Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “THREAT”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

Towards Reducing the Data Exfiltration Surface for the Insider Threat

Unauthorized data exfiltrations from both insiders and outsiders are costly and damaging. Network communication resources can be used for transporting data illicitly out of the enterprise or cloud. Combined with built-in malware copying utilities, we define this as comprising the Data Exfiltration Surface (DXS). For securing valuable data, it is desirable to reduce the DXS and maintain controls on the egress points. Our approach is to host the data in a protected enclave that includes novel software Data Diode (SDD) installed on a secured, border gateway. The SDD allows copying data into the enclave systems but denies data from being copied out. Simultaneously, it permits remote access with remote desktop and console applications. Our tests demonstrate that we are able to effectively reduce the DXS and we are able to protect data from being exfiltrated through the use of the SDD.

Schlicher, Bob G↗

A Graph Analytic Metric for Mitigating Advanced Persistent Threat

This paper introduces a novel graph analytic metric that can be used to measure the potential vulnerability of a cyber network to specific types of attacks that use lateral movement and privilege escalation such as the well known Pass The Hash, (PTH). The metric is computed from an oriented subgraph of the underlying cyber network induced by selecting only those edges for which a given property holds between the two vertices of the edge. The metric with respect to a select node on the subgraph is defined as the likelihood that the select node is reachable from another arbitrary node in the graph. This metric can be calculated dynamically from the authorization and auditing layers during the network security authorization phase and will potentially enable predictive deterrence against attacks such as PTH.

cybersecurity↗

PUF-Based Two-Factor Authentication Protocol for Securing the Power Grid Against Insider Threat

Recent advances in smart grid technologies have enabled additional distributed control paradigms that allow more efficient and reliable operation. However, this creates new security concerns for the grid, such as attackers using spoofed grid control devices to generate false measurements. This paper introduces a two-factor authentication protocol leveraging standard public-key cryptography as one authentication factor and a hardware-based fingerprint, known as a Physical Unclonable Function, as a second authentication factor. This protocol incurs a small overhead and prevents cyber-attacks even when an adversary is able to compromise the cryptographic keys stored in the non-volatile memory of an intelligent control device.

42 ENGINEERING↗

Forced Power Systems Oscillations Due to Cyberattacks: Threats, Detection and Partial Mitigation

Forced oscillations in power systems can be caused by misconfigured controllers at generator stations. They can also be caused by cyberattacks against the exciters or governors. This paper explores the effects of forced oscillations from cyberattacks on generator excitation and governor systems and the effectiveness of a novel control system for a static var compensator in mitigating those oscillations to enhance transmission system resilience. A brief overview of oscillations, especially forced oscillations, within power systems is presented, along with an overview of cyberattacks on power systems. This paper also examines and implements FACTS devices to partially mitigate the forced oscillations created by cyberattacks by reducing the magnitude of the oscillations caused by the attack. The proposed approach is more effective against attacks targeting exciters.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Combining Radiography and Passive Measurements for Radiological Threat Localization in Cargo

Detecting shielded special nuclear material (SNM) in a cargo container is a difficult problem, since shielding reduces the amount of radiation escaping the container. Radiography provides information that is complementary to that provided by passive gamma-ray detection systems: while not directly sensitive to radiological materials, radiography can reveal highly shielded regions that may mask a passive radiological signal. Combining these measurements has the potential to improve SNM detection, either through improved sensitivity or by providing a solution to the inverse problem to estimate source properties (strength and location). We present a data-fusion method that uses a radiograph to provide an estimate of the radiation-transport environment for gamma rays from potential sources. This approach makes quantitative use of radiographic images without relying on image interpretation, and results in a probabilistic description of likely source locations and strengths. We present results for this method for a modeled test case of a cargo container passing through a plastic-scintillator-based radiation portal monitor and a transmission-radiography system. We find that a radiograph-based inversion scheme allows for localization of a low-noise source placed randomly within the test container to within 40 cm, compared to 70 cm for triangulation alone, while strength estimation accuracy is improved by a factor of six. Improvements are seen in regions of both high and low shielding, but are most pronounced in highly shielded regions. The approach proposed here combines transmission and emission data in a manner that has not been explored in the cargo-screening literature, advancing the ability to accurately describe a hidden source based on currently-available instrumentation.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Risk reporting in the Chinese news media in response to radiation threat from the Fukushima nuclear reactor crisis

On March 11, 2011, the northeastern coast of Japan was struck by 9.0-magnitude earthquake that triggered a devastating tsunami. Aside from the huge toll in people's lives and severe damages to property, the tremor sent the Fukushima Daiichi Nuclear Power Plant on a tailspin, causing hydrogen explosions in three reactors, and sending radioactive materials into the air and bodies of water. Declared the largest nuclear disaster since Chernobyl, the crisis threatened neighboring countries, including China (International Business Times, 2011). On March 28, low levels of iodine-131, cesium-137 and strontium, believed to have drifted from Japan, were detected in the air over Heilongjiang province in the northeast part of China and in seawater samples collected in the eastern coastal areas (Qianjiang Eve News, 2011). Because these chemicals can enter the food chain and adversely affect human health (Ifeng.com, 2011), people became understandably anxious and the government had to avert panic. This study asks: How did the Chinese media report the risks attendant to this event? A content analysis of 45 straight news reports published by the Chinese press from March 16, 2011 to April 25, 2011 was conducted. The analysis focused on how the media explained the risk, portrayed potential harm, reported on government actions to safeguard public health, and provided suggestions to reduce public fear. The sources of information cited in the reports were also identified. The articles examined were collected from People.com, a comprehensive online archive of news reports, using 'Fukushima' and 'nuclear radiation' as search terms. The results indicated journalistic practices that left much to be desired in terms of risk reporting. First, the articles explained little about the technical aspects of the radiation leaks and failed to give audiences a general indication of levels of risk. Second, the media over-emphasized the government's position that the environment was safe despite the more rampant word-of-mouth reports to the contrary, a slant that may have done nothing to allay public fear. Third, there was a dearth of information about what the government intends to do to alleviate the situation and suggestions about what people can do to protect themselves. The themes of news reports may be attributed to experts from research institutions and government officials who were the most frequently cited sources of facts, analyses, interpretations, and opinions. Scientists and nuclear experts were cited the most in the news reports. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