Search NASA⌕ Search

SEARCH · Search NASA

Results for “information protection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
NASA NTRS2012

Autonomous Information Unit for Fine-Grain Data Access Control and Information Protection in a Net-Centric System

As communication and networking technologies advance, networks will become highly complex and heterogeneous, interconnecting different network domains. There is a need to provide user authentication and data protection in order to further facilitate critical mission operations, especially in the tactical and mission-critical net-centric networking environment. The Autonomous Information Unit (AIU) technology was designed to provide the fine-grain data access and user control in a net-centric system-testing environment to meet these objectives. The AIU is a fundamental capability designed to enable fine-grain data access and user control in the cross-domain networking environments, where an AIU is composed of the mission data, metadata, and policy. An AIU provides a mechanism to establish trust among deployed AIUs based on recombining shared secrets, authentication and verify users with a username, X.509 certificate, enclave information, and classification level. AIU achieves data protection through (1) splitting data into multiple information pieces using the Shamir's secret sharing algorithm, (2) encrypting each individual information piece using military-grade AES-256 encryption, and (3) randomizing the position of the encrypted data based on the unbiased and memory efficient in-place Fisher-Yates shuffle method. Therefore, it becomes virtually impossible for attackers to compromise data since attackers need to obtain all distributed information as well as the encryption key and the random seeds to properly arrange the data. In addition, since policy can be associated with data in the AIU, different user access and data control strategies can be included. The AIU technology can greatly enhance information assurance and security management in the bandwidth-limited and ad hoc net-centric environments. In addition, AIU technology can be applicable to general complex network domains and applications where distributed user authentication and data protection are necessary. AIU achieves fine-grain data access and user control, reducing the security risk significantly, simplifying the complexity of various security operations, and providing the high information assurance across different network domains.

Chow, Edward T.↗
NASA NTRS1985

Space Shuttle security policies and programs

The Space Shuttle vehicle consists of the orbiter, external tank, and two solid rocket boosters. In dealing with security two major protective categories are considered, taking into account resource protection and information protection. A review is provided of four basic programs which have to be satisfied. Aspects of science and technology transfer are discussed. The restrictions for the transfer of science and technology information are covered under various NASA Management Instructions (NMI's). There were two major events which influenced the protection of sensitive and private information on the Space Shuttle program. The first event was a manned space flight accident, while the second was the enactment of a congressional bill to establish the rights of privacy. Attention is also given to national resource protection and national defense classified operations.

Keith, E. L.↗
NASA NTRS2006

Autonomous Information Unit: Why Making Data Smart Can also Make Data Secured?

In this paper, we introduce a new fine-grain distributed information protection mechanism which can self-protect, self-discover, self-organize, and self-manage. In our approach, we decompose data into smaller pieces and provide individualized protection. We also provide a policy control mechanism to allow 'smart' access control and context based re-assembly of the decomposed data. By combining smart policy with individually protected data, we are able to provide better protection of sensitive information and achieve more flexible access during emergency conditions. As a result, this new fine-grain protection mechanism can enable us to achieve better solutions for problems such as distributed information protection and identity theft.

data security↗
DOE OSTI2013

Decision Analysis Methods For the Analysis of Nuclear Terrorism Threats with Imperfect Information

