Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “network security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21

Addressing the Tension Between Strong Perimeter Control an Usability

This paper describes a strong perimeter control system for a general purpose processing system, with the perimeter control system taking significant steps to address usability issues, thus mitigating the tension between strong perimeter protection and usability. A secure front end enforces two-factor authentication for all interactive access to an enclave that contains a large supercomputer and various associated systems, with each requiring their own authentication. Usability is addressed through a design in which the user has to perform two-factor authentication at the secure front end in order to gain access to the enclave, while an agent transparently performs public key authentication as needed to authenticate to specific systems within the enclave. The paper then describes a proxy system that allows users to transfer files into the enclave under script control, when the user is not present to perform two-factor authentication. This uses a pre-authorization approach based on public key technology, which is still strongly tied to both two-factor authentication and strict control over where files can be transferred on the target system. Finally the paper describes an approach to support network applications and systems such as grids or parallel file transfer protocols that require the use of many ports through the perimeter. The paper describes a least privilege approach that dynamically opens ports on a host-specific, if-authorized, as-needed, just-in-time basis.

Hinke, Thomas H.↗

Earth Science Project Office (ESPO) Field Experiences During ORACLES, ATom, KORUS and POSIDON

Very often, scientific field campaigns entail years of planning and incur substantial cost, especially if they involve the operation of large research aircraft in remote locations. Deploying and operating these aircrafts even for short periods of time poses challenges that, if not addressed properly, can have significant negative consequences and potentially jeopardize the success of a scientific campaign. Challenges vary from country to country and range from safety, health, and security risks to differences in cultural and social norms. Our presentation will focus on sharing experiences on the ESPO 2016 conducted field campaigns ORACLES, ATom, KORUS and POSIDON. We will focus on the best practices, lessons learned, international relations and coordination aspects of the country-specific experiences. This presentation will be part of the ICARE Conference (2nd International Conference on Airborne Research for the Environment (ICARE 2017) that will focus on "Developing the infrastructure to meet future scientific challenges". This unique conference and gathering of facility support experts will not only allow for dissemination and sharing of knowledge but also promote collaboration and networking among groups that support scientific research using airborne platforms around the globe.

Salazar, Vidal↗

Architecture and Operations of the OSIRIS-REx Independent Navigation Team

The Origins, Spectral Interpretation, Resource Identification, Security-Regolith Explorer (OSIRIS-REx) GoddardSpace Flight Center (GSFC) Independent Navigation Team (INT) performs center-finding and landmark-basedOptical Navigation (OpNav), Orbit Determination (OD), maneuver verification, and additional analyses in support ofnavigation operations motivated by a stringent set of science requirements. The INT has adopted a streamlined andagile approach to navigation operations support via a virtual operations environment, known as "OREX-NAV",which leverages existing capabilities of the Space Science Mission Operations (SSMO) virtual Multi-MissionOperations Center (vMMOC). The virtual environment architecture of OREX-NAV enables the INT to perform dailyoperational tasks and seamlessly interface with external mission networks, regardless of physical location. Throughthe automation and process adopted, the INT is able to keep pace with the rapid cadence of required deliverables.

OSIRIS-REx↗

Global Patterns of Crop Yield Stability Under Additional Nutrient and Water Inputs

Agricultural production must increase to feed a growing and wealthier population, as well as to satisfy increasing demands for biomaterials and biomass-based energy. At the same time, deforestation and land-use change need to be minimized in order to preserve biodiversity and maintain carbon stores in vegetation and soils. Consequently, agricultural land use needs to be intensified in order to increase food production per unit area of land. Here we use simulations of AgMIP's Global Gridded Crop Model Intercomparison (GGCMI) phase 1 to assess implications of input-driven intensification (water, nutrients) on crop yield and yield stability, which is an important aspect in food security. We find region- and crop-specific responses for the simulated period 1980+/-2009 with broadly increasing yield variability under additional nitrogen inputs and stabilizing yields under additional water inputs (irrigation), reflecting current patterns of water and nutrient limitation. The different models of the GGCMI ensemble show similar response patterns, but model differences warrant further research on management assumptions, such as variety selection and soil management, and inputs as well as on model implementation of different soil and plant processes, such as on heat stress, and parameters. Higher variability in crop productivity under higher fertilizer input will require adequate buffer mechanisms in trade and distribution/storage networks to avoid food price volatility.

