Search NASA⌕ Search

SEARCH · Search NASA

Results for “SECURITY MANAGEMENT”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Security Vulnerability Profiles of NASA Mission Software: Empirical Analysis of Security Related Bug Reports

NASA develops, runs, and maintains software systems for which security is of vital importance. Therefore, it is becoming an imperative to develop secure systems and extend the current software assurance capabilities to cover information assurance and cybersecurity concerns of NASA missions. The results presented in this report are based on the information provided in the issue tracking systems of one ground mission and one flight mission. The extracted data were used to create three datasets: Ground mission IVV issues, Flight mission IVV issues, and Flight mission Developers issues. In each dataset, we identified the software bugs that are security related and classified them in specific security classes. This information was then used to create the security vulnerability profiles (i.e., to determine how, why, where, and when the security vulnerabilities were introduced) and explore the existence of common trends. The main findings of our work include:- Code related security issues dominated both the Ground and Flight mission IVV security issues, with 95 and 92, respectively. Therefore, enforcing secure coding practices and verification and validation focused on coding errors would be cost effective ways to improve mission's security. (Flight mission Developers issues dataset did not contain data in the Issue Category.)- In both the Ground and Flight mission IVV issues datasets, the majority of security issues (i.e., 91 and 85, respectively) were introduced in the Implementation phase. In most cases, the phase in which the issues were found was the same as the phase in which they were introduced. The most security related issues of the Flight mission Developers issues dataset were found during Code Implementation, Build Integration, and Build Verification; the data on the phase in which these issues were introduced were not available for this dataset.- The location of security related issues, as the location of software issues in general, followed the Pareto principle. Specifically, for all three datasets, from 86 to 88 the security related issues were located in two to four subsystems.- The severity levels of most security issues were moderate, in all three datasets.- Out of 21 primary security classes, five dominated: Exception Management, Memory Access, Other, Risky Values, and Unused Entities. Together, these classes contributed from around 80 to 90 of all security issues in each dataset. This again proves the Pareto principle of uneven distribution of security issues, in this case across CWE classes, and supports the fact that addressing these dominant security classes provides the most cost efficient way to improve missions' security. The findings presented in this report uncovered the security vulnerability profiles and identified the common trends and dominant classes of security issues, which in turn can be used to select the most efficient secure design and coding best practices compiled by the part of the SARP project team associated with the NASA's Johnson Space Center. In addition, these findings provide valuable input to the NASA IVV initiative aimed at identification of the two 25 CWEs of ground and flight missions.

vulnerability↗

Unmanned Aircraft Systems Integration in the National Airspace System Project - Phase 2 Abstracts - FY2017 to FY2019

There is an increasing need to fly Unmanned Aircraft Systems (UAS) in the National Airspace System (NAS) to perform missions of vital importance to national security and defense, emergency management, science, and to enable commercial applications. However, routine access by UAS into the NAS remains unrealized. The UAS community needs routine access to the global airspace for all classes of UAS. Based upon that need, the National Aeronautics and Space Administration (NASA) Aeronautics Research Mission Directorate (ARMD) Integrated Aviation Systems Program (IASP) UAS Integration in the NAS Project identified the following goal: To Provide research findings, utilizing simulation and flight tests, to support the development and validation of Detect and Avoid (DAA) and Command and Control (C2) technologies necessary for integrating UAS into the NAS. Because this is such a broad reaching challenge facing the UAS community, the UAS-NAS Project recognizes the importance of working together with others in Industry and Other Government Agencies to overcome the technical, operational, and public perception barriers.

bibliographic report↗

Unmanned Aircraft Systems Integration in the National Airspace System Project: Phase 2 Abstracts - FY2017 to FY2020

There is an increasing need to fly Unmanned Aircraft Systems (UAS) in the National Airspace System (NAS) to perform missions of vital importance to national security and defense, emergency management, science, and to enable commercial applications. However, routine access by UAS into the NAS remains unrealized. The UAS community needs routine access to the global airspace for all classes of UAS. Based upon that need, the National Aeronautics and Space Administration (NASA) Aeronautics Research Mission Directorate (ARMD) Integrated Aviation Systems Program (IASP) UAS Integration in the NAS Project identified the following goal: To Provide research findings, utilizing simulation and flight tests, to support the development and validation of Detect and Avoid (DAA) and Command and Control (C2) technologies necessary for integrating UAS into the NAS. Because this is such a broad reaching challenge facing the UAS community, the UAS-NAS Project recognizes the importance of working together with others in Industry and Other Government Agencies to overcome the technical, operational, and public perception barriers.

