Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,333 records · Page 74
All sourcesNASA NTRSDOE OSTI
NASA NTRS2001

Summary of ADTT Website Functionality and Features

This report summarizes development of the ADTT web-based design environment by the ELORET team in 2000. The Advanced Design Technology Testbed had been in development for several years, with demonstration applications restricted to aerodynamic analyses of subsonic aircraft. The key changes achieved this year were improvements in Web-based accessibility, evaluation of collaborative visualization, remote invocation of geometry updates and performance analysis, and application to aerospace system analysis. Significant effort was also devoted to post-processing of data, chiefly through comparison of similar data for alternative vehicle concepts. Such comparison is an essential requirement for designers to make informed choices between alternatives. The next section of this report provides more discussion of the goals for ADTT development. Section 3 provides screen shots from a sample session in the ADTT environment, including Login and navigation to the project of interest, data inspection, analysis execution and output evaluation. The following section provides discussion of implementation details and recommendations for future development of the software and information technologies that provide the key functionality of the ADTT system. Section 5 discusses the integration architecture for the system, which links machines running different operating systems and provides unified access to data stored in distributed locations. Security is a significant issue for this system, especially for remote access to NAS machines, so Section 6 discusses several architectural considerations with respect to security. Additional details of some aspects of ADTT development are included in Appendices.

Hawke, Veronica↗
DOE OSTI2014

AMS/NRCan Joint Survey Report: Aerial Campaign

In January 2014 the U.S. Department of Energy (DOE), National Nuclear Security Administration (NNSA) Aerial Measuring System (AMS) and the Natural Resources Canada (NRCan) Nuclear Emergency Response project conducted a series of joint surveys at a number of locations in Nevada including the Nevada National Security Site (NNSS). The goal of this project was to compare the responses of the two agencies’ aerial radiation detection systems and data analysis techniques. This test included varied radioactive surface contamination levels and isotopic composition experienced at the NNSS and the differing data processing techniques utilized by the respective teams. Because both teams used the commercial aerial radiation detection systems from Radiation Solutions, Inc., the main focus of the campaign was to investigate the data acquisition techniques, data analysis, and ground-truth verification. The NRCan system consisted of four 4" × 4" × 16" NaI(Tl) scintillator crystals of which two were externally mounted in a modified commercial cargo basket certified for the Eurocopter AS350; the NNSA AMS system consisted of twelve 2" × 4" × 16" NaI(Tl) crystals in externally mounted dedicated pods. For NRCan, the joint survey provided an opportunity to characterize their system’s response to extended sources of various fission products at the NNSS. Since both systems play an important role in their respective countries’ national framework of radiological emergency response and are subject to multiple mutual cooperation agreements, it was important for each country to obtain more thorough knowledge of how they would employ these important assets and define the roles that they would each play in an actual response.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2025

Enhancing Security and Resiliency in Operational Technology Environments Through Network Slicing and Federated Learning

The growing convergence of Information Technology (IT) and Operational Technology (OT) within Industry 4.0 environments has introduced new demands on industrial network infrastructure. As cyber-physical systems become increasingly interconnected, ensuring the secure, timely, and efficient exchange of critical data is essential. This thesis explores how network slicing, a method of creating isolated virtual network segments, can be applied within OT environments to address challenges such as latency, security, and resource allocation. The first research question addressed in this thesis is: How can OT networks take advantage of NFV and SDN technology to become cyber resilient? This study examines the operational, security, and architectural implications of introducing network slicing into traditionally static OT infrastructures such as Industrial Control Systems (ICS) and SCADA. Through simulated deployments and case studies, the research demonstrates how slicing enables better isolation between critical and non-critical services, thereby improving response time, throughput, and security in sensitive environments. The second question considers: How to dynamically implement network slicing and take advantage of network resources towards integrating decentralized machine learning? In response, this thesis proposes a framework that combines Software-Defined Networking (SDN), Network Function Virtualization (NFV), and Federated Learning (FL) to enable real-time analytics while maintaining data locality. The proposed approach reduces the burden on centralized infrastructure and minimizes privacy risks by supporting on-site training of models across distributed OT nodes, coordinated through dynamically allocated network slices. The third focus explores: How slicing helps to increase the resiliency of OT networks through the orchestration of a dynamic DMZ? To answer this, the thesis presents a method for creating and managing Dynamic Demilitarized Zones (DMZs) using network slicing. This enables flexible and automated isolation of sensitive subsystems during threat scenarios or high-risk operations. Coupled with intelligent orchestration and containerized security services, the dynamic DMZ significantly enhances the system's ability to respond to cyber incidents without halting production. Ultimately, this thesis contributes a comprehensive architecture that blends network slicing with machine learning, secure segmentation, and automation, paving the way for resilient, adaptive, and intelligent OT environments. Performance evaluations across multiple scenarios show improvements in system reliability, threat response time, model accuracy, and resource utilization, providing a strong foundation for future industrial automation systems.