Maize↗

Network Theory: A Primer and Questions for Air Transportation Systems Applications

A new understanding (with potential applications to air transportation systems) has emerged in the past five years in the scientific field of networks. This development emerges in large part because we now have a new laboratory for developing theories about complex networks: The Internet. The premise of this new understanding is that most complex networks of interest, both of nature and of human contrivance, exhibit a fundamentally different behavior than thought for over two hundred years under classical graph theory. Classical theory held that networks exhibited random behavior, characterized by normal, (e.g., Gaussian or Poisson) degree distributions of the connectivity between nodes by links. The new understanding turns this idea on its head: networks of interest exhibit scale-free (or small world) degree distributions of connectivity, characterized by power law distributions. The implications of scale-free behavior for air transportation systems include the potential that some behaviors of complex system architectures might be analyzed through relatively simple approximations of local elements of the system. For air transportation applications, this presentation proposes a framework for constructing topologies (architectures) that represent the relationships between mobility, flight operations, aircraft requirements, and airspace capacity, and the related externalities in airspace procedures and architectures. The proposed architectures or topologies may serve as a framework for posing comparative and combinative analyses of performance, cost, security, environmental, and related metrics.

Holmes, Bruce J.↗

National security and national competitiveness: Open source solutions; NASA requirements and capabilities

Foreign competitors are challenging the world leadership of the U.S. aerospace industry, and increasingly tight budgets everywhere make international cooperation in aerospace science necessary. The NASA STI Program has as part of its mission to support NASA R&D, and to that end has developed a knowledge base of aerospace-related information known as the NASA Aerospace Database. The NASA STI Program is already involved in international cooperation with NATO/AGARD/TIP, CENDI, ICSU/ICSTI, and the U.S. Japan Committee on STI. With the new more open political climate, the perceived dearth of foreign information in the NASA Aerospace Database, and the development of the ESA database and DELURA, the German databases, the NASA STI Program is responding by sponsoring workshops on foreign acquisitions and by increasing its cooperation with international partners and with other U.S. agencies. The STI Program looks to the future of improved database access through networking and a GUI; new media; optical disk, video, and full text; and a Technology Focus Group that will keep the NASA STI Program current with technology.

Cotter, Gladys A.↗

System Security Authorization Agreement (SSAA) for the WIRE Archive and Research Facility

The Wide-Field Infrared Explorer (WIRE) Archive and Research Facility (WARF) is operated and maintained by the Department of Physics, USAF Academy. The lab is located in Fairchild Hall, 2354 Fairchild Dr., Suite 2A103, USAF Academy, CO 80840. The WARF will be used for research and education in support of the NASA Wide Field Infrared Explorer (WIRE) satellite, and for related high-precision photometry missions and activities. The WARF will also contain the WIRE preliminary and final archives prior to their delivery to the National Space Science Data Center (NSSDC). The WARF consists of a suite of equipment purchased under several NASA grants in support of WIRE research. The core system consists of a Red Hat Linux workstation with twin 933 MHz PIII processors, 1 GB of RAM, 133 GB of hard disk space, and DAT and DLT tape drives. The WARF is also supported by several additional networked Linux workstations. Only one of these (an older 450 Mhz PIII computer running Red Hat Linux) is currently running, but the addition of several more is expected over the next year. In addition, a printer will soon be added. The WARF will serve as the primary research facility for the analysis and archiving of data from the WIRE satellite, together with limited quantities of other high-precision astronomical photometry data from both ground- and space-based facilities. However, the archive to be created here will not be the final archive; rather, the archive will be duplicated at the NSSDC and public access to the data will generally take place through that site.

Source record↗

Analyzing Cyber Security Threats on Cyber-Physical Systems Using Model-Based Systems Engineering

The spectre of cyber attacks on aerospace systems can no longer be ignored given that many of the components and vulnerabilities that have been successfully exploited by the adversary on other infrastructures are the same as those deployed and used within the aerospace environment. An important consideration with respect to the mission/safety critical infrastructure supporting space operations is that an appropriate defensive response to an attack invariably involves the need for high precision and accuracy, because an incorrect response can trigger unacceptable losses involving lives and/or significant financial damage. A highly precise defensive response, considering the typical complexity of aerospace environments, requires a detailed and well-founded understanding of the underlying system where the goal of the defensive response is to preserve critical mission objectives in the presence of adversarial activity. In this paper, a structured approach for modeling aerospace systems is described. The approach includes physical elements, network topology, software applications, system functions, and usage scenarios. We leverage Model-Based Systems Engineering methodology by utilizing the Object Management Group's Systems Modeling Language to represent the system being analyzed and also utilize model transformations to change relevant aspects of the model into specialized analyses. A novel visualization approach is utilized to visualize the entire model as a three-dimensional graph, allowing easier interaction with subject matter experts. The model provides a unifying structure for analyzing the impact of a particular attack or a particular type of attack. Two different example analysis types are demonstrated in this paper: a graph-based propagation analysis based on edge labels, and a graph-based propagation analysis based on node labels.

