Search NASA⌕ Search

SEARCH · Search NASA

Results for “Advanced Persistent Threat”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

13 records
All sourcesNASA NTRSDOE OSTI
NASA NTRS2014

Analyzing Risks and Vulnerabilities of Various Computer Systems and Undergoing Exploitation using Embedded Devices

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere has heightened from airports to communication among the military branches legionnaires. With advanced persistent threats (APTs) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated, patched and secured state in a launch control system environment. Attacks on critical systems are becoming more and more relevant and frequent. Nation states are hacking into critical networks that might control electrical power grids or water dams as well as carrying out advanced persistent threat (APTs) attacks on government entities. NASA, as an organization, must protect its self from attacks from all different types of attackers with different motives. Although the International Space Station was created, there is still competition between the different space programs. With that in mind, NASA might get attacked and breached for various reasons such as espionage or sabotage. My project will provide a way for NASA to complete an in house penetration test which includes: asset discovery, vulnerability scans, exploit vulnerabilities and also provide forensic information to harden systems. Completing penetration testing is a part of the compliance requirements of the Federal Information Security Act (FISMA) and NASA NPR 2810.1 and related NASA Handbooks. This project is to demonstrate how in house penetration testing can be conducted that will satisfy all of the compliance requirements of the National Institute of Standards and Technology (NIST), as outlined in FISMA. By the end of this project, I hope to have carried out the tasks stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, as well as policies and procedures.

Penetration Testing↗
NASA NTRS2015

Addressing Software Security

Historically security within organizations was thought of as an IT function (web sites/servers, email, workstation patching, etc.) Threat landscape has evolved (Script Kiddies, Hackers, Advanced Persistent Threat (APT), Nation States, etc.) Attack surface has expanded -Networks interconnected!! Some security posture factors Network Layer (Routers, Firewalls, etc.) Computer Network Defense (IPS/IDS, Sensors, Continuous Monitoring, etc.) Industrial Control Systems (ICS) Software Security (COTS, FOSS, Custom, etc.)

software↗
DOE OSTI2025

Evidence-based Graph Adversary Mapping (EGRAM) [Poster]

Cybersecurity companies such as CrowdStrike, Dragos, Microsoft and Unit 42 categorize Advanced Persistent Threats (APTs) using their own naming schemes. As a result, these APTs are mapped to different malware sources and campaigns, all from differing sources, leading to inconsistent mapping. Inconsistent mapping causes confusion and adds further obscurity around these groups, making it difficult to track and mitigate APT cyberattacks. The Evidence-based Graph Adversary Mapping (EGRAM) tool remediates the mapping challenge by collecting, updating and converting adversary data and their sources into a valid, codified STIX v2.1 bundle which is then stored in a Neo4j graph database. It utilizes graph traversal methods and centrality analysis to generate actionable information as a Structured Threat Intelligence Graph (STIG), based on user queries. EGRAM exists as Python code and a Jupyter Notebook that acts as a searchable, evidence-based, source of intelligence for APT groups’ artifacts and cyber campaigns.

24 - POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2013

IT Security Support for the Spaceport Command Control Systems Development Ground Support Development Operations

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere was heightened from Airports to the communication among the military branches legionnaires. With advanced persistent threats (APTs) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated and secured state in a launch control system environment. FISMA is a law that is mandated by the government to follow when government agencies secure networks and devices. My role on this project is to ensure network devices and systems are in compliance with NIST, as outlined in FISMA. I will achieve this by providing assistance with security plan documentation and collection, system hardware and software inventory, malicious code and malware scanning and configuration of network devices i.e. routers and IDSsIPSs. In addition I will be completing security assessments on software and hardware, vulnerability assessments and reporting, conducting patch management and risk assessments. A guideline that will help with compliance with NIST is the SANS Top 20 Critical Controls. SANS Top 20 Critical Controls as well as numerous security tools, security software and the conduction of research will be used to successfully complete the tasks given to me. This will ensure compliance with FISMA and NIST, secure systems and a secured network. By the end of this project, I hope to have carried out stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, policies and procedures.

computer information security↗
NASA NTRS2014

IT Security Support for the Spaceport Command Control Systems Development Ground Support Development Operations