Rodiles Delgado, Brian G↗
DOE OSTI2020

Development of a Reference Design for a Cyber-Physical System

The purpose of this thesis is to develop a reference design to assist in the selection of security practices in power electronics design. A prototype will be developed from this reference design for evaluation. This evaluation will include a brief cost/benefit analysis to gauge the efficacy of implementing each layer of security throughout the power electronics design process. This thesis will also describe the obstacles and effectiveness of integrating a Trusted Platform Module (TPM) into a cyber-hardened grid-connected device. The TPM device is a secured crypto processor that assists in generating, storing, and restricting the use of cryptographic keys. The emphasis of this research is to establish integrity, authenticity, and confidentiality within a system by providing a baseline of security concerns for segments of the system. This research considers communication, control, and hardware level securities. The scope of this thesis will review the necessary security methods as well as consider the effects these methods have on the embedded system, to assess the desired security to responsiveness trade off. Applying this approach to a design process will alleviate various unknowns of appending security to a power electronics design. This thesis describes the specific vulnerabilities introduced within this grid-edge environment, and how the liabilities within the system can be mitigated. Initially, common security techniques will be considered to establish a guideline to benchmark performance and resource costs of the system. The foundation will be a non-hardened power electronic system platform with industry standard communication protocols. Several security techniques and attack vectors will then be evaluated to contribute to the base level platform. Other fail-safe features take place to gauge progress of the selected approach, non-inclusive to the TPM. Collectively, this investigation will determine a valid experiment by appraising and categorizing resource allocation, performance overhead, and monetary cost analysis results into a reference design. The prototype will then demonstrate methods to relieve common threats that are purposefully implemented into the design.

Blair, Nicholas Paul↗
DOE OSTI2015

Risk assessment for Industrial Control Systems quantifying availability using mean failure cost (MFC)

Industrial Control Systems (ICS) are commonly used in industries such as oil and natural gas, transportation, electric, water and wastewater, chemical, pharmaceutical, pulp and paper, food and beverage, as well as discrete manufacturing (e.g., automotive, aerospace, and durable goods.) SCADA systems are generally used to control dispersed assets using centralized data acquisition and supervisory control. Originally, ICS implementations were susceptible primarily to local threats because most of their components were located in physically secure areas (i.e., ICS components were not connected to IT networks or systems). The trend toward integrating ICS systems with IT networks (e.g., efficiency and the Internet of Things) provides significantly less isolation for ICS from the outside world thus creating greater risk due to external threats. Albeit, the availability of ICS/SCADA systems is critical to assuring safety, security and profitability. Such systems form the backbone of our national cyber-physical infrastructure. We extend the concept of mean failure cost (MFC) to address quantifying availability to harmonize well with ICS security risk assessment. This new measure is based on the classic formulation of Availability combined with Mean Failure Cost (MFC). The metric offers a computational basis to estimate the availability of a system in terms of the loss that each stakeholder stands to sustain as a result of security violations or breakdowns (e.g., deliberate malicious failures).

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

A 15-Mev/nucleon Iso-Cyclotron for Security and Radioisotope Production

Cargo inspection systems exploit the broad bremsstrahlung spectrum from a 6-10 MeV, low-duty cycle electron accelerator which in the presence of significant backgrounds presents challenges in image and material identification. An alternative approach is to use ions which can excite nuclear states either directly, or through generation of secondary high-energy signature gammas produced from nuclear interactions in a target. RadiaBeam is designing a compact sector isocyclotron 1.25 m in radius, with high-gradient cavities to accelerate multi-ion species up to 15-20 MeV/u with large turn-to turn, centimeter-level separation for low-loss extraction without lossy foil stripping. A strong-focusing radial field profile will be optimized in a separated-sector format for control over machine tune simultaneous with isochronous orbist requirements for high-current (~0.5 milliamp) operation. Innovation in injection will be introduced to replace the high-loss central region. Non-security applications of the cyclotron include medical isotope production, ion radiobiology, as well as material science research and ion instrumentation development.

