Search NASA⌕ Search

SEARCH · Search NASA

Results for “security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 631 records · Page 35

Securing Single Points of Compromise (SPoC)

Securing the Single Points of Compromise that provide central services to the institution’s environment is paramount to success when trying to protect the business. (Fisk, 2014) Time Based Security mandates protection (erecting and ensuring effective controls) that last longer than the time to detect and react to a compromise. When enterprise protections fail, providing additional layered controls for these central services provides more time to detect and react. While guidance is readily available for securing the individual critical asset, protecting these assets as a group is not often discussed. Using best business practices to protect these resources as individual assets while leveraging holistic defenses for the group increases the opportunity to maximize protection time, allowing detection and reaction time for the SPoCs that is commensurate with the inherent risk of these centralized services.

97 MATHEMATICS AND COMPUTING↗

Nevada National Security Site Environmental Report 2016, Attachment A: Site Description

This attachment expands on the general description of the Nevada National Security Site (NNSS) presented in the Introduction to the Nevada National Security Site Environmental Report 2016 (prepared by National Security Technologies, LLC [NSTec], 2017). Included are subsections that summarize the site’s geological, hydrological, climatological, and ecological settings and the cultural resources of the NNSS. The subsections are meant to aid the reader in understanding the complex physical and biological environment of the NNSS. An adequate knowledge of the site’s environment is necessary to assess the environmental impacts of new projects, design and implement environmental monitoring activities for current site operations, and assess the impacts of site operations on the public residing in the vicinity of the NNSS. The NNSS environment contributes to several key features of the site that afford protection to the inhabitants of adjacent areas from potential exposure to radioactivity or other contaminants resulting from NNSS operations. These key features include the general remote location of the NNSS, restricted access, extended wind transport times, the great depths to slow-moving groundwater, little or no surface water, and low population density. This attachment complements the annual summary of monitoring program activities and dose assessments presented in the main body of this report.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Nevada National Security Site Waste Acceptance Criteria (NNSS/WAC)

This document establishes the U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO), Nevada National Security Site Waste Acceptance Criteria (NNSSWAC). The NNSSWAC provides the requirements, terms, and conditions under which the Nevada National Security Site (NNSS) will accept the following: DOE low-level radioactive waste (LLW); DOE mixed low-level waste (MLLW); DOE classified waste/matter; U.S. Department of Defense (DOD) classified waste/matter The LLW and MLLW listed above may also be classified waste. Non-radioactive classified waste is accepted for disposal and shall meet the waste acceptance criteria for radioactive waste as specified in this document. Classified matter may be shipped to the NNSS for permanent burial as classified waste in accordance with the provisions in Section 3.1.18 of this document.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

A Section 106 Evaluation of the Mercury Bowling Alley, Area 23, Nevada National Security Site, Nye County, Nevada, with Photographic Documentation Addendums

The National Nuclear Security Administration Nevada Field Office (NNSA/NFO) anticipates demolition of the Mercury Bowling Alley (Building 23-517) on the Nevada National Security Site (NNSS) in Nye County, Nevada (Figure 1). This survey was prompted by plans to construct new facilities at the Bowling Alley location to support NNSS’s changing role in national security. The Bowling Alley has been largely vacant since the mid-1990s following the end of nuclear testing at what was then the Nevada Test Site (NTS). The building is suffering rapid decay. An Area of Potential Effects (APE) of 4.5 acres was surveyed, resulting in recording and evaluation of the Bowling Alley (SHPO Resource Number B14451) and one associated resource (AR1). The APE is located in Section 11 T15S R53E MDBM (projected) at the principal NNSS base of Mercury in Area 23. In 2010, the NTS name was changed to the NNSS, and will be referred to as such throughout this report. Fieldwork and report preparation were done by Desert Research Institute (DRI) cultural resources staff. Architectural descriptions and portions of this report specific to the architecture of the Bowling Alley were completed by Ron Reno, Ph.D., RPA who meets Secretary of the Interior’s Professional Qualifications Standards for Architectural Historian. Administration of the project was by Colleen M. Beck, Ph.D. Historical background regarding Mercury and the NNSS was developed by Maureen King. Beck photographed the building and its environs. Copies of the building form and report are on file in the Nevada Cultural Resources Inventory System at the Nevada State Office of Historic Preservation (SHPO); DRI, Las Vegas; and in the NNSA/NFO curation facility, Las Vegas.

