Search NASA⌕ Search

SEARCH · Search NASA

Results for “computer information security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Plant-specific Model and Data Analysis using Dynamic Security Modeling and Simulation

The requirements for U.S. nuclear power plants to maintain a large on-site physical security force contribute to their high operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability (LWRS) program’s physical security pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. The conservatisms built into current security postures may be analyzed and minimized in order to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within LWRS program’s physical security pathway has successfully developed a dynamic force-on-force modeling framework using various computer simulation tools and integrating them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This document provides an update on the progress in applying a dynamic computational framework that links results from a commercially available force-on-force simulation tool, a commercially available thermal-hydraulic tool, and EMRALD to an operating commercial nuclear power plant. This report is only a summary of the progress and does not contain specific modeling results as those contain sensitive security information. This process of including plant procedures and multiple analysis results is being called Modeling and Analysis for Safety Security using Dynamic EMRALD Framework or MASS-DEF. Previous reports described how a user could integrate their plant-specific force-on-force models with the dynamic simulation tool EMRALD, model operator actions, integrate with probabilistic risk assessment tools, such as CAFTA (Computer Aided Fault Tree Analysis System) or SAPHIRE (Systems Analysis Programs for Hands-on Integrated Reliability Evaluations), and with thermal-hydraulic tools, such as RELAP-5. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report documents the results of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. This report does not contain any plant's sensitive information and/or Safeguards Information. The purpose of this study was to verify that results achieved using generic models are similar to actual plant results and to refine our guidance on the use of the framework. This assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2019

Current Challenges, Constraints and Recommendations for Reducing Cost of Physical Security at US Commercial Nuclear Power Plants

Economic or financial causes have led to closure or announced early retirement of several US nuclear reactors in the last five years. The published report "Economic and Market Challenges Facing the U.S. Nuclear Commercial Fleet – Cost and Revenue Study" by Idaho National Laboratory identified 63 of the 79 studied nuclear power plants (NPPs) lost money in the year 2016. The revenue gap analysis performed in the study also concluded that additional revenue is required to return most of these nuclear power units to profitable operations. This can be achieved by reducing operation and maintenance (O&M) costs that accounts for about 70% of total operating expenditures for an NPP. The Light Water Reactor Sustainability (LWRS) Program conducts research and development, sponsored by the US Department of Energy, that provides a technical foundation for licensing and managing the long-term safe and economical operation of current nuclear power plants, utilizing the unique capabilities of the national laboratory system. Reduction in O&M costs aligns with the LWRS program’s mission of providing science-based solutions to the nuclear industry to implement technologies and methodologies for safe, efficient, economical, and long-term operation.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Experimental Guesswork with Quantum Side Information Using Twisted Light

Guesswork is an information–theoretic quantity which can be seen as an alternate security criterion to entropy. Recent work has established the theoretical framework for guesswork in the presence of quantum side information, which we extend both theoretically and experimentally. We consider guesswork when the side information consists of the BB84 states and their higher-dimensional generalizations. With this side information, we compute the guesswork for two different scenarios for each dimension. We then performed a proof-of-principle experiment using Laguerre–Gauss modes to experimentally compute the guesswork for higher-dimensional generalizations of the BB84 states. We find that our experimental results agree closely with our theoretical predictions. This work shows that guesswork can be a viable security criterion in cryptographic tasks and is experimentally accessible in a number of optical setups.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2021

Cyber–Physical System Security of Distribution Systems

The Information and Communications Technology (ICT) for control and monitoring of power systems is a layer on top of the physical power system infrastructure. The cyber system and physical power system components form a tightly coupled Cyber–Physical System (CPS). Sources of vulnerabilities arise from the computing and communication systems of the cyber–power grid. Cyber intrusions targeting the power grid are serious threats to the reliability of electricity supply that is critical to society and the economy. In a typical Information Technology environment, numerous attack scenarios have shown how unauthorized users can access and manipulate protected information from a network domain. The need for cyber security has led to industry standards that power grids must meet to ensure that the monitoring, operation, and control functions are not disrupted by cyber intrusions. Cyber security technologies such as encryption and authentication have been deployed on the CPS. Intrusion or anomaly detection and mitigation tools developed for power grids are emerging. Furthermore, this survey paper provides the basic concepts of cyber vulnerabilities of distribution systems and CPS security. The important ICT subjects for distribution systems covered in this paper include Supervisory Control And Data Acquisition, Distributed Energy Resources, including renewable energy and smart meters.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Anonymization of Network Traces Data through Condensation-based Differential Privacy

