Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 811 records · Page 45

Aeronautical Mobile Airport Communications System (AeroMACS)

To help increase the capacity and efficiency of the nation s airports, a secure wideband wireless communications system is proposed for use on the airport surface. This paper provides an overview of the research and development process for the Aeronautical Mobile Airport Communications System (AeroMACS). AeroMACS is based on a specific commercial profile of the Institute of Electrical and Electronics Engineers (IEEE) 802.16 standard known as Wireless Worldwide Interoperability for Microwave Access or WiMAX (WiMax Forum). The paper includes background on the need for global interoperability in air/ground data communications, describes potential AeroMACS applications, addresses allocated frequency spectrum constraints, summarizes the international standardization process, and provides findings and recommendations from the world s first AeroMACS prototype implemented in Cleveland, Ohio, USA.

Budinger, James M.↗

Blockchain: Next Generation Supply Chain Security for Energy Infrastructure and NERC Critical Infrastructure Protection (CIP) Compliance

The U.S. power grid is a complex system of systems that requires a secure, reliable and trustworthy global supply chain. This is especially true for the grid’s increasing number of networked energy delivery system (EDS) and industrial control systems (ICS) and associated vendors, distributers, integrators and end users. Grid modernization has increased the use of “smart” energy devices that network, digitize, automate and increasingly converge the cyber-physical energy supply chain. In this Energy Internet of Things (EIoT) environment there is an increasing number of both critical cyber assets as well as data speed and size requirements, creating new cyber supply chain security and North American Electric Reliability Corporation (NERC) CIP compliance challenges for utilities, regulators and vendors. In realization of these goals, improvements are needed in the process and technology to better monitor, audit and realize cyber security and compliance goals in complex EIoT environments. This paper explores how blockchain technology may present a disruptive solution to facilitate NERC CIP compliance and increase the security of the electricity infrastructure supply chain through a cryptographically signed distributed ledger that provides increased data provenance, attribution and auditability.

Blockchain, Cyber security, grid cyber, NERC CIP, ↗

LIQUIDARMOR CM Flashing and Sealant, High Impact Technology Demonstration

Air leakage is responsible for about 1.1 quads of energy or 6% of the total energy used by commercial buildings in the US. Consequently, infiltration and exfiltration are among the largest envelope-related contributors to the heating, ventilation, and air conditioning loads in commercial buildings. New air sealing technologies have recently emerged that aim to improve the performance of air barrier systems by simplifying their installation procedure. LIQUIDARMORTM CM Flashing and Sealant is an example of these new advanced material technologies. This technology is a spray-applied sealant and liquid flashing and can span gaps that are up to ¼ in. wide without a supporting material. ORNL verified the performance of LIQUIDARMORTM CM with field tests and energy simulations from a building in which LIQUIDARMORTM CM was one of components of the air barrier system. The Homeland Security Training Center (HTC) at the College of DuPage in Glen Ellyn, IL, served as the demonstration site. Blower door test results show the average air leakage rate in the demonstration site to be 0.15 cfm/ft2 at 1.57 psf, or 63% lower than the 0.4 cfm at 1.57 psf specified in the 2015 International Energy Conservation Code (IECC). According to simulation results, HTC lowered its annual heating and cooling cost by about $3,000 or 9% compared to a similar building that lacked an air barrier system. This demonstration project serves as an example of the level of building envelope airtightness that can be achieved by using air barrier materials that are properly installed, and illustrates the energy and financial savings that such an airtight envelope could attain.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Leveraging graph clustering techniques for cyber‐physical system analysis to enhance disturbance characterisation

