Search NASA⌕ Search

SEARCH · Search NASA

Results for “information security management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2015

Information security management system planning for CBRN facilities

The focus of this document is to provide guidance for the development of information security management system planning documents at chemical, biological, radiological, or nuclear (CBRN) facilities. It describes a risk-based approach for planning information security programs based on the sensitivity of the data developed, processed, communicated, and stored on facility information systems.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2017

Implementing an Information Security Program

The threats to information security have dramatically increased with the proliferation of information systems and the internet. Chemical, biological, radiological, nuclear, and explosives (CBRNe) facilities need to address these threats in order to protect themselves from the loss of intellectual property, theft of valuable or hazardous materials, and sabotage. Project 19 of the European Union CBRN Risk Mitigation Centres of Excellence Initiative is designed to help CBRN security managers, information technology/cybersecurity managers, and other decision-makers deal with these threats through the application of cost-effective information security programs. Project 19 has developed three guidance documents that are publically available to cover information security best practices, planning for an information security management system, and implementing security controls for information security.

blended attack↗
DOE OSTI2015

How to implement security controls for an information security program at CBRN facilities

This document was prepared by PNNL within the framework of Project 19 of the European Union Chemical Biological Radiological and Nuclear Risk Mitigation Centres of Excellence Initiative entitled, ''Development of procedures and guidelines to create and improve secure information management systems and data exchange mechanisms for CBRN materials under regulatory control.'' It provides management and workers at CBRN facilities, parent organization managers responsible for those facilities, and regulatory agencies (governmental and nongovernmental) with guidance on the best practices for protecting information security. The security mitigation approaches presented in this document were chosen because they present generally accepted guidance in an easy-to-understand manner, making it easier for facility personnel to grasp key concepts and envision how security controls could be implemented by the facility. This guidance is presented from a risk management perspective.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2018

Energy Efficiency and Infrastructure Upgrades on Nuclear Clean-up Sites: The Hanford Experience - 18641

The Hanford site, located in southeastern Washington, produced much of our nation's weapons-grade plutonium for the Defense nuclear weapons program. This production lasted the better part of four decades with production ending in 1987. Since 1987, the focus of the Hanford site has turned to clean-up activities. Mission Support Alliance (MSA) is the integrator of the multi-contractor effort to clean up the Hanford site. MSA collaborates with the U.S. Department of Energy (DOE) and all Hanford site contractors in finding and implementing new, cost-saving, safe and practical solutions to cleanup challenges with a continual focus on innovative processes and technologies that reduce costs, energy use and bring safety improvements to the site. Support Services include environmental integration and land management; fleet and road maintenance; water/electric and utilities; cyber security and information management as well as the preservation of the site's cultural artifacts. This paper describes the process, challenges, and focus on infrastructure upgrade and energy efficiency projects in the context of a multi-contractor nuclear clean-up site. Project development and new technology deployment at Hanford has long been plagued with economic challenges. For example, despite extensive auditing, analysis, and project development, most of the energy-related projects on the Hanford site have gone unfunded due to the low cost of electricity, the relatively high cost of labor, and costs associated with detailed safety and cultural reviews. - The Hanford site is a direct-service customer of the Bonneville Power Administration (BPA) and has a marginal electricity rate of $0.033/kWh. - Labor costs on the Hanford site track high because of the requirements associated with the safety and security necessary to operate a legacy nuclear weapons complex. - In partnership with three federally recognized and other affected Native American tribes (Yakama Nation, Confederated Tribes of the Umatilla Indian Reservation, the Nez Perce Tribe, and Wanapum People), most activities on the Hanford site are afforded in-depth cultural reviews. To work within these constraints, the MSA Energy Management team has embarked on a three-pronged approach to energy project development: Program Visibility: The MSA Energy Management team has promoted both project opportunities and requirements across the Hanford site. This information comes in the form of site-wide newsletters, group meetings, e-mails, success stories, and recognition of staff. Single-point Analysis: To by-pass the inevitable duplications of effort, learning curve issues, and to improve project consistency/delivery, the MSA Energy Management team serves as the single resource to the site for energy project analysis. This resource includes initial assessment, engineering analysis, efficiency calculation and project recommendations. Contractor/utility Interface: In addition to the infrastructure under its own purview, MSA provides all support services for the contractor/utility interface. These activities include formulation and submission of incentive-based efficiency projects, project tracking, and incentive awards. All incentive awards are forwarded to the relevant contractor and then highlighted in the visibility campaign. Successful energy efficiency projects at Hanford have included high efficiency heating, ventilation, air conditioning (HVAC) systems, interior and exterior lighting/lighting control systems, pump and motor systems, and the right-sizing of transformers and area-wide electrical distribution systems. Prior to the initiation of this program and structure (roughly 3 years ago) the average annual energy efficiency incentive applied for and received was under $10,000, with an annual energy savings of approximately 36,000 kilowatt hours (kWh). In fiscal year 2017, the annual incentive received was over $419,000, with identified energy savings of over 1.3 million kWh. Details and case studies of the major project accomplishments are included. The success of this program can be traced to an understanding of the constraints, the development of a program to address these constraints, and good communication/coordination across DOE and the multiple contractors serving the Hanford site. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2019