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere has heightened from airports to the communication among the military branches legionnaires. With advanced persistent threats (APT's) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated and secured state in a launch control system environment. FISMA is a law that is mandated by the government to follow when government agencies secure networks and devices. My role on this project is to ensure network devices and systems are in compliance with NIST, as outlined in FISMA. I will achieve this by providing assistance with security plan documentation and collection, system hardware and software inventory, malicious code and malware scanning, and configuration of network devices i.e. routers and IDS's/IPS's. In addition, I will be completing security assessments on software and hardware, vulnerability assessments and reporting, and conducting patch management and risk assessments. A guideline that will help with compliance with NIST is the SANS Top 20 Critical Controls. SANS Top 20 Critical Controls as well as numerous security tools, security software and the conduction of research will be used to successfully complete the tasks given to me. This will ensure compliance with FISMA and NIST, secure systems and a secured network. By the end of this project, I hope to have carried out the tasks stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, as well as policies and procedures.

security↗
DOE OSTI2025

Cybersecurity Challenges in Low-Inertia Power-Electronics-Dominated Grids

Here, the low inertia characteristics of the power electronics dominated grid (PEDG) introduces challenges while restoring voltage and frequency to their nominal values. These stability challenges create new cybersecurity vulnerabilities that are not thoroughly discussed in the literature. Cyber events such as false data injection (FDI), denial of service (DoS), man-in-the-middle attacks, stealthy attacks, and advanced persistent threats target PEDG to disrupt grid stability or gain financial benefits. The low inertia of PEDG (< 2s) compared to traditional grids (~10s) exacerbates these vulnerabilities. In response to stealthy attacks on state variables that supervisory layers cannot detect until significant harm occurs, the low inertia characteristics of PEDG offer substantial stealthy attack surfaces. To counteract such threats, PEDG must be equipped with ultra-fast real-time anomaly detection system and trajectory prediction mechanism to achieve effective cyberattack resiliency.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Center of Excellence for Operational Technology

The Center of Excellence for Operational Technology Traditional Presentation Abstract 2025 National Laboratories Information Technology Summit | Denver, CO Traditional Presentation Session Managing cybersecurity risk in Operational Technology (OT) presents a significant challenge across the Department, and critically, at many of the national laboratories. This includes IT-OT convergence, aging OT systems, cost of updating OT systems, and increased Advanced Persistent Threat efforts against OT including the 16 critical infrastructure sectors as listed in Presidential Policy Directive 21. DoE’s Office of Science and NNSA’s Office of the Chief Information Officer are taking the lead in addressing this challenge to include critical systems, by establishing the Center of Excellence (CoE) for Operational Technology. Championed by NNSA Deputy Chief Information Officer Steven McAndrews and the Office of Science Chief Information Officer Shila Cooch, the CoE for OT was chartered in February 2025 to address the challenges of OT cybersecurity and compliance. The CoE for OT will create partnerships and leverage expertise from across the NNSA National Security Enterprise and DOE Labs, Plants and Sites. The CoE will also collaborate with colleagues in other government agencies, industry partners and academia. The CoE for OT discussion at the National Laboratories Information Technology Summit ’25 will include the genesis of the CoE, stated goals, organizational structure, and the effort to attract OT subject matter experts to join the CoE effort to share knowledge and expertise. The discussion will include opportunities to get involved and contribute to this important effort. This session will be led by CoE for OT Co-Chairs Matt Kwiatkowski, Fermi National Laboratory Chief Information Security Officer, and Steven Weldon, Savannah River National Laboratory Cyber Program Director at the Georgia Cyber Center. The session will be of particular interest to CIOs, CTOs, CISOs, as well as IT and OT practitioners.