Abstract Cyber‐physical systems have behaviour that crosses domain boundaries during events such as planned operational changes and malicious disturbances. Traditionally, the cyber and physical systems are monitored separately and use very different toolsets and analysis paradigms. The security and privacy of these cyber‐physical systems requires improved understanding of the combined cyber‐physical system behaviour and methods for holistic analysis. Therefore, the authors propose leveraging clustering techniques on cyber‐physical data from smart grid systems to analyse differences and similarities in behaviour during cyber‐, physical‐, and cyber‐physical disturbances. Since clustering methods are commonly used in data science to examine statistical similarities in order to sort large datasets, these algorithms can assist in identifying useful relationships in cyber‐physical systems. Through this analysis, deeper insights can be shared with decision‐makers on what cyber and physical components are strongly or weakly linked, what cyber‐physical pathways are most traversed, and the criticality of certain cyber‐physical nodes or edges. This paper presents several types of clustering methods for cyber‐physical graphs of smart grid systems and their application in assessing different types of disturbances for informing cyber‐physical situational awareness. The collection of these clustering techniques provide a foundational basis for cyber‐physical graph interdependency analysis.

97 MATHEMATICS AND COMPUTING↗

A Blockchain Based Co-Simulation Framework for Integrating DERs to Wholesale Electricity Markets

As the number of distributed energy resources (DERs) continue to increase across energy-delivery systems, there remains a need for integrating their capabilities into traditional grid operations. In this paper, a blockchain-based solution is proposed to facilitate FERC's Order No. 2222 implementations. The presented use-case enables small-scale DERs to participate in wholesale market operations through DER aggregators, while also enabling local distribution system operators to enforce distribution system constraints in a secure and traceable manner. The presented use case is built around the Unified Testing Platform (UTP) being developed as a part of the Blockchain for Optimized Security and Energy Management (BLOSEM) project. This is a multi-lab effort intended to simplify the deployment of blockchain-powered grid solutions by enabling the integration of simulation tools, and blockchain technologies through the use of system-agnostic interfaces that provide a modular, interoperable, and reusable connectivity layer.

blockchain interoperability↗

Flight Test Comparison Between Enhanced Vision (FLIR) and Synthetic Vision Systems

Limited visibility and reduced situational awareness have been cited as predominant causal factors for both Controlled Flight Into Terrain (CFIT) and runway incursion accidents. NASA s Synthetic Vision Systems (SVS) project is developing practical application technologies with the goal of eliminating low visibility conditions as a causal factor to civil aircraft accidents while replicating the operational benefits of clear day flight operations, regardless of the actual outside visibility condition. A major thrust of the SVS project involves the development/demonstration of affordable, certifiable display configurations that provide intuitive out-the-window terrain and obstacle information with advanced pathway guidance. A flight test evaluation was conducted in the summer of 2004 by NASA Langley Research Center under NASA s Aviation Safety and Security, Synthetic Vision System - Commercial and Business program. A Gulfstream G-V aircraft, modified and operated under NASA contract by the Gulfstream Aerospace Corporation, was flown over a 3-week period at the Reno/Tahoe International Airport and an additional 3-week period at the NASA Wallops Flight Facility to evaluate integrated Synthetic Vision System concepts. Flight testing was conducted to evaluate the performance, usability, and acceptance of an integrated synthetic vision concept which included advanced Synthetic Vision display concepts for a transport aircraft flight deck, a Runway Incursion Prevention System, an Enhanced Vision Systems (EVS), and real-time Database Integrity Monitoring Equipment. This paper focuses on comparing qualitative and subjective results between EVS and SVS display concepts.

