Search NASA⌕ Search

SEARCH · Search NASA

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 667 records · Page 37
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Cyber Infrastructure for the Smart Electric Grid

As electric power systems undergo a transformative upgrade with the integration of advanced technologies to enable the smarter electric grid, professionals who work in the area require a new understanding of the evolving complexity of the grid. Cyber Infrastructure for the Smart Electric Grid delivers a comprehensive overview of the fundamental principles of smart grid operation and control, smart grid technologies, including sensors, communication networks, computation, data management, and cyber security, and the interdependencies between the component technologies on which a smart grid's security depends. The book offers readers the opportunity to critically analyze the smart grid infrastructure needed to sense, communicate, compute, and control in a secure way.

communication networks↗
NASA NTRS2019

In-Time Non-Participant Casualty Risk Assessment to Support Onboard Decision Making for Autonomous Unmanned Aircraft

Numerous operational paradigms, technologies, and missions are emerging as newcomers to the National Airspace System (NAS) develop small Unmanned Aircraft Systems (sUAS), personal air vehicles and other Urban Air Mobility (UAM) concepts. As the list of applications expands, maintaining the safety of the current airspace system remains one of the core concerns preventing widespread commercial implementation of these concepts. Further, the risks associated with unmanned aircraft operations themselves have to be recognized and mitigated in a timely manner. Safety-critical risks include, but are not limited to, flight outside of approved airspace, unsafe proximity to people or property, critical system failures, loss-of control, and cyber-security related risks. Instead of reacting to accidents, a set of predictive and data-driven risk monitoring, assessment, and mitigation capabilities are envisioned to help capture and eliminate hazards as these systems become operational. NASA’s System-wide Safety project is performing R&D on such a safety assurance concept. As part of this concept, this paper describes an architecture that continuously monitors a diverse set of onboard and ground-based sources to estimate and predict non-participant casualty risk during flight. Timely identification of the changing nature of this risk can inform decision making processes to mitigate current and impending situations.

Ancel, Ersin↗
DOE OSTI2020

An Operational Resilience Metric for Modern Power Distribution Systems

The electrical power system is the backbone of our nations critical infrastructure. It has been designed to withstand single component failures based on a set of reliability metrics which have proven acceptable during normal operating conditions. However, in recent years there has been an increasing frequency of extreme weather events. Many have resulted in widespread long-term power outages, proving reliability metrics alone do not provide adequate energy security. As a result, researchers have focused their efforts on a new set of metrics based on the concept of resilience to ensure efficient operation of power systems during extreme events. A resilient system has the ability to resist, adapt, and recover from disruptions. Therefore, resilience has demonstrated itself as a promising concept for currently faced challenges in power distribution systems. In this work, we propose a real-time resilience metric for modern power distribution systems. The metric is an aggregation of the controllable assets adaptive capacity, or their temporal flexibility in real and reactive power. This metric gives information to the magnitude and duration of a disturbance which the system can respond to without having to drop loads or have stability issues in voltage or frequency. We demonstrate the impact to resilience in a case study under normal operation and during a power contingency on a microgrid. In the future, this information can be used by operators to make more informed decisions based on system resilience in an effort to prevent power outages.

42 ENGINEERING↗
NASA NTRS2010

Anatomy of a Security Operations Center

Many agencies and corporations are either contemplating or in the process of building a cyber Security Operations Center (SOC). Those Agencies that have established SOCs are most likely working on major revisions or enhancements to existing capabilities. As principle developers of the NASA SOC; this Presenters' goals are to provide the GFIRST community with examples of some of the key building blocks of an Agency scale cyber Security Operations Center. This presentation viII include the inputs and outputs, the facilities or shell, as well as the internal components and the processes necessary to maintain the SOC's subsistence - in other words, the anatomy of a SOC. Details to be presented include the SOC architecture and its key components: Tier 1 Call Center, data entry, and incident triage; Tier 2 monitoring, incident handling and tracking; Tier 3 computer forensics, malware analysis, and reverse engineering; Incident Management System; Threat Management System; SOC Portal; Log Aggregation and Security Incident Management (SIM) systems; flow monitoring; IDS; etc. Specific processes and methodologies discussed include Incident States and associated Work Elements; the Incident Management Workflow Process; Cyber Threat Risk Assessment methodology; and Incident Taxonomy. The Evolution of the Cyber Security Operations Center viII be discussed; starting from reactive, to proactive, and finally to proactive. Finally, the resources necessary to establish an Agency scale SOC as well as the lessons learned in the process of standing up a SOC viII be presented.