Kwiatkowski, Matt [Fermilab]↗
NASA NTRSDate not supplied

Engineering the Interface: Advanced Surface Technologies for Lunar Dust Management and Equipment Longevity

Through the Artemis program, NASA intends to develop a sustainable human foothold on the Moon, ultimately paving the way for crewed exploration of Mars. The Moon's hostile environment poses numerous obstacles, including exposure to radiation, temperature extremes, micrometeoroid threats, and particularly the persistent problem of lunar dust. Lunar dust impacts nearly every aspect of surface operations through adhesion and abrasion mechanisms, with contamination from anthropogenic activities (landing, rovers) far outweighing natural phenomena. Multiple adhesion pathways contribute to surface contamination in the lunar environment, including van der Waals forces, electrostatic forces, chemical reaction, and magnetic forces from elemental iron deposits. Sharp asperities from micrometeoroid bombardment and atmospheric absence increase interaction potential and enable mechanical interlocking. Low cohesion between dust particles exacerbates these challenges, as minimal interaction potential between dust and nearby surfaces overcomes particle cohesion, causing contamination. Lunar dust adhesion mitigation technologies can be categorized as either active, requiring external energy, or passive, relying on intrinsic material properties. Ultrasonic and electrodynamic technologies have been developed to the highest technology readiness level for active approaches. Passive strategies primarily focus on surface chemistry and topography modifications. At NASA Langley Research Center, approaches include surface migration agents to reduce surface energy, topographical modification using laser ablation patterning, and tailored surface conductivity to reduce intrinsic adhesion force. Performance has been evaluated using custom-built ultrasonic and centrifuge instruments. Plume-surface interactions from lunar landers can propel micrometer-sized particles at velocities up to 1000 m s-1.8 These particles pose risks to landers, habitats and infrastructure, leading to erosion, degradation, and reduced component lifespan. A panel recovered from Surveyor III was determined to have been severely abraded because of lunar dust displaced from the Apollo 12 lunar module that landed 160 m away. The performance of metallic surfaces has been evaluated via high velocity single particle impact using the laser-induced project impact test (LIPIT) facility at the University of Utah. Peridynamics modeling, a form of continuum mechanics that uses a nonlocal approach enabling greater simulation capabilities of crack initiation and fracture, has also been utilized to gain greater insight into material response during impact events. Lunar dust contamination challenges extend to power generation systems and moving equipment. Cables, rotation stages, and other mechanisms may experience limited range of motion and reduced lifetime due to dust infiltration. NASA Langley Research Center has evaluated traditional aerospace alloys, softgoods, wear resistant ceramics, and several polymer and polymer composite materials. Test methods have included traditional techniques like Taber abrasion testing, as well as designed test configurations developed in the DUSTE (dust, ultraviolet radiation, and space thermal environmental) chamber that reproduce mechanism functions in operational environment. Beyond laboratory experiments, several flight experiments have been conducted. Materials were exposed to the low Earth orbit environment on the Materials International Space Station Experiment (MISSE) and to the lunar surface environment through the Aegis Aerospace Regolith Adherence Characterization (RAC) payload and the Honeybee Robotics PlanetVac payload. Determining lunar dust's impact on surface exploration and habitation requires comprehensive experimental and computational capabilities combined with lessons learned from initial lunar activities. Identifying the greatest environmental challenges and developing mitigation technologies provides the clearest path toward successfully, expeditiously, and efficaciously completing NASA's mission. This presentation will discuss ongoing efforts at NASA Langley Research Center and collaborator contributions to these critical objectives.

Surface Engineering↗
DOE OSTI2026

Agnostic capture of pathogens for the detection and diagnostics of emerging threats

The continued emergence of pathogens, whether novel, re-emerging, or engineered, poses a persistent global biosecurity and public health challenge. Recent outbreaks, including COVID-19, Lassa fever, Marburg virus, mpox, and avian influenza, underscore the urgent need for robust systems that enable rapid surveillance, early diagnosis, and timely countermeasures before widespread human transmission occurs. In this article, we focus on early detection technologies and systematically evaluate current diagnostic and sensing modalities. We highlight sequencing and spectroscopy as two complementary approaches capable of providing broad, agnostic detection and rich biological insight. Our analysis emphasizes that scientific innovation alone is insufficient: effective preparedness also requires improved data curation, integration, and sharing to build AI-ready resources that accelerate future responses. We argue for coordinated advances in both technological capabilities and supporting infrastructure to enable the rapid identification and characterization of emerging pathogens and to fully leverage modern science against evolving infectious threats.

