Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Computer Security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25

Annual Continuation And Progress Report For Nuclear Theory At Lawrence Livermore National Laboratory

Nuclear Theory research under the auspices of the Department of Energy (DOE) Office of Nuclear Physics (NP) is conducted within several funding sources and projects. These include base funding, and early career award, and a collaborative SciDAC-­3 award that is jointly funded by DOE/NP and the Advanced Simulations and Computations (ASC) effort within the National Nuclear Security Agency (NNSA). Therefore, this annual report is organized within the three primary sections covering these projects.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Carnac for Emulytics (HPC Annual Report V.1.0)

Carnac, located at Sandia's California site, is an institutional cluster for Emulytics that provides security researchers with resources to model enterprise computer networks and evaluate how resilient they are from attacks. While multiple Emulytics cluster computers have been built at Sandia, Carnac is the first system that was developed as an institutional resource that can be shared among different groups with disparate requirements.

97 MATHEMATICS AND COMPUTING↗

UT Austin's 2022 Sandia Day (Summary Report)

On March 30th and 31st, 2022, the University of Texas at Austin (UT) Office of the Vice President for Research (OVPR) hosted Sandia National Laboratories (Sandia) for “Sandia Day at UT Austin” to understand the status of the strategic partnership and explore opportunities for partnership growth. The event brought together more than 115 UT and Sandia participants including executive leadership, researchers, faculty, staff, and students. Sandia Day primarily consisted of a half-day leadership meeting, a research poster session and networking event, and three break-out sessions focused on strategic priority areas: Microelectronics, Energy and Climate Security, and High-Performance and Edge Computing. Appendix A contains the full Sandia Day agenda. Additional meetings and workshops (adjunct meetings) were held in conjunction with Sandia Day to maximize partnership exploration. Adjunct meetings were Hypersonics, Decarbonization, Disinformation, and Battery Workshops. A summary of Sandia Day events, sessions, and meetings follows.

42 ENGINEERING↗

Discrete mathematics, formal methods, the Z schema and the software life cycle

The proper role and scope for the use of discrete mathematics and formal methods in support of engineering the security and integrity of components within deployed computer systems are discussed. It is proposed that the Z schema can be used as the specification language to capture the precise definition of system and component interfaces. This can be accomplished with an object oriented development paradigm.

Bown, Rodney L.↗

Countermeasure Evaluation and Validation Project (CEVP) Database Requirement Documentation

The initial focus of the project by the JSC laboratories will be to develop, test and implement a standardized complement of integrated physiological test (Integrated Testing Regimen, ITR) that will examine both system and intersystem function, and will be used to validate and certify candidate countermeasures. The ITR will consist of medical requirements (MRs) and non-MR core ITR tests, and countermeasure-specific testing. Non-MR and countermeasure-specific test data will be archived in a database specific to the CEVP. Development of a CEVP Database will be critical to documenting the progress of candidate countermeasures. The goal of this work is a fully functional software system that will integrate computer-based data collection and storage with secure, efficient, and practical distribution of that data over the Internet. This system will provide the foundation of a new level of interagency and international cooperation for scientific experimentation and research, providing intramural, international, and extramural collaboration through management and distribution of the CEVP data. The research performed this summer includes the first phase of the project. The first phase of the project is a requirements analysis. This analysis will identify the expected behavior of the system under normal conditions and abnormal conditions; that could affect the system's ability to produce this behavior; and the internal features in the system needed to reduce the risk of unexpected or unwanted behaviors. The second phase of this project have also performed in this summer. The second phase of project is the design of data entry screen and data retrieval screen for a working model of the Ground Data Database. The final report provided the requirements for the CEVP system in a variety of ways, so that both the development team and JSC technical management have a thorough understanding of how the system is expected to behave.

Shin, Sung Y.↗

An Efficient Holographic Huygens? Metasurface based on Dielectric Resonant Meta-Atoms.

