Search NASA⌕ Search

SEARCH · Search NASA

Results for “software vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

79 records · Page 5
All sourcesNASA NTRSDOE OSTI
NASA NTRS2015

Analyzing Cyber Security Threats on Cyber-Physical Systems Using Model-Based Systems Engineering

The spectre of cyber attacks on aerospace systems can no longer be ignored given that many of the components and vulnerabilities that have been successfully exploited by the adversary on other infrastructures are the same as those deployed and used within the aerospace environment. An important consideration with respect to the mission/safety critical infrastructure supporting space operations is that an appropriate defensive response to an attack invariably involves the need for high precision and accuracy, because an incorrect response can trigger unacceptable losses involving lives and/or significant financial damage. A highly precise defensive response, considering the typical complexity of aerospace environments, requires a detailed and well-founded understanding of the underlying system where the goal of the defensive response is to preserve critical mission objectives in the presence of adversarial activity. In this paper, a structured approach for modeling aerospace systems is described. The approach includes physical elements, network topology, software applications, system functions, and usage scenarios. We leverage Model-Based Systems Engineering methodology by utilizing the Object Management Group's Systems Modeling Language to represent the system being analyzed and also utilize model transformations to change relevant aspects of the model into specialized analyses. A novel visualization approach is utilized to visualize the entire model as a three-dimensional graph, allowing easier interaction with subject matter experts. The model provides a unifying structure for analyzing the impact of a particular attack or a particular type of attack. Two different example analysis types are demonstrated in this paper: a graph-based propagation analysis based on edge labels, and a graph-based propagation analysis based on node labels.

MBSE↗
NASA NTRS2012

Assessing Tsunami Vulnerabilities of Geographies with Shallow Water Equations

Tsunami preparedness is crucial for saving human lives in case of disasters that involve massive water movement. In this work, we develop a framework for visual assessment of tsunami preparedness of geographies. Shallow water equations (also called Saint Venant equations) are a set of hyperbolic partial differential equations that are derived by depth-integrating the Navier-Stokes equations and provide a great abstraction of water masses that have lower depths compared to their free surface area. Our specific contribution in this study is to use Microsoft's XNA Game Studio to import underwater and shore line geographies, create different tsunami scenarios, and visualize the propagation of the waves and their impact on the shore line geography. Most importantly, we utilized the computational power of graphical processing units (GPUs) as HLSL based shader files and delegated all of the heavy computations to the GPU. Finally, we also conducted a validation study, in which we have tested our model against a controlled shallow water experiment. We believe that such a framework with an easy to use interface that is based on readily available software libraries, which are widely available and easily distributable, would encourage not only researchers, but also educators to showcase ideas.

Aras, Rifat↗
NASA NTRS2003

Three-Dimensional Venturi Sensor for Measuring Extreme Winds

A three-dimensional (3D) Venturi sensor is being developed as a compact, rugged means of measuring wind vectors having magnitudes of as much as 300 mph (134 m/s). This sensor also incorporates auxiliary sensors for measuring temperature from -40 to +120 F (-40 to +49 C), relative humidity from 0 to 100 percent, and atmospheric pressure from 846 to 1,084 millibar (85 to 108 kPa). Conventional cup-and-vane anemometers are highly susceptible to damage by both high wind forces and debris, due to their moving parts and large profiles. In addition, they exhibit slow recovery times contributing to an inaccurately high average-speed reading. Ultrasonic and hot-wire anemometers overcome some of the disadvantages of the cup and-vane anemometers, but they have other disadvantageous features, including limited dynamic range and susceptibility to errors caused by external acoustic noise and rain. In contrast, the novel 3D Venturi sensor is less vulnerable to wind damage because of its smaller profile and ruggedness. Since the sensor has no moving parts, it provides increased reliability and lower maintenance costs. It has faster response and recovery times to changing wind conditions than traditional systems. In addition, it offers wide dynamic range and is expected to be relatively insensitive to rain and acoustic energy. The Venturi effect in this sensor is achieved by the mirrored double-inflection curve, which is then rotated 360 to create the desired detection surfaces. The curve is optimized to provide a good balance of pressure difference between sensor ports and overall maximum fluid velocity while in the shape. Four posts are used to separate the two shapes, and their size and location were chosen to minimize effects on the pressure measurements. The 3D Venturi sensor has smart software algorithms to map the wind pressure exerted on the surfaces of the design. Using Bernoulli's equation, the speed of the wind is calculated from the differences among the pressure readings at the various ports. The direction of the wind is calculated from the spatial distribution and magnitude of the pressure readings. All of the pressure port sizes and locations have been optimized to minimize measurement errors and to reside in areas demonstrating a stable pressure reading proportional to the velocity range.

