Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 397 records · Page 22
All sourcesNASA NTRSDOE OSTI
NASA NTRS2010

Situational Awareness from a Low-Cost Camera System

A method gathers scene information from a low-cost camera system. Existing surveillance systems using sufficient cameras for continuous coverage of a large field necessarily generate enormous amounts of raw data. Digitizing and channeling that data to a central computer and processing it in real time is difficult when using low-cost, commercially available components. A newly developed system is located on a combined power and data wire to form a string-of-lights camera system. Each camera is accessible through this network interface using standard TCP/IP networking protocols. The cameras more closely resemble cell-phone cameras than traditional security camera systems. Processing capabilities are built directly onto the camera backplane, which helps maintain a low cost. The low power requirements of each camera allow the creation of a single imaging system comprising over 100 cameras. Each camera has built-in processing capabilities to detect events and cooperatively share this information with neighboring cameras. The location of the event is reported to the host computer in Cartesian coordinates computed from data correlation across multiple cameras. In this way, events in the field of view can present low-bandwidth information to the host rather than high-bandwidth bitmap data constantly being generated by the cameras. This approach offers greater flexibility than conventional systems, without compromising performance through using many small, low-cost cameras with overlapping fields of view. This means significant increased viewing without ignoring surveillance areas, which can occur when pan, tilt, and zoom cameras look away. Additionally, due to the sharing of a single cable for power and data, the installation costs are lower. The technology is targeted toward 3D scene extraction and automatic target tracking for military and commercial applications. Security systems and environmental/ vehicular monitoring systems are also potential applications.

Freudinger, Lawrence C.↗
NASA NTRS2017

Security Vulnerability Profiles of NASA Mission Software: Empirical Analysis of Security Related Bug Reports

NASA develops, runs, and maintains software systems for which security is of vital importance. Therefore, it is becoming an imperative to develop secure systems and extend the current software assurance capabilities to cover information assurance and cybersecurity concerns of NASA missions. The results presented in this report are based on the information provided in the issue tracking systems of one ground mission and one flight mission. The extracted data were used to create three datasets: Ground mission IVV issues, Flight mission IVV issues, and Flight mission Developers issues. In each dataset, we identified the software bugs that are security related and classified them in specific security classes. This information was then used to create the security vulnerability profiles (i.e., to determine how, why, where, and when the security vulnerabilities were introduced) and explore the existence of common trends. The main findings of our work include:- Code related security issues dominated both the Ground and Flight mission IVV security issues, with 95 and 92, respectively. Therefore, enforcing secure coding practices and verification and validation focused on coding errors would be cost effective ways to improve mission's security. (Flight mission Developers issues dataset did not contain data in the Issue Category.)- In both the Ground and Flight mission IVV issues datasets, the majority of security issues (i.e., 91 and 85, respectively) were introduced in the Implementation phase. In most cases, the phase in which the issues were found was the same as the phase in which they were introduced. The most security related issues of the Flight mission Developers issues dataset were found during Code Implementation, Build Integration, and Build Verification; the data on the phase in which these issues were introduced were not available for this dataset.- The location of security related issues, as the location of software issues in general, followed the Pareto principle. Specifically, for all three datasets, from 86 to 88 the security related issues were located in two to four subsystems.- The severity levels of most security issues were moderate, in all three datasets.- Out of 21 primary security classes, five dominated: Exception Management, Memory Access, Other, Risky Values, and Unused Entities. Together, these classes contributed from around 80 to 90 of all security issues in each dataset. This again proves the Pareto principle of uneven distribution of security issues, in this case across CWE classes, and supports the fact that addressing these dominant security classes provides the most cost efficient way to improve missions' security. The findings presented in this report uncovered the security vulnerability profiles and identified the common trends and dominant classes of security issues, which in turn can be used to select the most efficient secure design and coding best practices compiled by the part of the SARP project team associated with the NASA's Johnson Space Center. In addition, these findings provide valuable input to the NASA IVV initiative aimed at identification of the two 25 CWEs of ground and flight missions.

vulnerability↗
DOE OSTI2017

A Targeted Attack For Enhancing Resiliency of Intelligent Intrusion Detection Modules in Energy Cyber Physical Systems

Abstract— Secure high-speed communication is required to ensure proper operation of complex power grid systems and prevent malicious tampering activities. In this paper, artificial neural networks with temporal dependency are introduced for false data identification and mitigation for broadcasted IEC 61850 SMV messages. The fast responses of such intelligent modules in intrusion detection make them suitable for time- critical applications, such as protection. However, care must be taken in selecting the appropriate intelligence model and decision criteria. As such, this paper presents a customizable malware script to sniff and manipulate SMV messages and demonstrates the ability of the malware to trigger false positives in the neural network’s response. The malware developed is intended to be as a vaccine to harden the intrusion detection system against data manipulation attacks by enhancing the neural network’s ability to learn and adapt to these attacks.

