objective of this report is to provide an overview of the best possible method to use FRCS Cyber Toolkit (section 2.0) and distilled cybersecurity best practices for the federal facilities to address growing non-linear cyber threats (section 3.0). Recommendations in this document are aggregated from several NIST and other documents (see Appendix A for additional details).

97 MATHEMATICS AND COMPUTING↗
NASA NTRS2004

Securing Mobile Networks in an Operational Setting

This paper describes a network demonstration and three month field trial of mobile networking using mobile-IPv4. The network was implemented as part of the US Coast Guard operational network which is a ".mil" network and requires stringent levels of security. The initial demonstrations took place in November 2002 and a three month field trial took place from July through September of 2003. The mobile network utilized encryptors capable of NSA-approved Type 1 algorithms, mobile router from Cisco Systems and 802.11 and satellite wireless links. This paper also describes a conceptual architecture for wide-scale deployment of secure mobile networking in operational environments where both private and public infrastructure is used. Additional issues presented include link costs, placement of encryptors and running routing protocols over layer-3 encryption devices.

Ivancic, William D.↗
NASA NTRSDate not supplied

Immutable Secure Data Exchange and Storage for UAM Environments

Urban Air Mobility (UAM) has become a focus for the next generation of aerial passenger transportation. UAM operations will be leveraging a service-based architecture for airspace solutions. The UAM environment will leverage diverse communications and system access approaches. These approaches include independent Providers of Services for UAM and supplemental data service providers that exchange data between themselves and UAM operators. This research focuses on the secure data exchange and storage of this decentralized UAM environment to address these challenges. This research intends to leverage a permissioned blockchain approach to address cybersecurity threats that may impact a UAM environment.

Urban Air Mobility↗
DOE OSTI2020

A secure measurement unit for an inspection system used in nuclear arms-control verification

Verification of arms control treaties may require information barriers to protect sensitive data acquired during the verification process. These information barriers are commonly implemented in software, but must store and operate on data that are vulnerable to attack and tampering. Here, we present a new Secure Measurement Unit based on a modified pipeline SAR ADC architecture. The idea is to move the information barrier back into the digitization process so that prohibited data is never created. A prototype 65nm CMOS Secure Measurement Unit (SMU) was tested using U-235, U-238, Co-60, Cs-137 and Am-241 sources. Here, the prototype accurately digitized allowable signals while being immune to side-channel attacks on signals within preset forbidden regions.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2026

CONTROL AND DATA ACQUISITION IN A CYBER-PHYSICAL MIDSTREAM TESTBED

This thesis presents the development of a laboratory-scale cyber–physical midstream pipeline testbed designed to address this gap and support research in industrial control systems security. The platform integrates pumps, valves, sensors, programmable logic controllers (PLCs), and a human–machine interface (HMI) to emulate the monitoring and control architecture of real pipeline operations. The physical process is implemented as a closed-loop liquid circulation system designed to replicate flow behavior characteristic of midstream pipeline infrastructure. The testbed enables real-time data acquisition of key process variables, including flow rate and pressure facilitating the generation of datasets representative of normal pipeline operation. A threat model encompassing common ICS attack vectors was developed, including sensor spoofing, command injection, false data injection, denial-of-service attacks, and relay manipulation. Multiple attack scenarios were implemented and evaluated to demonstrate how cyber intrusions targeting sensors, actuators, networks, and software propagate into measurable physical consequences in pipeline flow and pressure. The developed platform serves as a practical, cost-effective environment for experimentation, education, and future cybersecurity research in midstream pipeline systems.