54 ENVIRONMENTAL SCIENCES↗

The Radiological and WMD Threat Posed to National Security By Hezbollah in Latin America

Beginning in the 1980s, Hezbollah and other international terrorist organizations took root in unstable portions of Latin America. Over the years, they have built up considerable capabilities that threaten US national security and the security of allies in the region. However, Hezbollah has separated itself from its counterparts through its actions in Latin America, namely the Israeli Embassy and AMIA bombings in the early 1990s, and continues to do so. While it mainly operates out of the Tri-Border Area (TBA) of Paraguay, Brazil, and Argentina in South America, Hezbollah commands cells that span the Western Hemisphere. In the modern-day, Hezbollah conducts drug, weapons, and contraband trafficking and smuggling operations, in addition to its violent attacks. New revelations, involving the increased trafficking and stealing of nuclear and WMD material, populate the world’s nonproliferation roundtables. Latin America is no exception to this trend. It is possible that terrorist organizations, such as Hezbollah, could acquire, develop, and use stolen or illegally obtained nuclear material in a radiological dispersal device (RDD) or some form of WMD. In light of these revelations, the United States should focus more on Hezbollah’s illicit activities in Latin America in the interests of its own national security and its allies’.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

A Historic Context and Mitigation Documentation for a Portion of the U12n Tunnel Ventilation and Containment Systems, Area 12, Nevada National Security Site, Nye County, Nevada

The National Nuclear Security Administration Nevada Field Office (NNSA/NFO) has proposed repurposing the U12n Vent Hole #2 (SHPO Resource S2488) and the U12n.10 Vent Hole (S2489) for water sampling in the U12n Tunnel. The vent holes are part of the historic ventilation system for the tunnel and are contributing elements to the U12n Tunnel Historic District (D84). In consultation with the SHPO, NNSA/NFO determined the undertaking will have an adverse effect on the vent holes. The NNSA/NFO and the SHPO negotiated a memorandum of (MOA) with stipulations to mitigate adverse effects. This submission is to comply with the stipulations in the executed Memorandum of Agreement Between the National Nuclear Security Administration Nevada Field Office, Environmental Management Nevada Program Office, and the Nevada State Historic Preservation Officer Regarding Repurposing of Portions of the Ventilation System of the U12n Tunnel Complex Located in Area 12 at the Nevada National Security Site. In accordance with the MOA, the manuscript provides a historic context that describes the development and functioning of the historic U12n Tunnel ventilation system for underground nuclear tests (Stipulation III.C). High resolution digital color images of the vent hole containment doors, nearby elements, and overviews were obtained and keyed to a map and a photo index (Stipulation III.A) (Appendix A). Lastly, Architectural Resource Assessment (ARA) forms were completed for each of the vent holes and Historic District D84 (Stipulation III.B) (Appendix B). The documentation including the historic context report, photographs, image files, and resource forms produced to fulfill the terms of the MOA will be archived with the Nuclear Testing Archive in Las Vegas (Stipulation III.D).

54 ENVIRONMENTAL SCIENCES↗

Treatment of uncertainties for security-related design aspects of advanced reactors when using a risk-informed licensing approach