MBSE↗

Structural Chokepoints Determine the Resilience of Agri-Food Supply Chains in the United States

The agricultural and food systems of the United States are critical for ensuring the stability of both domestic and global food systems. Thus, it is essential to understand the structural resilience of the country’s agri-food supply chains to a suite of threats. Here we employ complex network statistics to identify the spatially resolved structural chokepoints in the agri-food supply chains of the United States. We identify seven chokepoints at county scale: Riverside CA, San Bernardino CA, Los Angeles CA, Shelby TN, Maricopa AZ, San Diego CA and Cook IL; as well as seven chokepoints at freight analysis framework scale: Los Angeles–Long Beach CA, Chicago– Naperville IL, New York–New Jersey NJ, New York–New Jersey NY, Remainder of Texas, Remainder of Pennsylvania, and San Jose–San Francisco–Oakland CA. These structural chokepoints are generally consistent through time (2007, 2012, 2017), particularly for processed food commodities. This study improves our understanding of agri-food supply-chain security and may aid policies aimed at enhancing its resilience.

Agriculture↗

Providing the Persistent Data Storage in a Software Engineering Environment Using Java/COBRA and a DBMS

An investigation was undertaken to build the software foundation for the WHERE (Web-based Hyper-text Environment for Requirements Engineering) project. The TCM (Toolkit for Conceptual Modeling) was chosen as the foundation software for the WHERE project which aims to provide an environment for facilitating collaboration among geographically distributed people involved in the Requirements Engineering process. The TCM is a collection of diagram and table editors and has been implemented in the C++ programming language. The C++ implementation of the TCM was translated into Java in order to allow the editors to be used for building various functionality of the WHERE project; the WHERE project intends to use the Web as its communication back- bone. One of the limitations of the translated software (TcmJava), which militated against its use in the WHERE project, was persistent data management mechanisms which it inherited from the original TCM; it was designed to be used in standalone applications. Before TcmJava editors could be used as a part of the multi-user, geographically distributed applications of the WHERE project, a persistent storage mechanism must be built which would allow data communication over the Internet, using the capabilities of the Web. An approach involving features of Java, CORBA (Common Object Request Broker), the Web, a middle-ware (Java Relational Binding (JRB)), and a database server was used to build the persistent data management infrastructure for the WHERE project. The developed infrastructure allows a TcmJava editor to be downloaded and run from a network host by using a JDK 1.1 (Java Developer's Kit) compatible Web-browser. The aforementioned editor establishes connection with a server by using the ORB (Object Request Broker) software and stores/retrieves data in/from the server. The server consists of a CORBA object or objects depending upon whether the data is to be made persistent on a single server or multiple servers. The CORBA object providing the persistent data server is implemented using the Java progranu-ning language. It uses the JRB to store/retrieve data in/from a relational database server. The persistent data management system provides transaction and user management facilities which allow multi-user, distributed access to the stored data in a secure manner.

Dhaliwal, Swarn S.↗

Approach for Autonomous Control of Unmanned Aerial Vehicle Using Intelligent Agents for Knowledge Creation

This paper describes the development of a planned approach for Autonomous operation of an Unmanned Aerial Vehicle (UAV). A Hybrid approach will seek to provide Knowledge Generation thru the application of Artificial Intelligence (AI) and Intelligent Agents (IA) for UAV control. The application of many different types of AI techniques for flight will be explored during this research effort. The research concentration will be directed to the application of different AI methods within the UAV arena. By evaluating AI approaches, which will include Expert Systems, Neural Networks, Intelligent Agents, Fuzzy Logic, and Complex Adaptive Systems, a new insight may be gained into the benefits of AI techniques applied to achieving true autonomous operation of these systems thus providing new intellectual merit to this research field. The major area of discussion will be limited to the UAV. The systems of interest include small aircraft, insects, and miniature aircraft. Although flight systems will be explored, the benefits should apply to many Unmanned Vehicles such as: Rovers, Ocean Explorers, Robots, and autonomous operation systems. The flight system will be broken down into control agents that will represent the intelligent agent approach used in AI. After the completion of a successful approach, a framework of applying a Security Overseer will be added in an attempt to address errors, emergencies, failures, damage, or over dynamic environment. The chosen control problem was the landing phase of UAV operation. The initial results from simulation in FlightGear are presented.