Wang, John↗
NASA NTRS1996

Fact Sheet: National Space Policy

For over three decades, the United States has led the world in the exploration and use of outer space. Our achievements in space have inspired a generation of Americans and people throughout the world. We will maintain this leadership role by supporting a strong, stable, and balanced national space program that serves our goals in national security, foreign policy, economic growth, environmental stewardship, and scientific and technical excellence. Access to and use of space are central for preserving peace and protecting US national security as well as civil and commercial interests. The United States will pursue greater levels of partnership and cooperation in national and international space activities and work with other nations to ensure the continued exploration and use of outer space for peaceful purposes. The goals of the US space program are to: (a) Enhance knowledge of the Earth, the solar system, and the universe through human and robotic exploration; (b) Strengthen and maintain the national security of the United States; (c) Enhance the economic competitiveness and scientific and technical capabilities of the United States; (d) Encourage State, local, and private sector investment in, and use of, space technologies; (e) Promote international cooperation to further US domestic, national security, and foreign policies. The United States is committed to the exploration and use of outer space by all nations for peaceful purposes and for the benefit of all humanity. "Peaceful purposes" allow defense and intelligence-related activities in pursuit of national security and other goals. The United States rejects any claims to sovereignty by any nation over outer space or celestial bodies, or any portion thereof, and rejects any limitations on the fundamental right of sovereign nations to acquire data from space. The United States considers the space systems of any nation to be national property with the right of passage through and operations in space without interference. Purposeful interference with space systems shall be viewed as an infringement on sovereign rights. The US Government will maintain and coordinate separate national security and civil space systems where differing needs dictate. All actions undertaken by agencies and departments in implementing the national space policy shall be consistent with US law, regulations, national security requirements, foreign policy, international obligations, and nonproliferation policy. The National Science and Technology Council (NSTC) is the principal forum for resolving issues related to national space policy. As appropriate, the NSTC and NSC will co-chair policy process. This policy will be implemented within the overall resource and policy guidance provided by the President.

Source record↗
DOE OSTI2023

AI-ENABLED MONITORING OPTIONS TOWARDS SECURE MICROREACTOR DEPLOYMENT AND OPERATIONS

Global nuclear energy deployment scenarios suggest favorable economics for smaller, more versatile, and self-contained reactor technologies. Recognizing their key features as integrated, autonomous and either semi-remotely operated or fully remotely operated systems, microreactors are expected to be deployed in large numbers servicing off/micro-grids, many in geographically remote locations. Integrated nature of these systems as well as ease of their transportation as complete units, simplified installation and relocation/decommissioning challenge traditional continuity-of-knowledge practices used for conventional light water reactors where refueling is done onsite at designated times only replacing portions of their cores and only after their full commissioning for operations including completion of their containment building with security and safeguards measures in place. This effort is exploring AI (artificial intelligence)-enabled monitoring options that would be design agnostic and would assure secure unit deployment and operations. The principle is to maintain situational awareness via real-time evaluations of simultaneous and remotely transmitted monitoring data capturing key safeguards attributes including such characteristics as temperature, radiation, vibrational signals (inter alia), and others. The key principle is to provide reliable and resilient security options while maintaining simplified and economical deployment. The paper will review feasible options for AI-enabled solutions for such evaluations.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1993

Security aspects of space operations data

This paper deals with data security. It identifies security threats to European Space Agency's (ESA) In Orbit Infrastructure Ground Segment (IOI GS) and proposes a method of dealing with its complex data structures from the security point of view. It is part of the 'Analysis of Failure Modes, Effects Hazards and Risks of the IOI GS for Operations, including Backup Facilities and Functions' carried out on behalf of the European Space Operations Center (ESOC). The security part of this analysis has been prepared with the following aspects in mind: ESA's large decentralized ground facilities for operations, the multiple organizations/users involved in the operations and the developments of ground data systems, and the large heterogeneous network structure enabling access to (sensitive) data which does involve crossing organizational boundaries. An IOI GS data objects classification is introduced to determine the extent of the necessary protection mechanisms. The proposal of security countermeasures is oriented towards the European 'Information Technology Security Evaluation Criteria (ITSEC)' whose hierarchically organized requirements can be directly mapped to the security sensitivity classification.