Subwavelength-thin metasurfaces have shown great promises for the control of optical wavefronts, thus opening new pathways for the development of efficient flat optics. In particular, Huygens’ metasurfaces based on all-dielectric resonant meta-atoms have already shown a huge potential for practical applications with their polarization insensitivity and high transmittance efficiency. Here, we experimentally demonstrate a holographic Huygens’ metasurface based on dielectric resonant meta-atoms capable of complex wavefront control at telecom wavelengths. Our metasurface produces a hologram image in the far-field with 82% transmittance efficiency and 40% imaging efficiency. Such efficient complex wavefront control shows that Huygens’ metasurfaces based on resonant dielectric meta-atoms are a big step towards practical applications of metasurfaces in wavefront design related technologies, including computer-generated holograms, ultra-thin optics, security and data storage devices.

47 OTHER INSTRUMENTATION↗

System and method for reasoning about the optimality of a configuration parameter of a distributed system

Embodiments provide a system and method for reasoning about the optimality of a configuration parameter of a distributed system. During operation, the system obtains a multi-layer graph for a system with a plurality of components, wherein the multi-layer graph comprises a configuration subgraph, a vulnerability subgraph, and a dependency subgraph. The system determines, based on the multi-layer graph, constraint relationships associated with configuration parameters for the components, wherein the constraint relationships include security constraints and functionality constraints. The system computes an unsatisfiable core which comprises a set of mutually incompatible constraints. The system resolves, based on a strategy and over multiple iterations, the unsatisfiable core by analyzing one pair of mutually incompatible constraints per a respective iteration, to obtain a new unsatisfiable core which comprises a smaller number of mutually incompatible constraints than the computed unsatisfiable core or a previously computed unsatisfiable core from a most recent iteration.

Soroush, Hamed↗

Exploring the Adoption Challenges of Post-Quantum Cryptography in EV Charging Infrastructure

The rapid evolution of electric vehicle (EV) technology and the corresponding growth of the Electric Vehicle Charging Infrastructure (EVCI) brings to light significant cybersecurity concerns, notably in the context of emerging post-quantum computing capabilities. This report, prepared by Pacific Northwest National Laboratory (PNNL) under the U.S. Department of Energy contract, delves into the challenges associated with integrating Post-Quantum Cryptography (PQC) into EVCI to safeguard against potential quantum computing threats. Post-quantum computers will eventually be able to invalidate technologies secured through public key cryptography. As part of this effort, the primary gaps and challenges in the EVCI were investigated with a focus on comparing traditional algorithms against PQC algorithms. One of the notable findings was that the P-521 algorithm was frequently surpassed in performance by PQC algorithms. This document provides a thorough examination of the hurdles the industry can expect when transitioning to PQC within the EVCI, such as interoperability concerns, the computational and memory demands of PQC algorithms, and the organizational readiness for such a transition. It emphasizes the necessity of a forward-thinking approach to cybersecurity, advocating for early and strategic engagement among EVCI stakeholders to ensure a seamless and cost-effective migration to quantum-resistant cryptographic standards. Through this report, the authors aim to catalyze awareness and action among policymakers, industry leaders, and cybersecurity professionals towards fortifying the EVCI against emerging quantum threats, thereby securing the infrastructure essential for the future of electric mobility.

33 ADVANCED PROPULSION SYSTEMS↗

Red Storm Case Study

Sandia and Cray Inc. co-developed Red Storm, a distributed memory, massively paralleled highperformance supercomputer modeled on ASCI Redl, to run computer codes used for conducting materials science simulations for national security. Supercomputers have some of the fastest highperformance systems available and are used primarily for scientific and engineering work requiring exceedingly high-speed computations. Unlike conventional computers, supercomputers have large storage capacity; more than one central processing unit to rapidly retrieve stored data and program instructions; and input/output capability.