Dufrene, Warren R., Jr.↗

State of the Art in Large-Scale Soil Moisture Monitoring

Soil moisture is an essential climate variable influencing land atmosphere interactions, an essential hydrologic variable impacting rainfall runoff processes, an essential ecological variable regulating net ecosystem exchange, and an essential agricultural variable constraining food security. Large-scale soil moisture monitoring has advanced in recent years creating opportunities to transform scientific understanding of soil moisture and related processes. These advances are being driven by researchers from a broad range of disciplines, but this complicates collaboration and communication. For some applications, the science required to utilize large-scale soil moisture data is poorly developed. In this review, we describe the state of the art in large-scale soil moisture monitoring and identify some critical needs for research to optimize the use of increasingly available soil moisture data. We review representative examples of 1) emerging in situ and proximal sensing techniques, 2) dedicated soil moisture remote sensing missions, 3) soil moisture monitoring networks, and 4) applications of large-scale soil moisture measurements. Significant near-term progress seems possible in the use of large-scale soil moisture data for drought monitoring. Assimilation of soil moisture data for meteorological or hydrologic forecasting also shows promise, but significant challenges related to model structures and model errors remain. Little progress has been made yet in the use of large-scale soil moisture observations within the context of ecological or agricultural modeling. Opportunities abound to advance the science and practice of large-scale soil moisture monitoring for the sake of improved Earth system monitoring, modeling, and forecasting.

Review↗

Convenient Airports: Point of View of the Passengers

The competition among airlines or among airports aiming at to increase the demand for its services has been more and more incited. Knowledge the perception of the users for the offered services means to meet the customer's needs and expectations in order either to keep the customer, and therefore keep a significant advantage over competitors. The passenger of the air transportation wants rapidity, security and convenience. Convenience can be translated by comfort that the passenger wants for the price that he can pay. In this paper had been identified. as a result of a survey achieved in six Brazilian airports during 2002, the best indicators in the passenger's perception. These indicators among any others were listed m the handbook of Airports Council International (ACI). Distinctive perceptions were observed among passengers with different travel motivations. This survey had been carried through in the airports of Brasilia, Porto Alegre, Salvador. Fortaleza, Curitiba and Bel6m. Considering this survey we can identified the most attractive airport among them. This work is a way to help improve quality of service, in particular, m these six airports of the Brazilian network. The results should be published and made available to all the parties concerned (airport authority, airlines and service providers) and should lead to corrective action when the passenger is not satisfied with the service.

Magri, Adival Aparecido, Jr.↗

Re-Engineering the Multimission Command System at the Jet Propulsion Laboratory

This paper will discuss the design and implementation of the command software, especially trade-offs and lessons learned from practical operational use in JPL's Advanced Multimission Operations System.The command system provides an advanced multimission environment for secure, concurrent commanding of multiple spacecraft. The lessons learned have resulted in a re-engineering of the command system, especially in its user interface and new automation capabilities. This paper will also discuss new development work including a multimission command database toolkit, a universal command translator for sequencing and real-time commands, and incorporation of telecommand capabilities for new missions.

re-engineering↗

An overview of SAFENET and its implications for aerospace applications

The survivable, adaptable fiber optic embeddable network (SAFENET) is a draft standard for local area networking (LAN) developed by the Navy which, when adopted, will become a military standard. The standard is being developed for procurement specifications of computer resources to be used on ships and aircraft and has some of the real-time concerns that network standards for space vehicles have. Architecture and survivability are considered. It is noted that the token-ring LAN must implement the IEEE 802.5 recommended practice for dual ring reconfiguration, which is currently being reviewed for inclusion into the IEEE standard. A trunk coupling unit is used at each station to isolate a station from the ring in case of failure. Up to five stations can be bypassed in this fashion. Communication architecture has an OSI profile but differs from the standard concept of the seven layers by allowing alternate suits and breaking the layers into three groupings of services to allow for physical interfacing. It also provides several paths, even if only one profile is used. Management and synchronization protocols are discussed and security issues are addressed. Implications for aerospace applications are considered and it is projected that interoperability with the Navy and other U.S. Government systems may require SAFENET specifications for NASA systems.

