Search NASA⌕ Search

SEARCH · Search NASA

Results for “operational technologies”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Simulation and Analysis of Technology and Operational Procedures to Reduce the Combined Effects of Emissions and Contrails

The development and evaluation of concepts and technology to support future air traffic management systems require a hierarchy of models ranging from real-time simulations to extensive field evaluations. Air traffic simulation models such as Airspace Concept Evaluation System, Center Tracon Automation System, Future Air traffic management Concept Evaluation Tool and others are used to design air traffic systems balancing the conflicting objectives of maximizing safety, meeting future demands for airports and airspace and increase efficiency of traffic flows in the presence of uncertain weather. The impact of aviation emissions and contrails on climate imposes another constraint on the design of aircraft and aviation operations. The understanding of the complex interaction between physical climate system, the carbon and other greenhouse gas emissions and aviation activity can be improved by the development of integrated assessment models that include emission and climate models together with air traffic simulations. The modeling of aircraft emissions and their interaction with each other to change the concentration levels of different gasses in the atmosphere and the resulting impact of the radiative forcing on the equilibrium of the Earth's atmosphere is complex and requires the use of coupled atmosphere-ocean general circulation models together with three-dimensional models of carbon cycle and chemistry of other non-CO2 greenhouse gases. These models are computationally intensive and unsuitable for studies involving the generation of multiple scenarios. Simple emission and climate models, based on the input-output relations of linear systems, capture the fundamental emission to climate impact behavior by careful selection of key variables and their dynamics. The impact of various greenhouse gases depends on the total concentration, effect per unit change in atmospheric concentration and the spatial distribution of the gas. All these quantities are influenced by the lifetime of the gas. The impact of a greenhouse gas depends on the interval of assessment, which may vary from a few decades to a few centuries. Climate metrics are aimed at providing a common scale to compare different greenhouse gases. If the metrics are to be used as a tool in developing and evaluating aviation operations, they should be transparent and easy to apply. Global Warming Potential and Aggregate Global Temperature Potential are some of the commonly used metrics. This paper integrates a national-level air traffic simulation and optimization capability with simple climate models and carbon cycle models, and climate metrics to assess the impact of aviation on climate. The capability brings together metrics, which are useful in aviation operations together with metrics used in climate studies. The capability can be used to make trade-offs between extra fuel cost and reduction in climate impact. There is considerable uncertainty in our understanding of the radiative forcing associated with emissions and contrails. The parameters in the simulation can be used to evaluate the effect of various uncertainties in emission models and contrails. It can also be used to evaluate the impact of different decision horizons. Alternatively, the optimization results from the simulation can be used as inputs to other tools that monetize global climate impacts like the FAA's Aviation Environmental Portfolio Management Tool for Impacts.

impact of aviation on the environment↗

Precursor Analysis Report: Doppelpaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019

The DoppelPaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019 Precursor Analysis Report leverages publicly available information about the PEMEX cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. The 2019 DoppelPaymer ransomware attack on PEMEX, Mexico’s nationalized petroleum corporation, highlights a unique threat that ransomware and cybercriminal extortion poses to Operational Technology (OT) environments in critical infrastructure. The incident began with an employee downloading commodity malware that allowed adversaries to gain initial access to PEMEX’s enterprise environment. After conducting privilege escalation, tool ingress, and data exfiltration, the adversaries deployed DoppelPaymer ransomware throughout the PEMEX enterprise environment, resulting in the company having to take dozens of systems offline for at least several days. Although PEMEX stated that their operations were not affected, the data exfiltrated from PEMEX was made available for download on DoppelPaymer’s leak site, as well as on other illicit criminal forums. This stolen data included not only company information, but also sensitive OT-specific configuration data. This incident showcases how cybercriminal exfiltration and posting of sensitive OT architecture documentation can pose security concerns for the targeted organization for years due to the long lifespan of OT assets and architectures. Researchers and analysts identified 18 unique techniques utilized during the attack with a total of 190 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the DoppelPaymer ransomware attack were precursors to the triggering event. Analysis identified 163 observables associated with these precursor techniques, 34 of which were assessed to have an increased likelihood of being perceived in the 60 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Concepts, technology, and operations for a quick response, highly maneuverable launch vehicle

Preliminary results from the NASA orbit-on-demand study are used to identify major technology issues for development of a quick response vehicle. Reasonable vehicles are found to require significant advances in propulsion, structures, materials, and flight mechanics technology. Vehicle concepts using normal growth technology predicted for the 1990s are compromised by expendable hardware or by unmanageable size and complexity. Operational analyses of the vertical-launch and horizontal-launch takeoff vehicles show that the latter have more inherent operational utility. The supply of liquid hydrogen propellant at alternate sites is a major issue; however, propane may be a viable option for at least one concept. Propellant for orbital maneuvering significantly increases gross weight for many of the concepts. This increase is greater for horizontal-takeoff systems becasue of their larger orbiters.