Sabotage of nuclear plants and theft of special nuclear material are different from many other issues potentially affecting public health and safety, and some of those differences drive the content of the present report. A high-level indication of these differences is provided in the US Nuclear Regulatory Commission’s Safety Goal Policy. Promulgated in the mid-1980’s, when it had become reasonably clear that risk analysis had improved to the point where it was possible to understand the risks associated with plant operation, the Safety Goal Policy articulates qualitative safety goals and quantitative health objectives that are meant to guide regulatory and risk management activities, with the following key exceptions noted in the original policy statement: The possible effects of sabotage or diversion of nuclear material are also not presently included in the safety goals. At present there is no basis on which to provide a measure of risk on these matters. It is the Commission’s intention that everything that is needed will be done to keep these types of risks at their present very low level; and it is the Commission’s expectation that efforts on this point will continue to be successful. With these exceptions, it is the Commission’s intent that the risks from all the various initiating mechanisms be considered to the best of the capability of current evaluation techniques. The present report discusses extensions of classical risk management to address some of the special issues that arise in the context of security. Although the present emphasis is on physical security, some attention will be paid to cyber security. A particular focus of the report is on quantitative framework to manage and address uncertainties. This framework is demonstrated via a couple of hypothetical examples.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

An Architectural Survey of the REECo Maintenance Compound, Area 6, Nevada National Security Site, Nye County, Nevada

The U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO) plans to install a 26.45-mile-long 138-kilovolt (kV) transmission line on the Nevada National Security Site (NNSS) in Nye County, Nevada. This new transmission line will upgrade the electrical transmission system and provide reliable power between Mercury Switching Station in Area 23 and the U1a Facility in Area 1. The proposed upgrade to the power transmission system constitutes an undertaking subject to review under Section 106 of the National Historic Preservation Act (NHPA) (54 United States Code [USC] § 306101) and its implementing regulations, 36 Code of Federal Regulations (CFR) Part 800. A portion of this new transmission line will cross the western perimeter of the Reynolds Electrical and Engineering Company (REECo) Maintenance Compound located in Area 6 of the NNSS. This compound with its trade shops, storage sheds, and yards served as a general construction facility that supported nuclear testing activities on the NNSS from 1967 to 1992. Although three architectural resources in the compound have previously been recorded and evaluated for the National Register of Historic Places (NRHP), other resources within it have not, nor has the compound been recorded and evaluated as a potential district. The State Historic Preservation Officer (SHPO) concurred with NNSA/NFO’s determination that the unevaluated REECo Maintenance Compound will be adversely affected by the proposed undertaking (Reed 2021). The NNSA/NFO, in consultation with the SHPO, then developed the Memorandum of Agreement DE-GM58-22NA25553 between the U.S. Department of Energy and the Nevada State Historic Preservation Officer Regarding Installation of a 138-kilovolt Transmission Line from the Mercury Switching Station to the U1a Facility and the Removal of the Historic 138-kilovolt Transmission Line from the Mercury Switching Station to the U1a Facility in Areas 1, 3, 5, 6, and 23 of the Nevada National Security Site, Nye County, hereafter referred to as the MOA. This architectural survey report was prepared in accordance with MOA Stipulation III.B. It describes the origins, history, layout, and functions of the REECo Maintenance Compound during the Cold War and identifies contributing and noncontributing resources. The report defines a district boundary based on archival research and the field survey and concludes with an appendix that presents digital color images of the compound with descriptions and a map key showing image viewpoints and directions. Although none of the architectural resources are recommended individually eligible, the district evaluation concludes the REECo Maintenance Compound is eligible as a historic district for listing in the NRHP under the Secretary of the Interior’s Significance Criteria A and C at the local level. The historic district retains all seven aspects of integrity and conveys its significance under the abovementioned criteria.

138 kV↗

Building a better framework for evaluating human well-being impacts in global change analysis: The example of energy security

Human well-being can be greatly impacted by the global environmental and socio-economic change captured in Integrated Models of Global Change (IMGCs). Though most IMGCs address some aspects of well-being, their underlying modeling approach and ‘philosophy’ differ widely, and some key elements – like energy security – are omitted. In this report, we describe a project in which we set out to a create a framework through which the well-being dimensions of the household are connected to key drivers of socio-economic and environmental change – and how the needed metrics, data and modeling methods can be brought to bear. We focus on the well-being dimensions of energy, and lay out the necessary elements to capturing household energy security – using household energy burden as the relevant metric. We begin by showing the conceptual linkage of energy burden to environmental drivers like temperature change, using a simple and straightforward conceptual framework. We then go further to use the example of GCAM-USA to show how some key analytical features of the model can provide insight into how energy security across different groups can change along alternative pathways to sustainability. We compare our preliminary assessment of household energy burden to existing data and suggest further steps to improve and refine this analysis in future research.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Fiscal Year 2020 Report for the Radiation Detection for Nuclear Security Summer School