Protection of commercial nuclear fuel cycles against adversary groups who may attempt to steal weapons-usable material is an issue of interest to the U.S. Department of Energy, Office of Nuclear Energy. The wide array of potential nuclear fuel cycle configurations and the security measures that could be deployed to protect them pose a daunting system design problem. In general, there are billions of potential design configurations. Moreover, the design choices are not independent – the effectiveness of one design feature or security measure can affect the desirability of other design choices. To explore this issue, we develop a mixed-integer optimization problem that solves a complex decision tree to allocate security resources across a commercial nuclear fuel cycle configuration. A nominal UREX+ reprocessing facility is used to demonstrate how the model allocates resources across a particular fuel cycle facility and shows how the problem can be scaled up to include other facilities and design features in the fuel cycle. In our model, the defender first chooses a set of safeguards to implement in order to mitigate the risk of a terrorist theft from various unit operations in the reprocessing facility. The attacker observes the defender’s strategy choice and executes an attack to acquire material, including the possibility of declining to attack at all. The model considers the terrorist as an intelligent adversary with a set of attack strategies known to the defender. The strategic choices made by both the defender and attacker affect the probability of a successful attack by the terrorist and in turn affect the distribution of consequences to the defender. We use a decision tree to illustrate the interactions among costs, decisions, correlated uncertainties, and outcomes, and then show how to formulate the problem as a mixed-integer program with an equivalent solution. The novel features of our formulation include the following. First, as discussed above, we use a sequential game-theoretic formulation (a Stackelberg game). This formulation assumes the attacker can observe the defender’s actions before the attack is executed. Many previous game-theoretic studies have assumed attacker and defender act simultaneously without knowledge of the other’s strategy choice. We believe the sequential game formulation is more applicable for knowledgeable insider adversaries, the focus of this study. Second, we build on our previous work that has developed a methodology to reflect the correlation among probability distributions represented as discrete chance nodes in a decision tree. We illustrate how this methodology can be applied to two chance nodes in a decision tree that relate the quality of the materials that might be stolen or diverted by an adversary with the yield of a weapon that might be constructed from that material. In a decision tree, the dependence of the yield on the quality of the material could be modeled with conditional probabilities of the weapon yield given the quality of the materials obtained. For three outcome discretizations, this would require the assessment of nine conditional probabilities from domain experts as part of the model building effort. In contrast, our methodology will allow this same representation of the tree based on the assessment of the correlation between these two chance nodes by the experts, which we believe is a much easier and more reliable assessment task. The advantage of this approach increases as the number of dependent chance nodes grows in a decision tree representation of this problem. Third, we extend this approach to the approximation of the dependence between discrete binary events such as success or failure represented by binary chance nodes in a decision tree or in the special case of a probabilistic risk analysis (PRA) based on an event tree. This extension is a novel application in this domain, and uses Monte Carlo simulation to determine the appropriate conditional probabilities on the binary chance nodes when the number of correlated uncertainties is more than two. Fourth, we show how these decision trees or probability trees can be formulated and solved as equivalent integer programming (IP) problems. The advantages of the IP representation include the opportunity to use the computing power associated with powerful optimization solver algorithms available on high speed computers to solve very large versions of these trees, and the ability to include several such models of different facilities into a much larger IP with connecting constraints that represent budget restrictions, number of available inspection opportunities in a given time window, or other dependencies among these facilities. Policy makers can use the resulting model to inform their decisions about how to assess terrorism risk and to safeguard the commercial nuclear fuel cycle.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2016

Options for Providing Radiation Protection Shelter Quality Information to U.S. Local, State and Federal Government Agencies

This report describes available information on protection that can be provided by buildings from exposure to radioactive contamination in the environment, and options for how this information can be provided to government organizations across the United States. This information is potentially useful for planning how to protect the public in the event of an atmospheric release of radioactivity including, for example, from a Radiological Dispersal Device, an Improvised Nuclear Device detonation, or a Nuclear Power Plant accident. During these incidents, knowledge of the radiation protection provided by buildings is critical to predicting and assessing radiation dose to the population, and the associated health risk. These dose assessments inform emergency plans and decisions including, for example, identifying areas in which people should be sheltered in place, and determining when controlled population evacuations should be made.

61 RADIATION PROTECTION AND DOSIMETRY↗
NASA NTRS2010

IT Challenges for Space Medicine or How do We Protect Medical Information and Still Get Useful Work Done?

Space Medicine provides healthcare services of various types for astronauts throughout their lifetime starting from the time they are selected as astronauts. IT challenges include: protection of private medical information, access from locations both inside and outside NASA, nearly 24x7 access, access during disasters, international partner access, data archiving, off-region backup, secure communication of medical data to people outside the NASA system (e.g. expert consultants), efficient movement of medical record information between locations, search and retrieval of relevant information, and providing all of these services/capabilities within a limited budget. In Space Medicine, we have provided for these in various ways: limit the amount of private medical information stored locally, utilize encryption mechanisms that the international partners can also use, utilize 2-factor authentication, virtualize servers, employ concept-based search, and use of standardized terminologies (SNOMED) and messaging (HL7).