Schmitz, Stefan↗
NASA NTRS2011

Applying Web-Based Tools for Research, Engineering, and Operations

Personnel in the NASA Glenn Research Center Network and Architectures branch have performed a variety of research related to space-based sensor webs, network centric operations, security and delay tolerant networking (DTN). Quality documentation and communications, real-time monitoring and information dissemination are critical in order to perform quality research while maintaining low cost and utilizing multiple remote systems. This has been accomplished using a variety of Internet technologies often operating simultaneously. This paper describes important features of various technologies and provides a number of real-world examples of how combining Internet technologies can enable a virtual team to act efficiently as one unit to perform advanced research in operational systems. Finally, real and potential abuses of power and manipulation of information and information access is addressed.

Ivancic, William D.↗
DOE OSTI2024

Efficient Reformulation and Optimization for SC-ACOPF with Line Switching

This project aims to develop efficient and robust computational methods for solving the security-constrained alternating current optimal power flow problem (SC-ACOPF). The SC-ACOPF problem is a central problem in operating the electric power grids in the United States. It determines the most economically efficient way to operate the generation and transmission system to meet daily electricity demand. The solution found by solving an SC-ACOPF problem must satisfy the physics of the alternating current (AC) power flows, various generator and network operational constraints, and must maintain secure operation under various contingency scenarios, where a generator, a transmission branch, or a transformer may unexpectedly trip offline.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

Factors Influencing the Evaluation of Spent Fuel Rail Routes - 19010

The U.S. Department of Energy (DOE) is considering use of rail transport for future shipments of commercial spent nuclear fuel (SNF) from where it currently resides to storage or disposal facilities. Rail carriers transporting in commerce certain quantities of 'rail security sensitive materials,' including SNF, face a regulatory requirement from the U.S. Department of Transportation to perform route risk assessments on an annual basis. In performing these assessments, each affected rail carrier must take into consideration twenty-seven different route factors, and document its rationale for selecting preferred and alternative routes on the basis of the safety and security risk analysis results. The major freight rail carriers operating in the U.S. have invested in the development of a proprietary tool, for rail carrier use only, to assist them in making route selections. This tool utilizes operations data input by each affected rail carrier in conjunction with geographic information systems (GIS) data to represent proximate risk factors, to be integrated and assigned to individual points and segments on the railroad network. Separate safety and security risk values are generated for each rail route under consideration. These values are then placed on an equivalent scoring basis and summed together to allow direct comparison between different route options and to rank order each route in terms of its relative attractiveness. Each affected rail carrier files an annual report for evaluation by the Federal Railroad Administration (FRA) that documents its route risk assessment approach and analysis results. DOE has developed its own decision-support tool, Stakeholder Tool for Assessing Radioactive Transportation (START), which is capable of generating and analyzing routing options for transporting SNF by rail in addition to other freight modes. To better understand how affected rail carriers are likely to route SNF shipments in accordance with regulatory requirements and those route factors likely to be most influential in impacting DoE's evaluation of alternative SNF rail routes, a study was undertaken by DOE with the following objectives: - Review the shipment routes that have been historically used by rail carriers to move high hazard materials, including SNF; - Identify the physical, operational and proximate characteristics (attributes) associated with the rail segments that comprise these routes; - Evaluate the relationships between these attributes; - Make suggestions for how to streamline the factors used in DoE's rail route evaluations; - Contrast these relationships with how the factors are used by the rail carriers in applying their tool This paper describes the study approach, analysis results, and implications for rail route selection methodology. Differences between this evaluation and railroad industry information about rail route assessments are also discussed. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2013

Utilization of Local Law Enforcement Aerial Resources in Consequence Management (CM) Response

During the past decade the U.S. Department of Homeland Security (DHS) was instrumental in enhancing the nation’s ability to detect and prevent a radiological or nuclear attack in the highest risk cities. Under the DHS Securing the Cities initiative, nearly 13,000 personnel in the New York City region have been trained in preventive radiological and nuclear detection operations, and nearly 8,500 pieces of radiological detection equipment have been funded. As part of the preventive radiological/nuclear detection (PRND) mission, several cities have received funding to purchase commercial aerial radiation detection systems. In 2008, the U.S. Department of Energy, National Nuclear Security Administration Aerial Measuring System (AMS) program started providing Mobile Aerial Radiological Surveillance (MARS) training to such assets, resulting in over 150 HAZMAT teams’ officers and pilots from 10 law enforcement organizations and fire departments being trained in the aerial radiation detection. From the beginning, the MARS training course covered both the PRND and consequence management (CM) missions. Even if the law enforcement main focus is PRND, their aerial assets can be utilized in the collection of initial radiation data for post-event radiological CM response. Based on over 50 years of AMS operational experience and information collected during MARS training, this presentation will focus on the concepts of CM response using aerial assets as well as utilizing law enforcement/fire department aerial assets in CM. Also discussed will be the need for establishing closer relationships between local jurisdictions’ aerial radiation detection capabilities and state and local radiation control program directors, radiological health department managers, etc. During radiological events these individuals may become primary experts/advisers to Incident Commanders for radiological emergency response, especially in the early stages of a response. The knowledge of the existence, specific capabilities, and use of local aerial radiation detection systems would be critical in planning the response, even before federal assets arrive on the scene. The relationship between local and federal aerial assets and the potential role for the further use of the MARS training and expanded AMS Reachback capabilities in facilitating such interactions will be discussed.