Jamie Marie Turner↗

The Added Value of SMAP Soil Moisture in Crop Yield Forecasting Over Argentina

Argentina is one of the major producers and exporter of soybeans, corn, and wheat to the world market; therefore, the accurate and timely forecasting of those crops yield is crucial to national crop management and global food security. Previous studies have mainly focused on developing forecasting models for a specific crop type and location using a single source of data (e.g., vegetation indices), thus providing little insight into the forecasting models' performance on different crop types and regions. Besides, these models are based on traditional statistical regression algorithms, while more advanced machine learning approaches have not been explored. This study investigated the estimation of crop yields of three major crops (corn, soybean, and winter wheat) using Multiple Linear Regression (MLR) and Support Vector Machine (SVM), over major growing provinces in Argentina. Our models were trained and evaluated on data from 2015 to 2020, where three remote sensing products (Normalized difference vegetation index (NDVI), SMAP soil moisture, and MODIS evapotranspiration) were used as predictors. Our results indicated that accurate crop yield forecasts using the developed regression models could be made one to two months before harvest. The MLR and SVM model performance varied among different crop types, where soybean and corn exhibited better predictability compare to the wheat. In most cases, the SVM outperformed the multiple linear regression model due to its ability to capture the nonlinear and complex features of the crop-production process. The forecasted model that combines data from multiple sources outperformed single-source satellite data. The highest accuracy was obtained when the three data sources were all considered in the model development. Results also indicated that the inclusion of SMAP soil moisture improved crop yield forecasting in most provinces, and the most significant improvements occurred in the drier region.

Nazmus Shams Sazib↗

SERVIR - Connecting Space to Village in Africa, Asia and the Americas

SERVIR is a joint NASA and USAID program that partners with countries and organizations to support locally led efforts to strengthen climate resilience, food and water security, forest and carbon management, and air quality. This unique program integrates NASA’s world class scientists and data with USAID’s development expertise and network of partners and relationships around the world. SERVIR harnesses the power of satellite data and science collaboration to support healthy, sustainable communities, livelihoods and environments. SERVIR’s name is derived from Latin, meaning "to serve.” We serve and partner with leading local, national, and regional institutions in Africa, Asia, and Latin America and in partnership with scientists and subject matter experts to co-develop and implement activities called “services.” Each of SERVIR’s services provide a comprehensive suite of geospatial data, software, and training materials, all of which are tailored to the unique needs of SERVIR’s end users. Each service is collaboratively designed and implemented with the help of partners and users, such as local governments and NGOs, to better support decision-making. When SERVIR plans new services, it prioritizes long-term dialogue and engagement with communities to ensure that services are sustainable, socially inclusive, and suited to local needs. SERVIR strives to make the power of Earth science more accessible and inclusive. All web tools are made publicly available to help promote greater uptake and long-term use of SERVIR’s services.

SERVIR↗

A Three-fold Outlook of the Ultra-Efficient Engine Technology Program Office (UEET)

