Search NASA⌕ Search

SEARCH · Search NASA

Results for “penetration testing”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
NASA NTRS2014

Scalable Asset Discovery, Vulnerability Scanning, and Penetration Testing for Remote Sites and Wireless Spectrums Utilizing an Embedded Linux Plug - PwniPlug and the Raspberry Pi B+ as a Sample Pen Test

All devices attached to the NASA KSC network are subject to security vulnerability scanning and/or penetration testing. In today's changing environment, vulnerable and/or unprotected systems can easily be overlooked. Systems that are not properly managed can become a potential threat to the operational integrity of our systems and networks. This includes all NASA (internal and external) information systems within NASA KSC Internet Protocol (IP) address space, and NASA KSC facilities. The Office of the Chief Information Officer (OCIO) recommends that all NASA Centers and information systems be subject to penetration testing on a regular interval in accordance with the guidelines identified by the National Institute of Standards and Technology (NIST). (ITS-HBK-2810.04-02A) Protecting information and equipment at NASA is an area of increasing concern. In addition to the CPU's on the network; Supervisory, Control and Data Acquisition (SCADA) systems are especially vulnerable because these systems have lacked standards, use embedded controllers with little computational power and informal software, are connected to physical processes, have few operators, and are increasingly also being connected to corporate networks. The scope of work is comprised of several individual components which together build upon previous work by Drew Branch, NASA KSC Intern. The Pwn Plug is the selected COTS (Commercial-Off-The-Shelf) device chosen to test simplification of mandatory IT Security tasks. The device will be utilized to provide services to NASA KSC and enable an assessment of infrastructure soundness and regulatory compliance in an efficient, economical, and business responsive manner. The Pwn Plug is designed as a pen testing appliance which provides a hardware platform that can support commercial penetration testing efforts at significantly reduced costs. The expected outcomes are: 1) External Penetration Testing, 2) Social Engineering, 3) Procedural Documentation, 4) Recommended Remediation Action Plan, 5) System Retest & Remediation Attestation and 6) Final Reports, out briefing and Presentation. Due to physical and material constraints beyond intern and mentor control, the project was redefined as a working pen-test scenario. Limitations of lab availability and tools dictated an academic exercise. This report was developed within the scenario guidelines suggested by the project mentor. The guidelines were to be creative in developing a Pen Test program for a client.

Penetration Testing↗
NASA NTRS2013

Network Penetration Testing and Research

This paper will focus the on research and testing done on penetrating a network for security purposes. This research will provide the IT security office new methods of attacks across and against a company's network as well as introduce them to new platforms and software that can be used to better assist with protecting against such attacks. Throughout this paper testing and research has been done on two different Linux based operating systems, for attacking and compromising a Windows based host computer. Backtrack 5 and BlackBuntu (Linux based penetration testing operating systems) are two different "attacker'' computers that will attempt to plant viruses and or NASA USRP - Internship Final Report exploits on a host Windows 7 operating system, as well as try to retrieve information from the host. On each Linux OS (Backtrack 5 and BlackBuntu) there is penetration testing software which provides the necessary tools to create exploits that can compromise a windows system as well as other operating systems. This paper will focus on two main methods of deploying exploits 1 onto a host computer in order to retrieve information from a compromised system. One method of deployment for an exploit that was tested is known as a "social engineering" exploit. This type of method requires interaction from unsuspecting user. With this user interaction, a deployed exploit may allow a malicious user to gain access to the unsuspecting user's computer as well as the network that such computer is connected to. Due to more advance security setting and antivirus protection and detection, this method is easily identified and defended against. The second method of exploit deployment is the method mainly focused upon within this paper. This method required extensive research on the best way to compromise a security enabled protected network. Once a network has been compromised, then any and all devices connected to such network has the potential to be compromised as well. With a compromised network, computers and devices can be penetrated through deployed exploits. This paper will illustrate the research done to test ability to penetrate a network without user interaction, in order to retrieve personal information from a targeted host.

Murphy, Brandon F.↗
DOE OSTI2023

Cone Penetration Tests at the PacWave South Test Site

This ZIP archive contains cone penetration test data from the PacWave South Test Site. The data were collected in September 2023 aboard the ship Seacor Lee operating out of the Port of Newport, OR. The tests were performed by ConeTec using an AP van den Berg ROSON-100. The cone itself was a standard u2-type, 10 cm^2. A total of 22 soundings were performed.

16 TIDAL AND WAVE POWER↗
NASA NTRS2019

Liquid Penetrant Testing at Goddard Space Flight Center

An overview of liquid penetrant testing at Goddard Space Flight Center and an introduction of the author to the NASA Engineering and Safety Center Nondestructive Evaluation Technical Discipline Team is provided, including author biography, an overview of NASA spaceflight customers and their applications, a high-level description of research and development initiatives, two case-studies of flight project applications, and an introduction to the rest of the Goddard Space Flight Center Nondestructive Evaluation team and their respective roles in the organization.

Smith, Nathan A.↗
NASA NTRS1967

Liquid penetrant testing

Programmed instruction training textbook on liquid penetrant nondestructive testing

Source record↗
NASA NTRS2001

Low Velocity Earth-Penetration Test and Analysis

Modeling and simulation of structural impacts into soil continue to challenge analysts to develop accurate material models and detailed analytical simulations to predict the soil penetration event. This paper discusses finite element modeling of a series of penetrometer drop tests into soft clay. Parametric studies are performed with penetrometers of varying diameters, masses, and impact speeds to a maximum of 45 m/s. Parameters influencing the simulation such as the contact penalty factor and the material model representing the soil are also studied. An empirical relationship between key parameters is developed and is shown to correlate experimental and analytical results quite well. The results provide preliminary design guidelines for Earth impact that may be useful for future space exploration sample return missions.

