Search NASA⌕ Search

SEARCH · Search NASA

Results for “security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 811 records · Page 45

Next Generation National Security Leaders

It is generally accepted that the international security community faces an impending challenge in its changing leadership demographics. The workforce that currently addresses nonproliferation, arms control, and verification is moving toward retirement and there is a perceived need for programs to train a new set of experts for both technical- and policy-related functions to replace the retiring generation. Despite the perceived need, there are also indicators that there are not sufficient jobs for individuals we are currently training. If we had “right-sized” the training programs, there would not be a shortage of jobs. The extent and scope of the human resource crisis is unclear, and information about training programs and how they meet existing needs is minimal. This paper seeks to achieve two objectives: 1) Clarify the major human resource problem and potential consequences; and 2) Propose how to characterize the requirement with sufficient granularity to enable key stakeholders to link programs aimed at developing the next generations of experts with employment needs. In order to accomplish both these goals, this paper recommends establishing a forum comprised of key stakeholders of this issue (including universities, public and private sectors), and conducting a study of the human resources and resource needs of the global security community. If there is indeed a human resource crisis in the global security field, we cannot address the problem if we are uninformed. The solution may lie in training more (or fewer) young professions to work in this community – or it may lie in more effectively using our existing resources and training programs.

Mahy, Heidi A.↗

PACE: Pattern Accurate Computationally Efficient Bootstrapping for Timely Discovery of Cyber-Security Concepts

Public disclosure of important security information, such as knowledge of vulnerabilities or exploits, often occurs in blogs, tweets, mailing lists, and other online sources significantly before proper classification into structured databases. In order to facilitate timely discovery of such knowledge, we propose a novel semi-supervised learning algorithm, PACE, for identifying and classifying relevant entities in text sources. The main contribution of this paper is an enhancement of the traditional bootstrapping method for entity extraction by employing a time-memory trade-off that simultaneously circumvents a costly corpus search while strengthening pattern nomination, which should increase accuracy. An implementation in the cyber-security domain is discussed as well as challenges to Natural Language Processing imposed by the security domain.

Bootstrapping↗

Towards a Relation Extraction Framework for Cyber-Security Concepts

In order to assist security analysts in obtaining information pertaining to their network, such as novel vulnerabilities, exploits, or patches, information retrieval methods tailored to the security domain are needed. As labeled text data is scarce and expensive, we follow developments in semi-supervised NLP and implement a bootstrapping algorithm for extracting security entities and their relationships from text. The algorithm requires little input data, specifically, a few relations or patterns (heuristics for identifying relations), and incorporates an active learning component which queries the user on the most important decisions to prevent drifting the desired relations. Preliminary testing on a small corpus shows promising results, obtaining precision of .82.

Jones, Corinne L↗

RCRA Part B Permit Application Nevada National Security Site (NNSS) for Waste Management Activities at the NNSS Hazardous Waste Storage Unit (HWSU)

This volume of the permit application by the DOE’s National Nuclear Security Administration Nevada Field Office (NNSA/NFO) to the Nevada Division of Environmental Protection (NDEP) focuses on the Area 5 Hazardous Waste Storage Unit (HWSU). The HWSU was established to support testing, research, and remediation activities at the Nevada National Security Site (NNSS), a large-quantity generator of hazardous waste. The HWSU, located adjacent to the Area 5 Radioactive Waste Management Complex (RWMC), is a prefabricated, rigid steel-framed, roofed shelter used to store hazardous nonradioactive waste generated on the NNSS. No offsite-generated wastes are managed at the HWSU. Waste managed at the HWSU includes the following: Flammables/Combustibles, Acid Corrosives, Alkali Corrosives, Oxidizers/Reactives, Toxics/Poisons, and Other Regulated Materials (ORMs). A list of regulated waste codes accepted for storage at the HWSU is provided in this volume. Hazardous wastes are stored at the HWSU in containers that are compliant with U.S. Department of Transportation (DOT) regulations and compatible with the stored waste. Waste packages (e.g., drums) without inner closed containers of waste remain closed except during inspection or sampling. Transfer of uncontainerized waste between waste packages at the HWSU is prohibited. Closed inner containers may be transferred or consolidated into larger waste packages, and small closed containers may be placed into larger containers. Containers are stored on secondary containment pallets, and the unit is inspected monthly. For safety and security reasons, some of the contents of the full application are not available for public viewing. This public version of the application contains most, but not all, of the contents as submitted to the regulatory agencies.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Organizational Culture for Safety, Security, and Safeguards in New Nuclear Power Countries

