Search NASA⌕ Search

SEARCH · Search NASA

Results for “Vulnerability Management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6
All sourcesNASA NTRSDOE OSTI
NASA NTRS2014

Scalable Asset Discovery, Vulnerability Scanning, and Penetration Testing for Remote Sites and Wireless Spectrums Utilizing an Embedded Linux Plug - PwniPlug and the Raspberry Pi B+ as a Sample Pen Test

All devices attached to the NASA KSC network are subject to security vulnerability scanning and/or penetration testing. In today's changing environment, vulnerable and/or unprotected systems can easily be overlooked. Systems that are not properly managed can become a potential threat to the operational integrity of our systems and networks. This includes all NASA (internal and external) information systems within NASA KSC Internet Protocol (IP) address space, and NASA KSC facilities. The Office of the Chief Information Officer (OCIO) recommends that all NASA Centers and information systems be subject to penetration testing on a regular interval in accordance with the guidelines identified by the National Institute of Standards and Technology (NIST). (ITS-HBK-2810.04-02A) Protecting information and equipment at NASA is an area of increasing concern. In addition to the CPU's on the network; Supervisory, Control and Data Acquisition (SCADA) systems are especially vulnerable because these systems have lacked standards, use embedded controllers with little computational power and informal software, are connected to physical processes, have few operators, and are increasingly also being connected to corporate networks. The scope of work is comprised of several individual components which together build upon previous work by Drew Branch, NASA KSC Intern. The Pwn Plug is the selected COTS (Commercial-Off-The-Shelf) device chosen to test simplification of mandatory IT Security tasks. The device will be utilized to provide services to NASA KSC and enable an assessment of infrastructure soundness and regulatory compliance in an efficient, economical, and business responsive manner. The Pwn Plug is designed as a pen testing appliance which provides a hardware platform that can support commercial penetration testing efforts at significantly reduced costs. The expected outcomes are: 1) External Penetration Testing, 2) Social Engineering, 3) Procedural Documentation, 4) Recommended Remediation Action Plan, 5) System Retest & Remediation Attestation and 6) Final Reports, out briefing and Presentation. Due to physical and material constraints beyond intern and mentor control, the project was redefined as a working pen-test scenario. Limitations of lab availability and tools dictated an academic exercise. This report was developed within the scenario guidelines suggested by the project mentor. The guidelines were to be creative in developing a Pen Test program for a client.

Penetration Testing↗
DOE OSTI2021

Vind: A Blockchain-Enabled Supply Chain Provenance Framework for Energy Delivery Systems

Enterprise-level energy delivery systems (EDSs) depend on different software or hardware vendors to achieve operational efficiency. Critical components of these systems are typically manufactured and integrated by overseas suppliers, which expands the attack surface to adversaries with additional opportunities to infiltrate into EDSs. Due to this reason, the risk management of the EDS supply chain is crucial to ensure that we are knowledgeable about the vulnerabilities in software and hardware components that comprise any critical part, quantifiable risk metrics to assess the severity and exploitability of the attack, and provide remediation solutions that can influence a prioritized mitigation plan. There is a need to realize cyber supply chain risk management for industrial control systems’ hardware, software, and computing and networking services associated with bulk electric system (BES) operations. This article proposes a blockchain-based cyber supply chain provenance platform (“Vind”) for EDSs to realize data provenance in a cyber supply chain ecosystem.

Bandara, Eranga↗
NASA NTRS2009

Tool for Human-Systems Integration Assessment: HSI Scorecard

This paper describes the development and rationale for a human-systems integration (HSI) scorecard that can be used in reviews of vehicle specification and design. This tool can be used to assess whether specific HSI related criteria have been met as part of a project milestone or critical event, such as technical reviews, crew station reviews, mockup evaluations, or even review of major plans or processes. Examples of HSI related criteria include Human Performance Capabilities, Health Management, Human System Interfaces, Anthropometry and Biomechanics, and Natural and Induced Environments. The tool is not intended to evaluate requirements compliance and verification, but to review how well the human related systems have been considered for the specific event and to identify gaps and vulnerabilities from an HSI perspective. The scorecard offers common basis, and criteria for discussions among system managers, evaluators, and design engineers. Furthermore, the scorecard items highlight the main areas of system development that need to be followed during system lifecycle. The ratings provide a repeatable quantitative measure to what has been often seen as only subjective commentary. Thus, the scorecard is anticipated to be a useful HSI tool to communicate review results to the institutional and the project office management.