Gabris, E. A.↗

User-Focused Tools to Enhance IT/OT Cyber Resilience within the Power Grid

The power grid is undergoing several changes that are increasing its complexity as nexuses between electric-gas, transmission-distribution, and energy-communications continue to become increasingly critical. This system is heavily dependent on communication infrastructure and controls, and it relies on humans in operational technology (OT) and information technology (IT) roles to manage the increasing breadth, depth, and speed of data. Many technical challenges have presented themselves and will need to be addressed to provide reliable grid operations. With increased reliance on distributed controls and communication infrastructure, cybersecurity becomes an inherent requirement. When considering current cyber-physical security solutions for the power grid, one can notice a clear divide between information technology and operation technology networks. However, in real-life applications, these networks are interdependent. This work presents results of interviews with key utility cybersecurity personnel, analyzes the results, and makes recommendations towards solution of existing technical and operational challenges realized. Existing workflows are presented, wireframe interviews are discussed, and tool requirements are described. The existence of easy-to-implement solutions, based on existing energy management systems, highlight the potential for real-life applications.

cybersecurity, resilience, user-centered design, p↗

Requirements and applications of marine geodesy and satellite technology to operations in the oceans

Marine geodesy is concerned with the determination of marine geographic positions, geodetic controls, and the geoid. The activities of marine geodesy are related to the utilization of satellite technology, electronic distance measurement, geodetic astronomy, gravimetric geodesy, and the potentially usable very long baseline interferometry. Assessments are made of the different accuracy and/or precision requirements involved in the various approaches. It is shown that marine geodesy is highly relevant to man's various practical and scientific operations at sea, including those on the continental shelves.

Mourad, A. G.↗

Testing the Efficacy of Synthetic Vision during Non-Normal Operations as an Enabling Technology for Equivalent Visual Operations

Synthetic Vision (SV) may serve as a revolutionary crew/vehicle interface enabling technology to meet the challenges of the Next Generation Air Transportation System Equivalent Visual Operations (EVO) concept that is, the ability to achieve or even improve on the safety of Visual Flight Rules (VFR) operations, maintain the operational tempos of VFR, and potentially retain VFR procedures independent of actual weather and visibility conditions. One significant challenge lies in the definition of required equipage on the aircraft and on the airport to enable the EVO concept objective. An experiment was conducted to evaluate the effects of the presence or absence of SV, the location (head-up or head-down) of this information during an instrument approach, and the type of airport lighting information on landing minima. Another key element of the testing entailed investigating the pilot s awareness and reaction to non-normal events (i.e., failure conditions) that were unexpectedly introduced into the experiment. These non-normals are critical determinants in the underlying safety of all-weather operations. This paper presents the experimental results specific to pilot response to non-normal events using head-up and head-down synthetic vision displays.

Kramer, Lynda J.↗

Evolution and Trends of Industrial Control System Cyber Incidents since 2017

The industrial control systems (ICSs) that manage our critical infrastructure are increasingly converging with corporate networks and the Internet as technology and businesses prioritize digital connectivity. These connections make them more vulnerable and available to malicious cyber actors who traditionally targeted the companies’ more public-facing information technology (IT) networks. This paper will review select publicly reported cyber incidents to highlight the continued and growing threat to ICS devices and operational technology (OT) environments. It will summarize the incident and when available, will provide information on the cyber actors, the vulnerabilities they exploited, and any publications the U.S. Government (USG) provided in response. Data belonging to the Department of Homeland Security (DHS) will be used to highlight quantitative trends concerning ICS incidents. This paper builds on “History of Industrial Control System Cyber Incidents” (Hemsley & Fisher 2018), a paper that highlighted select noteworthy threats and incidents to ICS systems up to 2017. This paper will similarly review select incidents occurring after the last previously reviewed incident, Triton/HatMan, December 2017, and will note ICS incident trends including IT/OT convergence and advances in cyber-threat actors’ capabilities in observed in the examined incidents.