This chapter will contain the following sections: Existing international norms and standards for developing the infrastructure to support new nuclear power programs The role of organizational culture and how it supports the safe, secure, and peaceful application of nuclear power Identifying effective and efficient strategies for implementing safety, security and safeguards in nuclear operations Challenges identified in the implementation of safety, security and safeguards Potential areas for future collaboration between countries in order to support nonproliferation culture

Kovacic, Donald N↗

Towards a Scalable Group Vehicle-based Security System

In August 2014, the National Highway Traffic Safety Administration (NHTSA) proposed new rulemaking to require V2V communication in light vehicles. To establish trust in the basic safety messages (BSMs) that are exchanged by vehicles to improve driver safety, a vehicle public key infrastructure (VPKI) is required. We outline a system where a group or groups of vehicles manage and generate their own BSM signing keys and authenticating certificates -- a Vehicle-Based Security System (VBSS). Based on our preliminary examination, we assert the mechanisms exist to implement a VBSS that supports V2V communications; however, maintaining uniform trust throughout the system while protecting individual privacy does require reliance on nascent group signature technology which may require a significant amount of communication overhead for trust maintenance. To better evaluate the VBSS approach, we compare it to the proposed Security Credential Management System (SCMS) in four major areas including bootstrapping, pseudonym provisioning, BSM signing and authentication, and revocation. System scale, driver privacy, and the distribution and dynamics of participants make designing an effective VPKI an interesting and challenging problem; no clear-cut strategy exists to satisfy the security and privacy expectations in a highly efficient way. More work is needed in VPKI research, so the life-saving promise of V2V technology can be achieved.

Carter, Jason M↗

Cyber Hygiene for Control System Security

There are many resources from government and private industry available to assist organizations in reducing their attack surface and enhancing their security posture. Furthermore, standards are being written and improved upon to make the practice of securing a network more manageable. And while the specifics of network security are complex, most system vulnerabilities can be mitigated using fairly simple cyber hygiene techniques like those offered above.

97 MATHEMATICS AND COMPUTING↗

Presentation for LDRD FY19 proposal: An Innovative Secure millimeter wave (mmWave) Machine to Machine (M2M) Communication Network for Operating Drones

We propose to prove the principle that a novel 5G wireless network using newly available millimeter wave (mmWave) frequency bands can operate Unmanned Aerial Vehicles (UAVs) with Machine to Machine (M2M) communication. If successful, this proposed network will provide a superior alternative to existing methods with improved radio frequency (RF) coverage and resiliency against cyberattacks. The use of UAVs or drones for non-military applications has been advancing rapidly for a large number of applications in the United States. They include public safety search and rescue of natural disaster victims, surveillance of remote critical infrastructure, surveys of environmental quality in protected regions, and detection of threats during major public events. The proposed approach involves research with modeling, simulation, and experimentation to validate the hypothesis in the following thrusts: 1) Using mmWave beams with antennas tilted upward for RF coverage in the sky to analyze the security, reliability, and spectral efficiency of this wireless network for UAV/drone operation; 2) Adding non orthogonal multiple access (NOMA) to analyze increase in security and spectral efficiency when compared to existing methods; 3) Adding intra-drone communication among the swarm of drones to analyze further increase in reliability and spectral efficiency; 4) Concluding the proof of principle/concept with modeling and experiment to demonstrate that a swarm of drones controlled with this advanced network can be effectively used during the simulated recovery of a critical infrastructure e.g. a cyber compromised power grid that requires a black restart. The experiments will be executed at the North Carolina State University (NCSU) using NCSU’s 28 GHz mmWave system. A conceptual Invention Record Disclosure (IDR) has been filed and we expect Intellectual Property (IP) from this proposed research to advance the IRD towards patent filing by INL with support from NCSU. Successful outcome from this work will pave the way for significant future research needed to mature the technology for a nationwide secure and reliable network supporting a large number of government and public safety drones.

99 GENERAL AND MISCELLANEOUS↗

Quantum-secured communications overlay for optical fiber communications networks

Quantum secure communication systems communicate quantum signals for quantum key distribution and classical signals with encrypted data and commands via a single optical fiber. In some systems, the single fiber carries classical data in both directions along with quantum communications. For example, quantum keys can be used to encrypt packets for bidirectional communication between two parties. In other systems, a single fiber is used for one way classical communications and quantum communications. The communication systems are secured using a security parameter based on the quantum and classical communications across the optical fiber.