Johnson-Throop, Kathy A.↗
DOE OSTI2018

Ambient monitoring to inform the protection of beneficial uses and achieve water quality goals in Sinclair and Dyes Inlets, Puget Sound, WA

Currently discharge limits enforced under the Clean Water Act are focused on meeting water quality standards at the end of the pipe and environmental performance is measured based on meeting the discharge limits; but meeting discharge limits has very little to do with achieving water quality goals for coastal and estuarine ecosystems. Therefore, an effective monitoring and assessment program is needed to assess continuous process improvement, evaluate the ecological conditions, and provide metrics that can inform effective management of coastal and estuarine water quality. As part of an integrated Environmental Investment (ENVVEST) project for Sinclair and Dyes Inlets (ENVVEST 2006; Johnston et al. 2009) a network of monitoring stations was established to characterize environmental conditions, assess potential impacts, and establish environmental quality trends within the Inlets. Water, sediment, and biota monitoring locations were selected that were co-located near suspected sources (industrial, waste water, and stormwater outfalls; marinas, stream mouths, and other sources) or were representative of ambient marine and nearshore conditions. Water column stations and effluents from industrial outfalls were sampled seasonally for trace metals (Cd, Cr, Cu, Hg, Pb, and Zn) using analytical procedures appropriate for seawater (Strivens, Brandenberger and Johnston, 2018), conventional parameters (salinity, dissolved and total organic carbon, total and suspended solids, dissolved O2, pH, turbidity, NO2+NO3, NH4, N, and P), and toxicity. Effluent and water column toxicity tests included mysid shrimp (Americamysis bahia) 96 hr survival, sand dollar (Dendraster excentricus) or purple sea urchin (Strongylocentrotus purpuratus) 96 hr embryo development, QwikLite – dinoflagellate (Pyrocystis lunula) 24 hr bioluminescence response, mussel larvae (Mytilus sp.) 48 hr larvae survival and development, and kelp (Macrocystis pyrifera) 48 hr growth and germination. Additionally, indigenous mussels (Mytilis spp.) were sampled biennially for contaminant residues of metals, polycyclic aromatic hydrocarbons (PAHs), polychlorinated biphenyls (PCBs), lipid content, and stable isotopes of C and N. The mussel data were compared to benchmarks of ecological effects (Johnston et al. 2007, Applied Biomonitoring 2009), samples obtained from a local seafood market harvested from Penn Cove on Whidbey Island (PKPLPC), and data from the national mussel watch status and trends monitoring program (Kimbrough et al. 2008). Results from 2009-2016 showed that dissolved metals nearly always met water quality standards and that water quality in Navy nearshore areas appeared to improve after best management practices (BMPs) for industrial process improvements (US Navy 2012) were completed in Sept. 2013 (Figure 1). In general, toxicity from exposure to whole effluent samples was not observed and ambient water samples were not toxic to test organisms, except that ambient toxicity was only observed during the presence of algal blooms which showed that toxicity was highly correlated with the abundance of the toxic algae Gymnodinium splendens (Rosen et al. 2009). Overall, mussel tissue residues were below benchmarks at most locations (Figure 2), however there were locations that had elevated levels of PAHs, PCBs, Hg, and Cu. Results from the monitoring provide metrics that are being used to assess progress toward meeting environmental quality goals for the watershed.

ENVVEST, PSEMP↗
NASA NTRS2025

Informing Planetary Protection Policies for the Future Exploration of Ceres: State of Understanding after the Dawn Mission

We review the current state of understanding of Ceres as it relates to planetary protection policy for future landed missions, including for sample return, to the dwarf planet. The Dawn mission found Ceres to be an intriguing target for a mission, with evidence for the presence of regional, possibly extensive liquid at depth, and local expressions of recent and potentially ongoing activity. The Dawn mission also found a high abundance of carbon in the regolith, interpreted as a mix of carbonates and amorphous carbon, as well as locally high concentrations of organic matter. Key findings from this review are as follows: (1) outside of the region of Occator crater, Ceres shows no geological evidence for conduits from the surface to the interior; and (2) considering the biological potential of Ceres’ deep interior, a surface sample return mission should be considered Category V restricted, unless it can be demonstrated that evaporites sourced from Ceres’ deep brine region, and recently exposed in Occator crater, have not been scattered to the rest of Ceres’ surface; in that case, the probability of returning an unsterilized particle to an acceptably low value is to be determined by a future study. Key Words: Ceres—Planetary protection—Brines—Future missions.