97 MATHEMATICS AND COMPUTING↗

Explore: An Advanced Computing Agenda for Competitiveness

Over the course of this three-year grant, the Council on Competitiveness (Council) hosted six meetings of its Advanced Computing Roundtable made up of experts from a broad cross section of advanced computing users and manufacturers, and four Advanced Computing for Competitiveness Regional Forums to explore issues related to advanced computing in regions, states and localities. More than two hundred experts, stakeholders and policymakers from the federal and state levels participated in this work and provided their time and expertise to help define the opportunity in advanced computing and the barriers to it reaching its full potential as a game-changing competitive advantage for the United States economy and national security. Building on the insights of the Council’s Advanced Computing Roundtable and findings and recommendations from the four U.S. Department of Energy-supported Forums, the Council has identified several broad policy objectives for the United States related to advanced computing leadership and implementation. The United States must: Compete at the high end of advanced computing. Continue investing to be a technology leader as the world moves toward exascale computing, including in hardware, software and applications. America also must lead in strategic areas like extending Moore’s Law and quantum computing. Improve the ability of HPC-using firms to leverage advanced computing. The Council recommends steps to improve computational skills, increase industry partnerships with laboratories and academia, and expand and strengthen software partnerships. Regulatory agencies also should accelerate efforts to use modeling and simulation within the regulatory process. Expand the number of HPC-using companies in America. Too few firms are able to leverage advanced computing to innovate and compete. Federal, state and local economic development efforts should be utilized to lower barriers and teach small and medium-sized firms, particularly manufacturers, to use advanced modeling, simulation and analytics. Coordinate federal action. Federal agencies should continue to act in a coordinated fashion on advanced computing challenges through the Joint Program Office for Strategic Computing. Leverage HPC to compete in strategic technologies and applications. Leadership in advanced computing is tightly linked to leadership in artificial intelligence, the Internet of Things, cybersecurity, additive manufacturing and other emerging technologies. Public and private sector leaders should collaborate on research and partnership efforts that ensure world-class computing environments for strategic technology leadership.

advanced computing↗

Encryption for Remote Control via Internet or Intranet

A data-communication protocol has been devised to enable secure, reliable remote control of processes and equipment via a collision-based network, while using minimal bandwidth and computation. The network could be the Internet or an intranet. Control is made secure by use of both a password and a dynamic key, which is sent transparently to a remote user by the controlled computer (that is, the computer, located at the site of the equipment or process to be controlled, that exerts direct control over the process). The protocol functions in the presence of network latency, overcomes errors caused by missed dynamic keys, and defeats attempts by unauthorized remote users to gain control. The protocol is not suitable for real-time control, but is well suited for applications in which control latencies up to about 0.5 second are acceptable. The encryption scheme involves the use of both a dynamic and a private key, without any additional overhead that would degrade performance. The dynamic key is embedded in the equipment- or process-monitor data packets sent out by the controlled computer: in other words, the dynamic key is a subset of the data in each such data packet. The controlled computer maintains a history of the last 3 to 5 data packets for use in decrypting incoming control commands. In addition, the controlled computer records a private key (password) that is given to the remote computer. The encrypted incoming command is permuted by both the dynamic and private key. A person who records the command data in a given packet for hostile purposes cannot use that packet after the public key expires (typically within 3 seconds). Even a person in possession of an unauthorized copy of the command/remote-display software cannot use that software in the absence of the password. The use of a dynamic key embedded in the outgoing data makes the central-processing unit overhead very small. The use of a National Instruments DataSocket(TradeMark) (or equivalent) protocol or the User Datagram Protocol makes it possible to obtain reasonably short response times: Typical response times in event-driven control, using packets sized .300 bytes, are <0.2 second for commands issued from locations anywhere on Earth. The protocol requires that control commands represent absolute values of controlled parameters (e.g., a specified temperature), as distinguished from changes in values of controlled parameters (e.g., a specified increment of temperature). Each command is issued three or more times to ensure delivery in crowded networks. The use of absolute-value commands prevents additional (redundant) commands from causing trouble. Because a remote controlling computer receives "talkback" in the form of data packets from the controlled computer, typically within a time interval < or =1 s, the controlling computer can re-issue a command if network failure has occurred. The controlled computer, the process or equipment that it controls, and any human operator(s) at the site of the controlled equipment or process should be equipped with safety measures to prevent damage to equipment or injury to humans. These features could be a combination of software, external hardware, and intervention by the human operator(s). The protocol is not fail-safe, but by adopting these safety measures as part of the protocol, one makes the protocol a robust means of controlling remote processes and equipment by use of typical office computers via intranets and/or the Internet.