Whitmore, Nihriban↗
DOE OSTI2020

Annual Scientific Focus Area Report for the Energy Exascale Earth System Model Project: Phase II

The project's long-term goal is to assert and maintain an international scientific leadership position in the development of Earth system models that address the grand challenge of actionable predictions of Earth system variability and change, with an emphasis on the most critical scientific questions facing the nation and DOE. The grand challenge will be addressed by overcoming three major limitations: Pushing the high-resolution frontier of Earth system modeling through a combination of strategic model development and computational advances targeting exascale computers and beyond. Bridging the gap in scales and processes by developing a new class of models that couple the natural, managed, and man-made systems across scales to address energy sector vulnerability to variability and change. The project will achieve its goal through four intersecting project elements: A series of prediction and simulation experiments addressing scientific questions and mission needs; A well-documented and tested, continuously advancing, evolving, and improving system of model codes that comprise the E3SM Earth system model; The ability to use effectively leading (and “bleeding”) edge computational facilities soon after their deployment at DOE national laboratories; and An infrastructure to support code development, hypothesis testing, simulation execution, and analysis of results. To achieve the Grand Challenge of actionable Earth system predictions to address the most critical scientific questions facing our nation and DOE, the E3SM project defined its strategy in a fifteen-year roadmap with four intersecting project elements: A series of prediction and simulation experiments addressing scientific questions and mission needs; A well-documented and tested, continuously advancing, evolving, and improving system of model codes that comprise the E3SM Earth system model ; The ability to use effectively leading (and “bleeding”) edge computational facilities soon after their deployment at DOE national laboratories; and An infrastructure to support code development, hypothesis testing, simulation execution, and analysis of results. Figure 1 depicts the E3SM Project Roadmap, showing the relationships among the first three major project elements: the simulations, the modeling system to perform those simulations, and the machines on which they will be executed. Unlike the other three elements that have distinct but overlapping phases, the fourth element, the infrastructure, will evolve continuously based on the requirements imposed by project needs.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Resilience Assessment: Cape Cod National Seashore

The NPS partnered with the National Renewable Energy Laboratory (NREL) in 2019 to develop resilience plans at specific high-risk parks as well as a resilience planning guide to inform resilience planning decisions by NPS and other federal land management agencies. The purpose of this project is to further examine the vulnerability of coastal park infrastructure specific to energy, communications, transportation, and water systems, for future operational resilience across the NPS portfolio. Leveraging previously compiled vulnerability assessments and renewable energy analyses, NREL has completed resilience plans at specific high-risk pilot parks to serve as a foundation for more comprehensive assessments and resilience planning activities. This report is a summary of the efforts at Cape Cod National Seashore (CACO), which outlines the methodology used and the results of the analysis, with the intention of serving as a case study for other parks interested in replicating the process.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2010

Alaska's Changing Fire Regime - Implications for the Vulnerability of Its Boreal Forests

A synthesis was carried out to examine Alaska s boreal forest fire regime. During the 2000s, an average of 767 000 ha/year burned, 50% higher than in any previous decade since the 1940s. Over the past 60 years, there was a decrease in the number of lightning-ignited fires, an increase in extreme lightning-ignited fire events, an increase in human-ignited fires, and a decrease in the number of extreme human-ignited fire events. The fraction of area burned from humanignited fires fell from 26% for the 1950s and 1960s to 5% for the 1990s and 2000s, a result from the change in fire policy that gave the highest suppression priorities to fire events that occurred near human settlements. The amount of area burned during late-season fires increased over the past two decades. Deeper burning of surface organic layers in black spruce (Picea mariana (Mill.) BSP) forests occurred during late-growing-season fires and on more well-drained sites. These trends all point to black spruce forests becoming increasingly vulnerable to the combined changes of key characteristics of Alaska s fire regime, except on poorly drained sites, which are resistant to deep burning. The implications of these fire regime changes to the vulnerability and resilience of Alaska s boreal forests and land and fire management are discussed.