25 ENERGY STORAGE↗
DOE OSTI2021

Microgrid's Role in Enhancing the Security and Flexibility of City Energy Systems

Smart cities depend on flexible and secure energy systems to ensure resilient power for critical infrastructure; however, recent weather-related events and cyberattacks have highlighted weaknesses in our energy systems, with the potential for widespread economic and security impacts. As stated by the Executive Office of the President, "the resilience of the US electric grid is a key part of the nation's defense against severe weather." To address the energy delivery security challenge, microgrids are rising as a viable solution that enhances the flexibility and resilience of the distribution grid and boosts the reliability of the local supply for the end-user. Traditionally, high capital investment has been a barrier to large-scale adoption of microgrid technology. Understanding the flexibility and resilience benefits of microgrids and accounting for the associated value streams can make the microgrid's proposition economically viable. In this chapter, microgrids' utility and their potential to serve as a flexible and resilient resource for the utility grid by providing capabilities such as peak shaving, demand response, and frequency regulation is presented. Moreover, other value streams, such as (1) their ability to island during a disaster and sustain critical loads which makes them a robust resilience solution for end-users, in the event of the utility grid outage and (2) microgrids also provide a flexible platform for integrating distributed energy resources in conjunction with storage and conventional generation technologies, strengthen microgrid's role in reducing the over-arching goal of emission reduction. Given the myriad of benefits associated with microgrids, we present strategies which can be employed for making microgrid itself resilient against physical and cyberthreats by employing hardware, software, and personnel training solutions to operate the microgrid before, during, and after a potential disaster. This chapter, thus, provides a holistic study of the microgrid as a resilience resource, for the utility grid, and a self-contained end-user for the end-user.

cyber-physical system↗
DOE OSTI2024

An experimental investigation on the CO 2 storage capacity of the composite confining system

Assuring secure containment of stored CO 2 is of paramount importance—for climate change mitigation, for permitting, and for reassuring the public. Regional seals, such as those sealing petroleum accumulations, have proven to be effective for securing CO 2 . However, the goal of permanent sequestration can also be satisfied with “composite confining systems” consisting of multiple, possibly discontinuous flow barriers that, in aggregate, create a system with very high permeability anisotropy and effectively retard the vertical migration of CO 2 . This study focuses on investigating the barrier characteristics necessary for effective containment of CO 2 , using both physical flow experiments and modified invasion percolation simulations. The simulations are calibrated to the physical experiments and are used to further extend the analysis. Results show that for a composite confining system, a) even barriers with low capillary entry pressure contrast to the underlying flow unit can divert rising CO 2 ; b) curved or anticlinal barrier topography can enhance CO 2 trapping; c) fining-upward gradations make little difference to barrier effectiveness or CO 2 retention; d) longer barriers retain more CO 2 regardless of barrier topography. Finally, field-scale simulations have demonstrated the importance of barrier length for increasing CO 2 storage capacity. Furthermore, the results presented can be used to inform the development of new screening criteria for characterization and effectiveness of composite confining systems.

58 GEOSCIENCES↗
DOE OSTI2022

Introduction to the special section on learning and security for multi-agent systems

This report features six articles that provide an overview of the emerging research topics at the intersection learning, security, and multi-agent systems. Recent years have witnessed a surge in the number of works at their intersections, and they have appeared in system and control communities as well as many other communities in artificial intelligence, cyber–physical systems, and economics. The articles in this special section give accessible and comprehensive tutorials and surveys for a broad systems and control audience, covering topics including adversarial machine learning, multi-agent reinforcement learning, cyber resilience, resilient control systems, and game design. It is hopeful that this special section will spawn future interest and cross-disciplinary collaborations in this emerging transdisciplinary research area.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS2016

Mission-centric cyber security assessment of critical systems

We present a novel model-based, mission-centric approach to perform cyber security assessments for evaluating the impact of low-level cyber events on high-level mission objectives.We demonstrate the benefits of our approach using a system model and attack trees specific to the command-and-control system of a spacecraft. Specifically, we demonstrate how our approach enables a decision-maker to assess the security posture of the system, identify necessary mitigations and prioritize their deployment.