Network traces are considered a primary source of information to researchers, who use them to investigate research problems such as identifying user behavior, analyzing network hierarchy, maintaining network security, classifying packet flows, and much more. However, most organizations are reluctant to share their data with a third party or the public due to privacy concerns. Therefore, data anonymization prior to sharing becomes a convenient solution to both organizations and researchers. Although several anonymization algorithms are available, few of them allow sufficient privacy (organization need), acceptable data utility (researcher need), and efficient data analysis at the same time. This article introduces a condensation-based differential privacy anonymization approach that achieves an improved tradeoff between privacy and utility compared to existing techniques and produces anonymized network trace data that can be shared publicly without lowering its utility value. Our solution also does not incur extra computation overhead for the data analyzer. A prototype system has been implemented, and experiments have shown that the proposed approach preserves privacy and allows data analysis without revealing the original data even when injection attacks are launched against it. When anonymized datasets are given as input to graph-based intrusion detection techniques, they yield almost identical intrusion detection rates as the original datasets with only a negligible impact.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS1995

The NAS Computational Aerosciences Archive

In order to further the state-of-the-art in computational aerosciences (CAS) technology, researchers must be able to gather and understand existing work in the field. One aspect of this information gathering is studying published work available in scientific journals and conference proceedings. However, current scientific publications are very limited in the type and amount of information that they can disseminate. Information is typically restricted to text, a few images, and a bibliography list. Additional information that might be useful to the researcher, such as additional visual results, referenced papers, and datasets, are not available. New forms of electronic publication, such as the World Wide Web (WWW), limit publication size only by available disk space and data transmission bandwidth, both of which are improving rapidly. The Numerical Aerodynamic Simulation (NAS) Systems Division at NASA Ames Research Center is in the process of creating an archive of CAS information on the WWW. This archive will be based on the large amount of information produced by researchers associated with the NAS facility. The archive will contain technical summaries and reports of research performed on NAS supercomputers, visual results (images, animations, visualization system scripts), datasets, and any other supporting meta-information. This information will be available via the WWW through the NAS homepage, located at http://www.nas.nasa.gov/, fully indexed for searching. The main components of the archive are technical summaries and reports, visual results, and datasets. Technical summaries are gathered every year by researchers who have been allotted resources on NAS supercomputers. These summaries, together with supporting visual results and references, are browsable by interested researchers. Referenced papers made available by researchers can be accessed through hypertext links. Technical reports are in-depth accounts of tools and applications research projects performed by NAS staff members and collaborators. Visual results, which may be available in the form of images, animations, and/or visualization scripts, are generated by researchers with respect to a certain research project, depicting dataset features that were determined important by the investigating researcher. For example, script files for visualization systems (e.g. FAST, PLOT3D, AVS) are provided to create visualizations on the user's local workstation to elucidate the key points of the numerical study. Users can then interact with the data starting where the investigator left off. Datasets are intended to give researchers an opportunity to understand previous work, 'mine' solutions for new information (for example, have you ever read a paper thinking "I wonder what the helicity density looks like?"), compare new techniques with older results, collaborate with remote colleagues, and perform validation. Supporting meta-information associated with the research projects is also important to provide additional context for research projects. This may include information such as the software used in the simulation (e.g. grid generators, flow solvers, visualization). In addition to serving the CAS research community, the information archive will also be helpful to students, visualization system developers and researchers, and management. Students (of any age) can use the data to study fluid dynamics, compare results from different flow solvers, learn about meshing techniques, etc., leading to better informed individuals. For these users it is particularly important that visualization be integrated into dataset archives. Visualization researchers can use dataset archives to test algorithms and techniques, leading to better visualization systems, Management can use the data to figure what is really going on behind the viewgraphs. All users will benefit from fast, easy, and convenient access to CFD datasets. The CAS information archive hopes to serve as a useful resource to those interested in computational sciences. At present, only information that may be distributed internationally is made available via the archive. Studies are underway to determine security requirements and solutions to make additional information available. By providing access to the archive via the WWW, the process of information gathering can be more productive and fruitful due to ease of access and ability to manage many different types of information. As the archive grows, additional resources from outside NAS will be added, providing a dynamic source of research results.

