Search NASA⌕ Search

SEARCH · Search NASA

Results for “INFORMATION SECURITY”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
NASA NTRS2021

Accessible Telemetry Streams using a Zero Trust Architecture for the Flight Operations Directorate

As a result of information technology based work becoming increasingly distributed, unique challenges have been presented within the realm of defined network perimeters, namely with respect to secure access to resources. Historically, and from a simplistic abstract perspective, the common approach has been to adopt the, so-called, moat model whereby a physical network perimeter (or interconnected perimeters) is defined to encapsulate resources behind a boundary protected by a firewall. Users are provisioned access through a virtual private network (VPN) and may be further constrained to resources through specific firewall allow and disallow rulesets. Virtual Private Networks and firewall rulesets lead to common problems, particularly at scale and, as a result, perimeter-less architectures provided over the public internet are increasingly becoming prevalent, particularly with its more popular implementation, the Zero Trust Architecture. We present a proposed implementation of the Zero Trust Architecture with a particular concrete example utilizing a de-perimeterized network that requires authentication and authorization for each action between nodes and does not operate within an implicit trust boundary. It should be noted that this paper is not an attempt at providing comprehensive resolutions for the specific problem space with respect to perimeter based security and is more directed at providing information with regard to our proposed implementation of a Zero Trust Architecture for the Flight Operations Directorate. We direct the reader to our Introduction and Background section for more details on specific documentation and where it can be located as it relates to de-perimeterization and Zero Trust.

Paul Shoemaker↗
NASA NTRS2019

Improving Security of Ground System Software

An estimated 84% of all security breaches are application-related, not firewall violations. To what extent is your organization focused on addressing security issues in its software? Software plays a critical role in mission success, and software similarly plays a role in mission security. However, software can introduce vulnerabilities to the system, such as use of a COTS product that has a backdoor, or a hole in the security of the system deliberately left in place by designers or maintainers. The motivations for such holes are not always sinister, but can provide a means for malicious intrusion into the mission. Students will learn an approach to securing ground software within the context of federal information systems. Federal requirements, coding standards, tool usage will be discussed as part of the solution to securing software.

Bailey, Brandon↗
NASA NTRS1983

Forest Resource Information System (FRIS)

The technological and economical feasibility of using multispectral digital image data as acquired from the LANDSAT satellites in an ongoing operational forest information system was evaluated. Computer compatible multispectral scanner data secured from the LANDSAT satellites were demonstrated to be a significant contributor to ongoing information systems by providing the added dimensions of synoptic and repeat coverage of the Earth's surface. Major forest cover types of conifer, deciduous, mixed conifer-deciduous and non-forest, were classified well within the bounds of the statistical accuracy of the ground sample. Further, when overlayed with existing maps, the acreage of cover type retains a high level of positional integrity. Maps were digitized by a graphics design system, overlayed and registered onto LANDSAT imagery such that the map data with associated attributes were displayed on the image. Once classified, the analysis results were converted back to map form as a cover type of information. Existing tabular information as represented by inventory is registered geographically to the map base through a vendor provided data management system. The notion of a geographical reference base (map) providing the framework to which imagery and tabular data bases are registered and where each of the three functions of imagery, maps and inventory can be accessed singly or in combination is the very essence of the forest resource information system design.

Source record↗
NASA NTRS2004

A One-Stop Web Application for the Mars Team

THe Mars Exploration Rover Collaborative Information Portal (MERCIP) provides a window to all mission events. It supports mission updates, data sharing, and collaboration. The report also discusses: Technology spotlight. Integrating data multiple sources. Securing access for multiple clients. A new information infrastructure.

Laufenberg, Lawrence↗
NASA NTRS1992

Method for scrambling satellite communications

A secure communications system multiplexes segments of the information signal for keyed encoding and modulation onto a plurality of different carrier frequencies and/or polarizations, and transmits the encoded carriers to multi-channel signal summing receivers that decode the segments from all channels, to reassemble the information signal for use by authorized stations with a key. The use of the multi-channel link and the summing receiver allows the greatest number of different coding algorithms for accommodating the greatest number of discrete secure channels.