42 ENGINEERING↗
DOE OSTI2023

Encrypted model predictive control design for security to cyberattacks

Abstract In recent years, cyber‐security of networked control systems has become crucial, as these systems are vulnerable to targeted cyberattacks that compromise the stability, integrity, and safety of these systems. In this work, secure and private communication links are established between sensor–controller and controller–actuator elements using semi‐homomorphic encryption to ensure cyber‐security in model predictive control (MPC) of nonlinear systems. Specifically, Paillier cryptosystem is implemented for encryption‐decryption operations in the communication links. Cryptosystems, in general, work on a subset of integers. As a direct consequence of this nature of encryption algorithms, quantization errors arise in the closed‐loop MPC of nonlinear systems. Thus, the closed‐loop encrypted MPC is designed with a certain degree of robustness to the quantization errors. Furthermore, the trade‐off between the accuracy of the encrypted MPC and the computational cost is discussed. Finally, two chemical process examples are employed to demonstrate the implementation of the proposed encrypted MPC design.

Suryavanshi, Atharva↗
DOE OSTI2025

Automated Programmable Logic Controller Memory Forensics Using RGB Image Analysis and Deep Learning

The introduction of Industry 4.0 and Internet-based technologies has enhanced industrial control system operations but have inadvertently increased their vulnerabilities to cyber attacks. When an industrial control system is compromised, security analysts need to identify the root cause quickly to start the recovery process and develop mitigation strategies. Memory forensics is critical in the incident analysis process to ascertain what occurred. Approaches for analyzing the persistent memory in industrial control devices are limited and almost nonexistent for volatile memory. This chapter proposes an automated methodology for programmable logic controller memory dump analysis using computer vision and deep learning techniques. The methodology converts the sequences of bytes in a programmable logic controller memory dump to red-green-blue pixels and employs a deep learning model that learns the underlying patterns and features of pre-labeled forensic artifacts in images and segments them into distinct regions. The trained model is employed to automatically segment new memory images and identify forensic artifacts. Evaluation of the methodology on a Schneider Electric Modicon M221 programmable logic controller under code injection and code modification attacks demonstrates its ability to detect attack artifacts in memory dumps.

Asmar Awad, Rima [ORNL] (ORCID:0000000233407742)↗
DOE OSTI2025

Radiochemical transport analysis of gamma spectroscopic data to support estimation of molten salt reactor off-gas inventories

This work introduces a novel application of radiochronometry to estimate nuclide inventories in molten salt reactor off-gas systems based on gamma spectroscopic data from the Molten Salt Reactor Experiment. By analyzing isotopic, isobaric, and isomeric activity ratios, key depletion model parameters related to species transport within the reactor system could be inferred. The findings demonstrate the potential of leveraging a limited subset of gamma spectroscopy measurements to accurately estimate nuclide inventories throughout the off-gas system. The approach can be useful in reactor design activities and support analyses relevant to operations, safety, security, and safeguards.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2014

A Full Demand Response Model in Co-Optimized Energy and

It has been widely accepted that demand response will play an important role in reliable and economic operation of future power systems and electricity markets. Demand response can not only influence the prices in the energy market by demand shifting, but also participate in the reserve market. In this paper, we propose a full model of demand response in which demand flexibility is fully utilized by price responsive shiftable demand bids in energy market as well as spinning reserve bids in reserve market. A co-optimized day-ahead energy and spinning reserve market is proposed to minimize the expected net cost under all credible system states, i.e., expected total cost of operation minus total benefit of demand, and solved by mixed integer linear programming. Numerical simulation results on the IEEE Reliability Test System show effectiveness of this model. Compared to conventional demand shifting bids, the proposed full demand response model can further reduce committed capacity from generators, starting up and shutting down of units and the overall system operating costs.

bidding mechanism↗
DOE OSTI2013

Evaluation of the applicability of existing nuclear power plant regulatory requirements in the U.S. to advanced small modular reactors.