Fasanella, Edwin L.↗
NASA NTRS1981

Operational evaluation of thunderstorm penetration test flights during project Storm Hazards '80

The National Aeronautics and Space Administration is conducting a research project called Storm Hazards '80 in order to study the prediction, detectability and avoidance of the hazards of severe storms for aircraft operations. The project, using a highly instrumented NASA F-106B airplane to penetrate thunderstorms, gathered and correlated data from both airborne and ground based instrumentation. The objectives of this project are to determine the effects of lightning on the design and operation of aircraft composite structures and digital electronic systems. The data will be used to determine the correlation of lightning hazards with other severe storm hazards, such as heavy precipitation, hail, turbulence and wind-shear, in order to develop an initial data base for use in design and avoidance. The NASA F-106B was equipped with a weather radar, stormscope, lightning measurement instrumentation and air sampling equipment. This paper will focus on the operational aspects of thunderstorm penetrations and the pilot techniques used to avoid the extremely hazardous portions of the storm such as the tornadoes and hail. It will deal with the effects of the storm elements on the aircraft hardware, avionics and the crew.

Keyser, G. L., Jr.↗
NASA NTRS1969

Instruction manuals for liquid penetrant nondestructive testing

Manuals provide quality control and test personnel with basic information on liquid penetrant testing. Topics covered include scope of application, equipment and materials used, test procedures, safety precautions, quality control, and comparison of liquid penetrant testing with other nondestructive testing processes.

Source record↗
NASA NTRS1979

Preliminary results of penetrator field test program, Tonopah, Nevada, 16-28 April 1979

Subscale (0.63 scale) penetrators impacted various sizes of volcanic rocks resting on and within compacted plays sediments. All penetrators were identical in size, shape, weight, and impact velocity. Although minor variations in impact angle were documented, the final orientation of the buried penetrators was primarily a consequence of the size, shape, and depth of the rocks encountered during impact. In situ measurements of impacted penetrators revealed that surface and buried layers of rocks having diameters up to 3 times the penetrator diameter caused only small ( 10 deg) angles of deflection. Only large single rocks greater than 10 times the penetrator diameter caused deflections appreciably greater than 10 deg. The large deflection angles followed by the penetrator were strongly influenced by fracture planes that developed in the rock as it broke apart. No catastrophic failure of the penetrator occurred during these tests. A cross section of the path of each penetrator through the ground is shown together with details on orientation before, during, and after the tests. Comparisons are made with results of previous subscale penetrator tests, and conclusions are drawn with respect to full-scale Mars penetrator performance.

Blanchard, M. B.↗
DOE OSTI2022

Effects of Cone Penetrometer Testing on Shallow Hydrogeology at a Contaminated Site

Penetration testing is a popular and instantaneous technique for subsurface mapping, contaminant tracking, and the determination of soil characteristics. While the small footprint and reproducibility of cone penetrometer testing makes it an ideal method for in-situ subsurface investigations at contaminated sites, the effects to local shallow groundwater wells and measurable influence on monitoring networks common at contaminated sites is unknown. Physical and geochemical parameters associated with cone penetrometer testing were measured from a transect of shallow groundwater monitoring wells adjacent to penetrometer testing. For wells screened above the depth of cone refusal, the physical advancement and retraction of the cone had a significant effect ( p < 0.01) on water level for several pushes within 10 meters of a monitoring well, and a measured increase in specific conductivity. No effect on geochemistry or water level was observed in continuous monitoring data from wells screened below the depth of cone refusal, but variability in specific conductivity from these wells during penetration testing was only a fraction of the natural variation measured during precipitation events. Continuous measurements of specific conductivity and water level demonstrated that the effects of penetration testing have limited spatial and temporal distributions with a null effect post-testing.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS1992

The GBU-28 - Concept to combat

The story of the development and use of the GBU-28, the weapon used to destroy the main Iraqi command and control bunker during Operation Desert Storm, is told. The construction of the bombs, flight testing, and penetration testing are described. Emphasis is given to the choice between the F-111 and the F-15E as delivery system.

Polansky, Mark↗
NASA NTRSDate not supplied

Comparative Analysis of Thermal Runaway Heat Output as a Function of Trigger Mechanism and Cell Format

High demand for energy storage systems across many fields drives the need for safe and reliable Li-ion batteries. In order to assess the risk of using such batteries in various applications, many types of abuse tests have been developed to push battery cells to their limits and learn how they fail. In this work, internal short circuit (ISC) tests, nail penetration tests, and thermal tests were used to trigger thermal runaway in D-cell, 18650, and 21700 Li-ion cells. High-speed radiography was used to gain insight to the propagation of thermal runaway throughout the cell, while calorimetric and thermal data were recorded in real time. Post-test disassembly of the calorimeter allowed for any mass ejected from the cell to be analyzed and the distribution of mass through the calorimeter to be determined. The impact of cell geometry and trigger mechanism on post-test mass distribution, thermal runaway propagation and internal cell temperature are discussed.

Lithium-ion battery; thermal runaway; calorimetry;↗