Collins, George C.↗

NASA's Efforts to Commercialize Communications Services for Mission in Near-Earth Space

The National Aeronautics and Space Administration (NASA) Space Communications and Navigation (SCaN)Program enables high speed, robust, secure and cost-effective space communications and navigation services to current and future science and exploration missions. Consistent with National Space Policy, NASA is pursuing the use of demonstrated commercial services for all its future near-Earth requirements through a flexible, multi-provider approach that minimizes risks to the user missions and ensures costs to user missions are reasonable. Progress toward this goal is advancing in multiple key areas including direct to Earth (DTE), space-based relay, technology investments, required spectrum regulatory changes and mission engagement and infusion. The transition to commercial DTE services is already underway, with a target for transition by 2024. The primary functions to execute SCaN’s DTE strategy include increasing commercial service allocations by leveraging current commercial network providers and enabling seamless onboarding of additional providers into the network. Furthermore, moving away from government DTE services will allow operational costs to be optimized. A more gradual approach is planned for the transition to commercial space-based relay services to allow for demonstration and operationalization of commercial services for future users by 2030. In June of 2022, six American SATCOM vendors were awarded a combined $278.5 million through Funded Space Act Agreements (FSAAs) for the first cycle of demonstration and validation activities. The end-to-end service capabilities being targeted are based on existing NASA mission operational needs. Accordingly, each company has proposed a technical approach to lower costs, increase flexibility, and improve performance for a broad range of missions. Successful user mission transition to commercial services, both DTE and space-based relay, are dependent on the technologies and capabilities that address gaps in commercial capability. NASA is investing in technology development and pursuing a new strategic approach to the creation or adoption of space communications standards to move the agency toward a commercial paradigm. Wideband and multi-lingual user terminals are being developed to bridge differences in industry services. Building on ground demonstrations completed in 2021, the Johns Hopkins Applied Physics Lab (APL) will be flight testing a multi-lingual wideband terminal (payload) and demonstrating connectivity to both government and commercial relay services. NASA holds a leadership role in multiple civil space standards bodies and international coordination groups to ensure that standards supporting interoperability are developed with defined functions, interfaces, and performance. However, to successfully meet commercialization objectives, NASA seeks to collaborate with industry, and as applicable adopt or adapt to commercially defined standards. As such, NASA joined the 3rd Generation Partnership Project (3GPP) as an official member in 2021 to advocate for the inclusion of space missions as a unique user segment in future 5G non-terrestrial networks, and to better understand the scope of 3GPP releases and implications for space users. Further, engagement in Spectrum regulatory bodies is being undertaken to augment existing space-Earth and inter-satellite frequency allocations available for both government and commercial space systems. This paper addresses the recent progress toward NASA’s commercial space communications transition objectives and how key challenges are being navigated.

Gregory W Heckler↗

Location Management in a Transport Layer Mobility Architecture

Mobility architectures that place complexity in end nodes rather than in the network interior have many advantageous properties and are becoming popular research topics. Such architectures typically push mobility support into higher layers of the protocol stack than network layer approaches like Mobile IP. The literature is ripe with proposals to provide mobility services in the transport, session, and application layers. In this paper, we focus on a mobility architecture that makes the most significant changes to the transport layer. A common problem amongst all mobility protocols at various layers is location management, which entails translating some form of static identifier into a mobile node's dynamic location. Location management is required for mobile nodes to be able to provide globally-reachable services on-demand to other hosts. In this paper, we describe the challenges of location management in a transport layer mobility architecture, and discuss the advantages and disadvantages of various solutions proposed in the literature. Our conclusion is that, in principle, secure dynamic DNS is most desirable, although it may have current operational limitations. We note that this topic has room for further exploration, and we present this paper largely as a starting point for comparing possible solutions.

Eddy, Wesley M.↗

Making Sense of Remotely Sensed Ultra-Spectral Infrared Data

NASA's Jet Propulsion Laboratory (JPL), Pasadena, California, Earth Observing System (EOS) programs, the Deep Space Network (DSN), and various Department of Defense (DOD) technology demonstration programs, combined their technical expertise to develop SEASCRAPE, a software program that obtains data when thermal infrared radiation passes through the Earth's atmosphere and reaches a sensor. Licensed by the California Institute of Technology (Caltech), SEASCRAPE automatically inverts complex infrared data and makes it possible to obtain estimates of the state of the atmosphere along the ray path. Former JPL staff members created a small entrepreneurial firm, Remote Sensing Analysis Systems, Inc., of Altadena, California, to commercialize the product. The founders believed that a commercial version of the software was needed for future U.S. government missions and the commercial monitoring of pollution. With the inversion capability of this software and remote sensing instrumentation, it is possible to monitor pollution sources from safe and secure distances on a noninterfering, noncooperative basis. The software, now know as SEASCRAPE_Plus, allows the user to determine the presence of pollution products, their location and their abundance along the ray path. The technology has been cleared by the Department of Commerce for export, and is currently used by numerous research and engineering organizations around the world.

Source record↗