Miceli, Kristina D.↗
DOE OSTI2018

The EGS Data Collaboration Platform: Enabling Scientific Discovery

Collaboration in the digital age has been stifled in recent years. Reasonable responses to legitimate security concerns have created a virtual landscape of silos and fortified castles incapable of sharing information efficiently. This trend is unfortunately opposed to the geothermal scientific community's migration toward larger, more collaborative projects. To facilitate efficient sharing of information between team members from multiple national labs, universities, and private organizations, the 'EGS Collab' team has developed a universally accessible, secure data collaboration platform and has fully integrated it with the U.S. Department of Energy's (DOE) Geothermal Data Repository (GDR) and the National Geothermal Data System (NGDS). This paper will explore some of the challenges of collaboration in the modern digital age, highlight strategies for active data management, and discuss the integration of the EGS Collab data management platform with the GDR to enable scientific discovery through the timely dissemination of information.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2026

Los Alamos National Laboratory R&D Intern

This report details the responsibilities, outcomes, and project details of a summer R&D internship at Los Alamos National Laboratory (LANL). LANL is a multidisciplinary laboratory that focuses on current cutting-edge research in many fields such as national security, engineering, materials science, computational modeling, and advanced manufacturing. The goal of the internship project was to work with lab engineers and resources to develop an energy absorbing structure for high-velocity impact applications. The successful development of this technology and methodology would not only positively impact future project funding but also contribute to the laboratory's commitment to solve national security challenges through simultaneous excellence. Such devices would also support efforts surrounding the research and development of energy absorbing structures and would provide new vital information backed by experimentation. Different computational and modeling methods were used to design these structures, in addition to qualitative background information provided by past literature. The resultant designs were successfully tested, and the test results were successfully quantified. From these results, new computational methods were developed through python programming and modeling to predict ideal materialistic properties for these structures given a sufficiently defined application.

36 MATERIALS SCIENCE↗
DOE OSTI2018

Nebraska Integrated Carbon Capture and Storage Pre-Feasibility Study

In collaboration with the Nebraska Public Power District (NPPD), the Energy & Environmental Research Center (EERC) has conducted a pre-feasibility study for a commercial-scale carbon dioxide (CO 2 ) geologic storage complex in western Nebraska integrated with potential CO 2 capture at Gerald Gentleman Station (GGS). GGS is the largest coal-fired electricity-generating station in Nebraska, emitting 8.5 million metric tons (Mt) of CO 2 annually, and is located near the town of Sutherland. This pre-feasibility (Phase 1) project has been executed as part of the U.S. Department of Energy (DOE) CarbonSAFE program, a multiphase initiative to support the deployment of large-scale carbon capture and storage (CCS) projects. Each CarbonSAFE project is required to demonstrate the potential to capture and store at least 50 million tonnes (Mt) of CO 2 over a 25-year operational period. The EERC and NPPD established a coordination team to identify challenges to a potential Nebraska CCS project, comprising local stakeholder organizations, which met twice in Lincoln and via several Webinars, providing feedback and guidance throughout the pre-feasibility study. The EERC also secured the technical support of Schlumberger Carbon Services and Computer Modelling Group Ltd. (CMG). The project comprised four technical themes, all using published information sources. Regional and stakeholder analysis, including identification of sensitive environmental areas, potential resource conflicts, and strategies for public outreach. A review of geographic and socioeconomic characteristics, in combination with geologic characterization in the subbasinal analysis described below, identified an area to the southwest and within a 75-mile radius of GGS as the most prospective for development of a storage site. This area largely avoided lands with protected status such as wetlands. A public outreach plan has also been developed for implementation in any further phases of CCS assessment in western Nebraska, for example a CarbonSAFE Phase 2 feasibility study. Scenario analysis, addressing economic and regulatory factors. GGS is the only single major source of CO 2 emissions capable of satisfying the CarbonSAFE 50-Mt scale requirement within the study region. Chemical absorption using amines was identified as the most viable technology for postcombustion CO 2 capture at GGS. The total cost of a CCS project at GGS was estimated to be between $67/tonne CO 2 for capture and auxiliary boiler to minimize parasitic load and $70/tonne CO 2 avoided cost, using the Carnegie-Mellon University Integrated Environmental Control Model (IECM). The total avoided cost included the capture facility and parasitic load, a flue gas desulfurization plant required for the use of amine solvent technology, transport via pipeline, and dedicated storage infrastructure. Nebraska has no legislation in place to address typical CCS-specific issues, for example pore space ownership for storage. Long-term liability, therefore, falls under the U.S. Environmental Protection Agency Underground Injection Control (UIC) Class 6 program regulations. Subbasinal analysis, addressing the potential for a dedicated subsurface “container” to store the required 50-Mt quantity of CO 2 . Modeling and simulation studies identified an area to the southwest of GGS with the potential for storage of 50 Mt CO 2 in the Cloverly Formation, comprising sandstones with interbedded and intermingled shales. The area of review (AOR) that would be required for monitoring under a Class VI operating permit was estimated to be as high as 400–700 square miles, due to uncertain pressure effects. The viability of this storage option is subject to significant uncertainty due to the relatively limited amount of existing characterization data available to the pre-feasibility study; for example, dynamic simulation indicated that the proposed storage rate might require as little as two or as many as 14 injection wells. A key uncertainty is the relative proportion and distribution of sandstone and shale within the Cloverly Formation. A preliminary, semiquantitative risk assessment also suggested uncertainty over storage capacity and injectivity constitute the most significant project risks at this pre-feasibility stage. No assessed risks were considered to rule out the possibility of a project moving to deployment. National Risk Assessment Partnership (NRAP) validation, using software tools developed by the National Energy Technology Laboratory (NETL) to assess risks associated with the potential 50-Mt CO 2 storage complex. NRAP tools were used to assess hypothetical leakage scenarios. Results broadly supported the conclusion of the semiquantitative risk analysis – for example, even worst-case analysis of theoretical leakage scenarios found limited migration rates and impacts. In summary, the work undertaken in this Phase 1 pre-feasibility study has shown that western Nebraska has potential to host a commercial-scale CCS project, including a dedicated storage “container” for 50 Mt of CO 2 . However, the following key challenges would need to be overcome: The business case for deploying CCS projects is uncertain; recently announced federal tax credits and sales of CO 2 for enhanced oil recovery may not cover the full costs of a CCS project at GGS, as estimated by this pre-feasibility study. The potential 50-Mt CO 2 dedicated storage container defined in this pre-feasibility study should be regarded as having a relatively low level of readiness to support a CCS project. Public outreach would be a vital element in western Nebraska, where sensitivities around such environmental issues as water resource protection and pipeline construction would need to be carefully addressed.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS2000

