Search NASA⌕ Search

SEARCH · Search NASA

Results for “Static IP addressing”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

System Administrator for LCS Development Sets

The Spaceport Command and Control System Project is creating a Checkout and Control System that will eventually launch the next generation of vehicles from Kennedy Space Center. KSC has a large set of Development and Operational equipment already deployed in several facilities, including the Launch Control Center, which requires support. The position of System Administrator will complete tasks across multiple platforms (Linux/Windows), many of them virtual. The Hardware Branch of the Control and Data Systems Division at the Kennedy Space Center uses system administrators for a variety of tasks. The position of system administrator comes with many responsibilities which include maintaining computer systems, repair or set up hardware, install software, create backups and recover drive images are a sample of jobs which one must complete. Other duties may include working with clients in person or over the phone and resolving their computer system needs. Training is a major part of learning how an organization functions and operates. Taking that into consideration, NASA is no exception. Training on how to better protect the NASA computer infrastructure will be a topic to learn, followed by NASA work polices. Attending meetings and discussing progress will be expected. A system administrator will have an account with root access. Root access gives a user full access to a computer system and or network. System admins can remove critical system files and recover files using a tape backup. Problem solving will be an important skill to develop in order to complete the many tasks.

Virtualizing in Linux↗

Artificial Diversity and Defense Security (ADDSec) Final Report

Critical infrastructure systems continue to foster predictable communication patterns and static configurations over extended periods of time. The static nature of these systems eases the process of gathering reconnaissance information that can be used to design, develop, and launch attacks by adversaries. In this research effort, the early phases of an attack vector will be disrupted by randomizing application port numbers, IP addresses, and communication paths dynamically through the use of overlay networks within Industrial Control Systems (ICS). These protective measures convert static systems into "moving targets," adding an additional layer of defense. Additionally, we have developed a framework that automatically detects and defends against threats within these systems using an ensemble of machine learning algorithms that classify and categorize abnormal behavior. Our proof-of-concept has been demonstrated within a representative ICS environment. Performance metrics of our proof-of-concept have been captured with latency impacts of less than a millisecond, on average.

97 MATHEMATICS AND COMPUTING↗

Dynamic defense and network randomization for computer systems

The various technologies presented herein relate to determining a network attack is taking place, and further to adjust one or more network parameters such that the network becomes dynamically configured. A plurality of machine learning algorithms are configured to recognize an active attack pattern. Notification of the attack can be generated, and knowledge gained from the detected attack pattern can be utilized to improve the knowledge of the algorithms to detect a subsequent attack vector(s). Further, network settings and application communications can be dynamically randomized, wherein artificial diversity converts control systems into moving targets that help mitigate the early reconnaissance stages of an attack. An attack(s) based upon a known static address(es) of a critical infrastructure network device(s) can be mitigated by the dynamic randomization. Network parameters that can be randomized include IP addresses, application port numbers, paths data packets navigate through the network, application randomization, etc.

97 MATHEMATICS AND COMPUTING↗

Thermomechanical Fatigue Damage/Failure Mechanisms in SCS-6/Timetal 21S [0/90](Sub S) Composite

The thermomechanical fatigue (TMF) deformation, damage, and life behaviors of SCS6/Timetal 21S (0/90)s were investigated under zero-tension conditions. In-phase (IP) and out-of-phase (OP) loadings were investigated with a temperature cycle from 150 to 650 deg C. An advanced TMF test technique was used to quantify mechanically damage progression. The technique incorporated explicit measurements of the macroscopic (1) isothermal static moduli at the temperature extremes of the TMF cycle and (2) coefficient of thermal expansion (CTE) as functions of the TMF cycles. The importance of thermal property degradation and its relevance to accurate post-test data analysis and interpretation is briefly addressed. Extensive fractography and metallography were conducted on specimens from failed and interrupted tests to characterize the extent of damage at the microstructure level. Fatigue life results indicated trends analogous to those established for similar unidirectional(0) reinforced titanium matrix composite systems. High stress IP and mid to low stress OP loading conditions were life-limiting in comparison to maximum temperature isothermal conditions. Dominant damage mechanisms changed with cycle type. Damage resulting from IP TMF conditions produced measurable decreases in static moduli but only minimal changes in the CTE. Metallography on interrupted and failed specimens revealed extensive (0) fiber cracking with sparse matrix damage. No surface initiated matrix cracks were present. Comparable OP TMF conditions initiated environment enhanced surface cracking and matrix cracking initiated at (90) fiber/matrix (F/M) interfaces. Notable static moduli and CTE degradations were measured. Fractography and metallography revealed that the transverse cracks originating from the surface and (90) F/M interfaces tended to converge and coalesce at the (0) fibers.