Tan, Kymie↗
DOE OSTI2025

DEVELOPMENT OF AN INTEGRATED SECURITY AND SAFETY MONITORING SYSTEM FOR SPENT NUCLEAR FUEL AND HIGH-LEVEL WASTE TRANSPORTATION

This paper provides an overview of the progress to date, and discussion of the path forward, related to designing, fabricating, and testing an integrated security and safety monitoring system (ISSMS) for railcars used to transport spent nuclear fuel (SNF) and high-level radioactive waste (HLW) in the United States. The system will comply with the US Department of Energy’s (DOE) Order 460.2B “Departmental Materials Transportation Management” and the Association of American Railroads’ (AAR) standard S-2043 “Performance Specification for Trains Used to Carry High-level Radioactive Material” [1] developed specifically for railcars used to transport high-level radioactive material (HLRM). DOE is in the process of developing and testing an ISSMS that will satisfy both DOE requirements and AAR standards. DOE has already developed railcar designs for transportation of HLRM. In 2024, DOE’s Atlas railcar project completed the design, fabrication and testing of three railcar types: transportation cask-carrying, buffer, and security escort, resulting in AAR conditional approval to operate on freight rail networks in North America. DOE decided to combine the required security and safety systems into one system, and this combined system is the subject of the current effort. DOE is developing and proposes to implement the ISSMS for these railcars as part of the build out of the railcar fleet. DOE began planning for development of the ISSMS in February 2020. The project is divided into seven phases starting with conceptual design and continuing through production design, as shown in Figure 1. An earlier version of the system was tested as part of the Atlas railcar consist demonstration test run in 2023. This paper describes the design features and system testing using the Atlas project railcars, and laboratory testing completed to date. The paper will also describe the activities planned to support the DOE project to ship the High Burn-Up Research Cask (HBRC) in 2027.

Schultze, Michael [ORNL] (ORCID:0000000283205671)↗
NASA NTRS2016

Tailoring NIST Security Controls for the Ground System: Selection and Implementation -- Recommendations for Information System Owners

The National Aeronautics and Space Administration (NASA) invests millions of dollars in spacecraft and ground system development, and in mission operations in the pursuit of scientific knowledge of the universe. In recent years, NASA sent a probe to Mars to study the Red Planet's upper atmosphere, obtained high resolution images of Pluto, and it is currently preparing to find new exoplanets, rendezvous with an asteroid, and bring a sample of the asteroid back to Earth for analysis. The success of these missions is enabled by mission assurance. In turn, mission assurance is backed by information assurance. The information systems supporting NASA missions must be reliable as well as secure. NASA - like every other U.S. Federal Government agency - is required to manage the security of its information systems according to federal mandates, the most prominent being the Federal Information Security Management Act (FISMA) of 2002 and the legislative updates that followed it. Like the management of enterprise information technology (IT), federal information security management takes a "one-size fits all" approach for protecting IT systems. While this approach works for most organizations, it does not effectively translate into security of highly specialized systems such as those supporting NASA missions. These systems include command and control (C&C) systems, spacecraft and instrument simulators, and other elements comprising the ground segment. They must be carefully configured, monitored and maintained, sometimes for several years past the missions' initially planned life expectancy, to ensure the ground system is protected and remains operational without any compromise of its confidentiality, integrity and availability. Enterprise policies, processes, procedures and products, if not effectively tailored to meet mission requirements, may not offer the needed security for protecting the information system, and they may even become disruptive to mission operations. Certain protective measures for the general enterprise may not be as efficient within the ground segment. This is what the authors have concluded through observations and analysis of patterns identified from the various security assessments performed on NASA missions such as MAVEN, OSIRIS-REx, New Horizons and TESS, to name a few. The security audits confirmed that the framework for managing information system security developed by the National Institute of Standards and Technology (NIST) for the federal government, and adopted by NASA, is indeed effective. However, the selection of the technical, operational and management security controls offered by the NIST model - and how they are implemented - does not always fit the nature and the environment where the ground system operates in even though there is no apparent impact on mission success. The authors observed that unfit controls, that is, controls that are not necessarily applicable or sufficiently effective in protecting the mission systems, are often selected to facilitate compliance with security requirements and organizational expectations even if the selected controls offer minimum or non-existent protection. This paper identifies some of the standard security controls that can in fact protect the ground system, and which of them offer little or no benefit at all. It offers multiple scenarios from real security audits in which the controls are not effective without, of course, disclosing any sensitive information about the missions assessed. In addition to selection and implementation of controls, the paper also discusses potential impact of recent legislation such as the Federal Information Security Modernization Act (FISMA) of 2014 - aimed at the enterprise - on the ground system, and offers other recommendations to Information System Owners (ISOs).