Kasischke, E. S.↗
DOE OSTI2022

Cost-Efficient Construction at Los Alamos National Laboratory

The construction industry can be fraught with cost, schedule, and scope overruns. Los Alamos National Laboratory (LANL), a Department of Energy (DOE) / National Nuclear Security Administration (NNSA) facility located in Northern New Mexico, seems to be particularly vulnerable to cost and schedule overruns. Since Triad National Security, LLC acquired the management and operating (M&O) contract for LANL in 2018, the group has been striving to reduce the cost of construction across the forty square-mile campus.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2016

Why Do People Make Mistakes?

Multitasking is endemic in modern life and work: drivers talk on cell phones, office workers type while answering phone calls, students do homework while text messaging, nurses prepare injections while responding to doctors calls, and air traffic controllers direct aircraft in one sector while handling additional traffic in another. Whether in daily life or at work, we are constantly bombarded with multiple, concurrent interruptions and demands and we have all somehow come to believe in the myth that we can, and in fact are expected to, easily address them all - without any repercussions. However, accumulating scientific evidence is now suggesting that multitasking increases the probability of human error. This talk presents a set of NASA studies that characterize concurrent demands in one work domain, routine airline cockpit operations, in order to illustrate the ways operational task demands together with the proclivity to manage them all concurrently make human performance in this and in any domain vulnerable to potentially serious errors and to accidents.

multitasking↗
NASA NTRS2005

Managing radiation degradation of CCDs on the Chandra X-ray Observatory II

The CCDs on the Chandra X-ray Observatory are vulnerable to radiation damage from low-energy protons scattered off the telescope's mirrors onto the focal plane. Following unexpected damage incurred early in the mission, the Chandra Team developed, implemented, and maintains a radiation-protection program. This program - involving scheduled radiation safing during radiation-belt passes, intervention based upon real-time space-weather conditions and radiation-environment modeling, and on-board radiation monitoring with autonomous radiation safing - has successfully managed the radiation damage to the CCDs. Since implementing the program, the charge-transfer inefficiency (CTI) has increased at an average annual rate of only 2.9x10^-6 (2.3%) for the front- illuminated CCDs and 0.95x10^-6 (6.5%) for the back-illuminated CCDs. This paper describes the current status of Chandra radiation-management program.

O'Dell, Stephen L.↗
NASA NTRS2007

Managing Radiation Degradation of CCDs on the Chandra X-Ray Observatory--III

The CCDs on the Chandra X-ray Observatory are vulnerable to radiation damage from low-energy protons scattered off the telescope's mirrors onto the focal plane. Following unexpected damage incurred early in the mission, the Chandra team developed, implemented, and maintains a radiation-protection program. This program--involving scheduled radiation safing during radiation-belt passes, intervention based upon real-time space-weather conditions and radiation-environment modeling, and on-board radiation monitoring with autonomous radiation safing--has successfully managed the radiation damage to the CCDs. Since implementing the program, the charge-transfer inefficiency (CTI) has increased at an average annual rate of only 3.2x 10(exp -6) (2.3 percent) for the front-illuminated CCDs and 1.0x10(exp -6) (6.7 percent) for the back-illuminated CCDs. This paper describes the current status of the Chandra radiation-management program, emphasizing enhancements implemented since the previous papers.

O'Dell, Stephen L.↗
DOE OSTI2022

Exploring the Consistency of Water Scarcity Inferences between Large-Scale Hydrologic and Node-Based Water System Model Representations of the Upper Colorado River Basin

Water resources model development and simulation efforts have seen rapid growth in recent decades to aid evaluations and planning around water scarcity and allocation. Models are typically developed by two distinct communities: (1) large-scale hydrologic modelers emphasizing hydroclimatological processes, and (2) water systems modelers emphasizing environmental, infrastructural, and institutional features that shape water scarcity at the local basin level. This study assesses whether two representative models from these communities produce consistent insights when evaluating the water scarcity vulnerabilities in the Upper Colorado River Basin within the state of Colorado. Results showed that although the regional-scale model [model for scale adaptive river transport (MOSART)—water management (WM)] can capture the aggregate effect of all water operations in the basin, it underestimates the subbasin-scale variability in specific user’s vulnerabilities. The basin-scale water systems model [State of Colorado’s Stream Simulation Model (StateMod)] suggests a larger variance of scarcity across the basin’s water users due to its more detailed accounting of local water allocation infrastructure and institutional processes. This model intercomparison highlights potentially significant limitations of large-scale studies in seeking to evaluate water scarcity and actionable adaptation strategies, as well as ways in which basin-scale water systems model’s information can be used to better inform water allocation and shortage when used in tandem with larger-scale hydrological modeling studies.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