Arthur, Jarvis J., III↗

How to Handle the Conflict between Safety and Security - 18564

The purpose of safety and security for nuclear activities are the same. They are both necessary measures to protect people and the environment from radioactive material. There are many measures that enhance both the safety and the security but there are also measures serving one area that are in direct conflict with the other. How information is handled is maybe the best example to demonstrate this conflict between interests. In the security field, information is handled on a need-to-know basis, preventing valuable details to fall into hands of antagonists, terrorists etc. The safety culture, on the contrary, is based on knowledge and transparency and it encourages the sharing of information and experience to improve the safety. There is little guidance on how to manage the conflicts between safety and security for a transport system moving nuclear fuel and radioactive waste and especially when there are conflicts between different legislation areas, for example the Act on Nuclear Activities and Safety of Life at Sea. The Swedish Nuclear Fuel and Waste Management Co, SKB, transports all Swedish spent fuel and operational waste from the Nuclear Power Plants to the central storage facilities in Sweden. To manage the transport system, SKB owns a fleet of packages, road vehicles and an INF 3 ship. For the shipments of nuclear material, the security focus has increased rapidly over the years after the 9/11 attack, followed by regulatory requirements on enhanced security. SKB is currently running a project to further strengthen the transport security, an activity that requires a careful balance between safety and security. This paper describes the methods used and the challenges experienced trying to manage the conflicts between safety and security for the Swedish nuclear transport system. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Cyber Threat and Vulnerability Analysis of the U.S. Electric Sector

With utilities in the U.S. and around the world increasingly moving toward smart grid technology and other upgrades with inherent cyber vulnerabilities, correlative threats from malicious cyber attacks on the North American electric grid continue to grow in frequency and sophistication. The potential for malicious actors to access and adversely affect physical electricity assets of U.S. electricity generation, transmission, or distribution systems via cyber means is a primary concern for utilities contributing to the bulk electric system. This paper seeks to illustrate the current cyber-physical landscape of the U.S. electric sector in the context of its vulnerabilities to cyber attacks, the likelihood of cyber attacks, and the impacts cyber events and threat actors can achieve on the power grid. In addition, this paper highlights utility perspectives, perceived challenges, and requests for assistance in addressing cyber threats to the electric sector. There have been no reported targeted cyber attacks carried out against utilities in the U.S. that have resulted in permanent or long term damage to power system operations thus far, yet electric utilities throughout the U.S. have seen a steady rise in cyber and physical security related events that continue to raise concern. Asset owners and operators understand that the effects of a coordinated cyber and physical attack on a utility’s operations would threaten electric system reliability–and potentially result in large scale power outages. Utilities are routinely faced with new challenges for dealing with these cyber threats to the grid and consequently maintain a set of best practices to keep systems secure and up to date. Among the greatest challenges is a lack of knowledge or strategy to mitigate new risks that emerge as a result of an exponential rise in complexity of modern control systems. This paper compiles an open-source analysis of cyber threats and risks to the electric grid, utility best practices for prevention and response to cyber threats, and utility suggestions about how the federal government can aid utilities in combating and mitigating risks.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Space Station Freedom environmental database system (FEDS) for MSFC testing

The Water Recovery Test (WRT) at Marshall Space Flight Center (MSFC) is the first demonstration of integrated water recovery systems for potable and hygiene water reuse as envisioned for Space Station Freedom (SSF). In order to satisfy the safety and health requirements placed on the SSF program and facilitate test data assessment, an extensive laboratory analysis database was established to provide a central archive and data retrieval function. The database is required to store analysis results for physical, chemical, and microbial parameters measured from water, air and surface samples collected at various locations throughout the test facility. The Oracle Relational Database Management System (RDBMS) was utilized to implement a secured on-line information system with the ECLSS WRT program as the foundation for this system. The database is supported on a VAX/VMS 8810 series mainframe and is accessible from the Marshall Information Network System (MINS). This paper summarizes the database requirements, system design, interfaces, and future enhancements.

Story, Gail S.↗

Syntactic and Semantic Validation without a Metadata Management System

The ability to maintain quality information is essential to securing the confidence in any system for which the information serves as a data source. NASA's Global Change Master Directory (GCMD), an online Earth science data locator, holds over 9000 data set descriptions and is in a constant state of flux as metadata are created and updated on a daily basis. In such a system, the importance of maintaining the consistency and integrity of these-metadata is crucial. The GCMD has developed a metadata management system utilizing XML, controlled vocabulary, and Java technologies to ensure the metadata not only adhere to valid syntax, but also exhibit proper semantics.