Testbed-based Evaluation of SIEM Tool for Cyber Kill Chain Model in Power Grid SCADA System

Development of a smarter electric grid necessitates addressing the associated cyber security challenges. Since the interdependence between the legacy grid infrastructure and advanced information technology is growing rapidly, there are numerous ways advanced, motivated, and persistent attackers can affect the SCADA based critical infrastructure. Hence, developing a security information and event management (SIEM) is crucial for securing the SCADA power system. This paper presents the application of Security Onion (SecOn) to develop the network security monitoring (NSM) and intrusion detection system (IDS) in the context of SCADA cyber physical security. Initially, we have applied a cyber kill-chain model to demonstrate the different stages of attacks and associated mechanisms. Later, the rule- based IDS (RIDS) is developed using Snort IDS, and tested in the cyber-physical SCADA environment. Furthermore, we have evaluated its performance in terms of accuracy and detection latency. Our experimental results reveal that the SecOn tool is efficient in monitoring and detecting attacks within an acceptable time frame with a high accuracy rate.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Mapping SIEM Vulnerabilities in STIG

SIEM (Security Information and Event Management) tools monitor network traffic and allow users to quickly detect problems in their networks. Because of the valuable information processed by SIEM tools, it is important to understand their vulnerabilities. STIG (Structured Threat Intelligence Graph) is an application created at INL used to visualize data related to cyber threats. Using STIG can allow users to understand vulnerabilities related to their SIEM products and how to protect their systems.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2024

Radio Frequency Spectrum Audit to Inventory Private Cellular Base Station Infrastructure

The ever-changing cellular communication landscape makes it difficult to identify, map, and localize cellular base stations. Localizing cellular base stations provides various advantages, including information security, cybersecurity, spectrum management, and interference detection. For example, the MITRE ATT&CK® (Adversarial Tactics, Techniques, and Common Knowledge architecture) [1] and Common Attack Pattern Enumeration and Classification [2] emphasize the importance of being able to minimize the cyber security threat presented by unregulated private cellular base stations (PCBS). The majority of published research looks at the malicious use of PCBSs and focuses on using data retrieved from user equipment (UE), data obtained from an application on the UE, or data shared between the UE and a mobile network to locate it. This innovative strategy, however, focuses on the passively discovered uniqueness of radio frequency (RF) transmissions from commercial cellular infrastructure received in a designated monitoring position (DMP).

42 ENGINEERING↗
DOE OSTI2025

Bayesian Attack Model (BAM) User Story

This document presents a user story for the Bayesian Attack Model (BAM) tool designed to aggregate and analyze cyber-attack observables for operational technology (OT) systems. BAM aims to empower cybersecurity analysts by providing a streamlined interface for collecting observable data from various sources, enabling real-time analysis of potential adversary activity. By enhancing the response capabilities of security teams, BAM facilitates risk-informed decision-making and improves organizational security posture. This user story outlines the key functionalities, user interactions, and requirements necessary to successfully integrate BAM with other security information and event management (SIEM) technology and cybersecurity operations centers (CSOCs).

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

The EGS Data Collaboration Platform: Enabling Scientific Discovery

Collaboration in the digital age has been stifled in recent years. Reasonable responses to legitimate security concerns have created a virtual landscape of silos and fortified castles incapable of sharing information efficiently. This trend is unfortunately opposed to the geothermal scientific community's migration toward larger, more collaborative projects. To facilitate efficient sharing of information between team members from multiple national labs, universities, and private organizations, the 'EGS Collab' team has developed a universally accessible, secure data collaboration platform and has fully integrated it with the U.S. Department of Energy's (DOE) Geothermal Data Repository (GDR) and the National Geothermal Data System (NGDS). This paper will explore some of the challenges of collaboration in the modern digital age, highlight strategies for active data management, and discuss the integration of the EGS Collab data management platform with the GDR to enable scientific discovery through the timely dissemination of information.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Automation of Vulnerability and Patch Management: Information Extraction, Association, and Optimization