A Method for Measuring Coupled Individual and Social Vulnerability to Environmental Hazards

Although models of social vulnerability to environmental hazards are commonly developed to support policy interventions in emergencies and disasters, their utility is hindered by a lack of contextual information on individuals exposed to and affected by hazards. We develop a novel approach to model social vulnerability that couples individuals and their varying forms of protective capacity with the social fabric of the communities in which they reside. The backbone of our model is the Public-Use Microdata Sample (PUMS), a product of the U.S. Census Bureau that preserves a representative sample of completed responses to the American Community Survey (ACS). The PUMS enables us to understand the full range of individual protective capacities against a hazard in an exposed area, which we term individual vulnerability profiles (IVPs). In this case, we examine IVPs in the Coney Island-Brighton Beach section of New York City, which suffered severe impacts during Hurricane Sandy in 2012. To manage the large number of unique IVPs in Coney Island-Brighton Beach, we perform a segmentation analysis to generalize them into thematic cohort vulnerability profiles (CVPs) representing a typology of vulnerable people in Coney Island-Brighton Beach during Sandy. From synthetic populations of CVPs, we then estimate how individuals in varying housing types were coexposed to Sandy at the census tract level by classifying these areas into community social vulnerability profiles (SVPs). Our results provide a topology of social vulnerability that simultaneously links individual, community, and population-wide concerns, enabling a more holistic understanding of resources and interventions beneficial to human security during events like Sandy than is attainable with area-level metrics.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRSDate not supplied

Cognitive Engineering in Training: Monitoring and Pilot-Automation Coordination in Complex Environments

This paper reports our investigation of flight path monitoring in aviation. We interviewed experienced pilots to understand the knowledge and skills underlying effective monitoring and we developed an example learning environment to improve these skills. We explore how design of pilot training and learning, like the design of interfaces and of the underlying automation, benefits from cognitive engineering methods and perspective. In aviation, monitoring and managing flight path are critical activities. The influences on flight path are complex and come from the autoflight system, from control actions by the pilot, and from external factors, including weather and Air Traffic Control (ATC). Indeed, inadequate flight path monitoring is a current aviation concern as it has been implicated in accidents and incidents. Effective piloting depends on strategies for noticing, understanding, and anticipating these influences to monitor and manage flight path. Lack of such skills reduces pilots' ability to maintain safety margin and resilience. Although flightdeck automation is intended to aid pilot understanding and prediction, the Fight Management Systems (FMS) can mislead as well as aid the pilot's understanding and projection of what will happen. In dynamic conditions, FMS predictions may be based on old or incomplete information. Understanding such vulnerabilities is an important part of pilot-autoflight coordination. The learning environment we developed is designed to help pilots proactively monitor and manage flight path. We consider how a broad cognitive engineering approach might inform the "what" and "how" of learning in dynamic work domains.

pilot-monitoring↗
DOE OSTI2021

Comparative establishment and yield of bioenergy sorghum and maize following pre–emergence waterlogging

Biofuel feedstocks grown on marginal lands, such as those that experience ephemeral waterlogging, reduce interference with food agriculture. As early-season extreme precipitation events in the U.S. Midwest continue to increase, waterlogging tolerance may play an important role in the productivity of annual biofuel cropping systems. We assessed the establishment and yield of photoperiod-sensitive sorghum [Sorghum bicolor (L.) Moench] and maize (Zea mays L.) after extreme early-season rainfall events in central Illinois. We used paired sorghum and maize transects, spanning from low-lying poorly drained areas to higher better drained areas, to evaluate the response of both cropping systems throughout the 2020 growing season. Sorghum maintained 25% mean emergence rates in areas that experienced the most severe waterlogging, but maize failed to establish under the same conditions. Despite the low establishment, sorghum yields in the poorly drained areas were upwards of 50% of those found in the better drained, whereas maize yields were zero areas in the poorly drained locations. The yield compensation in sorghum resulted from increased tillering, higher productivity per stem, and subsequently higher productivity per plant, which illustrates the greater phenotypic plasticity of sorghum compared to maize. Land managers who are currently seeking to grow annual cellulosic feedstocks on soils that are vulnerable to transient soil waterlogging will likely have more success with photoperiod-sensitive bioenergy sorghum than maize.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Continental United States may lose 1.8 petagrams of soil organic carbon under climate change by 2100