Zysko, Jan A.↗
NASA NTRS2008

Automated Generation and Assessment of Autonomous Systems Test Cases

This slide presentation reviews some of the issues concerning verification and validation testing of autonomous spacecraft routinely culminates in the exploration of anomalous or faulted mission-like scenarios using the work involved during the Dawn mission's tests as examples. Prioritizing which scenarios to develop usually comes down to focusing on the most vulnerable areas and ensuring the best return on investment of test time. Rules-of-thumb strategies often come into play, such as injecting applicable anomalies prior to, during, and after system state changes; or, creating cases that ensure good safety-net algorithm coverage. Although experience and judgment in test selection can lead to high levels of confidence about the majority of a system's autonomy, it's likely that important test cases are overlooked. One method to fill in potential test coverage gaps is to automatically generate and execute test cases using algorithms that ensure desirable properties about the coverage. For example, generate cases for all possible fault monitors, and across all state change boundaries. Of course, the scope of coverage is determined by the test environment capabilities, where a faster-than-real-time, high-fidelity, software-only simulation would allow the broadest coverage. Even real-time systems that can be replicated and run in parallel, and that have reliable set-up and operations features provide an excellent resource for automated testing. Making detailed predictions for the outcome of such tests can be difficult, and when algorithmic means are employed to produce hundreds or even thousands of cases, generating predicts individually is impractical, and generating predicts with tools requires executable models of the design and environment that themselves require a complete test program. Therefore, evaluating the results of large number of mission scenario tests poses special challenges. A good approach to address this problem is to automatically score the results based on a range of metrics. Although the specific means of scoring depends highly on the application, the use of formal scoring - metrics has high value in identifying and prioritizing anomalies, and in presenting an overall picture of the state of the test program. In this paper we present a case study based on automatic generation and assessment of faulted test runs for the Dawn mission, and discuss its role in optimizing the allocation of resources for completing the test program.

Testing challenges↗
NASA NTRSDate not supplied

Towards Real-time Global Assessment of Post-fire Debris Flow Hazard

As the risk of wildfires increases worldwide, burned steeplands are vulnerable to the secondary hazard of widespread sediment mobilization through debris flows. Following an initial burn, sediment and soil previously restrained by vegetation are no longer consolidated, allowing for easy mobilization into channels and along steep hillslopes through runoff. Sufficiently powerful rainfall incorporates entrained material into turbulent flows and serves as the primary trigger for debris flow initiation. There is thus an ongoing need to establish the relationship between rainfall and debris flow initiation based on a variety of spatiotemporal preconditions. Previous work establishes regional and local thresholds to constrain the effect of rainfall in recently burned areas, but no empirical or numerical solution has worldwide application. Building from regionally-based efforts in the U.S., this work considers how remote sensing data can be applied to better approximate the post-fire debris flow hazards worldwide using freely available global datasets and software. Our work assesses the utility of remote sensing resources for analyzing burn characteristics, topography, rainfall intensity/duration, and, thus, debris flow initiation. Early results show that global observations are sufficient to delineate background rainfall rates from storms likely to cause debris flows across a variety of burn severity and topographic conditions. However, the dearth of publicly-available post-fire debris flow inventories globally limit the ability to test how the model framework performs within different climatologic and morphologic areas. This work will present preliminary analysis over the Western United States and demonstrate the feasibility of a global, near-real time model to provide situational awareness of potential hazards within recently burned areas worldwide. Future work will also consider how global or regional precipitation forecasts may increase the lead time for improved early warning of these hazards.