The Pacific Northwest National Laboratory (PNNL) planned to hold its 6th Radiation Detection for Nuclear Security Summer School 15-26 June 2020. The COVID-19 pandemic prevented an in-person school from happening, and PNNL staff did not have adequate time to prepare a virtual format school. So fiscal year 2020 was taken as an off year with the intention of hosting an in-person or online summer school in 2021. As with typical off years, some course materials and activities were refined to better achieve the key objectives of 1) exposing students to the range of nuclear security applications for which radiation detection is necessary, 2) articulating the relevance of student research into the broader context, and 3) growing student interest in careers in nuclear security.

61 RADIATION PROTECTION AND DOSIMETRY↗

Cyber-Physical System Security of a Power Grid: State-of-the-Art

Here, as part of the smart grid development, more and more technologies are developed and deployed on the power grid to enhance the system reliability. A primary purpose of the smart grid is to significantly increase the capability of computer-based remote control and automation. As a result, the level of connectivity has become much higher, and cyber security also becomes a potential threat to the cyber-physical systems (CPSs). In this paper, a survey of the state-of-the-art is conducted on the cyber security of the power grid concerning issues of: the structure of CPSs in a smart grid; cyber vulnerability assessment; cyber protection systems; and testbeds of a CPS. At Washington State University (WSU), the Smart City Testbed (SCT) has been developed to provide a platform to test, analyze and validate defense mechanisms against potential cyber intrusions. A test case is provided in this paper to demonstrate how a testbed helps the study of cyber security and the anomaly detection system (ADS) for substations.

24 POWER TRANSMISSION AND DISTRIBUTION↗

A Blockchain and PKI-Based Secure Vehicle-to-Vehicle Energy-Trading Protocol

With the increasing awareness for sustainable future and green energy, the demand for electric vehicles (EVs) is growing rapidly, thus placing immense pressure on the energy grid. To alleviate this, local trading between EVs should be encouraged. In this paper, we propose a blockchain and public key infrastructure (PKI)-based secure vehicle-to-vehicle (V2V) energy-trading protocol. A permissioned blockchain utilizing the proof of authority (PoA) consensus and smart contracts is used to securely store data. Encrypted communication is ensured through transport layer security (TLS), with PKI managing the necessary digital certificates and keys. A multi-leader, multi-follower Stackelberg game-based trade algorithm is formulated to determine the optimal energy demands, supplies, and prices. Finally, we propose a detailed communication protocol that ties all the components together, enabling smooth interaction between them. Key findings, such as system behavior and performance, scalability of the trade algorithm and the blockchain, smart contract execution costs, etc., are presented through numerical results by implementing and simulating the protocol in various scenarios. This work not only enhances local energy trading among EVs, encouraging efficient energy usage and reducing burden on the power grid, but also paves a way for future research in sustainable energy management.

Stackelberg game↗

Use of Thermistor Temperature Sensors for Cyber-Physical System Security

The last few decades have seen a large proliferation in the prevalence of cyber-physical systems. This has been especially highlighted by the explosive growth in the number of Internet of Things (IoT) devices. Unfortunately, the increasing prevalence of these devices has begun to draw the attention of malicious entities which exploit them for their own gain. What makes these devices especially attractive is the various resource constraints present in these devices that make it difficult to add standard security features. Therefore, one intriguing research direction is creating security solutions out of already present components such as sensors. Physically Unclonable Functions (PUFs) are one potential solution that use intrinsic variations of the device manufacturing process for provisioning security. In this work, we propose a novel weak PUF design using thermistor temperature sensors. Our design uses the differences in resistance variation between thermistors in response to temperature change. To generate a PUF that is reliable across a range of temperatures, we use a response-generation algorithm that helps mitigate the effects of temperature variation on the thermistors. We tested the performance of our proposed design across a range of environmental operating conditions. From this we were able to evaluate the reliability of the proposed PUF with respect to variations in temperature and humidity. We also evaluated the PUF’s uniqueness using Monte Carlo simulations.