Brockman, Milton H.↗
NASA NTRS2018

Developing a Community of Practice for Applied Uses of Future PACE Data to Address Food Security Challenges

Ocean color satellite measurements have yielded valuable information about the base of the marine food web for over 20 years. The Plankton, Aerosol, Cloud, ocean Ecosystem (PACE) mission is building an advanced spectrometer to further refine ecosystem monitoring. Higher spectral resolution data from PACE will enable identification of additional marine biological indicators and their response to multiple stressors to guide sustainable management. Seafood is an important source of protein for a significant number of people. Wild catches cannot match increasing demand and their sustainability is in question. Aquaculture is an ever more important industry to feed the world's population. We share early efforts to engage a community of practice around food security to increase satellite data product use in support of resource management, business decisions, and policy analysis. Understanding the needs of applied scientists as well as non-traditional users of satellite data early in the PACE mission process will improve planning and preparation for a broader user base and hopefully help to mitigate food insecurity.

Schollaert Uz, Stephanie↗
NASA NTRS1986

A process activity monitor for AOS/VS

With the ever increasing concern for computer security, users of computer systems are becoming more sensitive to unauthorized access. One of the initial security concerns for the Shuttle Management Information System was the problem of users leaving their workstations unattended while still connected to the system. This common habit was a concern for two reasons: it ties up resources unnecessarily and it opens the way for unauthorized access to the system. The Data General MV/10000 does not come equipped with an automatic time-out option on interactive peripherals. The purpose of this memorandum is to describe a system which monitors process activity on the system and disconnects those users who show no activity for some time quantum.

Mckosky, R. A.↗
NASA NTRS1998

Technology Development, Implementation, and Assessment: K-16 Pre-Service, In-Service, and Distance Learning Initiatives

This summer 22 kindergarten through 8th grade teachers attended a 3-week Teacher Enhancement Institute (TEI) at NASA Langley Research Center. TEI is funded by NASA Education Division and is a collaborative effort between NASA Langley's Office of Education and Christopher Newport University. Selected teacher teams were drawn from Langley's 5-state precollege service region, which includes Kentucky, North Carolina, South Carolina, Virginia, and West Virginia. The goal of TEI was for teachers to learn aeronautics and the broad application of science and technology through a problem-based learning (PBL) strategy. PBL is an instructional method using a real world problem, also known as an ill-structured problem, as the context for an in-depth investigation. Most real life problems are ill-structured, as are all the really important social, political and scientific problems. The teachers were immediately immersed in an ill-structured problem to design a communication strategy for the White House Commission on Aviation Safety and Security to educate and disseminate aviation information to the general public. Specifically, the communication strategy was to focus on aeronautics principles, technology and design associated with US general aviation revitalization and aviation safety programs. The presented problem addressed NASA's strategic outcome to widely communicate the content, relevancy and excitement of its missions and discoveries to the general population. Further, the PBL scenario addressed the technological challenges being taken up by NASA to revolutionize air travel and the way in which aircraft are designed, built, and operated. It also addressed getting people and freight safely and efficiently to any location in the world at a reasonable cost. With a "real" need-to-know problem facing them, the teachers set out to gather information and to better understand the problem using inquiry-based and scientific methods. The learning in this aeronautics scenario was driven by the direction taken by participants. With the support of the TEI faculty, the teachers quickly identified NASA Langley researchers that served as consultants to help solve the problem. To achieve their goal, the teacher teams developed lesson plans for elementary and middle school students, wrote a newspaper, published a brochure to educate the general public, constructed games for children of all ages, and produced a video. As a second problem, the TEI participants will design their own aeronautic lesson plan and immerse their 1997-98 school year students in the problem. The problem is for the students "to create a traveling hands-on, minds-on aeronautics museum exhibit created for children by children." As a culminating activity, the Virginia Air and Space Center in Hampton, VA, will set up a special display of the exhibits in the Summer 1998. The TEI faculty will visit each TEI teacher's classroom during the academic school year to observe the implementation of the unit. In addition to the classroom observations, electronic follow-up sessions will be conducted during the school year to support the teachers' efforts in developing their PBL units to integrate technology in math and science instruction. These sessions eill be conducted using the Internet. Teachers will be connected through a chat-line to share ideas, ask questions, and generate solutions.