Lineberger, Lewis↗

Modeling, Simulation and Analysis of Public Key Infrastructure

Security is an essential part of network communication. The advances in cryptography have provided solutions to many of the network security requirements. Public Key Infrastructure (PKI) is the foundation of the cryptography applications. The main objective of this research is to design a model to simulate a reliable, scalable, manageable, and high-performance public key infrastructure. We build a model to simulate the NASA public key infrastructure by using SimProcess and MatLab Software. The simulation is from top level all the way down to the computation needed for encryption, decryption, digital signature, and secure web server. The application of secure web server could be utilized in wireless communications. The results of the simulation are analyzed and confirmed by using queueing theory.

Liu, Yuan-Kwei↗

Order priors for Bayesian network discovery with an application to malware phylogeny

Here, Bayesian networks have been used extensively to model and discover dependency relationships among sets of random variables. We learn Bayesian network structure with a combination of human knowledge about the partial ordering of variables and statistical inference of conditional dependencies from observed data. Our approach leverages complementary information from human knowledge and inference from observed data to produce networks that reflect human beliefs about the system as well as to fit the observed data. Applying prior beliefs about partial orderings of variables is an approach distinctly different from existing methods that incorporate prior beliefs about direct dependencies (or edges) in a Bayesian network. We provide an efficient implementation of the partial-order prior in a Bayesian structure discovery learning algorithm, as well as an edge prior, showing that both priors meet the local modularity requirement necessary for an efficient Bayesian discovery algorithm. In benchmark studies, the partial-order prior improves the accuracy of Bayesian network structure learning as well as the edge prior, even though order priors are more general. Our primary motivation is in characterizing the evolution of families of malware to aid cyber security analysts. For the problem of malware phylogeny discovery, we find that our algorithm, compared to existing malware phylogeny algorithms, more accurately discovers true dependencies that are missed by other algorithms.

97 MATHEMATICS AND COMPUTING↗

Security in Full-Force

When fully developed for NASA, Vanguard Enforcer(TM) software-which emulates the activities of highly technical security system programmers, auditors, and administrators-was among the first intrusion detection programs to restrict human errors from affecting security, and to ensure the integrity of a computer's operating systems, as well as the protection of mission critical resources. Vanguard Enforcer was delivered in 1991 to Johnson Space Center and has been protecting systems and critical data there ever since. In August of 1999, NASA granted Vanguard exclusive rights to commercialize the Enforcer system for the private sector. In return, Vanguard continues to supply NASA with ongoing research, development, and support of Enforcer. The Vanguard Enforcer 4.2 is one of several surveillance technologies that make up the Vanguard Security Solutions line of products. Using a mainframe environment, Enforcer 4.2 achieves previously unattainable levels of automated security management.

Source record↗

Computational Errors in the Calculation of Long Radioactive Decay Chains

For safety security of objects utilizing atomic energy, the effect of numerical errors on the calculation of the activity and integrals of the activity in time when using Bateman’s formula and Siewers’ algorithm to calculate radioactive decay chains is investigated. The smallest errors obtain when using Siewers’ algorithm and Bateman’s formula together with long arithmetic. It is shown that the standard calculations of radioactive decay chains according to Bateman’s formula with double precision lead to significant errors. However, these errors have almost no effect on the dose characteristics of mixtures of radionuclides. The analysis is based on data contained in ICRP Publication No. 107.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