Search NASA⌕ Search

SEARCH · Search NASA

Results for “Infrastructure vulnerability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

66 records · Page 4

Scalable Asset Discovery, Vulnerability Scanning, and Penetration Testing for Remote Sites and Wireless Spectrums Utilizing an Embedded Linux Plug - PwniPlug and the Raspberry Pi B+ as a Sample Pen Test

All devices attached to the NASA KSC network are subject to security vulnerability scanning and/or penetration testing. In today's changing environment, vulnerable and/or unprotected systems can easily be overlooked. Systems that are not properly managed can become a potential threat to the operational integrity of our systems and networks. This includes all NASA (internal and external) information systems within NASA KSC Internet Protocol (IP) address space, and NASA KSC facilities. The Office of the Chief Information Officer (OCIO) recommends that all NASA Centers and information systems be subject to penetration testing on a regular interval in accordance with the guidelines identified by the National Institute of Standards and Technology (NIST). (ITS-HBK-2810.04-02A) Protecting information and equipment at NASA is an area of increasing concern. In addition to the CPU's on the network; Supervisory, Control and Data Acquisition (SCADA) systems are especially vulnerable because these systems have lacked standards, use embedded controllers with little computational power and informal software, are connected to physical processes, have few operators, and are increasingly also being connected to corporate networks. The scope of work is comprised of several individual components which together build upon previous work by Drew Branch, NASA KSC Intern. The Pwn Plug is the selected COTS (Commercial-Off-The-Shelf) device chosen to test simplification of mandatory IT Security tasks. The device will be utilized to provide services to NASA KSC and enable an assessment of infrastructure soundness and regulatory compliance in an efficient, economical, and business responsive manner. The Pwn Plug is designed as a pen testing appliance which provides a hardware platform that can support commercial penetration testing efforts at significantly reduced costs. The expected outcomes are: 1) External Penetration Testing, 2) Social Engineering, 3) Procedural Documentation, 4) Recommended Remediation Action Plan, 5) System Retest & Remediation Attestation and 6) Final Reports, out briefing and Presentation. Due to physical and material constraints beyond intern and mentor control, the project was redefined as a working pen-test scenario. Limitations of lab availability and tools dictated an academic exercise. This report was developed within the scenario guidelines suggested by the project mentor. The guidelines were to be creative in developing a Pen Test program for a client.

Penetration Testing↗

Yonkers Urban Development II: Leveraging NASA Earth Observations to Support Modeling Urban Cooling Interventions and Urban Heat Vulnerability in Yonkers, New York

The City of Yonkers, New York, located in Westchester County, is experiencing rising temperatures which are a growing threat to the health and safety of its residents. Furthermore, the risk of heat-related illnesses and mortality disproportionately affects neighborhoods in Yonkers historically subjected to race-based housing segregation. To better understand these inequities, Groundwork Hudson Valley and NASA DEVELOP collaborated for a second term to evaluate community-level heat vulnerability, landcover distribution, street-level thermal comfort, and modeled urban cooling interventions. This team applied 2019 5-year American Community Survey (ACS) data and social and biophysical heat vulnerability variables established by the New York State Department of Health (NYSDOH), along with land surface temperature (LST) data collected from Landsat 8 Thermal Infrared Sensor (TIRS), and ISS ECOsystem Spaceborne Thermal Radiometer Experiment on Space Station (ECOSTRESS) to identify communities in Yonkers in need of prioritized cooling intervention at the census tract level. Data from the Real-Time Mesoscale Analysis (RTMA) provided relevant meteorological data for the ENVI-met model to conduct street-level thermal observations and model tree canopy cooling interventions in the Yonkers neighborhoods of Kimball and Old 7th Ward. The project results will support the prioritization and equitable distribution of cooling infrastructure in identified neighborhoods. Additionally, Groundwork Hudson Valley will use the analyses as a heat literacy tool to improve advocacy efforts and inform both residents and officials about how investment in deliberate modification to tree canopy cover improves the city’s thermal environment and helps mitigate extreme heat.