Nordholt, Jane Elizabeth↗

Secure generation and inversion of tokens

Described herein are various technologies related to secure generation of tokens and secure inversion of tokens. A tokenization system executes in a secure execution environment, and is configured to receive a string and an encrypted tokenization function. The tokenization system decrypts the encrypted tokenization function, and executes the tokenization function over the string to generate a token. The token is transmitted to a logically separate computing environment, and the tokenization system deletes the tokenization function and the string.

Solis, John Hector↗

Blockchain Secured Alternative to Mixed Routing / Non-Routing Nodes Wireless Sensor Network Topologies for Industrial Settings

Mesh networking of wireless sensors implies that individual sensor nodes will be able to communicate with neighboring nodes thereby forming a communication fabric. In the case of traditional wireless sensors, their radio frequency coverage – or RF footprint – is defined by the maximum separation distance between neighboring nodes while still achieving some level of, typically degrading from maximum, information transfer (throughput). Security issues arise in the situations where the sensor nodes are deployed near the physical boundary of an industrial site (edge nodes). In the more general case of the sensors relying on omnidirectional antennas, the edge nodes’ RF footprint may extend beyond the edge of the facility. If the edge nodes perform as routing nodes, then it may be possible for similar sensors/devices outside of the facility boundary to join the network. Here, while various schemes have been implemented to address this security issue, we report on the possibility of using blockchain for security of such edge nodes.

47 OTHER INSTRUMENTATION↗

Streaming authentication and multi-level security for communications networks using quantum cryptography

Message authenticators for quantum-secured communications facilitate low-latency authentication with assurances of security. Low-latency message authenticators are especially valuable in infrastructure systems where security and latency constraints are difficult to satisfy with conventional non-quantum cryptography. For example, a message transmitter receives a message and derives an authentication tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message transmitter outputs the message and its authentication tag. A message receiver receives a message and authentication tag for the message. The message receiver derives a comparison tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message receiver checks whether the message is authentic based on a comparison of the authentication tag and the comparison tag. In example implementations, the authenticator uses stream-wise cyclic redundancy code operations.

97 MATHEMATICS AND COMPUTING↗

Nuclear Security Interface Considerations for Regaining Control of Discovered Nuclear and Radioactive Materials

Recognizing that regaining control of orphan radioactive and nuclear material is challenging, the international community has developed requirements and guidance to support countries in addressing the problem. However, limited guidance is available on the practical nuclear security related issues that arise when nuclear or other radioactive material out of regulatory control (MORC) is encountered and efforts are undertaken to regain control. For example, the IAEA Specific Safety Guide No. SSG-19, “National Strategy for Regaining Control over Orphan Sources and Improving Control over Vulnerable Sources”, provides recommendations on a methodology for establishing a national strategy for regaining control of orphan sources. However, except for Pu239 in radioactive sources, nuclear material is outside the scope of this safety guide, and practical safety and security measures below the level of national strategy are not discussed adequately.This paper discusses the interfaces between the stakeholder groups and the responsibilities of each when encountering common scenarios that deal with MORC transitioning to regulatory control. The stakeholders include but are not limited to individuals who encounter MORC, and providers of formal and informal transport systems, and traditional and ad hoc storage solutions. This paper explores practical legal, financial, and institutional issues that hinder implementation of required safety and security practices. This paper also offers strategies that can be implemented on the individual, organizational, national, and international level to regain control of MORC.

Shannon, Michael↗

Blockchain-Enabled Cyber-Secure Microgrid Control Using Consensus Algorithm: Preprint

This paper proposes a distributed control method based on a consensus algorithm for distributed energy resources (DERs) using blockchain as a secure communication medium for cyber resilience. Each DER communicates with a local blockchain server that is maintained by the distributed ledger technology to allow for securely sharing local measurements among neighboring assets to achieve the global control objectives, i.e., voltage and frequency regulation as well as accurate power sharing among the DERs, including collective grid-forming capability. To prove that the distributed control can retain system stability under a blockchain-induced variable communication delay, Lyapunov function-based stability analysis is carried out. This paper demonstrates the concept on an 11-bus test case developed in MATLAB Simulink, which has been modified from the IEEE 9-bus test case, to study dynamic operations of the five inverter-based DERs working with a blockchain-induced variable delay. The results validate the superior performance of the proposed control method, compared to heavily compromised operations of the other test cases without the security measure, affected by heavy communication delays and communication interruptions.

blockchain↗

Nevada National Security Site Environmental Report 2021 with 2021 Environmental Report Attachment A: Site Description

This Nevada National Security Site Environmental Report (NNSSER) summarizes actions taken in 2021 to protect the environment and the public while achieving the NNSA/NFO mission goals. It is prepared for the public and our stakeholders in hopes that it is readily understandable and usable. It is a key component in our efforts to keep the public informed of environmental conditions at the NNSS and its support facilities in Las Vegas, Nevada. The accompanying Attachment A expands on the general description of the Nevada National Security Site (NNSS) presented in the Introduction to the Nevada National Security Site Environmental Report 2021. Included are subsections that summarize the site’s geological, hydrological, climatological, and ecological settings and the cultural resources of the NNSS.

