Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Security Requirements”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 487 records · Page 27

Insertion device for pressure testing

Test device which introduces either pressure or vacuum into a test pipe or tube, is insertable into the tested item where it secures itself into position and requires no external support. The unit has an operating range from zero to 25,000 psig and to any vacuum level that available equipment can reach.

Howland, B. T.↗

Applications of fiber optics technology to the Space Station

Attention is given to the EM interference, data bandwidth requirement, zero gravity operation, data security, crew safety, and modular expansion considerations affecting the future design of fiber-optical systems for large manned orbiting stations. Emphasis is given to replacing current, solar cell array electric systems technology for onboard furnace operation, leading to the formulation of a concentrated solar energy (thermal IR) transport system that yields higher efficiency than photovoltaics, despite its lower weight, in conjunction with Brayton, Rankine or Stirling cycle engines. The optical characteristics of the optical fibers employed by this system are discussed.

Erwin, H. O.↗

Review of Estelle and LOTOS with respect to critical computer applications

Man rated NASA space vehicles seem to represent a set of ultimate critical computer applications. These applications require a high degree of security, integrity, and safety. A variety of formal and/or precise modeling techniques are becoming available for the designer of critical systems. The design phase of the software engineering life cycle includes the modification of non-development components. A review of the Estelle and LOTOS formal description languages is presented. Details of the languages and a set of references are provided. The languages were used to formally describe some of the Open System Interconnect (OSI) protocols.

Bown, Rodney L.↗

Development of a COTS-Based Computing Environment Blueprint Application at KSC

This paper describes a blueprint that can be used for developing a distributed computing environment (DCE) for NASA in general, and the Kennedy Space Center (KSC) in particular. A comprehensive, open, secure, integrated, and multi-vendor DCE such as OSF DCE has been suggested. Design issues, as well as recommendations for each component have been given. Where necessary, modifications were suggested to fit the needs of KSC. This was done in the areas of security and directory services. Readers requiring a more comprehensive coverage are encouraged to refer to the eight-chapter document prepared for this work.

Ghansah, Isaac↗

The NASA Aviation Safety Program: Overview

In 1997, the United States set a national goal to reduce the fatal accident rate for aviation by 80% within ten years based on the recommendations by the Presidential Commission on Aviation Safety and Security. Achieving this goal will require the combined efforts of government, industry, and academia in the areas of technology research and development, implementation, and operations. To respond to the national goal, the National Aeronautics and Space Administration (NASA) has developed a program that will focus resources over a five year period on performing research and developing technologies that will enable improvements in many areas of aviation safety. The NASA Aviation Safety Program (AvSP) is organized into six research areas: Aviation System Modeling and Monitoring, System Wide Accident Prevention, Single Aircraft Accident Prevention, Weather Accident Prevention, Accident Mitigation, and Synthetic Vision. Specific project areas include Turbulence Detection and Mitigation, Aviation Weather Information, Weather Information Communications, Propulsion Systems Health Management, Control Upset Management, Human Error Modeling, Maintenance Human Factors, Fire Prevention, and Synthetic Vision Systems for Commercial, Business, and General Aviation aircraft. Research will be performed at all four NASA aeronautics centers and will be closely coordinated with Federal Aviation Administration (FAA) and other government agencies, industry, academia, as well as the aviation user community. This paper provides an overview of the NASA Aviation Safety Program goals, structure, and integration with the rest of the aviation community.

Shin, Jaiwon↗

Fourth Integrated Communications, Navigation, and Surveillance (ICNS) Conference and Workshop 2004: Conclusions and Recommendations