consequence management, CM, local law enforcement,↗
NASA NTRS2017

Cyber Safety and Security for Reduced Crew Operations (RCO)

NASA and the Aviation Industry is looking into reduced crew operations (RCO) that would cut today's required two-person flight crews down to a single pilot with support from ground-based crews. Shared responsibility across air and ground personnel will require highly reliable and secure data communication and supporting automation, which will be safety-critical for passenger and cargo aircraft. This paper looks at the different types and degrees of authority delegation given from the air to the ground and the ramifications of each, including the safety and security hazards introduced, the mitigation mechanisms for these hazards, and other demands on an RCO system architecture which would be highly invasive into (almost) all safety-critical avionics. The adjacent fields of unmanned aerial systems and autonomous ground vehicles are viewed to find problems that RCO may face and related aviation accident scenarios are described. The paper explores possible data communication architectures to meet stringent performance and information security (INFOSEC) requirements of RCO. Subsequently, potential challenges for RCO data communication authentication, encryption and non-repudiation are identified. The approach includes a comprehensive safety-hazard analysis of the RCO system to determine top level INFOSEC requirements for RCO and proposes an option for effective RCO implementation. This paper concludes with questioning the economic viability of RCO in light of the expense of overcoming the operational safety and security hazards it would introduce.

Aircraft Communication↗
DOE OSTI2024

Spot size measurement of a deuterium–tritium dense plasma focus using neutron radiography

Neutron radiography is a technique uniquely suited to applications in nuclear diagnostics, non-destructive testing, and subcritical experiments. The spatial resolution of neutron radiographs is degraded by optical blur in the imaging system and the neutron source size, where the ideal source is point-like to optimize the point-spread function. A potential neutron source for radiography is the dense plasma focus (DPF), a coaxial Z-pinch that produces thermonuclear and beam-target neutrons. To assess if the source size is suitable for radiography, a neutron imaging system was used to measure the source size of the 4 MA Sodium DPF at the Nevada National Security Site operating with deuterium–tritium gas-fill. The source size was measured using the edge-spread function of tungsten objects, each having a rolled (convex) edge. The spot size was found to be 7–12 mm full-width at half-max (FWHM) assuming a Gaussian source, though comparison is presented for Lorentzian and Bennett distributions. The average FWHM was found to be 8.6 ± 1.2 mm vertically and 10.8 ± 1.2 mm horizontally with respect to the image plane, averaging over varied edges and alignments. The results were sensitive to source alignment and edge metrology, which introduced notable uncertainties. These results are consistent with separate experimental measurements as well as magnetohydrodynamics simulations of this DPF, which suggest that neutron production can originate from pinches ∼5–7 mm off-axis. These results suggest that the DPF should be used for radiography at low magnification (M < 1) where spot size does not dominate spatial blur.

47 OTHER INSTRUMENTATION↗
DOE OSTI2016

CyberPetri at CDX 2016: Real-time Network Situation Awareness

CyberPetri is a novel visualization technique that provides a flexible map of the network based on available characteristics, such as IP address, operating system, or service. Previous work introduced CyberPetri as a visualization feature in Ocelot, a network defense tool that helped security analysts understand and respond to an active defense scenario. In this paper we present a case study in which we use the CyberPetri visualization technique to support real-time situation awareness during the 2016 Cyber Defense Exercise.

Cybersecurity↗
DOE OSTI2020

Targeted Energy Management System Toolset

TEMST integrates advanced sensor systems with advanced computational intelligence, e.g. neural networks and fuzzy arithmetic, to enable effective energy management while minimizing negative human comfort consequences and promoting improved occupant satisfaction. Preliminary work suggests that energy cost reductions above ten percent are easily achievable. In addition to optimizing existing Energy Management Systems (EMS), the proposed toolset will be both resilient and secure in order to proactively maintain a safe level of operational normalcy in response to anomalies and malicious actions.

