Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “IT security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25
All sourcesNASA NTRSDOE OSTI
NASA NTRS2017

Cyber Safety and Security for Reduced Crew Operations (RCO)

NASA and the Aviation Industry is looking into reduced crew operations (RCO) that would cut today's required two-person flight crews down to a single pilot with support from ground-based crews. Shared responsibility across air and ground personnel will require highly reliable and secure data communication and supporting automation, which will be safety-critical for passenger and cargo aircraft. This paper looks at the different types and degrees of authority delegation given from the air to the ground and the ramifications of each, including the safety and security hazards introduced, the mitigation mechanisms for these hazards, and other demands on an RCO system architecture which would be highly invasive into (almost) all safety-critical avionics. The adjacent fields of unmanned aerial systems and autonomous ground vehicles are viewed to find problems that RCO may face and related aviation accident scenarios are described. The paper explores possible data communication architectures to meet stringent performance and information security (INFOSEC) requirements of RCO. Subsequently, potential challenges for RCO data communication authentication, encryption and non-repudiation are identified.

Communications↗
NASA NTRS2019

Air Traffic Management Blockchain Infrastructure for Security, Authentication, and Privacy

Current radar-based air traffic service providers may preserve privacy for military and corporate operations by procedurally preventing public release of selected flight plans, position, and state data. The FAA mandate for national adoption of Automatic Dependent Surveillance Broadcast (ADS-B) in 2020 does not include provisions for maintaining these same aircraft-privacy options, nor does it address the potential for spoofing, denial of service, and other well-documented risk factors. This paper presents an engineering prototype that embodies a design and method that may be applied to mitigate these ADS-B security issues. The design innovation is the use of an open source permissioned blockchain framework to enable aircraft privacy and anonymity while providing a secure and efficient method for communication with Air Traffic Services, Operations Support, or other authorized entities. This framework features certificate authority, smart contract support, and higher-bandwidth communication channels for private information that may be used for secure communication between any specific aircraft and any particular authorized member, sharing data in accordance with the terms specified in the form of smart contracts. The prototype demonstrates how this method can be economically and rapidly deployed in a scalable modular environment.

air traffic privacy & authentication↗
NASA NTRS2018

Reliable and Secure Surveillance, Communications and Navigation (RSCAN) for Unmanned Air Systems (UAS) in Controlled Airspace

The aviation industry faces a rapidly-emerging need for integrating Unmanned Air Systems (UAS) into the national airspace (NAS). This trend will present challenging questions for the safe operation of UAS in controlled and uncontrolled airspaces based on new Communications, Navigation and Surveillance (CNS) technologies. For example, can wireless communications data links provide the necessary capacity for accommodating ever increasing numbers of UAS worldwide? Does the communications network provide ample Internet Protocol (IP) address space to allow Air Traffic Control (ATC) to securely address each UAS? Can navigation and surveillance approaches assure safe route planning and safe separation of vehicles even in crowded skies?Under NASA contract NNA16BD84C, Boeing is developing an integrated CNS architecture to enable UAS operations in the NAS. Revolutionary and advanced CNS alternatives are needed to support UAS operations at all altitudes and in all airspaces, including both controlled and uncontrolled. These CNS alternatives must be reliable, redundant, always available, cyber-secure, and affordable for all types of vehicles including small UAS to large transport category aircraft. Our approach considers CNS requirements that address the range of UAS missions where they will be most beneficial and cost-effective.A cybersecure future UAS CNS architecture is needed to support the NASA vision for an Unmanned Air Traffic Management (UTM) system in uncontrolled airspace and a cooperative operation of manned and unmanned aircraft in the controlled global Air Traffic Management (ATM) system. The architecture must, therefore, support always-available and cyber secure operations. This paper presents UAS CNS architecture concepts for large UAS operating in the ATM system in controlled airspace. Future companion works will consider small UAS operating in the UTM system in uncontrolled airspace.