Tamara Barbakova↗

Safety-Critical Partitioned Software Architecture: A Partitioned Software Architecture for Robotic

The flight software on virtually every mission currently managed by JPL has several major flaws that make it vulnerable to potentially fatal software defects. Many of these problems can be addressed by recently developed partitioned operating systems (OS). JPL has avoided adopting a partitioned operating system on its flight missions, primarily because doing so would require significant changes in flight software design, and the risks associated with changes of that magnitude cannot be accepted by an active flight project. The choice of a partitioned OS can have a dramatic effect on the overall system and software architecture, allowing for realization of benefits far beyond the concerns typically associated with the choice of OS. Specifically, we believe that a partitioned operating system, when coupled with an appropriate architecture, can provide a strong infrastructure for developing systems for which reusability, modifiability, testability, and reliability are essential qualities. By adopting a partitioned OS, projects can gain benefits throughout the entire development lifecycle, from requirements and design, all the way to implementation, testing, and operations.

(Avionics Application Standard Software Interface ↗

Future Changes in Snowpack, Snowmelt, and Runoff Potential Extremes Over North America

Snowpack and snowmelt-driven extreme events (e.g., floods) have large societal consequences including infrastructure failures. However, it is not well understood how projected changes in the snow-related extremes differ across North America. Using dynamically downscaled regional climate model (RCM) simulations, we found that the magnitudes of extreme snow water equivalent, snowmelt, and runoff potential (RP; snowmelt plus precipitation) decrease by 72%, 73%, and 45%, respectively, over the continental United States and southern Canada but increase by up to 8%, 53%, and 41% in Alaska and northern Canada by the late 21st century. In California and the Pacific Northwest, there is a notable increase in extreme RP by 21% contrary to a decrease in snowmelt by 31% by the late century. These regions could be vulnerable to larger rain-on-snow floods in a warmer climate. Regions with a large variability among RCM ensembles are identified, which require further investigation to reduce the regional uncertainties.

Eunsang Cho↗

The Application of Remote Sensing using NASA Earth Observations paired with Sociodemographic Indicators to Identify Communities Most Susceptible to Urban Heat Exposure in Austin, Texas

In recent years, Austin, Texas has experienced an increase in population and urban development. Additionally, the City’s climate—already characterized by periods of extreme heat and drought—continues to change. As temperatures and demand for utilities and cooling resources rise, the number of heat-related deaths and illnesses in socially vulnerable populations (e.g., older, lower-income populations) is expected to increase. The City of Austin, The University of Texas at Austin (UT Austin), and The University of Texas Health Science Center at Houston (UT Health) partnered with NASA DEVELOP to examine the distribution of urban heat throughout the City. This project used land surface temperature, greenness, plant water content, and urban surface material analysis parameters derived from NASA Earth observations from Landsat 8 Operational Land Imager (OLI), Landsat 8 Thermal Infrared Sensor (TIRS), and Aqua and Terra Moderate Resolution Imaging Spectroradiometer (MODIS). The project team produced three different indices to create a spatial analysis for the study area including a social vulnerability index (SoVI), heat exposure index (HEI), and an overall heat priority index (HPI) score. This overall score was determined with a weighted analysis of heat-related environmental variables from NASA Earth observations and socioeconomic data from the 2019 American Community Survey. Based on the HPI score, the project team identified 121 census block groups out of 605 total that are designated as being most at risk of adverse impacts from extreme heat events. To test the sensitivity of the HPI, the team used a Monte Carlo analysis using different approaches for geographic scale, variable inclusion, census uncertainty, and index aggregation. Based on the sensitivity analysis, the resulting HPI score showed the metric was consistent with the baseline HPI. This provided increased confidence the score can be used as a tool to make informed infrastructure improvement plans in targeted areas (e.g., siting of cooling centers) and ensure equitable sustainable development.

Ryan Hammock↗

Climate Science for Decision-Making in the New York Metropolitan Region

New York City is one of the world's most vulnerable cities to coastal flooding, due to a high concentration of population and assets near a coastline exposed to warm-season tropical storms and cold -season Nor'easter storms. Among U.S. cities, New York City is second only to New Orleans in population living less than 4 ft above the local high tide. By the 2050s, average annual losses due to coastal flooding alone could exceed $2 billion for the combined New York City-Newark region. Perhaps the most iconic example of a vulnerable New York City asset is the financial district located at the southern tip of Manhattan, however low-lying coastal assets include the full complement of major highways, subways and tunnels, hospitals, schools, wastewater treatment plants, food distribution centers, and people's homes. Given the magnitude of the assets at risk, a compelling case can be made that long-term adaptation makes economic sense for New York City. Given New York's access to economic, human, and technological resources for resilience measures, the City may be able to achieve this resilience. The city's political environment-New York City is a place where climate science is generally not a partisan issue-and the city's experience with uncertainty and overall risk framing (e.g., financing of bond issues for multi-billion dollar infrastructure with multidecade expected lifetimes), encourage climate risk framing.