Julie Castillo-Rogez↗
DOE OSTI2019

Safeguards Information Assurance by Design

The assurance of Safeguards Information is crucial to meet IAEA obligations. Information can be potentially at risk for alteration when it is generated, stored, transmitted, or manipulated (such as in a calculation). Where, when, and how information is assured can vary depending on where in the information lifecycle it exists. Often, information protection measures are not considered until after a system is architected and built or are only applied to a portion of the information system. This typically limits the effectiveness of information assurance, can increase the cost of assuring the information, and can reduce the trust in the information received. Designing information assurance into the architecture of a system can significantly reduce information vulnerability at an affordable cost while improving the trust of the information. This paper discusses safeguards information assurance by design and architectural approaches from a lifecycle perspective including potential tools that can be utilized to help define information assurance requirements and help validate the effectiveness of these requirements as the system transitions through the lifecycle. The tools discussed include risk management tools, architectural approaches, modeling approaches, and red teaming benefits.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2019

Image encryption and watermarking combined dynamic chaotic hopping pattern with double random phase encoding DRPE

In modern civilization information, security is a crucial problem. Image encryption and watermarking can effectively protect information from unauthorized access. This paper introduces a new vigorous symmetric optical image encryption and watermarking technique. This technique depends on a novel dynamic delay chaotic hopping pattern (DDCHP) combined with double random phase encoding (DRPE). To get a robust watermark image, the plain image is first watermarked with a binary secret message using a new chaotic hopping pattern (CHP) and then encrypted using a DRPE system that is controlled by double random independent keys generated with double DDCHP. In this symmetric cryptosystem, three different chaotic maps are used to enlarge the key space of the proposed cryptosystem against brute-force attack and overcome the linearity and vulnerable of the classical DRPE. The system keys are hypersensitive and their initial parameters are selected carefully. Security scrutiny proves the efficiency of the suggested cryptosystem. Therefore, the obtained simulation results prove that the cryptosystem is robust enough against the known attacks, such as statistical attack (uniform histograms of different encrypted images, correlation coefficients between the plain and the encrypted image is as low as 5.46 × 10{sup −6}), differential attack (99.99% NPCR and 38.6% UACI), brute force attack (large enough key space), and entropy attack. Moreover, the robustness of the watermark (secret message) is proved due to the solidity of CHP. The proposed approach can be used in different implementations like secure military communications, e-finance, e-healthcare, authenticated multimedia broadcasting, etc.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Archival, anonymization and presentation of HTCondor logs with GlideinMonitor

GlideinWMS is a pilot framework to provide uniform and reliable HTCondor clusters using heterogeneous and unreliable resources. The Glideins are pilot jobs that are sent to the selected nodes, test them, set them up as desired by the user jobs, and ultimately start an HTCondor schedd to join an elastic pool. These Glideins collect information that is very useful to evaluate the health and efficiency of the worker nodes and invaluable to troubleshoot when something goes wrong. This data, including local stats, the results of all the tests, and the HTCondor log files, is packed and sent to the GlideinWMS Factory. To access this information, developers and troubleshooters must exchange emails with Factory operators and dig manually into files. Furthermore, these files contain also information like email and IP addresses, and user IDs, that we want to protect and limit access to. GlideinMonitor is a Web application to make these logs more accessible and useful: it organizes the logs in an efficient compressed archive; it allows to search, unpack, and inspect them, all in a convenient and secure Web interface; via plugins like the log anonymizer, it can redact protected information preserving the parts useful for troubleshooting.

Mambelli, Marco↗
DOE OSTI2020

Uncertainty Analysis of Consequence Management Data Products

An interlaboratory effort has developed a probabilistic framework to characterize uncertainty in data products that are developed by the US Department of Energy Consequence Management Program in support of the Federal Radiological Monitoring and Assessment Center. The purpose of this paper is to provide an overview of the probability distributions of input variables and the statistical methods used to propagate and quantify the overall uncertainty of the derived response levels that are used as contours on data products due to the uncertainty in input parameters. Uncertainty analysis results are also presented for several study scenarios. This paper includes an example data product to illustrate the potential real-world implications of incorporating uncertainty analysis results into data products that inform protective action decisions. Data product contours that indicate areas where public protection actions may be warranted can be customized to an acceptable level of uncertainty. Finally, the investigators seek feedback from decision makers and the radiological emergency response community to determine how uncertainty information can be used to support the protective action decision-making process and how it can be presented on data products.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2021

Cyber–Physical System Security of Distribution Systems

The Information and Communications Technology (ICT) for control and monitoring of power systems is a layer on top of the physical power system infrastructure. The cyber system and physical power system components form a tightly coupled Cyber–Physical System (CPS). Sources of vulnerabilities arise from the computing and communication systems of the cyber–power grid. Cyber intrusions targeting the power grid are serious threats to the reliability of electricity supply that is critical to society and the economy. In a typical Information Technology environment, numerous attack scenarios have shown how unauthorized users can access and manipulate protected information from a network domain. The need for cyber security has led to industry standards that power grids must meet to ensure that the monitoring, operation, and control functions are not disrupted by cyber intrusions. Cyber security technologies such as encryption and authentication have been deployed on the CPS. Intrusion or anomaly detection and mitigation tools developed for power grids are emerging. Furthermore, this survey paper provides the basic concepts of cyber vulnerabilities of distribution systems and CPS security. The important ICT subjects for distribution systems covered in this paper include Supervisory Control And Data Acquisition, Distributed Energy Resources, including renewable energy and smart meters.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2015