Castelli, Michael G.↗

A symmetric address translation approach for a network layer moving target defense to secure power grid networks

This paper will suggest a robust method for a network layer Moving Target Defense (MTD) using symmetric packet scheduling rules. The MTD is implemented and tested on a Supervisory Control and Data Acquisition (SCADA) network testbed. This method is shown to be efficient while providing security benefits to the issues faced by the static nature of SCADA networks. The proposed method is an automated tool that may provide defense in depth when be used in conjunction with other MTDs and traditional security devices.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Towards generic memory forensic framework for programmable logic controllers

A Programmable Logic Controller (PLC) is a microprocessor-based controller that is used to automate physical processes in critical infrastructure and various other industries and manufacturing sectors. Initially, PLCs were completely isolated from the Internet, and cyber security was not incorporated at the time of development. The introduction of industry 4.0 and the evolution of ICS systems to communicate over public IP addresses from the Internet enhanced productivity and efficiency, but Internet connectivity exposed the systems and their vulnerabilities, which led to an increase in cyber attacks. When a system is sabotaged/compromised, security analysts need to get to the root cause of the attack as quickly as possible to recover the system. To do so, memory forensic analysis is critical to provide a unique insight into the run-time memory activities and extract a reliable source of evidence. In this paper, we analyze the memory structure of the Schneider Electric Modicon M221 PLC. To build a memory profile, we reverse engineer the communication protocol and conduct differential analysis to gain knowledge about the structure of the memory and the low-level representation of control logic instructions. We then identify dynamic and static memory regions by modifying different project fields and conducting differential analysis, which allows us to identify boundaries of critical memory structures and extract important forensic artifacts that can be found in the memory. The Python implementation of the memory profile can help reduce the time and effort required for manual analysis in case of cyber incident or system failure.

97 MATHEMATICS AND COMPUTING↗

Beam and Spin Optics Simulation Tutorials, Using Zgoubi Exercises and Solutions 2 - RHIC Run 22 Spin Transparency Experiment

High electron and ion polarizations are paramount design requirements for the future Electron Ion Collider (EIC) at BNL. A “spin transparency” mode of operation, inherited from the “figure-8” ring design [1], allows preservation and control of electron and ion spin polarization in a collider or storage ring [2, 3]. It makes the ring lattice “invisible” to the spin and allows for polarization control by small quasi-static magnetic fields with practically no effect on beam orbital parameters. Beam polarization can then be fully controlled by small adjustments of snake axis orientation (a few degrees) and snake strengths (a few percent); polarization orientation at IPs can be controlled without spin rotators, spins can be adiabatically flipped without the need of ac magnets. The transparent spin mode has been demonstrated in simulations [2] for the purpose of being tested experimentally during RHIC Run 22. This experiment was aimed at providing data to validate the principles. Yellow RHIC ring (Fig. 1.1) was configured in the transparent spin mode by aligning the axes of its two helical snakes (located respectively in the 3 o’clock and 9 o’clock sextants) parallel to the longitudinal axis. Experiment goals and expected results, ad hoc procedures and hardware requirements, are addressed in Refs. [2, 3].

43 PARTICLE ACCELERATORS↗