GOVERNANCE↗
DOE OSTI2020

Attack Scenarios Relating to Army Facility-Related Control Systems: Quantifying the Cost to Secure and Cost Savings of the Army’s FRCS Program

Pacific Northwest National Laboratory (PNNL) analyzed the cyber-threat environment to U.S. Army facilities. This report describes three key factors in securing Army-owned facility-related control systems (FRCS). First, Section 1.0 provides background information about the project. Section 2.0 describes the various types of cyber-attacks. Section 3.0 provides a series of attack scenarios from real-world use cases are described in Section 3. These examples are relevant to the Army because the targeted systems or operating environments are like those used at Army installations. An estimated range for the cost to secure these systems is described in Section 4.0. Finally, the cost savings of preventing these kinds of attacks are described in Section 5.0.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2018

EISA (Energy Independence and Security Act) compliant ethanol fuel from corn stover in a depot-based decentralized system

Cellulosic biofuels face significant problems of feedstock aggregation and logistics leading to poor economies of scale. The current model is based on relatively small biorefineries using locally-gathered feedstocks. Here, we examine the potential capacity of a hypothetically distributed, depot-based, biorefinery system to produce cellulosic ethanol from corn stover in the United States Midwest. The local depots serve to aggregate, pretreat and densify biomass (via pellets), which are collected, transported, and fed to a few very large, cellulosic ethanol biorefineries. We found that a corn stover-based depot system would help establish one or two very large-scale biorefineries capable of processing about 8-12% of total corn stover available in the United States Midwest. About 55-153 depots could supply the pretreated pellets to each distributed biorefinery leading to an annual production of 1.02 - 2.91 billion liters of cellulosic ethanol. Most of the participating depots would be located in Illinois and Iowa. The ethanol selling price in this depot-based biorefinery system would varys between U$S 0.67 and U$S 0.72 liter-1. The estimated range of GHG savings from cellulosic ethanol in the depot system compared to gasoline was 3.35-4.84 Tg CO2 year-1. In addition of being economically competitive, a distributed, depot-based, biorefinery system could meet the 60% GHG reduction requirement of the U.S. Energy Independence and Security Act (EISA).

Biorefinery, Cellulosic biofuel, Corn stover, Dist↗
DOE OSTI2021

Security Vulnerability and Mitigation in Photovoltaic Systems

Software and firmware vulnerabilities pose security threats to photovoltaic (PV) systems. When patches are not available or cannot be timely applied to fix vulnerabilities, it is important to mitigate vulnerabilities such that they cannot be exploited by attackers or their impacts will be limited when exploited. However, the vulnerability mitigation problem for PV systems has received little attention. This paper analyzes known security vulnerabilities in PV systems, proposes a multi-level mitigation framework and various mitigation strategies including neural network-based attack detection inside inverters, and develops a prototype system as a proof-of-concept for building vulnerability mitigation into PV system design.

14 SOLAR ENERGY↗
DOE OSTI2017

Computer Security for I and C Systems at Nuclear Facilities - 116

Cyber-attacks on Instrumentation and Control (I and C) systems may jeopardize the safety and security of nuclear facilities by contributing to sabotage or aiding in the unauthorized removal of nuclear material. The effects of cyber-attacks on I and C systems important to safety to safety may result in a wide range of consequences, such as a temporary loss of process control or unacceptable radiological consequences. Public awareness of cyber-attacks that affect I and C systems may also undermine confidence in the safety and security of nuclear facilities. The International Atomic Energy Agency (IAEA) recognizes the need for the guidance on the protection of I and C systems that provide safety, security, or auxiliary functions at nuclear facilities from cyber-attacks. To meet this need, The IAEA has developed a new Nuclear Security Series publication with the provisional title Computer Security of Instrumentation and Control Systems at Nuclear Facilities which builds upon and expands the guidance published in Nuclear Security Series No. 17 Computer Security at Nuclear Facilities (2011) . This publication will be formally released in 2017 as Technical Guidance and will be the second international consensus publication dedicated to Computer Security at Nuclear Facilities. It was developed in parallel with the new IAEA Nuclear Safety publications providing recommendations on I and C systems at research reactors (RR) and nuclear power plants (NPP) . The purpose of this paper is to provide an overview of this publication and its application. The paper will also discuss its relation to other IAEA Nuclear Security Series (NSS) publications on computer security. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1987

Security for safety critical space borne systems

The Space Station contains safety critical computer software components in systems that can affect life and vital property. These components require a multilevel secure system that provides dynamic access control of the data and processes involved. A study is under way to define requirements for a security model providing access control through level B3 of the Orange Book. The model will be prototyped at NASA-Johnson Space Center.

