Search NASA⌕ Search

SEARCH · Search NASA

Results for “security visualization”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

Efficient Clustering of Software Vulnerabilities using Self Organizing Map (SOM)

The common vulnerabilities and exposures (CVE) database was created with a mission to ``identify, define, and catalog publicly disclosed cybersecurity vulnerabilities''. This rich body of information can be used to enable rapid and efficient response to secure and defend cyber operations and protect critical cyber infrastructure. The main goal of this paper is to develop a visual analytics tool to enable deep analysis of CVEs using unsupervised clustering techniques. We enhance our analysis by first mapping CVEs to hierarchical-classes in Common Weakness Enumeration (CWE) using information in the National Vulnerability Database (NVD). Both the mapping and the numerical representation of CVEs are enabled by V2W-BERT, which uses natural language processing of the extensive information in NVD to generate a large tabular database of 137,226 CVE entries from 1999 to 2020, where each CVE is represented by a vector of 768 numerical features. The vectorized data is processed by Self-Organizing Maps (SOM), which is an unsupervised machine learning technique for dimensionality reduction, visual representation and clustering. Using a Torus map of 6417 units, we achieve ~10-fold data compression of ~140k CVEs using SOM. The trained map is further clustered using standard K-means clustering into 138 clusters of CVEs. We conducted a brief investigation of the rich mapping of CVEs to best-matching-units to K-means clusters, as well as CVEs to CWEs. For example, this novel mapping provided insight into the role of CWE-59 and CWE-264 in several CVEs that is otherwise hard to explore in the original data. We conclude that our this novel approach will not only enable deep analysis of the complex relationships between CVEs and CWEs, but also a mechanism to quickly respond to and design mitigation actions for rapidly evolving vulnerabilities that have not been mapped to existing CWEs.

Panchal, Khyati↗

The LCLStream Ecosystem for Multi-Institutional Dataset Exploration

We describe a new end-to-end experimental data streaming framework designed from the ground up to support new types of applications – AI training, extremely high-rate X-ray time-of-flight analysis, crystal structure determination with distributed processing, and custom data science applications and visualizers yet to be created. Throughout, we use design choices merging cloud microservices with traditional HPC batch execution models for security and flexibility. This project makes a unique contribution to the DOE Integrated Research Infrastructure (IRI) landscape. By creating a flexible, API-driven data request service, we address a significant need for high-speed data streaming sources for the X-ray science data analysis community. With the combination of data request API, mutual authentication web security framework, job queue system, high-rate data buffer, and complementary nature to facility infrastructure, the LCLStreamer framework has prototyped and implemented several new paradigms critical for future generation experiments.

Rogers, David [ORNL] (ORCID:0000000251871768)↗

Cyber Friendly Fire: Research Challenges for Security Informatics

This paper addresses cognitive implications and research needs surrounding the problem of cyber friendly fire (FF). We define cyber FF as intentional offensive or defensive cyber/electronic actions intended to protect cyber systems against enemy forces or to attack enemy cyber systems, which unintention-ally harms the mission effectiveness of friendly or neutral forces. Just as with combat friendly fire, maintaining situation awareness (SA) is paramount to avoiding cyber FF incidents. Cyber SA concerns knowledge of a system’s topology (connectedness and relationships of the nodes in a system), and critical knowledge elements such as the characteristics and vulnerabilities of the components that comprise the system and its nodes, the nature of the activities or work performed, and the available defensive and offensive countermeasures that may be applied to thwart network attacks. Mitigation strategies to combat cyber FF— including both training concepts and suggestions for decision aids and visualization approaches—are discussed.

cyber friendly fire↗

IslandViewer 4: expanded prediction of genomic islands for larger-scale datasets

IslandViewer is a widely-used webserver for the prediction and interactive visualization of genomic islands (GIs, regions of probable horizontal origin) in bacterial and archaeal genomes. GIs disproportionately encode factors that enhance the adaptability and competitiveness of the microbe within a niche, including virulence factors and other medically or environmentally important adaptations. We report here the release of IslandViewer 4, with novel features to accommodate the needs of larger-scale microbial genomics analysis, while expanding GI predictions and improving its flexible visualization interface. A user management web interface as well as an HTTP API for batch analyses are now provided with a secured authentication to facilitate the submission of larger numbers of genomes and the retrieval of results. In addition, IslandViewer’s integrated GI predictions from multiple methods have been improved and expanded by integrating the precise Islander method for pre-computed genomes, as well as an updated IslandPath-DIMOB for both pre-computed and user-supplied custom genome analysis. Finally, pre-computed predictions including virulence factors and antimicrobial resistance are now available for 6193 complete bacterial and archaeal strains publicly available in RefSeq. IslandViewer 4 provides key enhancements to facilitate the analysis of GIs and better understand their role in the evolution of successful environmental microbes and pathogens.