The Ultra-Efficient Engine Technology (UEET) Office at NASA Glenn Research Center is a part of the Aeronautics Directorate. Its vision is to develop and hand off revolutionary turbine engine propulsion technologies that will enable future generation vehicles over a wide range of flight speeds. There are seven different technology area projects of UEET. During my tenure at NASA Glenn Research Center, my assignment was to assist three different areas of UEET, simultaneously. I worked with Kathy Zona in Education Outreach, Lynn Boukalik in Knowledge Management, and Denise Busch with Financial Management. All of my tasks were related to the business side of UEET. As an intern with Education Outreach I created a word search to partner with an exhibit of a Turbine Engine developed out of the UEET office. This exhibit is a portable model that is presented to students of varying ages. The word search complies with National Standards for Education which are part of every science, engineering, and technology teachers curriculum. I also updated a Conference Planning/Workshop Excel Spreadsheet for the UEET Office. I collected and inputted facility overviews from various venues, both on and off site to determine where to hold upcoming conferences. I then documented which facilities were compliant with the Federal Emergency Management Agency's (FEMA) Hotel and Motel Fire Safety Act of 1990. The second area in which I worked was Knowledge Management. a large knowledge management system online which has extensive documentation that continually needs reviewing, updating, and archiving. Knowledge management is the ability to bring individual or team knowledge to an organizational level so that the information can be stored, shared, reviewed, archived. Livelink and a secure server are the Knowledge Management systems that UEET utilizes, Through these systems, I was able to obtain the documents needed for archiving. My assignment was to obtain intellectual property including reports, presentations, or any other documents related to the project. My next task was to document the author, date of creation, and all other properties of each document. To archive these documents I worked extensively with Microsoft Excel. different financial systems of accounting such as the SAP business accounting system. I also learned the best ways to present financial data and shadowed my mentor as she presented financial data to both UEET's project management and the Resources Analysis and Management Office (RAMO). I analyzed the June 2004 financial data of UEET and used Microsoft Excel to input the results of the data. This process made it easier to present the full cost of the project in the month of June. In addition I assisted in the End of the Year 2003 Reconciliation of Purchases of UEET.

Graham, La Quilia E.↗

Intellectual Property Rights at the National Aeronautics and Space Administration, Lewis Research Center

At a fundamental level, intellectual property is the core work product of a technical organization. The National Aeronautics and Space Administration (NASA), produces a variety of intellectual property including: patents, trademarks, data rights, copyright and rights associated with National Security. For a scientific organization to properly manage its work product it has to manage its intellectual property. This paper endeavors to describe how the intellectual property rights are generated and allocated at NASA. The author then goes on to discuss how the intellectual property might be managed to meet the objectives of program implementation, technology transfer and security.

Williams, Vernon E.↗

Considerations in Managing the Fill Rate of the Grand Ethiopian Renaissance Dam Reservoir Using a System Dynamics Approach.

The purpose of this study is to evaluate simulated fill rate scenarios for the Grand Ethiopian Renaissance Dam while taking into account plausible climate change outcomes for the Nile River Basin. The region lacks a comprehensive equitable water resource management strategy, which creates regional security concerns and future possible conflicts. We employ climate estimates from 33 general circulation models within a system dynamics model as a step in moving toward a feasible regional water resource management strategy. We find that annual reservoir fill rates of 8-15% are capable of building hydroelectric capacity in Ethiopia while concurrently ensuring a minimum level of stream flow disruption into Egypt before 2039. Insofar as climate change estimates suggest a modest average increase in stream flow into the Aswan, climate changes through 2039 are unlikely to affect the fill rate policies. However, larger fill rates will have a more detrimental effect on stream flow into the Aswan, particularly beyond a policy of 15%. While this study demonstrates that a technical solution for reservoir fill rates is feasible, the corresponding policy challenge is political. Implementation of water resource management strategies in the Nile River Basin specifically and Africa generally will necessitate a national and regional willingness to cooperate.

system dynamics↗

Automated electric power management and control for Space Station Freedom

A comprehensive automation design is being developed for Space Station Freedom's electric power system. It strives to increase station productivity by applying expert systems and conventional algorithms to automate power system operation. An integrated approach to the power system command and control problem is defined and used to direct technology development in: diagnosis, security monitoring and analysis, battery management, and cooperative problem-solving for resource allocation. The prototype automated power system is developed using simulations and test-beds.

Dolce, James L.↗

Automated electric power management and control for Space Station Freedom

A comprehensive automation design is being developed for Space Station Freedom's electric power system. It strives to increase station productivity by applying expert systems and conventional algorithms to automate power system operation. An integrated approach to the power system command and control problem is defined and used to direct technology development in: diagnosis, security monitoring and analysis, battery management, and cooperative problem-solving for resource allocation. The prototype automated power system is developed using simulations and test-beds.