The current wave of small modular reactor (SMR) designs all have the goal of reducing the cost of management and operations. By optimizing the system, the goal is to make these power plants safer, cheaper to operate and maintain, and more secure. In particular, the reduction in plant staffing can result in significant cost savings. The introduction of advanced reactor designs and increased use of advanced automation technologies in existing nuclear power plants will likely change the roles, responsibilities, composition, and size of the crews required to control plant operations. Similarly, certain security staffing requirements for traditional operational nuclear power plants may not be appropriate or necessary for SMRs due to the simpler, safer and more automated design characteristics of SMRs. As a first step in a process to identify where regulatory requirements may be met with reduced staffing and therefore lower cost, this report identifies the regulatory requirements and associated guidance utilized in the licensing of existing reactors. The potential applicability of these regulations to advanced SMR designs is identified taking into account the unique features of these types of reactors.

LaChance, Jeffrey L.↗
DOE OSTI2016

Magnetic Smart Tags (MaST) for Arms Control and Treaty Verification

The ability to track nuclear material is a challenge for resiliency of complex systems, e.g., harsh environments. RF tags, frequently used in national security applications, cannot be used for technological, operational, or safety reasons. Magnetic Smart Tags (MaST) is a novel tag technology based on magnetoelastic sensing that circumvents these issues. This technology is enabled by a new, cost-effective, batch manufacturing electrochemical deposition (ECD) process. This new advancement in fabrication enables multi-frequency tags capable of providing millions of possible codes for tag identification unlike existing theft deterrent tags that can convey only a single bit of information. Magnetostrictive 70% Co: 30% Fe was developed as the base alloy comprising the magnetoelastic resonator transduction element. Saturation magnetostriction, λ S , has been externally measured by the Naval Research Laboratory to be as high as 78 ppm. Description of a novel MEMS variable capacitive test structure is described for future measurements of this parameter.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2026

The NREL Sensor Laboratory Detection of Hydrogen Emissions

The development of a functional hydrogen detection system is a multifaceted process that integrates hardware, deployments strategies, and analytics which can be supported by the NREL Sensor Laboratory: 1. Support of the design, validation and optimization of sensing prototypes; 2. Guide optimized sensing element development, including control electronics; 3. Laboratory testing to validate/optimize metrological performance (measurement range, detection limit, etc.); 4. Provide test sites for field deployments representative of real-world scenarios with controlled hydrogen releases; 5. Develop sensor placement and operation guidance; 6. Provide guidance on electronics to accommodate facility integration; 7. Electrical safety designs to allow for operation within restricted zones; 8. Integration into facility monitoring and control systems; 9. Guide incorporation of cyber security elements to protect facilities from malicious attacks; 10. Modeling and application of advanced analytics to detect and quantify emissions; 11. Higher Order dispersion models to guide sensor placement for reliable detection; 12. Advanced analytics for improved metrological performances, and to inform inverse modeling; 13. Market support and commercialization (national and international markets); 14. Commercial deployments in H2@SCALE markets (e.g., HUBs and other large-scale hydrogen markets); and 15. Leverage off international collaborations/partnerships (e.g., NREL is on the advisory board for the European initiative "pre-Normative Research on Hydrogen Releases Assessment"-NHyRA).

08 HYDROGEN↗
NASA NTRS1999

WEDDS: The WITS Encrypted Data Delivery System

WEDDS, the WITS Encrypted Data Delivery System, is a framework for supporting distributed mission operations by automatically transferring sensitive mission data in a secure and efficient manner to and from remote mission participants over the internet.

public key cryptography encryption authentication ↗
DOE OSTI2012

Portable weighing system with alignment features

A system for weighing a load is disclosed. The weighing system includes a pad having at least one transducer for weighing a load disposed on the pad. In some embodiments the pad has a plurality of foot members and the weighing system may include a plate that disposed underneath the pad for receiving the plurality of foot member and for aligning the foot members when the weighing system is installed. The weighing system may include a spacer disposed adjacent the pad and in some embodiments, a spacer anchor operatively secures the spacer to a support surface, such as a plate, a railway bed, or a roadway. In some embodiments the spacer anchor operatively secures both the spacer and the pad to a roadway.

42 ENGINEERING↗