Ponchak, Denise S.↗
NASA NTRS2019

Air Traffic Management Blockchain Infrastructure for Security, Authentication, and Privacy

Current radar-based air traffic service providers may preserve privacy for military and corporate operations by procedurally preventing public release of selected flight plans, position, and state data. The FAA mandate for national adoption of Automatic Dependent Surveillance Broadcast (ADS-B) in 2020 does not include provisions for maintaining these same aircraft-privacy options, nor does it address the potential for spoofing, denial of service, and other well-documented risk factors. This paper presents an engineering prototype that embodies a design and method that may be applied to mitigate these ADS-B security issues. The design innovation is the use of an open source permissioned blockchain framework to enable aircraft privacy and anonymity while providing a secure and efficient method for communication with Air Traffic Services, Operations Support, or other authorized entities. This framework features certificate authority, smart contract support, and higher-bandwidth communication channels for private information that may be used for secure communication between any specific aircraft and any particular authorized member, sharing data in accordance with the terms specified in the form of smart contracts. The prototype demonstrates how this method can be economically and rapidly deployed in a scalable modular environment.

ADS-B cybersecurity↗
NASA NTRS2021

Challenges and opportunities for enhancing food security and greenhouse gas mitigation in smallholder farming in sub-Saharan Africa. A review

Smallholder farmers struggle to achieve food security in many countries of sub-Saharan Africa (SSA). It is urgently required to find appropriate practices for enhancing crop production while avoiding large increases in greenhouse gas (GHG) emissions in SSA. This review aims to identify common smallholder farming practices for enhancing crop production, to assess how these affect GHG emissions and to identify strategies that not only enhance crop production but also mitigate GHG emissions in SSA. To increase crop production and ensure food security, smallholder farmers usually expand agricultural land, develop water harvesting and irrigation techniques and increase cropping intensity and fertilizer use. These practices may result in changing carbon stocks and GHG emissions, potentially creating trade-offs between food security and GHG mitigation. Agricultural land expansion at the expense of forests is the most dominant source of GHG emissions in SSA. While water harvesting and irrigation can increase soil organic carbon, they can trigger GHG emissions. Increasing cropping intensity can enhance the decomposition of soil organic matter, thus releasing carbon dioxide. Increasing nitrogen fertilizer use can enhance soil organic carbon, but also leads to increasing nitrous oxide emissions. An integrated land, water and nutrient management strategy is necessary to enhance crop production and mitigate GHG emissions. Among the most relevant strategies found, agroforestry practices in degraded and marginal lands could replace expanding agricultural croplands. In addition, water management, via adequate rainwater harvesting and irrigation techniques, together with appropriate nutrient management should be considered. Therefore, a land-water-nutrient nexus (LWNN) approach will enable an integrated and sustainable solution to increasing crop production and mitigating GHG emissions. Various technical, economic and policy barriers hinder implementing the LWNN approach on the ground, but these may be overcome through developing appropriate technologies, disseminating them through farmer to farmer approaches and developing specific policies to address smallholder land tenure issues and motivate long-term investment.

Sub-Sahara Africa↗
NASA NTRS2022

A Central Asia Hydrologic Monitoring Dataset for Food and Water Security Applications in Afghanistan

From the Hindu Kush mountains to the Registan Desert, Afghanistan is a diverse landscape where droughts, floods, conflict, and economic market accessibility pose challenges for agricultural livelihoods and food security. The ability to remotely monitor environmental conditions is critical to support decision making for humanitarian assistance. The Famine Early Warning Systems Network (FEWS NET) Land Data Assimilation System (FLDAS) global and Central Asia data streams provide information on hydrologic states for routine integrated food security analysis. While developed for a specific project, these data are publicly available and useful for other applications that require hydrologic estimates of the water and energy balance. These two data streams are unique because of their suitability for routine monitoring, as well as for being a historical record for computing relative indicators of water availability. The global stream is available at ∼ 1-month latency, and monthly average outputs are on a 10 km grid from 1982–present. The second data stream, Central Asia (21–56°N, 30–100°E), at ∼ 1 d latency, provides daily average outputs on a 1 km grid from 2000–present. This paper describes the configuration of the two FLDAS data streams, background on the software modeling framework, selected meteorological inputs and parameters, and results from previous evaluation studies. We also provide additional analysis of precipitation and snow cover over Afghanistan. We conclude with an example of how these data are used in integrated food security analysis. For use in new and innovative studies that will improve understanding of this region, these data are hosted by U.S. Geological Survey data portals and the National Aeronautics and Space Administration (NASA). The Central Asia data described in this paper can be accessed via the NASA repository at https://doi.org/10.5067/VQ4CD3Y9YC0R (Jacob and Slinski, 2021), and the global data described in this paper can be accessed via the NASA repository at https://doi.org/10.5067/5NHC22T9375G (McNally, 2018).