99 GENERAL AND MISCELLANEOUS↗

Space Transportation System Technology Symposium: Operations, Maintenance, and Safety (Including Cryogenic Systems) - Volume 5

The prospect of undertaking a reusable launch vehicle development led the NASA Office of Manned Space Flight (OMSF) to request the Office of Advanced Research and Technology (OART) to organize and direct a program to develop the technology that would aid in selecting the best system alternatives and that would support the ultimate development of an earth-to-orbit shuttle. Such a Space Transportation System Technology Program has been initiated. OART, OMSF, and NASA Flight and Research Centers with the considerable inputs of Department of Defense personnel have generated the program through the efforts of several Technology Working Groups and a Technology Steering Group. Funding and management of the recommended efforts is being accomplished through the normal OART and OMSF line management channels. The work is being done in government laboratories and under contract with industry and universities. Foreign nations have been invited to participate in this work as well. Substantial funding, from both OART and OMSF, was applied during the second half of fiscal year 1970. The Space Transportation System Technology Symposium held at the NASA Lewis Research Center, Cleveland, Ohio, July 15-17, 1970, was the first public report on that program. The Symposium goals were to consider the technology problems, their status, and the prospective program outlook for the benefit of the industry, government, university, and foreign participants considered to be contributors to the program. In addition, it offered an opportunity to identify the responsible individuals already engaged in the program. The Symposium sessions were intended to confront each presenter with his technical peers as listeners, and this, I believe, was substantially accomplished. Because of the high interest in the material presented, and also because the people who could edit the output are already deeply involved in other important tasks, we have elected to publish the material essentially as it was presented, utilizing mainly the illustrations used by the presenters along with brief words of explanation. Those who heard the presentations, and those who are technically astute in specialty areas, can probably put this story together again. We hope that more will be gained by compiling the information in this form now than by spending the time and effort to publish a more finished compendium later.

Source record↗

Clean Energy Cybersecurity Accelerator: Cohort 2 - runZero Public Report

The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) sponsors the Clean Energy Cybersecurity Accelerator™ (CECA) to expedite the deployment of emerging security technologies that address the most urgent security concerns facing modern and future electric grids. CECA Cohort 2 assessed solutions focused on hidden risks due to incomplete system visibility and device security and configuration. Improving visibility can be achieved through operational technology (OT) asset identification solutions, including capabilities like automatic discovery, vulnerability reporting, and configuration monitoring. Solutions that monitor and identify assets in information technology (IT) networks in other domains are widely used; however, there is far less adoption of monitoring solutions for operational technology environments. Wider adoption may increase with increased confidence in the ability for these solutions to understand and respond to the specific requirements of OT environments. CECA Cohort 2 evaluated the active and passive asset discovery capabilities of market-ready solutions, documented and analyzed results, and identified gaps in functionality or capabilities. This report and describes how these results can help advance the adoption of these and similar solutions in the electric sector.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Clean Energy Cybersecurity Accelerator: Cohort 2 - Asimily Public Report

The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) sponsors the Clean Energy Cybersecurity Accelerator (TM) (CECA) to expedite the deployment of emerging security technologies that address the most urgent security concerns facing modern and future electric grids. CECA Cohort 2 assessed solutions focused on hidden risks due to incomplete system visibility and device security and configuration. Improving visibility can be achieved through operational technology (OT) asset identification solutions, including capabilities like automatic discovery, vulnerability reporting, and configuration monitoring. Solutions that monitor and identify assets in information technology (IT) networks in other domains are widely used; however, there is far less adoption of monitoring solutions for operational technology environments. Wider adoption may increase with increased confidence in the ability for these solutions to understand and respond to the specific requirements of OT environments. CECA Cohort 2 evaluated the active and passive asset discovery capabilities of market-ready solutions, documented and analyzed results, and identified gaps in functionality or capabilities. This report and describes how these results can help advance the adoption of these and similar solutions in the electric sector.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Interaction between the space transportation systems and the Space Station architecture and operations and technology requirements

This study, limited to the interaction between the Space Station and an orbital transfer vehicle, illustrates the need to include the space transportation system and the station in a synergistic analysis to determine an overall operationally efficient system that takes full advantage of the potential for the exploration and exploitation of space. Included are examples of the effects of the mission model on the selection of a possible orbit transfer vehicle design and processing procedures at the station; safe, timely, and flexible transfer vehicle trajectories from GEO to the station; mechanical assists on the station for vehicle arrivals and departures that reduce the risk of contamination and collision; and a discussion of the need for efficient procedures for vehicle maintenance and processing at the station.

Eide, Donald G.↗

Operational efficiency

Space transportation avionics technology operational efficiency issues are presented in viewgraph form. Information is given on ascent flight design, autonomous spacecraft control, operations management systems, advanced mission control, telerobotics/telepresence, advanced software integration, advanced test/checkout systems, advanced training systems, and systems monitoring.