54 ENVIRONMENTAL SCIENCES↗

Nevada National Security Site Environmental Report 2022 w/Attachment A Site Description

This Nevada National Security Site Environmental Report (NNSSER) summarizes actions taken in 2022 to protect the environment and the public while achieving the NNSA/NFO mission goals. It is prepared for the public and our stakeholders in hopes that it is readily understandable and usable. It is a key component in our efforts to keep the public informed of environmental conditions at the NNSS and its support facilities in Las Vegas, Nevada. The accompanying Attachment A expands on the general description of the Nevada National Security Site (NNSS) presented in the Introduction to the Nevada National Security Site Environmental Report 2022. Included are subsections that summarize the site’s geological, hydrological, climatological, and ecological settings and the cultural resources of the NNSS.

54 ENVIRONMENTAL SCIENCES↗

Building Blocks for Secure and Prosperous Defense Critical Supply Chains: A Case Study from Microelectronics

Securing defense-critical supply chains, built on resilient and sustainable microelectronics fabrication and deployment, is a national imperative and one that requires an investment in basic and applied research, development, and deployment into industries in (and out of) the Defense Industrial Base (DIB). Critical next steps include the development of pilots for revolutionary concepts in a new formal verification model and the Cyber-Physical Passport (CPP) concept for chain of custody. Critical infrastructure leadership should take action with a sense of urgency. Working in conjunction with the Under Secretary for Acquisition and Sustainment, the Assistant Secretary of Defense for Research and Engineering should establish pilot programs with the Defense Advanced Research Projects Agency and the service labs to build and test both concepts in legacy and new system development.. Additionally, the Pentagon may be aware that an existing Manufacturing Innovation Institute is piloting, with the semiconductor industry, cyber innovations to provide verifiable security properties and guarantees of physical functions to build a more cyber secure, resilient and efficient micro-electronics supply chain.

99 GENERAL AND MISCELLANEOUS↗

Safety and Security of Radioactive Sealed and Disused/Orphan Sources in Ukraine - German Contribution - 13359

Within the scope of 'Nuclear Security of Radioactive Sources', the German government implemented the modernization of Ukrainian State Production Company's transport and storage facility for radioactive sources (TSF) in Kiev. The overall management of optimizing the physical protection of the storage facility (including the construction of a hot cell for handling the radioactive sources) is currently carried out by the German Federal Foreign Office (AA). AA jointly have assigned Gesellschaft fuer Anlagen- und Reaktorsicherheit (GRS) mbH, Germany's leading expert institution in the area of nuclear safety and waste management, to implement the project and to ensure transparency by financial and technical monitoring. Sealed radioactive sources are widely used in industry, medicine and research. Their life cycle starts with the production and finally ends with the interim/long-term storage of the disused sources. In Ukraine, IZOTOP is responsible for all radioactive sources throughout their life cycle. IZOTOP's transport and storage facility (TSF) is the only Ukrainian storage facility for factory-fresh radioactive sources up to an activity of about 1 million Ci (3.7 1016 Bq). The TSF is specially designed for the storage and handling of radioactive sources. Storage began in 1968, and is licensed by the Ukrainian state authorities. Beside the outdated state of TSF's physical protection and the vulnerability of the facility linked with it, the lack of a hot cell for handling and repacking radioactive sources on the site itself represents an additional potential hazard. The project, financed by the German Federal Foreign Office, aims to significantly improve the security of radioactive sources during their storage and handling at the TSF site. Main tasks of the project are a) the modernization of the physical protection of the TSF itself in order to prevent any unauthorized access to radioactive sources as well as b) the construction of a hot cell to reduce the number of transports of radioactive sources within the city of Kiev. In future, the new established hot cell at IZOTOP's transport and storage facility will be useful for identification and characterization of orphan/disused radioactive sources. The projects implemented are performed in accordance with international recommendations (e. g. IAEA) and national normative documents and will make a crucial contribution towards an improved safety and security management of radioactive sources in Ukraine. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