Vulnerability and patch management is an integral part of a robust cybersecurity program, yet it grows increasingly complex due to the sheer amount of data that must be analyzed. Particularly in Operational Technology (OT) environments, analysis must be done manually because of the lack of automated solutions. Additionally, there are many steps in this process, from the initial discovery of the vulnerability to the implementation of its remediation, and each step in the process requires different data in order to be performed effectively. In this work, we provide approaches and strategies to assist operators in industrial or OT environments throughout the vulnerability management cycle. Security advisories provide key information about mitigation strategies, or actions that can be taken when a patch is unavailable or cannot be installed. Details of these strategies are not shared in public vulnerability databases and must be found manually. We approach this problem by designing a solution to automatically identify that information within vendor security advisories and retrieve it for operator use. We start with an approach that requires domain-specific knowledge of certain frequently-seen reference websites. Next, an approach that can work on an arbitrary website but relies on certain keywords. Finally, an approach that uses Natural Language Processing (NLP) methods and does not require specific knowledge or keywords. Each of these approaches is more general than its predecessor; we demonstrate high accuracy for all approaches Advisories also often contain details of affected products in non-standard or natural language formats. While this information can be easily understood when read by an operator, the non-standard format acts as a barrier to effective automation. We provide an approach for the first step in this process: identifying vendors in security advisories and mapping them to a standard framework for representing digital assets and software products. We evaluate five established string similarity algorithms, plus one of our own design that combines string similarity and information theory, on the task of mapping vendors to their corresponding entries in the Common Platform Enumeration (CPE) repository. Our results show that our proposed metric outperforms all others. Due to the constraints on time, finances, and personnel for organizations, Large Language Models (LLMs) may seem like attractive opportunities for security operators to speed up information gathering; however, it is still not clear whether LLMs can handle vulnerability management tasks well. To answer this question, we perform an empirical study of LLMs’ ability to provide consistent, accurate information about vulnerabilities in order to guide organizations in their adoption of LLMs. We observe poor performance for all models tested, suggesting that these models are not well-suited to the consistent retrieval of accurate vulnerability information. Finally, once vulnerabilities have been identified and any additional information has been obtained, operators must decide which remediation actions to implement based on their available resources. This already-complex problem becomes even more so when we consider that a vulnerability may have multiple avenues for remediation. We formulate this scenario as two knapsack problems and provide solutions, which we then compare against several existing strategies for vulnerability prioritization seen in real operational environments.

McClanahan, Kylie↗
DOE OSTI2025

Obstacles to Practical Digital Supply Chain Risk Management in the Energy Sector

Cyber supply chain risk management (C-SCRM) programs must consider operations that depend on the lifecycles of digital components such as hardware, firmware, software, and services. We integrate academic literature, historical incidents, and existing standards to identify obstacles faced by C-SCRM programs.

Business Process Management & Integration↗
DOE OSTI2019

Building a Single Sign-On System for the Department of Homeland Security's Infrastructure Protection Gateway

The IP Gateway is an interface used by the Department of Homeland Security to collect and manage infrastructure information about communities across the nation. DHS currently depends on a third-party to manage the login system of the IP Gateway; however, in order to provide more consistent service to IP Gateway users, they contracted with INL to develop a new single sign-on system.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2025

Federal Facility Agreement and Consent Order Nevada National Security Site Use Restriction Management Plan

This Use Restriction Management Plan (URMP) provides the information needed to create, modify, and manage use restrictions (URs) for sites on the Nevada National Security Site (NNSS), and sites accessed through the NNSS main gate, that were closed using the corrective action alternative (CAA) of closure in place under the Federal Facility Agreement and Consent Order (FFACO) (1996, as amended).

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2019

Emergency Management Situation Report [Guidance]

The 1 page brief provides information about security levels, contacting friends and family after an emergency, monthly messages, situational awareness links, and emergency management designated staff.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2022

The Distributed Energy Resource Risk Manager

Organizations need a comprehensive approach to managing security and privacy risks, especially for energy resources that are becoming increasingly distributed. A tool by the National Renewable Energy Laboratory (NREL) makes it possible to manage these risks and maintain the highest standards of cybersecurity. To simplify risk management for facilities and distributed energy resources, NREL has created the Distributed Energy Resource Risk Manager, an automated, user-friendly tool that helps navigate and implement one of the most widely trusted frameworks for information security, the National Institute of Standards and Technology Risk Management Framework.

compliance↗