Internet of Things (IoT)↗

Achieving Health Security and Threat Reduction through Sharing Sequence Data

With the rapid development and broad applications of next-generation sequencing platforms and bioinformatic analytical tools, genomics has become a popular area for biosurveillance and international scientific collaboration. Governments from countries including the United States (US), Canada, Germany, and the United Kingdom have leveraged these advancements to support international cooperative programs that aim to reduce biological threats and build scientific capacity worldwide. A recent conference panel addressed the impacts of the enhancement of genomic sequencing capabilities through three major US bioengagement programs on international scientific engagement and biosecurity risk reduction. Here, the panel contrasted the risks and benefits of supporting the enhancement of genomic sequencing capabilities through international scientific engagement to achieve biological threat reduction and global health security. The lower costs and new bioinformatic tools available have led to the greater application of sequencing to biosurveillance. Strengthening sequencing capabilities globally for the diagnosis and detection of infectious diseases through mutual collaborations has a high return on investment for increasing global health security. International collaborations based on genomics and shared sequence data can build and leverage scientific networks and improve the timeliness and accuracy of disease surveillance reporting needed to identify and mitigate infectious disease outbreaks and comply with international norms. Further efforts to promote scientific transparency within international collaboration will improve trust, reduce threats, and promote global health security.

60 APPLIED LIFE SCIENCES↗

Network Intrusion Detection and Visualization using Aggregations in a Cyber Security Data Warehouse

The challenge of achieving situational understanding is a limiting factor in effective, timely, and adaptive cyber-security analysis. Anomaly detection fills a critical role in network assessment and trend analysis, both of which underlie the establishment of comprehensive situational understanding. To that end, we propose a cyber security data warehouse implemented as a hierarchical graph of aggregations that captures anomalies at multiple scales. Each node of our pro-posed graph is a summarization table of cyber event aggregations, and the edges are aggregation operators. The cyber security data warehouse enables domain experts to quickly traverse a multi-scale aggregation space systematically. We describe the architecture of a test bed system and a summary of results on the IEEE VAST 2012 Cyber Forensics data.

anomaly detection↗

Addressing software security risk mitigations in the life cycle

The NASA Office of Safety and Mission Assurance (OSMA) has funded the Jet Propulsion Laboratory (JPL) with a Center Initiative, 'Reducing Software Security Risk through an Integrated Approach' (RSSR), to address this need. The Initiative is a formal approach to addressing software security in the life cycle through the instantiation of a Software Security Assessment Instrument (SSAI) for the development and maintenance life cycles.

software tools↗

Reducing software security risk through an integrated approach

The fourth quarter delivery, FY'01 for this RTOP is a Property-Based Testing (PBT), 'Tester's Assistant' (TA). The TA tool is to be used to check compiled and pre-compiled code for potential security weaknesses that could be exploited by hackers. The TA Instrumenter, implemented mostly in C++ (with a small part in Java), parsels two types of files: Java and TASPEC. Security properties to be checked are written in TASPEC. The Instrumenter is used in conjunction with the Tester's Assistant Specification (TASpec)execution monitor to verify the security properties of a given program.

software security↗

Secure Naming and Addressing Operations for Store, Carry and Forward Networks

This paper describes concepts for secure naming and addressing directed at Store, Carry and Forward (SCF) distributed applications, where disconnection and intermittent connectivity between forwarding systems is the norm. The paper provides a brief overview of store, carry and forward distributed applications followed by an in depth discussion of how to securely: create a namespace; allocate names within the namespace; query for names known within a local processing system or connected subnetwork; validate ownership of a given name; authenticate data from a given name; and, encrypt data to a given name. Critical issues such as revocation of names, mobility and the ability to use various namespaces to secure operations or for Quality-of-Service are also presented. Although the concepts presented for naming and addressing have been developed for SCF, they are directly applicable to fully connected systems.

computer security↗