Dolce, James L.↗

Environmental Assessment for the NASA First Response Facility

NASA intends to construct a First Response Facility for integrated emergency response and health management. This facility will consolidate the Stennis Space Center fire department, medical clinic, security operations, emergency operations and the energy management and control center. The alternative considered is the "No Action Alternative". The proposed action will correct existing operational weaknesses and enhance capabilities to respond to medical emergencies and mitigate any other possible threats. Environmental impacts include are emissions, wetlands disturbance, solid waste generation, and storm water control.

Kennedy, Carolyn↗

Architecture of High-Altitude Operations (HAO) Discovery and Synchronization Service (DSS)

The aviation industry is evolving at an unprecedented pace, necessitating the development of efficient, secure, and interoperable systems to manage increasingly complex air traffic. Moreover, the demand for High-Altitude Operations (HAO) is increasing. Furthermore, air traffic control services are limited in HAO environments. HAO industry participants will need airspace access and flexibility to perform their missions in this airspace that provides provisions for scalability. The Discovery and Synchronization Service (DSS) will be a cornerstone of the HAO ecosystem, enabling the effective sharing of critical airspace data, including operational intent, aircraft trajectories, and airspace usage among various stakeholders and operators. The DSS architecture addresses these challenges with a distributed, decentralized, and interoperable system that facilitates seamless integration across diverse airspaces. It prioritizes secure data exchange while safeguarding data ownership. This white paper presents the vision, architecture, and benefits of the DSS for HAO, underscoring its potential to streamline operations, reduce redundancies, and establish a foundation for safe and efficient airspace management.

HAO↗

The Planning and Implementation of Test Facility Improvements

As engineering programs develop, and product testing begins, ideas for process improvement soon become obvious. Engineers envision new holding and handling fixtures. Additional custom-made support equipment may be needed. Perhaps modifications to the building or modifications to facility hardware are the order of the day. This is where a flexible creative test organization is needed. We need not be content with the status quo. All of these desired test innovations can make the difficult easy and improve the work flow. At times, implementing these new ideas demands more time or specialized expertise than test team members have. Through the coordinated use of labor resources, the needed improvements can still be made and in a timely fashion that supports program schedules. This presentation provides practical advice and a method whereby test personnel can creatively develop facility improvements and manage them from start to finish. You can control just how much time you invest and what part of your concepts you will personally design. By wisely defining the requirements and presenting them to the appropriate help sources (vendors, contractors, coworkers, and support departments), you can get the help you need to bring the improvements you have conceived, into fruition. Aspects of this presentation include defining requirements for test facility improvements, choosing labor resources, writing a statement of work, determining cost and benefits, securing department approval, coordinating procurement, managing the project, and training the end users. The process of successfully implementing test facility improvements is thoroughly explained. It has been tried, proven and improved over nearly 25 years of use. Whether considering a $50 improvement or a $50 million dollar improvement, this discussion will provide helpful pointers. Examples of improvements made through this process and their illustration will be included.

Oberlander, Larry↗

How Can Future Climate Change Affect the Corn Production System in Nebraska, USA?

The increasing temperatures and changing precipitation patterns have affected both crop yields and water requirements challenging agricultural systems in sustaining high crop yields and ensuring water and food security. In the present study, we evaluated the impact of climate change on the corn production under irrigated and rainfed cropping systems in Nebraska considering four climate zones until 2100 as a case study for the US Corn Belt. Additionally, suggests ways to reduce the impact of climate change on corn yield and water resources. Five global circulation model datasets from the sixth phase of the Coupled Model Intercomparison Project (CMIP6) interconnected to Shared Socioeconomic Pathways (SSPs), were selected. Three future periods: near (2020–2039), mid (2040–2069), and far future (2070–2100) under SSP226, SSP370, and SSP585 scenarios were used to predict the climate changes, crop cycle length, crop yield, and crop water requirement. Additionally, we input annual CO2 concentration scenarios for each SSP scenario to model changes from 2015 to 2100 using the CERES-Maize model. Temperatures are forecasted to rise, precipitation to decline, and crop cycle length to decrease, particularly for SSP370 (up to 49% yield decrease) and SSP585 (up to 67% yield decrease) by 2070–2100. Yields are expected to decline across all scenarios and periods for irrigated and rainfed fields due to the reduction in crop cycle length. Crop water demand is projected to increase, with rainfed systems facing heightened impact due to reduced precipitation. Addressing climate change in Nebraska requires actions like developing new corn varieties to longer the crop season, transitioning to efficient irrigation systems, improving irrigation management for water and food security, and reducing the risk of conflicts over its use. These results open possibilities for discussion about the actions that can be taken to cope with climate change and guarantee water and food security in the US Corn Belt.