Horton, Radley↗

Return to the Moon: A New Strategic Evaluation

This paper reviews the value of a new lunar program, initially robotic and eventually manned, in the light of developments since the 1991 Synthesis Group study of the Space Exploration Initiative. The objective is to evaluate a return to the Moon in comparison to proposed Mars programs as a focus for American space exploration with humans in the next century. The Moon is demonstrably accessible, hospitable, useful, and interesting. Lunar programs are inherently faster and less risky from a programmatic viewpoint than comparable Mars programs such as Mars Direct. The dominant reason for a resumption of manned lunar missions, focussed on a single site such as Grimaldi, is to rebuild the infrastructure for missions beyond earth orbit, the last of which was in 1972. A transitional program, corresponding to the 10 Gemini missions that bridged the gap between Mercury and Apollo, was considered absolutely essential by the Synthesis Group. Further justification for a return to the Moon is the demonstrated feasibility of a robotic lunar observatory, concentrating on optical and infrared interferometry. Many unsolved scientific questions about the Moon itself remain, and could be investigated using telerobotic lunar rovers even before the return of humans. Mars is unquestionably more interesting scientifically and far more hospitable for long-term colonization. A new lunar program would be the most effective possible preparation for the human exploration, settlement, and eventually the terraforming of Mars. Lunar and Mars programs are complementary, not competitive. Both can be justified in the most fundamental terms as beginning the dispersal of the human species against uncontrollable natural disasters, cometary or asteroidal impacts in particular, to which mankind is vulnerable while confined to a single planet. Three specific programs are recommended for the 2001-2010 period: Ice Prospectors, to evaluate polar ice or hydrogen deposits; a robotic lunar observatory; and a manned lunar base and observatory.

Lowman, Paul D., Jr.↗

Return to the Moon: A New Strategic Evaluation

This paper reviews the value of a new lunar program, initially robotic and eventually manned, in the light of developments since the 1991 Synthes Group study of the Space Exploration Initiative. The objective is to evaluate a return to the Moon in comparison to proposed Mars programs as a focus for American space exploration with humans in the next century. The Moon is demonstrably accessible, hospitable, useful, and interesting. Lunar programs are inherently faster and less risky from a programmatic viewpoint than comparable Mars programs such as Mars Direct. The dominant reason for a resumption of manned lunar missions, focused on a single site such as Grimaldi, is to rebuild the infrastructure for missions beyond Earth orbit, the last of which was in 1972. A transitional program, corresponding to the 10 Gemini missions that bridged the gap between Mercury and Apollo, was considered absolutely essential by the Synthesis Group. Further justification for a return to the Moon is the demonstrated feasibility of a robotic lunar observatory, concentrating on optical and infrared interferometry. Many unsolved scientific questions about the Moon itself remain, and could be investigated using telerobotic lunar rovers even before the return of humans. Mars is unquestionably more interesting scientifically and far more hospitable for long-term colonization. A new lunar program would be the most effective possible preparation for the human exploration, settlement and eventually the terraforming of Mars. Lunar and Mars programs are complementary, not competitive. Both can be justified in the most fundamental terms as beginning the dispersal of the human species against uncontrollable natural disasters, cometary or asteroidal impacts in particular, to which mankind is vulnerable while confined to a single planet. Three specific programs are recommended for the 2001-2010 period: Ice Prospectors, to evaluate polar ice or hydrogen deposits; a robotic lunar observatory; and a manned lunar base and observatory.

Lowman, Paul D., Jr.↗

Return to the Moon: A New Strategic Evaluation

This paper reviews the value of a new lunar program, initially robotic and eventually manned, in the light of developments since the 1991 Synthes Group study of the Space Exploration Initiative. The objective is to evaluate a return to the Moon in comparison to proposed Mars programs as a focus for American space exploration with humans in the next century. The Moon is demonstrably accessible, hospitable, useful, and interesting. Lunar programs are inherently faster and less risky from a programmatic viewpoint than comparable Mars programs such as Mars Direct. The dominant reason for a resumption of manned lunar missions, focused on a single site such as Grimaldi, is to rebuild the infrastructure for missions beyond Earth orbit, the last of which was in 1972. A transitional prograrr@ corresponding to the 10 Gemini missions that bridged the gap between Mercury and Apollo, was considered absolutely essential by the Synthesis Group. Further justification for a return to the Moon is the demonstrated feasibility of a robotic lunar observatory, concentrating on optical and infrared interferometry. Many unsolved scientific questions about the Moon itself remain, and could be investigated using telerobotic lunar rovers even before the return of humans. Mars is unquestionably more interesting scientifically and far more hospitable for long-term colonization. A new lunar program would be the most effective possible preparation for the human exploration, settlement and eventually the terraforming of Mars. Lunar and Mars programs are complementary, not competitive. Both can be justified in the most fundamental terms as beginning the dispersal of the human species against uncontrollable natural disasters, cometary or asteroidal impacts in particular, to which mankind is vulnerable while confined to a single planet. Three specific programs are recommended for the 2001-2010 period: Ice Prospectors, to evaluate polar ice or hydrogen deposits; a robotic lunar observatory; and a manned lunar base and observatory.