Environmental health↗
DOE OSTI2025

Hurricanes and turbulent floods threaten arsenic-contaminated coastal soils and vulnerable communities

Coastal environments, particularly those adjacent to Superfund sites, are at increased risk of contaminant release during natural disasters, posing serious threats to nearby communities. To investigate this issue, we employed an advanced laboratory flood simulator to impose arsenic-contaminated sediments to turbulent flooding events. We further monitored changes in arsenic collocation and solid-phase speciation using advanced synchrotron radiation-based techniques to understand the impacts of flooding on arsenic mobility. Our results demonstrate that turbulent conditions significantly enhance the resuspension of arsenic-rich sediments, resulting in increased arsenic release into the water. This mobilization is driven by the erosion of the reduced sediments and the redox-mediated transformation and dissolution of Fe and Mn (oxyhydr) oxides, which promote the release of As(III). We found that arsenic speciation on resuspended particles is closely tied to shear stress, with As(V) prevailing at low stress and the more toxic As(III) dominating at higher stress levels. In the post-erosion phase, solid-phase As(III) decreased while dissolved As(III) increased, indicating ongoing desorption. The persistence of multiple arsenic species on resuspended particles marks them as potential long-range transport vectors. Thus, the environmental impact of flooding and sediment resuspension extends beyond the event itself, raising longer-term concerns for arsenic mobility. Our comprehensive geospatial analysis revealed substantial overlap between arsenic-contaminated soils and regions at high risk of flooding and hurricanes across the conterminous United States. This overlap disproportionately impacts economically disadvantaged and marginalized communities. Approximately 40 million Americans reside within 10 kilometers of these high-risk contaminated zones, with nearly 28 million exposed to hurricane threats and around 18 million vulnerable to flooding risks. Alarmingly, over 40% of those affected by hurricanes and 33% of those impacted by flooding belong to underrepresented minority and low-income populations. These findings highlight the urgent need for targeted mitigation strategies to protect public health and address environmental justice concerns.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRSDate not supplied

Method Development for In-situ Detection of Latent Herpesvirus DNA from Saliva using Nanopore Sequencing

Research toward latent herpesvirus reactivation has been intensively addressed through Space Shuttle and International Space Station (ISS) investigations. This work has provided the understanding that persistent reactivation of herpesviruses from asymptomatic crew can be detected through viral shedding in saliva, urine, and blood. Occasionally, viral reactivation from the latency stage can pose a threat to crew health (clinical manifestation) before, during, and after flight missions. Furthermore, previous work detailing correlations with immunity indicate that monitoring viral reactivation could be implemented to assess potential immune dysfunction. While in-flight monitoring is desirable, there is no well-established procedure or method for real-time evaluations, and research to date has relied on postflight, ground-based analysis. The development of portable molecular technologies like the miniPCR™ (miniPCR Bio) thermal cycler and the MinION™ sequencer (Oxford Nanopore Technologies) have confirmed that real-time monitoring is possible in extreme and low resource environments. These devices, combined with simple sample preparation methods, have been used to demonstrate bacterial identification onboard the ISS, as well as rapid viral detection in remote locations on Earth. The work here builds upon previous molecular advancements onboard the ISS toward the development and validation of a spaceflight-compatible method for viral detection from crew samples. Several herpesviruses can be detected in saliva, which provides a non-invasive means to collect samples for monitoring. While the basis for this method lies in previous spaceflight investigations, key points for method optimization include DNA extraction from saliva, viral primer selection, and bioinformatic processes for data analysis. To increase viral yield, numerous DNA extraction methods have been evaluated and will be discussed in detail. For initial development and testing, varicella-zoster virus (VZV) is being targeted though open reading frame 51 and 63 (ORF51, ORF63), as the replication origin-binding protein is highly expressed during latency. Optimization of the thermal cycling parameters has resulted in the ability to test the entire process. The full method has been tested with both viral VZV DNA standards and saliva spiked with varying concentrations of VZV. Viral sequence data were mapped to the reference sequence using minimap2. Prior to mapping, DNA sequencing reads were filtered for length and quality, barcodes were removed, and alignment identity calculated. Following further assessments, statistics were compared across multiple sequencing experiments and are being used to determine the success of the protocols. Forward work will include the incorporation of herpes simplex virus 1 (HSV-1) and Epstein-Barr virus (EBV) primers as well as the validation of results to the terrestrial qPCR standard assay. Upon full validation of the developed method, saliva will be collected from 20 healthy subjects and spiked with viral DNA. These samples will be split and assayed with the MinION and standard qPCR assay.