Elijah Orland↗
NASA NTRS2022

Mars 2020 Entry, Descent, and Landing Software Implementation

On February 18th, 2021, the Mars 2020 project's Perseverance Rover successfully touched down on the Martian surface after nearly eight years of development. The Mars 2020 Entry, Descent, and Landing (EDL) System largely leveraged heritage from the Mars Science Laboratory (MSL) EDL System while employing targeted technological advancements. The landing process is autonomously directed by a software behavior implemented in the rover's primary flight computer called the EDL Timeline that assumes control of the vehicle six days before atmospheric entry. In addition to performing the critical function of landing the rover on the Martian surface, the EDL timeline behavior must co-exist in a non-partitioned software and system environment with other high-level functions that accomplish the goals for the rest of the mission. Due to the criticality of EDL, the potential for loss of mission, and a need for complete system autonomy, the standard for how the EDL Timeline interacts with other functions in the system is highly constrained. This paper first walks through the basics of the EDL Timeline mechanics and how the behavior is designed to account for internal system variations and environmental unknowns. It then summarizes the interactions between the EDL timeline and other high-level system behaviors like spacecraft mode transitions and system fault protection, focusing on the complications that arise when passing spacecraft control between executive functions. Although the MSL-inherited EDL System is reliable and capable, targeted updates and a thorough verification and validation program were required for Mars 2020. This paper discusses changes made to close vulnerabilities discovered during both MSL and Mars 2020 development cycles, landing system capability enhancements that were enabling for Mars 2020's mission, and how these updates were integrated with the heritage system. It then describes how both analysis and testing campaigns were utilized to verify and validate all aspects of EDL and system behaviors that run during the six days before landing, as well as the operational workarounds that were needed to address problems found during the development and commissioning process. Finally, this paper imparts lessons learned from Mars 2020 EDL development, implementation, and operations, emphasizing how systems designed to conduct time-critical mission events with low margin of error can be improved in the future.

Stehura, Aaron↗
NASA NTRS2018

Developing Land Use Land Cover Maps for the Lower Mekong Basin to Aid Hydrologic Modeling and Basin Planning

This paper discusses research methodology to develop Land Use Land Cover (LULC) mapsfor the Lower Mekong Basin (LMB) for basin planning, using both MODIS and Landsat satellitedata. The 2010 MODIS MOD09 and MYD09 8-day reflectance data was processed into monthlyNDVI maps with the Time Series Product Tool software package and then used to classify regionallycommon forest and agricultural LULC types. Dry season circa 2010 Landsat top of atmosphere reflectance mosaics were classified to map locally common LULC types. Unsupervised ISODATAclustering was used to derive most LULC classifications. MODIS and Landsat classifications werecombined with GIS methods to derive final 250-m LULC maps for Sub-basins (SBs) 1–8 of the LMB.The SB 7 LULC map with 14 classes was assessed for accuracy. This assessment compared randomlocations for sampled types on the SB 7 LULC map to geospatial reference data such as Landsat RGBs,MODIS NDVI phenologic profiles, high resolution satellite data, and Mekong River Commissiondata (e.g., crop calendars). The SB 7 LULC map showed an overall agreement to reference data of~81%. By grouping three deciduous forest classes into one, the overall agreement improved to ~87%.The project enabled updated regional LULC maps that included more detailed agriculture LULCtypes. LULC maps were supplied to project partners to improve use of Soil andWater AssessmentTool for modeling hydrology and water use, plus enhance LMB water and disaster managementin a region vulnerable to flooding, droughts, and anthropogenic change as part of basin planningand assessment.

land use land cover mapping; SWAT hydrologic model↗