CMIP6↗

Control and Non-Payload Communications Generation 1 Prototype Radio Flight Test Report

Unmanned aircraft (UA) represent a new capability that will provide a variety of services in the Government (public) and commercial (civil) aviation sectors. The growth of this potential industry has not yet been realized because of the lack of a common understanding of what is required to safely operate Unmanned Aircraft Systems in the National Airspace System (UAS in the NAS). The desire and ability to fly UA is of increasing urgency. The application of UA to perform national security, defense, scientific, and emergency management are driving the critical need for less restrictive access by UA to the NAS. Existing Federal Aviation Regulations, procedures, and technologies do not allow routine UA access to the NAS. Access to the NAS is hampered by challenges such as the lack of an onboard pilot to see and avoid other aircraft; the ability of a single pilot or operator to control multiple UA; the reliance on command and control (C2) links; the altitudes, speeds, and duration at which the aircraft fly; and the wide variation in UA size and performance. NASA is working with other Government agencies to provide solutions that reduce technical barriers and make access to the NAS routine. This goal will be accomplished through system-level integration of key concepts, technologies, or procedures and through demonstrations of these integrated capabilities in an operationally relevant environment. This project provides an opportunity to transition the acquired empirical data and knowledge to the Federal Aviation Administration and other stakeholders to help them define the requirements for routine UA access to the NAS.Radio communications channels for UA are currently managed through exceptions and use either Department of Defense frequencies for line-of-sight (LOS) and satellite-based communications links, low-power LOS links in amateur bands, or unlicensed Industrial/Scientific/Medical (ISM) frequencies. None of these frequency bands are designated for safety and regularity of flight. Only recently has radiofrequency (RF) spectrum been allocated by the International Telecommunications Union specifically for commercial UA C2, LOS communication (L-Band: 960 to 1164 MHz, and C-Band: 5030 to 5091 MHz). The safe and efficient integration of UA into the NAS requires the use of protected RF spectrum allocations and a new data communications system that is both secure and scalable to accommodate the potential growth of these new aircraft. Data communications for UA-referred to as control and non-payload communications (CNPC)-will be used to exchange information between a UA and a ground station (GS) to ensure safe, reliable, and effective UA flight operation. The focus of this effort is on validating and allocating new RF spectrum and data link communications to enable civil UA integration into the NAS. Through a cost-sharing cooperative agreement with Rockwell Collins, Inc., the NASA Glenn Research Center is exploring and performing the necessary development steps to realize a prototype UA CNPC system. These activities include investigating signal waveforms and access techniques, developing representative CNPC radio hardware, and executing relevant testing and validation activities. There is no intent to manufacture the CNPC end product, rather the goals are to study, demonstrate, and validate a typical CNPC system that will allow safe and efficient communications within the L-Band and C-Band spectrum allocations. The system is addressing initial "seed" requirements from RTCA, Inc., Special Committee 203 (SC-203) and is on a path to Federal Aviation Administration certification. This report provides results from the flight testing campaign of the Rockwell Collins Generation 1 prototype radio, referred hereafter as the "radio." The radio sets operate within the 960- to 977-MHz frequency band with both air and ground radios using identical hardware. Flight tests involved one aircraft and one GS. Results include discussion of aircraft flight paths and associated radio performance.