Legrand, Sue↗
NASA NTRS2016

NASA Blue Team: Determining Operational Security Posture of Critical Systems and Networks

Emergence of Cybersecurity has increased the focus on security risks to Information Technology (IT) assets going beyond traditional Information Assurance (IA) concerns: More sophisticated threats have emerged from increasing sources as advanced hacker tools and techniques have emerged and proliferated to broaden the attack surface available across globally interconnected networks.

cybersecurity↗
DOE OSTI2016

Probabilistic Risk Assessment of Spent Fuel Pool Cooling System Failure Considering Safety and Security Initiating Events

In order to quantify the probable risk associated with a safety system, nuclear safety risk evaluation process is applied which is generally performed in three steps. The first step is to calculate the damage frequency of a critical system. This step is followed by the radioactive source term estimation due to the potential system damage. The final step is the assessment of off-site consequences. The safety risk formula is shown by Eq. (1). P{sub F} is the probability of safety system failure (the probability used describes a random, independent event), and C is the consequence value. R{sub SAF} = P{sub F} * C (1) The security risk associated with an attack on critical infrastructure and/or special nuclear materials theft is usually evaluated using three- term risk equation (probability of attack, probability of adversary success, and consequence). A security threat and the related initiating events are not considered in a pure safety risk analysis. The vulnerability of the physical protection system is performed independently even though the consequence resulting from a security initiating event can be similar to a safety related initiating event and thus gets double counted. The security risk can be calculated using Eq. (2) R{sub SEC} = P{sub A} * P{sub S} * C (2) PA is the probability of attack, P{sub S} is the probability of adversary success (P{sub S} = 1 - P{sub I} P{sub N}). P{sub I} being the probability of interruption which accounts for the probabilities of detection of all timely detection elements along an adversary path. PN being the probability of neutralization: the result of engagement of the response force with the adversaries after the interruption has occurred. C is the consequence magnitude from a successful attack. The two security probabilities do not describe random, independent events. As a result, because of the differences in the randomness and independence of the respective safety and security probabilities, the safety and the security risks are currently calculated separately. The consequence term in nuclear safety and security risk evaluation have the same definition. An effort is made here to study the effect on the overall risk by considering security initiating events along with the subsequent failure of the intermediate safety element. The target selected is a spent fuel storage pool for analyzing the public risk arising from the interplay between nuclear security and safety initiating events. EASI (Estimate of Adversary Sequence Interruption) model is used to calculate the probability of interruption related to a security system that leads to the calculation of the security initiating event frequency. Further progression of this initiating security event to a top event is analyzed using a Probabilistic Safety Assessment (PSA) tool, SAPHIRE (version 8) to obtain a joint pool damage frequency. For the progression of events leading to a top event, the failure of the intermediate safety elements is assumed to be external random events such as heavy load drop and fire events. The objectives of this study is to (1) determine the double accounting of frequency of failure, risk and allocated resources in the scenario of a non-random security initiating event leading to a safety random event chain (2) compare the damage frequency from pure security with the frequency of combined security-safety failure event and pure safety failure events. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2019

Multi–LDAP Dynamic User Management Tool Utilizing Oracle Application Express and PL/SQL

A Center for Infrastructure Security Analysis (CISA) client system required support of multiple Lightweight Directory Access Protocol (LDAP) directories for multiple, varied user communities. The LDAP directories were all based upon different technologies, i.e., Microsoft Active Directory (AD), Microsoft Active Directory Lightweight Directory Services (ADLDS), and Oracle Internet Directory (OID), depending on system setup, security requirements, and legacy software. Research revealed that PL/SQL provided the capability to execute dynamic PL/SQL and SQL blocks. The dynamic capabilities were utilized along with several configuration tables to provide an object-oriented, polymorphic-like behavior. This architecture was chosen so that a top-level application programming interface (API) could be defined for all calls, no matter what type of LDAP was being manipulated, as each LDAP type has slightly different attributes and requirements. The dynamic nature of the user management system allowed for easy setup and utilization of any new LDAP directories, minimizing the time and effort expended on system changes.

97 MATHEMATICS AND COMPUTING↗