Bland, Dan↗

Smart Semi-Supervised Accumulation of Large Repositories for Industrial Control Systems Device Information

Industrial Control Systems device manufacturers frequently add new features to improve their product performance. Oftentimes, these changes are mainly vendor-driven initiatives, and customers may not be aware of the full impact of these new capabilities on their cybersecurity posture. In the energy sector, this can lead to considerable dissonance between vendor-provided cybersecurity claims and a customer’s responsibility for Operation Technology cybersecurity compliance. Thus, the resulting dynamic verification burden is shifted towards the customer and may pose a significant cybersecurity risk to the energy sector landscape. We found that there is very limited research into cybersecurity auditing for Operational Technology. However, a solution is needed for vetting the vendor-supplied feature claims and their adherence to cybersecurity requirements and standards. We are presently engaged in an effort to develop such a system. This paper demonstrates one vital aspect of this effort in proposing an end-to-end framework to accumulate a large repository of ICS device information for this vetting system, curate the dataset, and conduct extensive processing. This framework is designed to use web scraping, data analytics and Natural Language Processing (NLP) techniques to identify vendor websites, automate the collection of website-accessible documents and automatically derive metadata from them for identification of product documents relevant to the repository. We have found that this automated approach to vendor identification, document extraction into a product repository, and NLP pre-processing is unique and has not been previously presented in the literature. The preliminary work shows that this is feasible and can produce reliable results with minimum supervision. Future work will be built upon this foundation in order to achieve semi-supervised vetting of device technical information – a vital capability for ensuring that vendor-claimed device cybersecurity capabilities match industry requirements.

Ameri, Kimia↗

Technology and operational considerations for low-heat-rate trajectories

A broad parametric study which examines several critical aspects of low-heat-rate entry trajectories is performed. Low planform loadings associated with future winged earth-entry vehicles coupled with the potential application of metallic thermal protection systems (TPS) suggest that such trajectories are of particular interest. Studied are three heating conditions - reference, stagnation, and windward centerline, for both laminar and turbulent flow; configuration-related factors including planform loading and hypersonic angle of attack; and mission-related factors such as cross-range and orbit inclination. Results indicate benefits in the design of TPS to be gained by utilizing moderate angles of attack as opposed to high-lift coefficient, high angles of attack, during entry. An assessment of design and technology implications is made.

Wurster, K. E.↗

Module-OT: A Turnkey Solution for Securing Energy Systems

The Modular Security Apparatus for Managing Distributed Cryptography for Command-and-Control Messages on Operational Technology Networks (Module-OT) is a flexible and lightweight solution for grid-edge devices focusing on end-to-end security. It is a bump- in- the-wire solution acting as a secure conduit for data between devices or systems across a network. It improves the cybersecurity posture of DER systems by providing authentication, authorization, and data integrity to secure DER communications. Additionally, it performs key management, provides data security through whitelisting Internet Protocol addresses and ports, blocks unauthorized connections, controls user access, and allows serial or Ethernet connections for added flexibility. The core software is portable to various Linux-based operating systems and is developed to be customized by the developer and researcher communities. Module-OT has been validated in the lab, has been demonstrated at a 500-KW PV-plus-storage site, and has been proven ready to secure operational technology devices. Its core functionality meets current standards, including validation procedures of the NIST Cryptographic Algorithm Validation Program (CAVP) and the Federal Information Processing Standard (FIPS 140-2). Because of its capability to provide an accessible and affordable option for stepping up security across modern energy systems, Module-OT can serve as an effective technological option to standardize cybersecurity moving forward.

cryptography↗

Cyber-Physical Tabletop Exercise for Small Modular Reactor Facilities

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping costs reasonable to make nuclear energy competitive. This evolving threat landscape includes adversaries having offensive cyber capabilities to attack information technology (IT) systems and operation technology (OT) systems. These adversaries may have the ability to attack the physical protection system (PPS) networks with potential consequential impacts that could degrade the effectiveness of the PPS. These cyber attacks may also be used to attack the safety and operational systems used to operate and ensure the safety of the reactor. Additionally, adversaries may gain access to unmanned aerial systems (UAS) that may be used to provide reconnaissance and surveillance of the facility, provide information to the adversaries, and be equipped with kinetic capabilities such as explosives or weapons that can be used to directly attack the facility. The Department of Energy’s Office of Nuclear Energy’s Advanced Reactor Safeguards and Security (ARSS) program funded Sandia National Laboratories (SNL) and Idaho National Laboratory (INL) to develop a cyber-physical tabletop exercise (TTX). This exercise was conducted on a hypothetical small modular reactor (SMR) facility, and only considered a potential adversary cyber attack on the PPS to a physical attack on the hypothetical facility to achieve a radiological release. This cyber-physical TTX is meant to provide lessons learned to integrate the cyber security system design and the physical protection system (PPS) design to decrease design, operation, and maintenance costs as well as increase effectiveness for defending against design basis threat attacks at the facility. This TTX will also provide a framework and method for SMR and microreactor vendors to conduct their own cyber-physical TTX and gain impactful insights to improving the cyber and physical protection system design for their SMR or microreactor facility design.

42 ENGINEERING↗