43 PARTICLE ACCELERATORS↗
DOE OSTI2025

Application of Cyber-Informed Engineering for Protecting BESS

This white paper synthesizes an array of crucial grid services provided by BESS technology, assesses its architecture and communications, and presents a case study for analysis against the principles introduced by Cyber-Informed Engineering (CIE). Furthermore, in walking through the analysis, this paper presents a framework to evaluate risks and solutions when considering BESS components. Asset owners and buyers could perform this analysis to assess their BESS product implementations, alternative inverter-based resources (IBR), and energy management systems (EMS). Battery systems fulfill various roles contingent on the unique market demands and the specific challenges presented by regional grid infrastructures. These roles also vary due to the differing utility models for ownership and operation, which are adapted to meet regional and local capabilities and requirements. Concerns have been raised regarding the potential for adversaries to exploit knowledge of battery operational patterns to orchestrate decisive attacks. However, the security of operational data for these systems may not be the primary vulnerability, as much of this information is already well-understood within the community. Applying a modest degree of subject matter expertise can often yield valuable predictions regarding how a battery will respond under certain conditions, such as grid emergencies, high or low-temperature days, Public Safety Power Shutoff (PSPS) events, and outages. The operational characteristics of batteries are well-documented, and their capabilities, including the risks associated with misoperation and the resulting consequences, are published and understood within the industry. CIE practices represent the next step in gaining functional assurance and providing an acceptable level of risk, regardless of whether a battery vendor can support a trusted and validated supply chain. While this issue has exacerbated supply chain challenges, it is not an isolated condition. This foreign supply route is the primary source of BESS for the U.S. market. Significant efforts are underway through the Bipartisan Infrastructure Law (BIL) to change that. Still, strategic short-term operational mitigations are needed to ensure the security of our operational technology (OT) systems, which are enhanced by instilling trust and are separate from vendors implementing CIE principles.

25 ENERGY STORAGE↗
DOE OSTI2019

Power System Dynamic State Estimation: Motivations, Definitions, Methodologies and Future Work

This paper summarizes the technical activities of the Task Force on Power System Dynamic State and Parameter Estimation. This Task Force was established by the IEEE Working Group on State Estimation Algorithms to investigate the added benefits of dynamic state and parameter estimation for the enhancement of the reliability, security, and resilience of electric power systems. The motivations and engineering values of dynamic state estimation (DSE) are discussed in detail. Then, a set of potential applications that will rely on DSE is presented and discussed. Furthermore, a unified framework is proposed to clarify the important concepts related to DSE, forecasting-aided state estimation, tracking state estimation and static state estimation. An overview of the current progress in DSE and dynamic parameter estimation is provided. The paper also provides future research needs and directions for the power engineering community.

task force, dynamic state estimation, Parameter Es↗
DOE OSTI2020

Subsurface Biogeochemical Research: Watershed System Science for Energy

The Subsurface Biogeochemical Research (SBR) program within the U.S. Department of Energy’s (DOE) Office of Biological and Environmental Research is strategically aligned with DOE’s mission to ensure U.S. security and prosperity through watershed system science. Water resources critical for energy production are under pressure from growing water demand, contamination, drought, flooding, and saltwater intrusion. Sustainable management of watershed systems and their coupling with the built environment rely on understanding the hydrological and biogeochemical processes that control watershed system dynamics and water availability and quality. Next-generation science-based models of watershed systems are needed to address many U.S. energy and environmental challenges, including contaminant cleanup, clean water availability, safe storage of energy and nuclear byproducts in the subsurface, nutrient availability for sustainable biofuel crops, and recovery of subsurface energy resources.

09 BIOMASS FUELS↗
NASA NTRS1995

Vibration isolation mounting system

A system is disclosed for mounting a vibration producing device onto a spacecraft structure and also for isolating the vibration forces thereof from the structure. The system includes a mount on which the device is securely mounted and inner and outer rings. The rings and mount are concentrically positioned. The system includes a base (secured to the structure) and a set of links which are interconnected by a set of torsion bars which allow and resist relative rotational movement therebetween. The set of links are also rotatably connected to a set of brackets which are rigidly connected to the outer ring. Damped leaf springs interconnect the inner and outer rings and the mount allow relative translational movement therebetween in X and Y directions. The links, brackets and base are interconnected and configured so that they allow and resist translational movement of the device in the Z direction so that in combination with the springs they provide absorption of vibrational energy produced by the device in all three dimensions while providing rotational stiffness about all three axes to prevent undesired rotational motions.