Hang N Nguyen↗
DOE OSTI2024

Gut microbiota carbon and sulfur metabolisms support Salmonella infections

Abstract Salmonella enterica serovar Typhimurium is a pervasive enteric pathogen and ongoing global threat to public health. Ecological studies in the Salmonella impacted gut remain underrepresented in the literature, discounting microbiome mediated interactions that may inform Salmonella physiology during colonization and infection. To understand the microbial ecology of Salmonella remodeling of the gut microbiome, we performed multi-omics on fecal microbial communities from untreated and Salmonella-infected mice. Reconstructed genomes recruited metatranscriptomic and metabolomic data providing a strain-resolved view of the expressed metabolisms of the microbiome during Salmonella infection. These data informed possible Salmonella interactions with members of the gut microbiome that were previously uncharacterized. Salmonella-induced inflammation significantly reduced the diversity of genomes that recruited transcripts in the gut microbiome, yet increased transcript mapping was observed for seven members, among which Luxibacter and Ligilactobacillus transcript read recruitment was most prevalent. Metatranscriptomic insights from Salmonella and other persistent taxa in the inflamed microbiome further expounded the necessity for oxidative tolerance mechanisms to endure the host inflammatory responses to infection. In the inflamed gut lactate was a key metabolite, with microbiota production and consumption reported amongst members with detected transcript recruitment. We also showed that organic sulfur sources could be converted by gut microbiota to yield inorganic sulfur pools that become oxidized in the inflamed gut, resulting in thiosulfate and tetrathionate that support Salmonella respiration. This research advances physiological microbiome insights beyond prior amplicon-based approaches, with the transcriptionally active organismal and metabolic pathways outlined here offering intriguing intervention targets in the Salmonella-infected intestine.

59 BASIC BIOLOGICAL SCIENCES↗
NASA NTRSDate not supplied

Investigating Material Behavior in Atmospheric Entry Conditions: Arc-Jet Testing Insights from Meteorite Ablation to High-Temperature Coatings.

Arc-jet testing is an indispensable tool in elucidating the complex interactions materials undergo when subjected to the extreme thermal and mechanical stresses of atmospheric entry. By replicating these harsh conditions, arc-jets enable researchers to explore critical phenomena such as ablation, melting, and spallation, generating invaluable data that informs the development of sophisticated, physics-based models. These models are pivotal not only in predicting material performance for spacecraft re-entry systems but also in assessing the threat posed by celestial bodies as they encounter Earth’s atmosphere. One of the leading facilities for such investigations is the Hypersonic Materials Environmental Test System (HyMETS) at NASA’s Langley Research Center. A pioneering test campaign conducted at HyMETS focused on unraveling the ablation mechanisms of an ordinary chondrite meteorite (Tamdakht H5) and a terrestrial analog (basalt). These studies unveiled distinct material behaviors: Tamdakht demonstrated a remarkably stable melt flow, with mass loss primarily driven by the volatilization of elements such as iron and sodium, whereas basalt exhibited more aggressive surface degradation due to the rapid decomposition of hydrated minerals, culminating in significant spallation and surface material ejection. Beyond meteorite analysis, HyMETS has also been integral in the exploration of advanced Thermal Protection Systems (TPS) such as Phenolic Impregnated Carbon Ablator (PICA), a material with extensive flight heritage in missions like Stardust, Mars Science Laboratory, Mars 2020, and Osiris-REx. PICA, when coated with NuSil CV-1144-0—a polysiloxane resin designed to prevent particle shedding—undergoes a remarkable transformation upon heating. The resin pyrolyzes to form a thin, oxidation-resistant silicon oxycarbide layer that profoundly influences the material’s thermal response through a sophisticated four-stage process. Initially, the silicon oxycarbide acts as a formidable barrier, impeding reactive interactions with the PICA char and effectively suppressing surface temperature rise and material recession. However, as the heating persists, the protective layer decomposes via carbothermal reduction, exposing the underlying char, which in turn leads to a dramatic spike in surface temperature and accelerated material erosion. In the final stage, equilibrium is reached, with recession rates aligning with those of the virgin material. This intricate understanding of PICA-NuSil behavior under extreme conditions offers valuable insights, enhancing material response models and advancing the development of next-generation TPS for space exploration.

Chemistry↗