Pollack, Janine↗

Demand Response and Smart Buildings: A Survey of Control, Communication, and Cyber-Physical Security

In this paper, we perform a comprehensive survey of the technical aspects related to the implementation of demand response and smart buildings. Specifically, we discuss various smart loads such as heating, ventilating, and air-conditioning (HVAC) systems and plug-in electric vehicles (PEVs); the power architecture with multibus characteristics; different control algorithms such as the hybrid centralized and decentralized control and the distributed coordination among buildings; the communication technologies and network architectures; and the potential cyber-physical security issues and possible mechanisms for enhancing the system security at both cyber and physical layers. Finally, the current status of the demand response in United States, Europe, Japan, and China is reviewed, and the benefits, costs, and challenges of implementing and operating demand response and smart buildings are also discussed.

42 ENGINEERING↗

Used Fuel Storage Monitoring Using Helium-4 Scintillation Fast Neutron Detectors and Neutron Spectral Analysis

This project aimed to address the technology gap in the reliable methods to verify contents of sealed dry storage casks for spent nuclear fuel. Helium-4 gas scintillation neutron detectors was proposed to be developed into a neutron spectroscopy and imaging system for nuclear security and safeguards applications. 4 He gas is significantly more available than 3 He gas and it has unique advantages such as low gamma interaction probability and direct detection of fast neutrons. Due to the sheer amount of fissile materials in a single dry cask, there is a significant neutron fluence emitted whose energies range from thermal to uncollided high-energy neutrons suitable for the detection capability of the 4 He detectors. Our project demonstrated the first ever neutron spectroscopic capabilities using 4 He detectors, explored novel detector design and performed detector characterization. It further qualified the detectors for use in various applications including high-flux environments with significant gamma-fluence. Computer simulations were used to test various large cask measurement system designs and tests, beyond the compact prototype system and laboratory measurements exploring the feasibility of the neutron spectroscopic approach. Although some cask-characterization methods proved unfeasible, alternative characterization methods using the He-4 detectors were explored and generated promising results.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Resilience Measurement Framework For Post-deployment Artificial Intelligence (ai) Integrated Systems

Resilience is largely defined as the ability to adapt or recover from adverse conditions, stresses, attacks, or compromises on systems that use or are enabled by digital resources. In Artificial Intelligence Management and Research for Advanced Networked Testbed Hub (AMARANTH), resilience is measured in the amount of time it took from the beginning of a testing period for the model to reach predictions outside of the original 95% confidence interval or using the Kullback-Leibler (KL) divergence theorem, the Population Stability Index (PSI), and traditional methods such as root mean squared error (RMSE) threshold. Artificial Intelligence (AI) model drift is of significant concern when deploying AI-integrated systems into critical and/or secure environments. Drift can impact resilience of the AI-integrated system post-deployment and requires consistent maintenance and upkeep to ensure the model is accurate and precise. To quantify model drift and predict the point when a model's drift becomes unacceptable, we describe using Kullback-Leibler (KL) divergence, Population Stability Index (PSI) and/or confidence interval width estimations to determine the point of failure and time to failure of a model post-deployment. Through simple code functions, the KL-divergence, PSI, confidence interval, and root mean squared (RMSE) point of failures can be used to derive when a model needs to be maintained as well as the impact of adversarial action through statistical means.

Yockey, Patience [Idaho National Laboratory (INL),↗

Load-decoupling attachment system

A load-decoupling attachment system is configured to secure a component to a primary structure. The load-decoupling system includes a fore end coupling bracket that is configured to attach to a fore end of the component. A first tie rod is coupled to the fore end coupling bracket. The first tie rod is configured to couple to a first portion of the primary structure. A second tie rod is coupled to the fore end coupling bracket. The second tie rod configured to couple to a second portion of the primary structure. A universal joint mount assembly is configured to couple to an aft end of the component and a third portion of the primary structure.

Weathers, Jeffrey W.↗

Which practices co-deliver food security, climate change mitigation and adaptation, and combat land degradation and desertification?