Rieger, CraigG.↗
DOE OSTI2022

International Radiological/Nuclear Training for Emergency Response - Major Public Events Virtual Workshop: Major Public Events Overview and Nuclear Security Threats (Day 1) [Slides]

The International Radiological/Nuclear Training for Emergency Response - Major Public Event (IRAD-MPE) Virtual Workshop is an advanced training course designed to provide international partners with specialized training on best practices for conducting nuclear security planning and operations at a Major Public Event. This presentation will provide an overview of the following: (1) Historical perspective on past MPE events, (2) National strategy and integrated security operations, (3) Best practices for nuclear security operations, (4) Radiological/nuclear threats and common alarms, (5) Lessons Learned and Challenges, and (5) IAEA NSS-18 publication: Nuclear Security Systems and Measures for Major Public Events.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2020

Detection of DoS Attacks Using ARFIMA Modeling of GOOSE Communication in IEC 61850 Substations

Integration of Information and Communication Technology (ICT) in modern smart grids (SGs) offers many advantages including the use of renewables and an effective way to protect, control and monitor the energy transmission and distribution. To reach an optimal operation of future energy systems, availability, integrity and confidentiality of data should be guaranteed. Research on the cyber-physical security of electrical substations based on IEC 61850 is still at an early stage. In the present work, we first model the network traffic data in electrical substations, then, we present a statistical Anomaly Detection (AD) method to detect Denial of Service (DoS) attacks against the Generic Object Oriented Substation Event (GOOSE) network communication. According to interpretations on the self-similarity and the Long-Range Dependency (LRD) of the data, an Auto-Regressive Fractionally Integrated Moving Average (ARFIMA) model was shown to describe well the GOOSE communication in the substation process network. Based on this ARFIMA-model and in view of cyber-physical security, an effective model-based AD method is developed and analyzed. Two variants of the statistical AD considering statistical hypothesis testing based on the Generalized Likelihood Ratio Test (GLRT) and the cumulative sum (CUSUM) are presented to detect flooding attacks that might affect the availability of the data. Our work presents a novel AD method, with two different variants, tailored to the specific features of the GOOSE traffic in IEC 61850 substations. The statistical AD is capable of detecting anomalies at unknown change times under the realistic assumption of unknown model parameters. The performance of both variants of the AD method is validated and assessed using data collected from a simulation case study. We perform several Monte-Carlo simulations under different noise variances. The detection delay is provided for each detector and it represents the number of discrete time samples after which an anomaly is detected. In fact, our statistical AD method with both variants (CUSUM and GLRT) has around half the false positive rate and a smaller detection delay when compared with two of the closest works found in the literature. Our AD approach based on the GLRT detector has the smallest false positive rate among all considered approaches. Whereas, our AD approach based on the CUSUM test has the lowest false negative rate thus the best detection rate. Depending on the requirements as well as the costs of false alarms or missed anomalies, both variants of our statistical detection method can be used and are further analyzed using composite detection metrics.

IEC 61850 electrical substations↗
DOE OSTI2023

Predictive Analytics for Hydropower Fleet Intelligence

A primary challenge in hydropower industry is the ability to maintain cost-competitiveness, reliability, and security of hydropower assets through evolving power system contexts and aging of the fleet. Maintaining cost-effective and reliable operations under these conditions is expected to require new modernization and maintenance paradigms for changing contexts. Changes in existing practices for O&M will require an understanding of the current state and health of hydropower assets, and the impact of changing paradigms on asset health and reliability. The Hydropower Fleet Intelligence project is developing and evaluating standardized methodologies and analysis tools for data-driven asset reliability and management technologies for hydropower, leading to eventual predictive maintenance planning, repair/replacement decision making, and asset-reliability and cost-optimized operations. A key question is the feasibility of using existing data sets at hydropower facilities to perform assessments of asset reliability. This document uses data from hydropower facilities to assess the potential for using available analytics methods for asset reliability estimates. In addition to reliability assessments, the feasibility of using existing analytics techniques for several other potential applications is discussed. Finally, a case study that a data-driven model is trained to learn nominal operations via vibration data from an asset of a certain plant, and then utilized to identify anomalies on a similar asset from a different plant, highlighting the generic use of proposed Prognostics and Health Management (PHM) approaches.

Yucesan, Yigit↗