Shalkhauser, Kurt A.↗

Enabling Advanced Automation in Spacecraft Operations with the Spacecraft Emergency Response System

True autonomy is the Holy Grail of spacecraft mission operations. The goal of launching a satellite and letting it manage itself throughout its useful life is a worthy one. With true autonomy, the cost of mission operations would be reduced to a negligible amount. Under full autonomy, any problems (no matter the severity or type) that may arise with the spacecraft would be handled without any human intervention via some combination of smart sensors, on-board intelligence, and/or smart automated ground system. Until the day that complete autonomy is practical and affordable to deploy, incremental steps of deploying ever-increasing levels of automation (computerization of once manual tasks) on the ground and on the spacecraft are gradually decreasing the cost of mission operations. For example, NASA's Goddard Space Flight Center (NASA-GSFC) has been flying spacecraft with low cost operations for several years. NASA-GSFC's SMEX (Small Explorer) and MIDEX (Middle Explorer) missions have effectively deployed significant amounts of automation to enable the missions to fly predominately in 'light-out' mode. Under light-out operations the ground system is run without human intervention. Various tools perform many of the tasks previously performed by the human operators. One of the major issues in reducing human staff in favor of automation is the perceived increased in risk of losing data, or even losing a spacecraft, because of anomalous conditions that may occur when there is no one in the control center. When things go wrong, missions deploying advanced automation need to be sure that anomalous conditions are detected and that key personal are notified in a timely manner so that on-call team members can react to those conditions. To ensure the health and safety of its lights-out missions, NASA-GSFC's Advanced Automation and Autonomy branch (Code 588) developed the Spacecraft Emergency Response System (SERS). The SERS is a Web-based collaborative environment that enables secure distributed fault and resource management. The SERS incorporates the use of intelligent agents, threaded discussions, workflow, database connectivity, and links to a variety of communications devices (e.g., two-way paging, PDA's, and Internet phones) via commercial gateways. When the SERS detects a problem, it notifies on-call team members, who then can remotely take any necessary actions to resolve the anomalies.The SERS goes well beyond a simple '911' system that sends out an error code to everyone with a pager. Instead, SERS' software agents send detailed data (i.e., notifications) to the most appropriate team members based on the type and severity of the anomaly and the skills of the on-call team members. The SERS also allows the team members to respond to the notifications from their wireless devices. This unique capability ensures rapid response since the team members no longer have to go to a PC or the control center for every anomalous event. Most importantly, the SERS enables safe experimentation with various techniques for increasing levels of automation, leading to robust autonomy. For the MIDEX missions at NASA GSFC, the SERS is used to provide 'human-in-the-loop' automation. During lights-out operations, as greater control is given to the MIDEX automated systems, the SERS can be configured to page remote personnel and keep them informed regarding actions taking place in the control center. Remote off-duty operators can even be given the option of enabling or inhibiting a specific automated response in near real time via their two-way pagers. The SERS facilitates insertion of new technology to increase automation, while maintaining the safety and security of mission resources. This paper will focus on SERS' overall functionality and how SERS has been designed to handle the monitoring and emergency response for missions with varying levels of automation. The paper will also convey some of the key lessons learned from SERS' deployment across of variety of missions, highlighting this incremental approach to achieving 'robust autonomy'.

Breed, Julie↗

A process activity monitor for AOS/VS

With the ever increasing concern for computer security, users of computer systems are becoming more sensitive to unauthorized access. One of the initial security concerns for the Shuttle Management Information System was the problem of users leaving their workstations unattended while still connected to the system. This common habit was a concern for two reasons: it ties up resources unnecessarily and it opens the way for unauthorized access to the system. The Data General MV/10000 does not come equipped with an automatic time-out option on interactive peripherals. The purpose of this memorandum is to describe a system which monitors process activity on the system and disconnects those users who show no activity for some time quantum.

Mckosky, R. A.↗

NSI security task: Overview

An overview is presented of the NASA Science Internet (NSI) security task. The task includes the following: policies and security documentation; risk analysis and management; computer emergency response team; incident handling; toolkit development; user consulting; and working groups, conferences, and committees.

Tencati, Ron↗