Petersen, Richard↗
NASA NTRS2002

The Computing and Data Grid Approach: Infrastructure for Distributed Science Applications

With the advent of Grids - infrastructure for using and managing widely distributed computing and data resources in the science environment - there is now an opportunity to provide a standard, large-scale, computing, data, instrument, and collaboration environment for science that spans many different projects and provides the required infrastructure and services in a relatively uniform and supportable way. Grid technology has evolved over the past several years to provide the services and infrastructure needed for building 'virtual' systems and organizations. We argue that Grid technology provides an excellent basis for the creation of the integrated environments that can combine the resources needed to support the large- scale science projects located at multiple laboratories and universities. We present some science case studies that indicate that a paradigm shift in the process of science will come about as a result of Grids providing transparent and secure access to advanced and integrated information and technologies infrastructure: powerful computing systems, large-scale data archives, scientific instruments, and collaboration tools. These changes will be in the form of services that can be integrated with the user's work environment, and that enable uniform and highly capable access to these computers, data, and instruments, regardless of the location or exact nature of these resources. These services will integrate transient-use resources like computing systems, scientific instruments, and data caches (e.g., as they are needed to perform a simulation or analyze data from a single experiment); persistent-use resources. such as databases, data catalogues, and archives, and; collaborators, whose involvement will continue for the lifetime of a project or longer. While we largely address large-scale science in this paper, Grids, particularly when combined with Web Services, will address a broad spectrum of science scenarios. both large and small scale.

Johnston, William E.↗
NASA NTRS2004

Human-Interaction Challenges in UAV-Based Autonomous Surveillance

Autonomous UAVs provide a platform for intelligent surveillance in application domains ranging from security and military operations to scientific information gathering and land management. Surveillance tasks are often long duration, requiring that any approach be adaptive to changes in the environment or user needs. We describe a decision- theoretic model of surveillance, appropriate for use on our autonomous helicopter, that provides a basis for optimizing the value of information returned by the UAV. From this approach arise a range of challenges in making this framework practical for use by human operators lacking specialized knowledge of autonomy and mathematics. This paper describes our platform and approach, then describes human-interaction challenges arising from this approach that we have identified and begun to address.

Freed, Michael↗
NASA NTRS2013

The DEEP2 Galaxy Redshift Survey: Design, Observations, Data Reduction, and Redshifts

We describe the design and data analysis of the DEEP2 Galaxy Redshift Survey, the densest and largest high-precision redshift survey of galaxies at z approx. 1 completed to date. The survey was designed to conduct a comprehensive census of massive galaxies, their properties, environments, and large-scale structure down to absolute magnitude MB = −20 at z approx. 1 via approx.90 nights of observation on the Keck telescope. The survey covers an area of 2.8 Sq. deg divided into four separate fields observed to a limiting apparent magnitude of R(sub AB) = 24.1. Objects with z approx. < 0.7 are readily identifiable using BRI photometry and rejected in three of the four DEEP2 fields, allowing galaxies with z > 0.7 to be targeted approx. 2.5 times more efficiently than in a purely magnitude-limited sample. Approximately 60% of eligible targets are chosen for spectroscopy, yielding nearly 53,000 spectra and more than 38,000 reliable redshift measurements. Most of the targets that fail to yield secure redshifts are blue objects that lie beyond z approx. 1.45, where the [O ii] 3727 Ang. doublet lies in the infrared. The DEIMOS 1200 line mm(exp −1) grating used for the survey delivers high spectral resolution (R approx. 6000), accurate and secure redshifts, and unique internal kinematic information. Extensive ancillary data are available in the DEEP2 fields, particularly in the Extended Groth Strip, which has evolved into one of the richest multiwavelength regions on the sky. This paper is intended as a handbook for users of the DEEP2 Data Release 4, which includes all DEEP2 spectra and redshifts, as well as for the DEEP2 DEIMOS data reduction pipelines. Extensive details are provided on object selection, mask design, biases in target selection and redshift measurements, the spec2d two-dimensional data-reduction pipeline, the spec1d automated redshift pipeline, and the zspec visual redshift verification process, along with examples of instrumental signatures or other artifacts that in some cases remain after data reduction. Redshift errors and catastrophic failure rates are assessed through more than 2000 objects with duplicate observations. Sky subtraction is essentially photon-limited even under bright OH sky lines; we describe the strategies that permitted this, based on high image stability, accurate wavelength solutions, and powerful B-spline modeling methods. We also investigate the impact of targets that appear to be single objects in ground-based targeting imaging but prove to be composite in Hubble Space Telescope data; they constitute several percent of targets at z approx. 1, approaching approx. 5%-10% at z > 1.5. Summary data are given that demonstrate the superiority of DEEP2 over other deep high-precision redshift surveys at z approx. 1 in terms of redshift accuracy, sample number density, and amount of spectral information. We also provide an overview of the scientific highlights of the DEEP2 survey thus far.