59 BASIC BIOLOGICAL SCIENCES↗

Distributed Energy Resource Visual Emulator: Phase 1

To help federal energy managers assess, monitor, and manage cybersecurity while achieving decarbonization, the National Renewable Energy Laboratory's Distributed Energy Resource Cybersecurity Framework (DER-CF) offers a comprehensive, web-based assessment tool focusing on cyber governance or policies, technical management, and physical security. The DER-CF currently presents users with a series of pertinent cybersecurity questions, which are used to generate a site-specific report and recommendations. This paper outlines a technical approach to integrate the DER-CF with another key asset—NREL's Advanced Research on Integrated Energy Systems (ARIES) Cyber Range—to visualize cybersecurity resilience and compliance and to enhance the usability and accessibility of the DER-CF. The result is a new tool called the Distributed Energy Resource Visual Emulator (DER-VE). Its development will include regular conversations with stakeholders to assess the effectiveness of these efforts, refine the visualization capability, and ensure its value to our partners. Phase 0 of the integration project was concluded in 2021. Phase 1, completed in 2022, has two components: The first is developing a working visualization of system compliance using the DER-CF, and the second is planning the design of a server application that takes input data from the DER-CF and creates a personal emulated environment of the user's system or a selected reference architect. Major components that were addressed in this phase are the DER-CF output, compliance visualization, data model, and compliance server design.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Situational Awareness of Network System Roles (SANSR)

In a large enterprise it is difficult for cyber security analysts to know what services and roles every machine on the network is performing (e.g., file server, domain name server, email server). Using network flow data, already collected by most enterprises, we developed a proof-of-concept tool that discovers the roles of a system using both clustering and categorization techniques. The tool's role information would allow cyber analysts to detect consequential changes in the network, initiate incident response plans, and optimize their security posture. The results of this proof-of-concept tool proved to be quite accurate on three real data sets. We will present the algorithms used in the tool, describe the results of preliminary testing, provide visualizations of the results, and discuss areas for future work. Without this kind of situational awareness, cyber analysts cannot quickly diagnose an attack or prioritize remedial actions.

cyber security↗

The GammaSpec Package for Automated Gamma-ray Analysis (V.1.0)

This report describes the GammaSpec package, a tool developed to automate the analysis and comparison of gamma-ray spectra. The goal of this tool is to drastically reduce, or even eliminate, currently time consuming processes for comparing large sets of gamma-ray measurements. There are a number of potential applications for this work throughout the laboratory, but particularly within Global Security. Current work flows where large numbers of measured spectra must be compared for anomolies and outliers often consist of loading and visually inspecting individual spectra, or utilizing small-batch tools. One such example is the PeakEasy tool also developed at LANL. PeakEasy has a robust and tested feature set for calibrating, identifying, and fitting gamma-ray spectra. However it’s intention was not for batch processing and automated comparison of large numbers of spectra. This tool is not intended to replace PeakEasy in an analyzers arsenal, but to instead augment it. The intention here is to automate the isolation of spectra of particular interest, which can then be studied in further detail. This report is arranged as follows. Section 2 lays out the design goals and desired functionality of the package. Section 3 describes the algorithms developed and chosen to accomplish those goals. Section 4 describes the primary interaction with the tool, as well as it’s resulting output. Following these sections, results are presented from a set of example datasets from High Purity Germanium (HPGe) detectors in Sec. 5. Finally, the current status is summarized in Sec. 6.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Compact FEL-driven inverse compton scattering gamma-ray source

Many research and applications areas require photon sources capable of producing gamma-ray beams in the multi-MeV energy range with reasonably high fluxes and compact footprints. Besides industrial, nuclear physics and security applications, a considerable interest comes from the possibility to assess the state of conservation of cultural assets like statues, columns etc., via visualization and analysis techniques using high energy photon beams. Computed Tomography scans, widely adopted in medicine at lower photon energies, presently provide high quality three-dimensional imaging in industry and museums. We explore the feasibility of a compact source of quasi-monochromatic, multi-MeV gamma-rays based on Inverse Compton Scattering (ICS) from a high intensity ultra-violet (UV) beam generated in a free-electron laser by the electron beam itself. This scheme introduces a stronger relationship between the energy of the scattered photons and that of the electron beam, resulting in a device much more compact than a classic ICS for a given scattered energy. As a result, the same electron beam is used to produce gamma-rays in the 10–20 MeV range and UV radiation in the 10–15 eV range, in a ~4 × 22 m 2 footprint system.