How to implement security controls for an information security program at CBRN facilities

This document was prepared by PNNL within the framework of Project 19 of the European Union Chemical Biological Radiological and Nuclear Risk Mitigation Centres of Excellence Initiative entitled, ''Development of procedures and guidelines to create and improve secure information management systems and data exchange mechanisms for CBRN materials under regulatory control.'' It provides management and workers at CBRN facilities, parent organization managers responsible for those facilities, and regulatory agencies (governmental and nongovernmental) with guidance on the best practices for protecting information security. The security mitigation approaches presented in this document were chosen because they present generally accepted guidance in an easy-to-understand manner, making it easier for facility personnel to grasp key concepts and envision how security controls could be implemented by the facility. This guidance is presented from a risk management perspective.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
NASA NTRS1972

Considerations for an earth physics information-management service.

In a preliminary investigation into the feasibility of establishing a data center for earth physics, 12 disciplines were considered for inclusion. Estimation of the size of the data base for each indicated a need for storage of approximately 10 to the 10th power characters. The computer-based system deemed most worthy of further investigation was the interactive concept with remote-terminal access. Users are divided into three classes according to how they would access information: with no terminal, with an interactive terminal, and with a multidevice terminal. All these users can be served by the same center without any particular difficulty, but the real benefactor is the user with an interactive terminal, because he can compile, debug, and run programs in one continuous session. Final points stressed are multiprogramming for dynamic resource sharing, hardware modularity for future expansion, and information protection for such a large community of users. It is concluded that a survey should be conducted to gather more information from the potential users of such a system, and that a pilot project should be developed at some location where both earth-physics research and data-processing capabilities already exist.

Martin, R. W.↗
NASA NTRS2012

NASA Tech Briefs, April 2012

Topics include: Computational Ghost Imaging for Remote Sensing; Digital Architecture for a Trace Gas Sensor Platform; Dispersed Fringe Sensing Analysis - DFSA; Indium Tin Oxide Resistor-Based Nitric Oxide Microsensors; Gas Composition Sensing Using Carbon Nanotube Arrays; Sensor for Boundary Shear Stress in Fluid Flow; Model-Based Method for Sensor Validation; Qualification of Engineering Camera for Long-Duration Deep Space Missions; Remotely Powered Reconfigurable Receiver for Extreme Environment Sensing Platforms; Bump Bonding Using Metal-Coated Carbon Nanotubes; In Situ Mosaic Brightness Correction; Simplex GPS and InSAR Inversion Software; Virtual Machine Language 2.1; Multi-Scale Three-Dimensional Variational Data Assimilation System for Coastal Ocean Prediction; Pandora Operation and Analysis Software; Fabrication of a Cryogenic Bias Filter for Ultrasensitive Focal Plane; Processing of Nanosensors Using a Sacrificial Template Approach; High-Temperature Shape Memory Polymers; Modular Flooring System; Non-Toxic, Low-Freezing, Drop-In Replacement Heat Transfer Fluids; Materials That Enhance Efficiency and Radiation Resistance of Solar Cells; Low-Cost, Rugged High-Vacuum System; Static Gas-Charging Plug; Floating Oil-Spill Containment Device; Stemless Ball Valve; Improving Balance Function Using Low Levels of Electrical Stimulation of the Balance Organs; Oxygen-Methane Thruster; Lunar Navigation Determination System - LaNDS; Launch Method for Kites in Low-Wind or No-Wind Conditions; Supercritical CO2 Cleaning System for Planetary Protection and Contamination Control Applications; Design and Performance of a Wideband Radio Telescope; Finite Element Models for Electron Beam Freeform Fabrication Process Autonomous Information Unit for Fine-Grain Data Access Control and Information Protection in a Net-Centric System; Vehicle Detection for RCTA/ANS (Autonomous Navigation System); Image Mapping and Visual Attention on the Sensory Ego-Sphere; HyDE Framework for Stochastic and Hybrid Model-Based Diagnosis; and IMAGESEER - IMAGEs for Education and Research.

Source record↗