Galaxy↗
NASA NTRS1995

Building a Successful Security Infrastructure: What You Want vs. What You Need vs. What You Can Afford

With the fast growing popularity of the Internet, many organizations are racing to get onto the on-ramp to the Information Superhighway. However, with frequent headlines such as 'Hackers' break in at General Electric raises questions about the Net's Security', 'Internet Security Imperiled - Hackers steal data that could threaten computers world-wide' and 'Stanford Computer system infiltrated; Security fears grow', organizations find themselves rethinking their approach to the on-ramp. Is the Internet safe? What do I need to do to protect my organization? Will hackers try to break into my systems? These are questions many organizations are asking themselves today. In order to safely travel along the Information Superhighway, organizations need a strong security framework. Developing such a framework for a computer site, whether it be just a few dozen hosts or several thousand hosts is not an easy task. The security infrastructure for a site is often developed piece-by-piece in response to security incidents which have affected that site over time. Or worse yet, no coordinated effort has been dedicated toward security. The end result is that many sites are still poorly prepared to handle the security dangers of the Internet. This paper presents guidelines for building a successful security infrastructure. The problem is addressed in a cookbook style method. First is a discussion on how to identify your assets and evaluate the threats to those assets; next are suggestions and tips for identifying the weak areas in your security armor. Armed with this information we can begin to think about what you really need for your site and what you can afford. In this stage of the process we examine the different categories of security tools and products that are available and then present some tips for deciding what is best for your site.

Crabb, Michele D.↗
NASA NTRS2005

Remote Sensing for Farmers and Flood Watching

The Applied Sciences Directorate, part of NASA s Science Mission Directorate, makes use of the Agency s remote-sensing capabilities to acquire detailed information about our home planet. It uses this information for a variety of purposes, ranging from increasing agricultural efficiency to protecting homeland security. Sensors fly over areas of interest to detect and record information that sometimes is not even visible from the ground with the human eye. Scientists analyze these data for a variety of purposes and make maps of the areas. These maps are often used to answer questions about the environment, weather, natural resources, community growth, and natural disasters.

Source record↗
NASA NTRS1985

Restricted access processor - An application of computer security technology

This paper describes a security guard device that is currently being developed by Computer Sciences Corporation (CSC). The methods used to provide assurance that the system meets its security requirements include the system architecture, a system security evaluation, and the application of formal and informal verification techniques. The combination of state-of-the-art technology and the incorporation of new verification procedures results in a demonstration of the feasibility of computer security technology for operational applications.

Mcmahon, E. M.↗
NASA NTRS2012

Climate Change and Food Security: The View from Space

Global satellite data provides information on land use, rainfall, soil moisture, vegetation vigor and crop yields. Process-based products allows transformation of these data into information that can be used to assess impact of weather on commodity prices and local economic health. Trends and impact of climate change

Brown, Molly E.↗
NASA NTRSDate not supplied

NASA Aeronautics Research Mission Directorate System Security Engineering Approaches

System security engineering (SSE) is a set of formal engineering methods and is considered a subset of systems engineering. It is a relatively new development in systems engineering with the initial NIST (National Institute of Standards) standard published in November of 2016 with updates in 2018, and 2022. The guiding principles in our methodology are based in NIST Special Publication 800-160 Vol. 1 “Systems Security Engineering: Considerations For A Multidisciplinary Approach In The Engineering Of Trustworthy Secure Systems” and integrate methodologies from common IT (Information Technology) threat modeling approaches utilizing MBSE (Model-Based Systems Engineering). The presentation will discuss how our teams utilize SSE and MBSE (Model-Based Systems Engineering) to develop secure architectures for systems under development in our NASA aeronautics research environment. This includes the activities to develop Protection Needs (PN) that, in turn result in security requirements in the design context and policies for the future state operational context for system protection. The process of applying SSE to analyze project architectures and ConOps (Concept of Operations) is intended to ensure the transferred research is both secure and securable in a “real-world” setting.

Systems Security Engineering↗