Amy McNally↗
NASA NTRS2024

Georgia’s Potentials for Sustainable Intensification, Increasing Food Security and Rural Incomes

Increasing global demand for agricultural commodities spurs conversions of natural ecosystems. Sustainable intensification in areas of high yield gaps can contribute to reducing the impact of commodity production, while also supporting development, food security, and livelihoods. Following the dissolution of the Union of Soviet Socialist Republics (USSR), Georgia experienced one the highest losses of agricultural productivity among all former USSR countries and is now highly dependent on food imports. Closing yield gaps in Georgia through sustainable intensification has the potential to increase food self-sufficiency, support rural livelihoods, and strengthen food security and sovereignty. We estimated it’s potential for sustainable intensification on current agricultural areas to achieve self-sufficiency for wheat, maize, and barley. We found that crop yields can be doubled to tripled under high input production systems, using high-yielding varieties, optimized inputs, fertilizers, and pest control. Yet, self-sufficiency in wheat can only be reached if at least 60-80% of the potentially attainable yields are achieved and if land is optimally allocated between crops. To achieve such increases, farmers need access to and training for using different crop varieties, fertilizers, and pest and disease control practices and products. Intensification increases the risks to ecosystem services health and livelihoods, particularly raising equity concern. Yet, intensifying very low input systems is often found to be more sustainable, with high yield increases compared to limited impacts on the environment. The high employment in the agricultural sector in Georgia particularly provides opportunities to reduce poverty and increase livelihoods through increasing incomes and food security.

Florian Gollnow↗
DOE OSTI2020

Streaming authentication and multi-level security for communications networks using quantum cryptography

Message authenticators for quantum-secured communications facilitate low-latency authentication with assurances of security. Low-latency message authenticators are especially valuable in infrastructure systems where security and latency constraints are difficult to satisfy with conventional non-quantum cryptography. For example, a message transmitter receives a message and derives an authentication tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message transmitter outputs the message and its authentication tag. A message receiver receives a message and authentication tag for the message. The message receiver derives a comparison tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message receiver checks whether the message is authentic based on a comparison of the authentication tag and the comparison tag. In example implementations, the authenticator uses stream-wise cyclic redundancy code operations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Nuclear Security Interface Considerations for Regaining Control of Discovered Nuclear and Radioactive Materials

Recognizing that regaining control of orphan radioactive and nuclear material is challenging, the international community has developed requirements and guidance to support countries in addressing the problem. However, limited guidance is available on the practical nuclear security related issues that arise when nuclear or other radioactive material out of regulatory control (MORC) is encountered and efforts are undertaken to regain control. For example, the IAEA Specific Safety Guide No. SSG-19, “National Strategy for Regaining Control over Orphan Sources and Improving Control over Vulnerable Sources”, provides recommendations on a methodology for establishing a national strategy for regaining control of orphan sources. However, except for Pu239 in radioactive sources, nuclear material is outside the scope of this safety guide, and practical safety and security measures below the level of national strategy are not discussed adequately.This paper discusses the interfaces between the stakeholder groups and the responsibilities of each when encountering common scenarios that deal with MORC transitioning to regulatory control. The stakeholders include but are not limited to individuals who encounter MORC, and providers of formal and informal transport systems, and traditional and ad hoc storage solutions. This paper explores practical legal, financial, and institutional issues that hinder implementation of required safety and security practices. This paper also offers strategies that can be implemented on the individual, organizational, national, and international level to regain control of MORC.