43 PARTICLE ACCELERATORS↗

Better Pictures in a Snap

Retinex Imaging Processing, winner of NASA's 1999 Space Act Award, is commercially available through TruView Imaging Company. With this technology, amateur photographers use their personal computers to improve the brightness, scene contrast, detail, and overall sharpness of images with increased ease. The process was originally developed for remote sensing of the Earth by researchers at Langley Research Center and Science and Technology Corporation (STC). It automatically enhances a digital image in terms of dynamic range compression, color independence from the spectral distribution of the scene illuminant, and color/lightness rendition. As a result, the enhanced digital image is much closer to the scene perceived by the human visual system, under all kinds and levels of lighting variations. TruView believes there are other applications for the software in medical imaging, forensics, security, recognizance, mining, assembly, and other industrial areas.

Source record↗

ScyFlow: An Environment for the Visual Specification and Execution of Scientific Workflows

With the advent of grid technologies, scientists and engineers are building more and more complex applications to utilize distributed grid resources. The core grid services provide a path for accessing and utilizing these resources in a secure and seamless fashion. However what the scientists need is an environment that will allow them to specify their application runs at a high organizational level, and then support efficient execution across any given set or sets of resources. We have been designing and implementing ScyFlow, a dual-interface architecture (both GUT and APT) that addresses this problem. The scientist/user specifies the application tasks along with the necessary control and data flow, and monitors and manages the execution of the resulting workflow across the distributed resources. In this paper, we utilize two scenarios to provide the details of the two modules of the project, the visual editor and the runtime workflow engine.

McCann, Karen M.↗

Tamper-Indicating Enclosures with Visually Obvious Tamper Response

Sandia National Laboratories is developing a way to visualize molecular changes that indicate penetration of a tamper-indicating enclosure (TIE). Such "bleeding" materials (analogous to visually obvious, colorful bruised skin that doesn't heal) allows inspectors to use simple visual observation to readily recognize that penetration into a material used as a TIE has been attempted, without providing adversaries the ability to repair damage. Such a material can significantly enhance the current capability for TIEs, used to support treaty verification regimes. Current approaches rely on time-consuming and subjective visual assessment by an inspector, external equipment, such as eddy current or camera devices, or active approaches that may be limited due to application environment. The complexity of securing whole volumes includes: (1) enclosures that are non-standard in size/shape; (2) enclosures that may be inspectorate- or facility-owned; (3) tamper attempts that are detectable but difficult or timely for an inspector to locate; (4) the requirement for solutions that are robust regarding reliability and environment (including facility handling); and (5) the need for solutions that prevent adversaries from repairing penetrations. The approach is based on a transition metal ion solution within a microsphere changing color irreversibly when the microsphere is ruptured. Investigators examine 3D printing of the microspheres as well as the spray coating formulation. The anticipated benefits of this work are passive, flexible, scalable, cost-effective TIEs with obvious and robust responses to tamper attempts. This results in more efficient and effective monitoring, as inspectors will require little or no additional equipment and will be able to detect tamper without extensive time-consuming visual examination. Applications can include custom TIEs (cabinets or equipment enclosures), spray-coating onto facility-owned items, spray-coating of walls or structures, spray-coatings of circuit boards, and 3D-printed seal bodies. The paper describes research to-date on the sensor compounds and microspheres.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Chemical sensing and imaging in microfluidic pore network structures relevant to natural carbon cycling and industrial carbon sequestration

Energy and climate change represent significant factors in global security. Atmospheric carbon dioxide levels, while global in scope, are influenced by pore-scale phenomena in the subsurface. We are developing tools to visualize and investigate processes in pore network microfluidic structures with transparent covers as representations of normally-opaque porous media. In situ fluorescent oxygen sensing methods and fluorescent cellulosic materials are being used to investigate processes related to terrestrial carbon cycling involving cellulytic respiring microorganisms. These structures also enable visualization of water displacement from pore spaces by hydrophobic fluids, including carbon dioxide, in studies related to carbon sequestration.

carbon sequestration↗

Experimental Testing of Personal Dosimetry Interference from a Portable X-ray Generator

The determination of the disposition route for a legacy drum in a nuclear facility at the Y-12 National Security Complex is supported by non-destructive testing of the drum and its contents. An advanced radiation measurements organization at the Y-12 National Security Complex proposed a series of active measurements using a portable x-ray generator, imaging the drum and its contents with 360-degree visualization. In rooms near the current storage location for the drum, Criticality Accident Alarm System (CAAS) annunciation is degraded, and Personal Radiation Dosimetry Instruments (PRDI’s) are routinely worn by personnel. The Y-12 Development Organization has procured advanced radiation detection devices and a variety of radiation sources for use in active measurements. These devices are being used to support Y-12 operations and safety engineering disciplines to safely address complex challenges throughout the complex. This paper presents the results of experimental testing of the PRDI’s used at Y-12 with the x-ray generator [1], and notes the unique utilization of a decommissioned facility for this work.