NPSS on NASA's Information Power Grid: Using CORBA and Globus to Coordinate Multidisciplinary Aeroscience Applications

This paper describes a project to evaluate the feasibility of combining Grid and Numerical Propulsion System Simulation (NPSS) technologies, with a view to leveraging the numerous advantages of commodity technologies in a high-performance Grid environment. A team from the NASA Glenn Research Center and Argonne National Laboratory has been studying three problems: a desktop-controlled parameter study using Excel (Microsoft Corporation); a multicomponent application using ADPAC, NPSS, and a controller program-, and an aviation safety application running about 100 jobs in near real time. The team has successfully demonstrated (1) a Common-Object- Request-Broker-Architecture- (CORBA-) to-Globus resource manager gateway that allows CORBA remote procedure calls to be used to control the submission and execution of programs on workstations and massively parallel computers, (2) a gateway from the CORBA Trader service to the Grid information service, and (3) a preliminary integration of CORBA and Grid security mechanisms. We have applied these technologies to two applications related to NPSS, namely a parameter study and a multicomponent simulation.

Lopez, Isaac↗
NASA NTRS2001

Strategy for IT Security

This viewgraph presentation provides information on the importance of information technology (IT) security (ITS) to NASA's mission. Several points are made concerning the subject. In order for ITS to be successful, it must be supported by management. NASA, while required by law to keep the public informed of its pursuits, must take precautions due to possible IT-based incursions by computer hackers and other malignant persons. Fear is an excellent motivation for establishing and maintaining a robust ITS policy. The ways in which NASA ITS personnel continually increase security are manifold, however a great deal relies upon the active involvement of the entire NASA community.

Santiago, S. Scott↗
NASA NTRS1986

Physics through the 1990s: Scientific interfaces and technological applications

The volume examines the scientific interfaces and technological applications of physics. Twelve areas are dealt with: biological physics-biophysics, the brain, and theoretical biology; the physics-chemistry interface-instrumentation, surfaces, neutron and synchrotron radiation, polymers, organic electronic materials; materials science; geophysics-tectonics, the atmosphere and oceans, planets, drilling and seismic exploration, and remote sensing; computational physics-complex systems and applications in basic research; mathematics-field theory and chaos; microelectronics-integrated circuits, miniaturization, future trends; optical information technologies-fiber optics and photonics; instrumentation; physics applications to energy needs and the environment; national security-devices, weapons, and arms control; medical physics-radiology, ultrasonics, MNR, and photonics. An executive summary and many chapters contain recommendations regarding funding, education, industry participation, small-group university research and large facility programs, government agency programs, and computer database needs.