Shannon, Michael↗
DOE OSTI2021

Blockchain-Enabled Cyber-Secure Microgrid Control Using Consensus Algorithm: Preprint

This paper proposes a distributed control method based on a consensus algorithm for distributed energy resources (DERs) using blockchain as a secure communication medium for cyber resilience. Each DER communicates with a local blockchain server that is maintained by the distributed ledger technology to allow for securely sharing local measurements among neighboring assets to achieve the global control objectives, i.e., voltage and frequency regulation as well as accurate power sharing among the DERs, including collective grid-forming capability. To prove that the distributed control can retain system stability under a blockchain-induced variable communication delay, Lyapunov function-based stability analysis is carried out. This paper demonstrates the concept on an 11-bus test case developed in MATLAB Simulink, which has been modified from the IEEE 9-bus test case, to study dynamic operations of the five inverter-based DERs working with a blockchain-induced variable delay. The results validate the superior performance of the proposed control method, compared to heavily compromised operations of the other test cases without the security measure, affected by heavy communication delays and communication interruptions.

blockchain↗
DOE OSTI2022

Nevada National Security Site Environmental Report 2021 with 2021 Environmental Report Attachment A: Site Description

This Nevada National Security Site Environmental Report (NNSSER) summarizes actions taken in 2021 to protect the environment and the public while achieving the NNSA/NFO mission goals. It is prepared for the public and our stakeholders in hopes that it is readily understandable and usable. It is a key component in our efforts to keep the public informed of environmental conditions at the NNSS and its support facilities in Las Vegas, Nevada. The accompanying Attachment A expands on the general description of the Nevada National Security Site (NNSS) presented in the Introduction to the Nevada National Security Site Environmental Report 2021. Included are subsections that summarize the site’s geological, hydrological, climatological, and ecological settings and the cultural resources of the NNSS.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Nevada National Security Site Environmental Report 2022 w/Attachment A Site Description

This Nevada National Security Site Environmental Report (NNSSER) summarizes actions taken in 2022 to protect the environment and the public while achieving the NNSA/NFO mission goals. It is prepared for the public and our stakeholders in hopes that it is readily understandable and usable. It is a key component in our efforts to keep the public informed of environmental conditions at the NNSS and its support facilities in Las Vegas, Nevada. The accompanying Attachment A expands on the general description of the Nevada National Security Site (NNSS) presented in the Introduction to the Nevada National Security Site Environmental Report 2022. Included are subsections that summarize the site’s geological, hydrological, climatological, and ecological settings and the cultural resources of the NNSS.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Building Blocks for Secure and Prosperous Defense Critical Supply Chains: A Case Study from Microelectronics

Securing defense-critical supply chains, built on resilient and sustainable microelectronics fabrication and deployment, is a national imperative and one that requires an investment in basic and applied research, development, and deployment into industries in (and out of) the Defense Industrial Base (DIB). Critical next steps include the development of pilots for revolutionary concepts in a new formal verification model and the Cyber-Physical Passport (CPP) concept for chain of custody. Critical infrastructure leadership should take action with a sense of urgency. Working in conjunction with the Under Secretary for Acquisition and Sustainment, the Assistant Secretary of Defense for Research and Engineering should establish pilot programs with the Defense Advanced Research Projects Agency and the service labs to build and test both concepts in legacy and new system development.. Additionally, the Pentagon may be aware that an existing Manufacturing Innovation Institute is piloting, with the semiconductor industry, cyber innovations to provide verifiable security properties and guarantees of physical functions to build a more cyber secure, resilient and efficient micro-electronics supply chain.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2023

Streaming authentication and multi-level security for communications networks using quantum cryptography

Message authenticators for quantum-secured communications facilitate low-latency authentication with assurances of security. Low-latency message authenticators are especially valuable in infrastructure systems where security and latency constraints are difficult to satisfy with conventional non-quantum cryptography. For example, a message transmitter receives a message and derives an authentication tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message transmitter outputs the message and its authentication tag. A message receiver receives a message and authentication tag for the message. The message receiver derives a comparison tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message receiver checks whether the message is authentic based on a comparison of the authentication tag and the comparison tag. In example implementations, the authenticator uses stream-wise cyclic redundancy code operations.