Lowman, Paul D., Jr.↗

Simulation and Modeling Concepts for Secure Airspace Operations

This paper examines cyber security vulnerabilities of Urban Air Mobility operations. With the expected advent of new entrants including Unmanned Aerial Systems, Commercial Launch Vehicles and Urban Air Mobility aircraft, the future United States National Airspace System will have to evolve to include their operations along with the current commercial, general aviation and military operations. The National Aeronautics and Space Administration and the Federal Aviation Administration are working together to provide a vision for aviation operations in the future—2045 and beyond. Their National Airspace System Horizons initiative seeks to provide stakeholders a list of operational scenarios and technologies, concepts and strategies needed for supporting that vision. They have identified cybersecurity as one of the seven strategic interest areas for realizing this vision. Consequently, NASA is studying cyber resiliency for secure airspace operations. While there are many pathways to attack a cyber physical system such as Urban Air Mobility, their effect is expressed in modification or corruption of data/information used for controlling vehicles and making operational decisions. The paper describes cybersecurity technologies of Encryption, Blockchain, Virtual Information Fabric Infrastructure, Trusted Platform Module and Anomaly Detection for protecting the data, and the cyber resiliency of the current and future air traffic management system.

Urban Air Mobility↗

Simulation and Modeling Concepts for Secure Airspace Operations

This paper examines cyber security vulnerabilities of Urban Air Mobility operations. With the expected advent of new entrants including Unmanned Aerial Systems, Commercial Launch Vehicles and Urban Air Mobility aircraft, the future United States National Airspace System will have to evolve to include their operations along with the current commercial, general aviation and military operations. The National Aeronautics and Space Administration and the Federal Aviation Administration are working together to provide a vision for aviation operations in the future—2045 and beyond. Their National Airspace System Horizons initiative seeks to provide stakeholders a list of operational scenarios and technologies, concepts and strategies needed for supporting that vision. They have identified cybersecurity as one of the seven strategic interest areas for realizing this vision. Consequently, NASA is studying cyber resiliency for secure airspace operations. While there are many pathways to attack a cyber physical system such as Urban Air Mobility, their effect is expressed in modification or corruption of data/information used for controlling vehicles and making operational decisions. The paper describes cybersecurity technologies of Encryption, Blockchain, Virtual Information Fabric Infrastructure, Trusted Platform Module and Anomaly Detection for protecting the data, and the cyber resiliency of the current and future air traffic management system.

Urban Air Mobility↗

Satellite imaging reveals increased proportion of population exposed to floods

Flooding affects more people than any other environmental hazard and hinders sustainable development. Investing in flood adaptation strategies may reduce the loss of life and livelihood caused by floods. Where and how floods occur and who is exposed are changing as a result of rapid urbanization4, flood mitigation infrastructure and increasing settlements in floodplains6. Previous estimates of the global flood-exposed population have been limited by a lack of observational data, relying instead on models, which have high uncertainty. Here we use daily satellite imagery at 250-metre resolution to estimate flood extent and population exposure for 913 large flood events from 2000 to 2018. We determine a total inundation area of 2.23 million square kilometres, with 255–290 million people directly affected by floods. We estimate that the total population in locations with satellite-observed inundation grew by 58–86 million from 2000 to 2015. This represents an increase of 20 to 24 per cent in the proportion of the global population exposed to floods, ten times higher than previous estimates. Climate change projections for 2030 indicate that the proportion of the population exposed to floods will increase further. The high spatial and temporal resolution of the satellite observations will improve our understanding of where floods are changing and how best to adapt. The global flood database generated from these observations will help to improve vulnerability assessments, the accuracy of global and local flood models, the efficacy of adaptation interventions and our understanding of the interactions between landcover change, climate and floods.

B.Tellman↗