The NASA Glenn Research Center organized and hosted the Fourth Integrated Communications, Navigation, and Surveillance (ICNS) Technologies Conference and Workshop, which took place April 26-30, 2004 at the Hyatt Fair Lakes Hotel in Fairfax, Virginia. This fourth conference of the annual series followed the very successful first ICNS Conference (May 1-3, 2001 in Cleveland, Ohio), second ICNS conference (April 29-May 2, 2002 in Vienna, Virginia), and third ICNS conference (May 19-22, 2003 in Annapolis, Maryland). The purpose of the Fourth ICNS Conference was to assemble government, industry and academic communities performing research and development for advanced digital communications, surveillance and navigation systems and associated applications supporting the national and global air transportation systems to: 1) Understand current efforts and recent results in near- and far-term R&D and technology demonstration; 2) Identify integrated digital communications, navigation and surveillance R&D requirements necessary for a safe, secure and reliable, high-capacity, advanced air transportation system; 3) Provide a forum for fostering collaboration and coordination; and 4) Discuss critical issues and develop recommendations to achieve the future integrated CNS vision for national and global air transportation. The workshop attracted 316 attendees from government, industry and academia to address these purposes through technical presentations, breakout sessions, and individual and group discussions during the workshop and after-hours events, and included 16 international attendees. An Executive Committee consisting of representatives of several key segments of the aviation community concerned with CNS issues met on the day following the workshop to consider the primary outcomes and recommendations of the workshop. This report presents an overview of the conference, workshop breakout session results, and the findings of the Executive Committee.

Phillips, Brent↗

Transportation Network Topologies

The existing U.S. hub-and-spoke air transportation system is reaching saturation. Major aspects of the current system, such as capacity, safety, mobility, customer satisfaction, security, communications, and ecological effects, require improvements. The changing dynamics - increased presence of general aviation, unmanned autonomous vehicles, military aircraft in civil airspace as part of homeland defense - contributes to growing complexity of airspace. The system has proven remarkably resistant to change. NASA Langley Research Center and the National Institute of Aerospace conducted a workshop on Transportation Network Topologies on 9-10 December 2003 in Williamsburg, Virginia. The workshop aimed to examine the feasibility of traditional methods for complex system analysis and design as well as potential novel alternatives in application to transportation systems, identify state-of-the-art models and methods, conduct gap analysis, and thus to lay a foundation for establishing a focused research program in complex systems applied to air transportation.

Alexandrov, Natalia↗

Enrichment Determination of Uranium in Shielded Configurations

The determination of the enrichment of uranium is required in many safeguards and security applications. Typical methods of determining the enrichment rely on detecting the 186 keV gamma ray emitted by 235 U. In some applications, the uranium is surrounded by external shields, and removal of the shields is undesirable. In these situations, methods relying on the detection of the 186 keV gamma fail because the gamma ray is shielded easily. Oak Ridge National Laboratory (ORNL) has previously measured the enrichment of shielded uranium metal using active neutron interrogation. The method consists of measuring the time distribution of fast neutrons from induced fissions with large plastic scintillator detectors. To determine the enrichment, the measurements are compared to a calibration surface that is created from Monte Carlo simulations where the enrichment in the models is varied. In previous measurements, the geometry was always known. ORNL is extending this method to situations where the geometry and materials present are not known in advance. In the new method, the interrogating neutrons are both time and directionally tagged, and an array of small plastic scintillators measures the uncollided interrogating neutrons. Therefore, the attenuation through the item along many different paths is known. By applying image reconstruction techniques, an image of the item is created which shows the position-dependent attenuation. The image permits estimating the geometry and materials present, and these estimates are used as input for the Monte Carlo simulations. As before, simulations predict the time distribution of induced fission neutrons for different enrichments. Matching the measured time distribution to the closest prediction from the simulations provides an estimate of the enrichment. This presentation discusses the method and provides results from recent simulations that show the importance of knowing the geometry and materials from the imaging system.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Solar Water Heating with Low-Cost Plastic Systems

Federal buildings consumed over 392,000 billion Btu of site delivered energy for buildings during FY 2007 at a total cost of $6.5 billion. Earlier data indicate that about 10% of this is used to heat water.[2] Targeting energy consumption in Federal buildings, the Energy Independence and Security Act of 2007 (EISA) requires new Federal buildings and major renovations to meet 30% of their hot water demand with solar energy, provided it is cost-effective over the life of the system. In October 2009, President Obama expanded the energy reduction and performance requirements of EISA and its subsequent regulations with his Executive Order 13514.