Abstract Aims High‐resolution information on soils’ vulnerability to climate‐induced soil organic carbon (SOC) loss can enable environmental scientists, land managers, and policy makers to develop targeted mitigation strategies. This study aims to estimate baseline and decadal changes in continental US surface SOC stocks under future emission scenarios. Location Continental United States. Time period 2014–2100. Methods We used recent SOC field observations ( n = 6,213 sites), environmental factors ( n = 32), and an ensemble machine learning (ML) approach to estimate baseline SOC stocks in surface soils across the continental United States at 100‐m spatial resolution, and decadal changes under the projected climate scenarios of Coupled Model Intercomparison Project Phase Six (CMIP6) earth system models (ESMs). Results Baseline SOC projections from ML approaches captured more than 50% of variability in SOC observations, whereas ESMs represented only 6–16% of observed SOC variability. ML estimates showed a mean total loss of 1.8 Pg C from US surface soils under the high‐emission scenario by 2100, whereas ESMs showed no significant change in SOC stocks with wide variation among ESMs. Both ML and ESM predictions agree on the direction of SOC change (net emissions or sequestration) across 46–51% of continental US land area. These differences are attributable to the high‐resolution site‐specific data used in the ML models compared to the relatively coarse grid represented in CMIP6 ESMs. Main conclusions Our high‐resolution estimates of baseline SOC stocks, identification of key environmental controllers, and projection of SOC changes from US land cover types under future climate scenarios suggest the need for high‐resolution simulations of SOC in ESMs to represent the heterogeneity of SOC. We found that the SOC change is sensitive to key soil related factors (e.g. soil drainage and soil order) that have not been historically considered as input parameters in ESMs, because currently more than 95% variability in the SOC of CMIP6 ESMs is controlled by net primary productivity, temperature, and precipitation. Using additional environmental factors to estimate the baseline SOC stocks and predict the future trajectory of SOC change can provide more accurate results.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2020

Karuk Climate Resiliency Plan

Statewide, California is the hottest and driest since modern record keeping has taken place. Among the most urgent of the local dimensions of climate change in Karuk Ancestral Territory is the increased frequency of high-severity fire. The 2016 Karuk Climate Vulnerability Assessment (CVA) outlines how these influences have created landscape conditions that hold the potential to be devastating in the face of future high-severity fire events. The project followed the format of our CVA and furthers information garnered to accomplish two primary objectives. The Karuk Tribe developed a Climate Adaptation Plan to address established vulnerabilities to Tribal traditional foods and cultural use species, Tribal program infrastructure, and Tribal management authority and political status resulting from changing conditions with a focus on increased frequency of high-intensity wildfire events within the Karuk Ancestral Territory.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2018

The Story of Multitasking

Multitasking is endemic in modern life and work: drivers talk on cell phones, office workers type while answering phone calls, students do homework while text messaging...but, nurses also prepare injections while responding to doctor's calls, and air traffic controllers direct aircraft in one sector while handling aircraft additional traffic in another. Whether in daily life or at work, we are constantly bombarded with multiple, concurrent interruptions and demands and we have all somehow come to believe in the myth that we can, and in fact are expected to, easily address them all - without any repercussions. Accumulating However, accumulating scientific evidence is now suggesting that multitasking increases the probability of human error. This talk presents a set of NASA studies that characterize concurrent demands in one work domain, routine airline cockpit operations, in order to illustrate the ways operational task demands together with the natural proclivity to manage them all concurrently make human performance in this and in any work domain vulnerable to potentially serious errors and to accidents.

Barshi, Immanuel↗