Carter, Sam D.↗
NASA NTRS2018

Cybersecurity Information Technology

As technology and security measures improve, hackers keep looking for new techniques and vulnerabilities that allow them to gain access to sensitive data. This includes but is not limited to: user accounts, personal information, databases, operating systems, developmental and testing systems, and operational systems. A hacker is an individual that uses technology such as computers, tablets, and phones for unauthorized access to data. As technology becomes more robust at preventing known attacks, new vulnerabilities always exists. These vulnerabilities usually go unnoticed by developers and could potentially be exploited by an attacker. To prevent hackers from stealing sensitive and potentially harmful information, we must protect our systems and data against these criminals by developing new methods to mitigate the damage caused by these vulnerabilities and prevent them from occurring in the first place. An excellent way to discover how hackers compromise systems is by identifying and analyzing existing vulnerabilities and patching them. The National Aeronautics and Space Administration (NASA) is one of the many federal agencies that operates under a constant threat by hackers. NASA puts a tremendous amount of effort to maintain and improve their security measures, protect critical systems, and secure sensitive information from attackers who would attempt to use it against our nation's interests.

Hackers↗
DOE OSTI2020

An Interior-Point Solver for Optimal Power Flow Problem Considering Distributed FACTS Devices

In this paper, we propose an AC optimal power flow (ACOPF) model considering distributed flexible AC transmission system (D-FACTS) devices, in which the reactance of D-FACTS equipped lines are introduced as decision variables. This is motivated by increasing interests in using D-FACTS devices to address system operational and cyber-security concerns. First, D-FACTS devices can be incorporated in real-time operations for economic benefits such as managing power congestions and reducing system losses. Second, D-FACTS devices can be utilized by moving target defense (MTD), an emerging concept against cyber-attacks, to prevent attackers from knowing true system configurations. Therefore, system operators can use the proposed ACOPF model to achieve economic benefits and provide the setpoints of D-FACTS devices for MTD at the same time. In addition, we rigorously derive the gradient and Hessian matrices of the objective function and constraints, which are further used to build an interior-point solver of the proposed ACOPF. Numerical results on the IEEE 118-bus transmission system show the validity of the proposed ACOPF model as well as the efficacy of the interior-point solver in minimizing system losses and generation costs.

Liu, Bo↗
DOE OSTI2014

The RenewElec Project: Variable Renewable Energy and the Power System (Final Report)

Variable energy resources, such as wind power, now produce about 4% of U.S. electricity. They can play a significantly expanded role if the U.S. adopts a systems approach that considers affordability, security and reliability. Reaching a 20-30% renewable portfolio standard goal is possible, but not without changes in the management and regulation of the power system, including accurately assessing and preparing for the operational effects of renewable generation. The RenewElec project will help the nation make the transition to the use of significant amounts of electric generation from variable and intermittent sources of renewable power.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2017

Hyper-Spectral Networking Concept of Operations and Future Air Traffic Management Simulations

The NASA sponsored Hyper-Spectral Communications and Networking for Air Traffic Management (ATM) (HSCNA) project is conducting research to improve the operational efficiency of the future National Airspace System (NAS) through diverse and secure multi-band, multi-mode, and millimeter-wave (mmWave) wireless links. Worldwide growth of air transportation and the coming of unmanned aircraft systems (UAS) will increase air traffic density and complexity. Safe coordination of aircraft will require more capable technologies for communications, navigation, and surveillance (CNS). The HSCNA project will provide a foundation for technology and operational concepts to accommodate a significantly greater number of networked aircraft. This paper describes two of the HSCNA projects technical challenges. The first technical challenge is to develop a multi-band networking concept of operations (ConOps) for use in multiple phases of flight and all communication link types. This ConOps will integrate the advanced technologies explored by the HSCNA project and future operational concepts into a harmonized vision of future NAS communications and networking. The second technical challenge discussed is to conduct simulations of future ATM operations using multi-bandmulti-mode networking and technologies. Large-scale simulations will assess the impact, compared to todays system, of the new and integrated networks and technologies under future air traffic demand.