Solar, Water, Heating, Low-Cost, Plastic↗

Bioindustry Creates Green Jobs

The U.S. bioindustry is expanding rapidly in response to the need for a near-term alternative to liquid petroleum fuels. The Energy Independence and Security Act of 2007 (EISA) requires that renewable fuels collectively supply at least 36 billion gallons of U.S. motor fuels by 2022.

bioenergy, biomass program, BETO, bioenergy techno↗

Warhead Activities (Life Extension Programs, Modifications, and Alterations)

NNSA’s warhead modernization activities ensure that the U.S. nuclear weapons stockpile continues to meet Department of Defense (DoD) requirements while enhancing safety and security. NNSA’s modernization efforts address aging, unavailability of replacement parts, and integration with DoD’s modernized nuclear weapons delivery systems without providing new military capabilities or the need for explosive nuclear testing.

Source record↗

Desktop Audits: Overview, Case Studies, Guidance

The Energy Independence and Security Act (EISA) of 2007 requires that federal agencies audit 25% of their 3.1 billion square feet of covered facilities each year. Several newer, advanced options such as monitoring-based commissioning, fault detection and diagnostics, and energy management systems can help support data collection and analysis to be used for EISA compliance. The Federal Energy Management Program's (FEMP’s) Audit Decision Tree, Audit Definitions, and FEMP Guidance can be used by Agencies to determine the best approaches to evaluate their facilities. FEMP continues to develop additional resources to support agencies in meeting EISA compliance. This presentation gives an overview of desktop audits, including case studies and guidance.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Interdisciplinary Approaches to Cyber-vulnerability Impact Assessment for Energy Critical Infrastructure

As energy infrastructure becomes more interconnected, understanding cybersecurity risks to production systems requires integrating operational and computer security knowledge. We interviewed 18 experts working in the field of energy critical infrastructure to compare what information they find necessary to assess the impact of computer vulnerabilities on energy operational technology. These experts came from two groups: 1) computer security experts and 2) energy sector operations experts. We find that both groups responded similarly for general categories of information and displayed knowledge about both domains, perhaps due to their interdisciplinary work at the same organization. Yet, we found notable differences in the details of their responses and in their stated perceptions of each group’s approaches to impact assessment. Their suggestions for collaboration across domains highlighted how these two groups can work together to help each other secure the energy grid. Our findings inform the development of interdisciplinary security approaches in critical-infrastructure contexts.

97 MATHEMATICS AND COMPUTING↗

Evaluation of Physical Security Risk for Potential Implementation of FLEX using Dynamic Simulation Methods

The requirements for United States nuclear power plants to maintain a large onsite physical security force contribute to their large operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability Program Physical Security Pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. This pathway will analyze and minimize the conservatisms built into current security postures in order to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within this pathway has successfully developed a dynamic force-on-force (FOF) modeling framework using various computer simulation tools and integrated them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This document provides an overview of lessons learned in applying a dynamic computational framework that links results from a commercially available FOF simulation tool, a commercially available thermal-hydraulic tool, and EMRALD to an operating commercial nuclear power plant. This process of including plant procedures and multiple analysis results is being called Modeling and Analysis for Safety Security using Dynamic EMRALD Framework. Previous reports described how a user could integrate their plant-specific FOF models with the dynamic simulation tool EMRALD, model operator actions, integrate with probabilistic risk assessment tools, such as Computer Aided Fault Tree Analysis System or Systems Analysis Programs for Hands-on Integrated Reliability Evaluations, and with thermal-hydraulic tools, such as RELAP-5. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report documents the results of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. The purpose of this study was to verify that results achieved using generic models are similar to actual plant results and to refine our guidance of the use of the framework. Such an assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants. NOTE: The work performed in this report is based on a generic EMRALD model with actual plant data used for the analysis. However, only the generic model and general results of the analysis are in the report. No plant’s sensitive information is discussed in this report. The discussion shows examples of insights that can be obtained from the MASS-DEF methodology.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Opportunities and challenges for structural health monitoring of radioactive waste systems and structures