61 RADIATION PROTECTION AND DOSIMETRY↗

Mapping SIEM Vulnerabilities in STIG

SIEM (Security Information and Event Management) tools monitor network traffic and allow users to quickly detect problems in their networks. Because of the valuable information processed by SIEM tools, it is important to understand their vulnerabilities. STIG (Structured Threat Intelligence Graph) is an application created at INL used to visualize data related to cyber threats. Using STIG can allow users to understand vulnerabilities related to their SIEM products and how to protect their systems.

99 GENERAL AND MISCELLANEOUS↗

Intergalactic medium emission observations with the cosmic web imager. II. Discovery of extended, kinematically linked emission around SSA22 Lyα BLOB 2

The intergalactic medium (IGM) is the dominant reservoir of baryons, delineates the large-scale structure of the universe at low to moderate overdensities, and provides gas from which galaxies form and evolve. Simulations of a cold-dark-matter- (CDM-) dominated universe predict that the IGM is distributed in a cosmic web of filaments and that galaxies should form along and at the intersections of these filaments. While observations of QSO absorption lines and the large-scale distribution of galaxies have confirmed the CDM paradigm, the cosmic web of IGM has never been confirmed by direct imaging. Here we report our observation of the Lyα blob 2 (LAB2) in SSA22 with the Cosmic Web Imager (CWI). This is an integral field spectrograph optimized for low surface brightness, extended emission. With 22 hr of total on- and off-source exposure, CWI has revealed that LAB2 has extended Lyα emission that is organized into azimuthal zones consistent with filaments. We perform numerous tests with simulations and the data to secure the robustness of this result, which relies on data with modest signal-to-noise ratios. We have developed a smoothing algorithm that permits visualization of data cube slices along image or spectral image planes. With both raw and smoothed data cubes we demonstrate that the filaments are kinematically associated with LAB2 and display double-peaked profiles characteristic of optically thick Lyα emission. The flux is 10-20 times brighter than expected for the average emission from the IGM but is consistent with boosted fluorescence from a buried QSO or gravitation cooling radiation. Using simple emission models, we infer a baryon mass in the filaments of at least 1-4 × 10{sup 11} M {sub ☉}, and the dark halo mass is at least 2 × 10{sup 12} M {sub ☉}. The spatial-kinematic morphology is more consistent with inflow from the cosmic web than outflow from LAB2, although an outflow feature maybe present at one azimuth. LAB2 and the surrounding gas have significant and coaligned angular momentum, strengthening the case for their association.

79 ASTRONOMY AND ASTROPHYSICS↗

Dirty Word Scanner

SAND2025-09142O Dirty Word Scanner helps prevent the accidental inclusion of sensitive terms by scaning files in repositories to catch "dirty words" before they are committed. While there are existing solutions focused on passwords and API keys, this tool offers additional features tailored to specific security needs. It will function as a standalone tool, incorporating advanced capabilities from similar tools to provide a comprehensive solution. This tool can unpack HDF5 files and examine their contents. It can display image, audio, and visual files to the user and request a manual determination of whether they are safe. It can also detect arbitrary binary files and ask the user to verify that they're safe. The tool enables sophisticated whitelisting of strings and regular expressions for cases where a term is sensitive in certain contexts but not in others. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Gates, Jason [Sandia National Lab. (SNL-CA), Liver↗

Unrolled Video Super-Resolution Network with Autoregressive Prior for the Case of Known Motion

Real-time detection and classification of distant objects is necessary for many national security applications. However, when objects are far from the sensor, they occupy only a small number of pixels in the captured video, limiting the amount of visual detail available for recognition. State-of-the-art classification methods typically rely on high-resolution (HR) video streams to capture characteristic object features, but obtaining such detail is challenging for distant objects that occupy only a few pixels. This motivates the development of video super-resolution (VSR) methods that enhance object classification by recovering fine details from low-pixel representations. Current VSR methods rely either on model-based optimization, which is interpretable but computationally expensive, or on learning-based approaches, which are efficient and high-performing but often lack flexibility and interpretability. In this report, we propose an end-to-end trainable unrolled VSR network, UVSRNet, which super-resolves each frame in a video by exploiting sub-pixel motion between neighboring low-resolution (LR) frames as well as incorporating high-frequency detail from previously super-resolved frames. In particular, by unrolling a plug-and-play (PnP) half-quadratic splitting (HQS) algorithm, we leverage a model-based data-fitting module alongside a learning-based autoregressive prior module. This combination yields a method that maintains the flexibility and interpretability of model-based methods while achieving the performance advantages of learning-based methods.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Tool carrier

Flexible fingers meshed together in hinged container secure working tools and parts around waist or thigh of workman. Hairbrush-like fingers across carrier interior allow tool placement from top or bottom without visual coordination.

Descamp, V. A.↗