communication link modeling↗
DOE OSTI2021

Hardware-in-the-Loop Testbed for Cyber-Physical Security of Photovoltaic Farms

In the last decades, modem grids with distributed energy resources, such as photovoltaic (PV) farms, are increasingly vulnerable to cyber-attacks that seriously affect the stability and performance of the power system. While cyber-physical security of smart grids is extensively studied, most of the existing work focuses on the grid level and neglects the modeling and features of device-level power electronics converters (PECs). Furthermore, establishing a high-fidelity simulation testbed that can simulate harmonic frequencies of the PV farm is in urgent need. In this paper, a high-fidelity and real-time hardware-in- the-loop testbed is built to simulate the harmonics of power electronics converters for cyber-physical security of PEC-enabled PV farms. Based on this testbed, the impact of typical cyber-attacks and physical faults on the PV converter can be analyzed, thus providing a foundation for cyber-attack detection, root cause diagnosis, and resilient control to mitigate the adverse effects of cyber-attacks.

14 SOLAR ENERGY↗
DOE OSTI2016

Small CaH{sub 2} Moderated Thermal Reactor for Surface Power Generation I: Conceptual Design

National Aeronautics and Space Administration (NASA) published 'Journey to Mars' on October 8, 2015, stating their plan to send human to Mars for exploration, scientific research and colonization of Mars. Mission time on Martian surface is supposed to be ∼1 year, therefore, a surface power generation system is required for human habitation on Mars. Even though solar power and chemical battery have been used for the past missions, the former cannot generate power during month-scale dust storm on Mars, and the latter is not reliable for long-term use under a cold environment. On the other hand, nuclear power provides stable power even on Mars surface and, since kilowatt class power system is required in the planned mission, a fission power system is better than a radioisotope battery. An 8-year operation is required for the Mars surface power generation system with electrical power of 10 to 100 kWe and specific power of >5 We/kg, which means the system weight needs to be below 2000 kg in the case of 10 to 100 kWe system. In the current study, stretch goals for surface fission power system were set as follows: electric power of 20 kWe and total system weight below 1000 kg. In addition, nuclear security and critical safety are essential features for the surface fission power system considering launch accidents. A sufficient level of nuclear security is needed to prevent terrorists from obtaining nuclear materials even the reactor falls in a geographic area dominated by terrorists. From this view point, it is preferable not to use highly enriched uranium with a space reactor that can be diverted to nuclear weapons. Also, a nuclear reactor core should not reach criticality during a launch accident where the reactor core can be compressed by collision with sea or land. A novel concept of surface power reactor system that satisfies the above requirements is proposed in the current study. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
NASA NTRS2004

Securing the User's Work Environment

High performance computing at the Numerical Aerospace Simulation Facility at NASA Ames Research Center includes C90's, J90's and Origin 2000's. Not only is it necessary to protect these systems from outside attacks, but also to provide a safe working environment on the systems. With the right tools, security anomalies in the user s work environment can be deleted and corrected. Validating proper ownership of files against user s permissions, will reduce the risk of inadvertent data compromise. The detection of extraneous directories and files hidden amongst user home directories is important for identifying potential compromises. The first runs of these utilities detected over 350,000 files with problems. With periodic scans, automated correction of problems takes only minutes. Tools for detecting these types of problems as well as their development techniques will be discussed with emphasis on consistency, portability and efficiency for both UNICOS and IRIX.

Cardo, Nicholas P.↗
DOE OSTI2018

Artificial Diversity and Defense Security (ADDSec) Final Report

Critical infrastructure systems continue to foster predictable communication patterns and static configurations over extended periods of time. The static nature of these systems eases the process of gathering reconnaissance information that can be used to design, develop, and launch attacks by adversaries. In this research effort, the early phases of an attack vector will be disrupted by randomizing application port numbers, IP addresses, and communication paths dynamically through the use of overlay networks within Industrial Control Systems (ICS). These protective measures convert static systems into "moving targets," adding an additional layer of defense. Additionally, we have developed a framework that automatically detects and defends against threats within these systems using an ensemble of machine learning algorithms that classify and categorize abnormal behavior. Our proof-of-concept has been demonstrated within a representative ICS environment. Performance metrics of our proof-of-concept have been captured with latency impacts of less than a millisecond, on average.

97 MATHEMATICS AND COMPUTING↗