Radioactive waste systems and structures (RWSS) are safety-critical facilities in need of monitoring over prolonged periods of time. Structural health monitoring (SHM) is an emerging technology that aims at monitoring the state of a structure through the use of networks of permanently mounted sensors. SHM technologies have been developed primarily within the aerospace and civil engineering communities. This paper addresses the issue of transitioning the SHM concept to the monitoring of RWSS and evaluates the opportunities and challenges associated with this process. Guided wave SHM technologies utilizing structurally-mounted piezoelectric wafer active sensors (PWAS) have a wide range of applications based on both propagating-wave and standing-wave methodologies. Hence, opportunities exist for transitioning these SHM technologies into RWSS monitoring. However, there exist certain special operational conditions specific to RWSS such as: radiation field, caustic environments, marine environments, and chemical, mechanical and thermal stressors. In order to address the high discharge of used nuclear fuel (UNF) and the limited space in the storage pools the U.S. the Department of Energy (DOE) has adopted a 'Strategy for the Management and Disposal of Used Nuclear Fuel and High-Level Radioactive Waste' (January 2013). This strategy endorses the key principles that underpin the Blue Ribbon Commission's on America's Nuclear Future recommendations to develop a sustainable program for deploying an integrated system capable of transporting, storing, and disposing of UNF and high-level radioactive waste from civilian nuclear power generation, defense, national security, and other activities. This will require research to develop monitoring, diagnosis, and prognosis tools that can aid to establish a strong technical basis for extended storage and transportation of UNF. Monitoring of such structures is critical for assuring the safety and security of the nation's spent nuclear fuel until a national policy for closure of the nuclear fuel cycle is defined and implemented. In addition, such tools can provide invaluable and timely information for verification of the predicted mechanical performance of RWSS (e.g. concrete or steel barriers) during off-normal occurrence and accident events such as the tsunami and earthquake event that affected Fukushima Daiichi nuclear power plant. The ability to verify the conditions, health, and degradation behavior of RWSS over time by applying nondestructive testing (NDT) as well as development of nondestructive evaluation (NDE) tools for new degradation processes will become challenging. The paper discusses some of the challenges associated to verification and diagnosis for RWSS and identifies SHM technologies which are more readily available for transitioning into RWSS applications. Fundamental research objectives that should be considered for the transition of SHM technologies (e.g., radiation hardened piezoelectric materials) for RWSS applications are discussed. The paper ends with summary, conclusions, and suggestions for further work. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Multilayered Network Models for Security: Enhancing System Security Engineering with Orchestration

Security engineering approaches can often focus on a particular domain—physical security, cyber security, or personnel security, for example. Yet, security systems engineering consistently faces challenges requiring socio-technical solutions to address evolving and dynamic complexity. While some drivers of this complexity stem from complex risk environments, innovative adversaries, and disruptive technologies, other drivers are endogenous and emerge from the interactions across security engineering approaches. In response, INCOSE's Systems Security Working Group identified the need to better coordinate “disparate security solutions [that] operate independently” as one of eleven key concepts in their IS21 FuSE Security Roadmap. From this perspective, this need for “security orchestration” aligns with the perspective that security is a property that emerges from interactions within complex systems. Current efforts at Sandia National Laboratories are developing a systems security engineering approach that describes high consequence facility (HCF) security as a multidomain set of interacting layers. The result is a multilayered network (MLN)-based approach that captures the interactions between infrastructure, physical components, digital components, and humans in nuclear security systems. This article will summarize the MLN-based approach to HCF security and describe two preliminary results demonstrating potential benefits from incorporating interactions across disparate security solutions. Here, leveraging the logical structure of networks, this MLN model-based approach provides an example of how security orchestration provides enhanced systems security engineering solutions.

42 ENGINEERING↗

Analysis to determine the maximum dimensions of flexible apertures in sensored security netting products.

Although technological advances provide new capabilities to increase the robustness of security systems, they also potentially introduce new vulnerabilities. New capability sometimes requires new performance requirements. This paper outlines an approach to establishing a key performance requirement for an emerging intrusion detection sensor: the sensored net. Throughout the security industry, the commonly adopted standard for maximum opening size through barriers is a requirement based on square inches typically 96 square inches. Unlike standard rigid opening, the dimensions of a flexible aperture are not fixed, but variable and conformable. It is demonstrably simple for a human intruder to move through a 96-square-inch opening that is conformable to the human body. The longstanding 96-square-inch requirement itself, though firmly embedded in policy and best practice, lacks a documented empirical basis. This analysis concluded that the traditional 96-square-inch standard for openings is insufficient for flexible openings that are conformable to the human body. Instead, a circumference standard is recommended for these newer types of sensored barriers. The recommended maximum circumference for a flexible opening should be no more than 26 inches, as measured on the inside of the netting material.