Hughes, Richard J.↗
DOE OSTI2024

Increasing Diversity in the Field of Radiological Security

This paper will report on a diversity initiative undertaken by the NNSA Office of Radiological Security (ORS), Brookhaven National Laboratory and the Institute of Nuclear Materials Management. This paper will report on the planning associated with inclusion of radiological and nuclear security in the annual meeting program, the process of identifying and selecting individuals who will receive grants to attend the meeting, the expected impact of the INMM/ORS diversity initiative on the nuclear security community, and lessons learned.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2023

Development of A Hardware-In-the-Loop (HIL) Testbed for Cyber-Physical Security in Smart Buildings

As smart buildings move towards open communication technologies, providing access to the Building Automation System (BAS) through the building's intranet, or even remotely through the Internet, has become a common practice. However, BAS was historically developed as a closed environment and designed with limited cyber-security considerations. Thus, smart buildings are vulnerable to cyber-attacks with the increased accessibility. This study introduces the development and capability of a Hardware-in-the-Loop (HIT) testbed for testing and evaluating the cyber-physical security of typical BASs in smart buildings. The testbed consists of three subsystems: (1) a real-time HIL emulator simulating the behavior of a virtual building as well as the Heating, Ventilation, and Air Conditioning (HVAC) equipment via a dynamic simulation in Modelica; (2) a set of real HVAC controllers monitoring the virtual building operation and providing local control signals to control HVAC equipment in the HIL emulator; and (3) a BAS server along with a web-based service for users to fully access the schedule, setpoints, trends, alarms, and other control functions of the HVAC controllers remotely through the BACnet network. The server generates rule-based setpoints to local HVAC controllers. Based on these three subsystems, the HIL testbed supports attack/fault-free and attack/fault-injection experiments at various levels of the building system. The resulting test data can be used to inform the building community and support the cyber-physical security technology transfer to the building industry.

Li, Guowen↗
DOE OSTI2024

Developing a Supply Chain Security Program

Amid growing concerns over foreign manufacturing for components and devices deployed in critical energy infrastructure, this research from the national labs will highlight best practices for developing and maintaining a supply chain security program. Tools for asset inventory, tips for developing and maintaining software- and hardware-bills-of-materials (SBOMs and HBOMs), recommended contractual language for vendor agreements, and identification of responsibilities will be shared. We discuss the one-time requirements to enable a successful supply chain security program and the best ways to operationalize this program for maximum impact, including development of robust practices for vulnerability tracking, patch management, and workarounds, with understanding of the reliability and uptime requirements for utilities. The recommendations shared are based on a cyber-informed engineering approach to identification of high-consequence impacts and the engineering controls related to supply chain management that can best mitigate these impacts. This approach allows for prioritization of resources. Additionally, we highlight relative up-front and ongoing costs associated with recommended controls. Viewers will leave with an understanding what a supply chain security program is, and what steps, prioritized for resource-constrained organizations, can build a robust program.

14 SOLAR ENERGY↗
DOE OSTI2024

Assessment of ROI for Workforce Development Efforts National & Homeland Security

The IDEAL Professional Engagement project at Idaho National Laboratory (INL) aims to enhance the laboratory's workforce diversity and inclusivity efforts, focusing on the U.S. National and Homeland Security mission areas. This project involves researching and evaluating opportunities for INL to engage in various professional events, particularly cyber conferences, to support recruitment and professional development. The project involved several key tasks: compiling comprehensive information on national laboratories and their mission statements, developing a deep understanding of INL’s role and efforts in national and homeland security, and identifying and engaging key stakeholders. Interviews were conducted with a set of targeted questions, and the findings were analyzed to identify common themes, insights, and actionable recommendations. Additionally, relevant upcoming cyber conferences were identified, various sponsorship levels and their associated benefits were evaluated, and the recruitment potential of these conferences was assessed. A detailed cost analysis was performed, including registration fees and travel expenses, and a cost-benefit analysis was conducted to evaluate the financial viability and potential return on investment (ROI) of conference participation and sponsorship. Based on the research and analysis, actionable recommendations for conference participation and sponsorship were formulated, ensuring alignment with INL’s mission and diversity goals. Preliminary results include a comprehensive list of relevant cyber conferences, a detailed cost analysis, and a set of actionable recommendations for future conference participation and sponsorship. The analysis highlights the financial requirements and geographical distribution of these conferences, providing valuable insights for INL's engagement strategies. This project underscores the importance of strategic engagement in professional events to attract and develop a diverse and skilled workforce, ultimately supporting INL’s mission areas in U.S. National and Homeland Security.

99 GENERAL AND MISCELLANEOUS↗