Source record↗
NASA NTRS2013

Network Penetration Testing and Research

This paper will focus the on research and testing done on penetrating a network for security purposes. This research will provide the IT security office new methods of attacks across and against a company's network as well as introduce them to new platforms and software that can be used to better assist with protecting against such attacks. Throughout this paper testing and research has been done on two different Linux based operating systems, for attacking and compromising a Windows based host computer. Backtrack 5 and BlackBuntu (Linux based penetration testing operating systems) are two different "attacker'' computers that will attempt to plant viruses and or NASA USRP - Internship Final Report exploits on a host Windows 7 operating system, as well as try to retrieve information from the host. On each Linux OS (Backtrack 5 and BlackBuntu) there is penetration testing software which provides the necessary tools to create exploits that can compromise a windows system as well as other operating systems. This paper will focus on two main methods of deploying exploits 1 onto a host computer in order to retrieve information from a compromised system. One method of deployment for an exploit that was tested is known as a "social engineering" exploit. This type of method requires interaction from unsuspecting user. With this user interaction, a deployed exploit may allow a malicious user to gain access to the unsuspecting user's computer as well as the network that such computer is connected to. Due to more advance security setting and antivirus protection and detection, this method is easily identified and defended against. The second method of exploit deployment is the method mainly focused upon within this paper. This method required extensive research on the best way to compromise a security enabled protected network. Once a network has been compromised, then any and all devices connected to such network has the potential to be compromised as well. With a compromised network, computers and devices can be penetrated through deployed exploits. This paper will illustrate the research done to test ability to penetrate a network without user interaction, in order to retrieve personal information from a targeted host.

Murphy, Brandon F.↗
DOE OSTI2019

Arms Control Opportunities for Inherently Safe and Secure Nuclear Command, Control, and Communications

The Department of Defense Science Board has stated that the United States is "not prepared to defend againsr cyber-attacks and that the military could lose "trust in the information and ability to control U.S. systems and forces [including nuclear forces]." One potential weak spot in cyber-security is storing encryption keys in computer memory. This paper explores the use of hardware devices (so-called Physical Unclonable Functions, or PUFs) to generate, in the nuclear weapon itself, unique encryption keys each time they are needed. Not only do we find that this has the potential to mitigate a number of cyberthreats, but such hardware has the potential to greatly diminish the total uncertainty associated with radiation-based warhead authentication procedures; a procedure many analysts feel will be key to future arms control regimes. After outline the use of PUFs in nuclear command, control, and communications--and indicating some of the areas that still require further research--we discuss their application to arms control and warhead authentication

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2019

Addendum to the REBUS Users Guide: REBUS-PC (V.1.5)

The Department of Energy (DOE) National Nuclear Security Administration (NNSA) Material Management and Minimization (M3) Reactor Conversion Program uses the REBUS-PC computer code to provide reactor physics and core design information such as neutron flux distributions in space, energy, and time, and to track isotopic changes in fuel and neutron absorbers with burnup. REBUS-PC has evolved from the original REBUS code, which was created starting in the 1960’s to study large liquid metal cooled fast reactors. In particular, additional outputs were added to improve user convenience and some inputs were modified to improve the functionality of the software. REBUS and REBUS-PC both model the external cycle, and are very general codes with 1D, 2D, and 3D neutronics capabilities, and with complete fuel shuffling capabilities. REBUS remains an extremely efficient reactor analysis tool for use in fast reactor systems, and so development has continued at Argonne National Laboratory (ANL) to this day for non-thermal reactor applications. While retaining the efficient computational engine of REBUS, REBUS-PC has evolved to its present status with continuous development since 1999. REBUS-PC has numerous changes and enhancements directed toward the needs of the thermal reactor analyst using Windows or Linux-based computational platforms.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2021

Technical Guide for Implementing Cybersecurity Continuous Monitoring in the Nuclear Industry

A technical guide to assist the nuclear industry in implementing cybersecurity continuous monitoring program. The guide walks through the steps to develop a cybersecurity continuous monitoring program and provides details relative to the nuclear industry. It also includes a series of examples of optional metrics to be used, and technologies that can be useful when implementing a continuous monitoring program.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