There is a clear need for transformative change in the land management and food production sectors to address the global land challenges of climate change mitigation, climate change adaptation, combatting land degradation and desertification, and delivering food security (referred to hereafter as “land challenges”). We assess the potential for 40 practices to address these land challenges and find that: Nine options deliver medium to large benefits for all four land challenges. A further two options have no global estimates for adaptation, but have medium to large benefits for all other land challenges. Five options have large mitigation potential (>3 Gt CO 2 eq/year) without adverse impacts on the other land challenges. Five options have moderate mitigation potential, with no adverse impacts on the other land challenges. Sixteen practices have large adaptation potential (>25 million people benefit), without adverse side effects on other land challenges. Most practices can be applied without competing for available land. However, seven options could result in competition for land. A large number of practices do not require dedicated land, including several land management options, all value chain options, and all risk management options. Four options could greatly increase competition for land if applied at a large scale, though the impact is scale and context specific, highlighting the need for safeguards to ensure that expansion of land for mitigation does not impact natural systems and food security. A number of practices, such as increased food productivity, dietary change and reduced food loss and waste, can reduce demand for land conversion, thereby potentially freeing-up land and creating opportunities for enhanced implementation of other practices, making them important components of portfolios of practices to address the combined land challenges.

42 ENGINEERING↗

In-Device Delay: Introduction to Obscurant Physcial Protection System

The Office of Radiological Security (ORS) In-Device Delay (IDD) program has undertaken a project to research and develop a novel protection system for industrial irradiators that contain high-activity Co-60 sources. Based on adversary testing conducted by ORS, it is was determined that to successfully accomplish the theft of the target material, the adversary will require visual contact of the sources and source rack located at the bottom of the pool. Therefore, if a means of obscuring or visually hiding the sources in the pool can be achieved (while adhering to facility operations, safety, and regulatory requirements), then illicit source theft will be significantly hindered. This project aims to develop a low-cost, non-propriety obscurant that, when an adversary action is detected, the obscurant will be deployed into the pool quickly, rendering visual observation of the source problematic; however, this obscurant will not otherwise disturb the sources, source rack, and filtration system. The obscurant will remain in the pool until removed by another process.

61 RADIATION PROTECTION AND DOSIMETRY↗

Implementing an Information Security Program

The threats to information security have dramatically increased with the proliferation of information systems and the internet. Chemical, biological, radiological, nuclear, and explosives (CBRNe) facilities need to address these threats in order to protect themselves from the loss of intellectual property, theft of valuable or hazardous materials, and sabotage. Project 19 of the European Union CBRN Risk Mitigation Centres of Excellence Initiative is designed to help CBRN security managers, information technology/cybersecurity managers, and other decision-makers deal with these threats through the application of cost-effective information security programs. Project 19 has developed three guidance documents that are publically available to cover information security best practices, planning for an information security management system, and implementing security controls for information security.

blended attack↗

A Kinetic Monte Carlo Approach for Simulating Cascading Transmission Line Failure

In this work, cascading transmission line failures are studied through a dynamical model of the power system operating under fixed conditions. The power grid is modeled as a stochastic dynamical system where first-principles electromechanical dynamics are excited by small Gaussian disturbances in demand and generation around a specified operating point. In this context, a single line failure is interpreted in a large deviation context as a first escape event across a surface in phase space defined by line security constraints. The resulting system of stochastic differential equations admits a transverse decomposition of the drift, which leads to considerable simplification in evaluating the quasipotential (rate function) and, consequently, computation of exit rates. Tractable expressions for the rate of transmission line failure in a restricted network are derived from large deviation theory arguments and validated against numerical simulations. Extensions to realistic settings are considered, and individual line failure models are aggregated into a Markov model of cascading failure inspired by chemical kinetics. Cascades are generated by traversing a graph composed of weighted edges representing transitions to degraded network topologies. Numerical results indicate that the Markov model can produce cascades with qualitative power-law properties similar to those observed in empirical cascades.

Kinetic Monte Carlo, rare events, Cascading Failur↗