Murton, Mark↗

Cyber risk assessment and investment optimization using game theory and ML-based anomaly detection and mitigation for wide-area control in smart grids

The electric power grid is increasingly becoming susceptible to cyber attacks that exploit vulnerabilities in the smart grid control, information, and physical layers. Successful cyber attacks can have catastrophic impacts on the social and economic well-being of any nation all over the globe. It has, thus, become imperative to secure the smart grid against such adversarial actions to ensure stable, secure, and reliable operation of the grid. The existing research and industry practices prove to be inadequate in terms of providing pragmatic and effective defense methodologies and measures for long-term cybersecurity planning and real-time cybersecurity for grid operation. For example, existing works lack models that incorporate uncertain behavior of cyber-attackers and pragmatic defense measures for cyber risk assessment and cybersecurity investment optimization which often provide unreliable and strictly qualitative solutions to these problems. At the same time, with the growing number of cyber incidents in the grid, there still exists a need to develop attack-resilient algorithms for wide-area monitoring, protection, and control (WAMPAC) applications like the wide-area voltage control systems (WAVCS) for Flexible AC Transmissions Systems (FACTS) that lack in scalable and feasible solutions from the cybersecurity perspective. This dissertation proposes novel models and methodologies for: (1) Cybersecurity planning, and (2) Cybersecurity for system operation. The cybersecurity planning is achieved through cyber risk assessment and cybersecurity resource investment optimization for long-term cybersecurity of the grid using game theory and attack-defense trees. Cybersecurity for system operation consists of development of cyber anomaly detection and mitigation algorithms for flexible AC transmission system (FACTS) controller-based wide-area voltage control systems (WAVCS) using machine learning (ML), and software defined networking-based moving target defense network routing for achieving real-time cyber-physical security for grid operations. This is followed by hardware-in-the-loop (HIL) implementation and evaluation of these attack prevention, detection, and mitigation algorithms and methodologies showcasing their feasibility in a close to real-world environment. For cybersecurity planning, a novel approach involving a combination of game theory and attack defense trees (ADT) for optimal cybersecurity resource allocation in the smart grid is proposed. This methodology involves modeling of the cyber-physical smart grid substations as ADTs, defining attacker costs, defense costs, and attack probabilities for attack access points. Using game theoretical formulation, optimal defense strategies for the defender of the system to invest cybersecurity resources in the grid are obtained. Additionally, a game-theoretic framework is developed for quantitative cyber-physical risk assessment of the grid under a dynamically changing cyber threat space and uncertain behavior of cyber attackers which is further used to optimize investments in the smart grid's cybersecurity resources. The attacker, defender, and the smart grid system are modeled while incorporating attacker-stochasticity and federal guidelines for smart grid cybersecurity. This allows quantification of threat, vulnerabilities, and attack impact of the grid for quantitative risk assessment. The defender's budget to invest in the security resources in the grid is optimized based on the strategies leading to minimum system risk. The evaluation of the proposed solutions highlight the feasibility for practical implementation of these methodologies and algorithms in the smart grid, while taking the federal requirements and guidelines for smart grid security into consideration. For achieving cybersecurity for system operation, attack prevention, detection, and mitigation algorithms and methodologies are developed specifically for FACTS-based WAVCS. Anomaly detection and mitigation in the WAVCS are achieved using algorithms based on machine learning which involves offline training and testing of ML models with CPS datasets incorporating physics-based features that allow accurate distinction between system faults and cyber attacks. For attack prevention, a methodology based on software defined network (SDN)-based moving target defense (MTD) network routing is proposed that enables prevention of Denial of Service (DoS) type attacks on the smart grid communication system. Subsequently, these methodologies and algorithms are implemented and evaluated on an HIL testbed that allows for real-time attack prevention, detection, and mitigation of emulated cyber attacks on the WAVCS in a close to real-world environment. The results show highly accurate and efficient performance of the implemented algorithms and methodologies with the smart grid system operating within the NERC's system operation limits even in the presence of DoS and data integrity cyber attacks. This work opens up future research opportunities in other directions such as (1) Expanding cybersecurity planning methodologies to real-time cyber contingency analysis with different game formulations; and (2) Applying the cybersecurity for system operation algorithms to broader categories of wide-area control applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