Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Asset Management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 649 records · Page 36

NASA's Space Launch System Advanced Booster Development

The National Aeronautics and Space Administration's (NASA's) Space Launch System (SLS) Program, managed at the Marshall Space Flight Center, is making progress toward delivering a new capability for human space flight and scientific missions beyond Earth orbit. NASA is executing this development within flat budgetary guidelines by using existing engines assets and heritage technology to ready an initial 70 metric ton (t) lift capability for launch in 2017, and then employing a block upgrade approach to evolve a 130-t capability after 2021. A key component of the SLS acquisition plan is a three-phased approach for the first-stage boosters. The first phase is to expedite the 70-t configuration by completing development of the Space Shuttle heritage 5-segment solid rocket boosters (SRBs) for the initial flights of SLS. Since no existing boosters can meet the performance requirements for the 130-t class SLS, the next phases of the strategy focus on the eventual development of advanced boosters with an expected thrust class potentially double the current 5-segment solid rocket booster capability of 3.88 million pounds of thrust each. The second phase in the booster acquisition plan is the Advanced Booster Engineering Demonstration and/or Risk Reduction (ABEDRR) effort, for which contracts were awarded beginning in 2012 after a full and open competition, with a stated intent to reduce risks leading to an affordable advanced booster. NASA has awarded ABEDRR contracts to four industry teams, which are looking into new options for liquid-fuel booster engines, solid-fuel-motor propellants, and composite booster structures. Demonstrations and/or risk reduction efforts were required to be related to a proposed booster concept directly applicable to fielding an advanced booster. This paper will discuss the status of this acquisition strategy and its results toward readying both the 70 t and 130 t configurations of SLS. The third and final phase will be a full and open competition for Design, Development, Test, and Evaluation (DDT&E) of the advanced boosters. These new boosters will enable the flexible path approach to deep space exploration, opening up vast opportunities for human missions to near-Earth asteroids and Mars. This evolved capability will offer large volume for science missions and payloads, will be modular and flexible, and will be right-sized for mission requirements.

Robinson, Kimberly F.↗

Robonaut 2 and Watson: Cognitive Dexterity for Future Exploration

Future exploration missions will dictate a level of autonomy never before experienced in human spaceflight. Mission plans involving the uncrewed phases of complex human spacecraft in deep space will require a coordinated autonomous capability to be able to maintain the spacecraft when ground control is not available. One promising direction involves embedding intelligence into the system design both through the employment of state-of-the-art system engineering principles as well as through the creation of a cognitive network between a smart spacecraft or habitat and embodiments of cognitive agents. The work described here details efforts to integrate IBM's Watson and other cognitive computing services into NASA Johnson Space Center (JSC)'s Robonaut 2 (R2) anthropomorphic robot. This paper also discusses future directions this work will take. A cognitive spacecraft management system that is able to seamlessly collect data from subsystems, determine corrective actions, and provide commands to enable those actions is the end goal. These commands could be to embedded spacecraft systems or to a set of robotic assets that are tied into the cognitive system. An exciting collaboration with Woodside provides a promising Earth-bound testing analog, as controlling and maintaining not normally manned off-shore platforms have similar constraints to the space missions described.

Badger, Julia M.↗

Retrofit-ability: A supplementary metric to inform energy efficiency policies and programs

Building Energy Use Intensity (EUI) has been commonly used to facilitate policy makers and utilities to design energy efficacy programs and help building managers prioritize investment in building upgrades. Buildings with higher EUIs are usually chosen as better candidates for retrofit. Our study of nearly one hundred buildings in Seattle’s Building Tune Up Accelerator program and thousands of buildings in the Asset Score database reveals that EUI (after weather/location/use type normalization) alone is not the best indicator of a building’s potential to save energy, especially for those buildings in the mid-range (30-70 percentile EUI). In this paper, we introduce the concept of “retrofit-ability” — a building’s real potential to reduce its energy use cost-effectively — as a supplementary metric to inform energy efficiency policy and investment. Currently, such potential analyses are predicted for a building stock using prototypical building models or statistical data. However, typical buildings or general historical data may not sufficiently represent building configurations in a portfolio and predict their saving potentials. We utilized machine learning to investigate how key building characteristics (such as envelope attributes, HVAC type, location, use type, etc.) affect a building’s improvement potentials and developed a low-cost method to quantify such potentials for a portfolio of buildings. The supplementary perspective provided by “retrofit-ability” highlights which building assets correlate most with a building’s energy savings potential across region, building use type and more.

Wang, Na↗

Panel Session 25: DOE Waste Isolation Pilot Plant (WIPP) Update 2020

This panel focused on the WIPP operational efficiencies and capital improvement progress in the year 2020. Because WIPP is a key component of the US DOE EM cleanup strategy, the progress on returning WIPP to full design capacity and throughput by 2021 is of importance. Panelists with presentations: Status of WIPP Capital Asset Projects (Stephen Smith); WIPP Update (Sean Dunagan); CBFO Update (Greg Sosson)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Design of a State Machine for Smooth Microgrid Transition Operation

A state machine is proposed in the energy management system (EMS) of a microgrid as the solution for smooth microgrid's transition operation. This state machine includes six 'states' that cover all the operating modes during the microgrid's transition operation: two basic modes (grid-connected and islanded) and four temporary modes (preparing for disconnection, transition to islanding, preparing for resynchronization, and transition to grid-connected). Temporary modes are designed to fine-tune the control references for the microgrid assets to avoid harmful transients during microgrid transitions, therefore achieving smooth transition operation. The developed state machine is validated by simulation in MATLAB with a sample microgrid, and the test results show excellent performance of the state machine and smooth microgrid transition operation.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Exploring Wildfire & Energy data toward State Prioritization Index (WESPI)

Energy infrastructure can both induce and suffer risks from wildfires ranging from direct damage to energy assets such as substations and power lines to Public Safety Power Shutoffs. Recent wildfire events underscore the need for data-driven approaches that help states and utilities proactively plan for wildfire risk. Existing national tools such as Federal Emergency Management Agency (FEMA)’s National Risk Index (NRI) are valuable for community hazard planning. However, they are less suited for energy infrastructure, as they emphasize population and building exposure rather than system vulnerabilities. In this paper, we explore relationships between energy and wildfire data and present a Wildfire-Energy State Prioritization Index (WESPI). Our methodology combines data from the US Forest Service’s Fire Simulation (FSIM) dataset with energy resilience metrics, historical fire incidents, and geospatial data on transmission lines and fire stations. Correlation analyses suggest that FSIM burn probability is more strongly associated with power outage metrics (ρ = 0.32) than NRI wildfire frequency, and counties with a greater density of fire stations experience more frequent, but less intense wildfires. We further leverage data for burn probability, transmission line density, and fire station density to develop a Wildfire-Energy State Prioritization Index (WESPI) to highlight counties where wildfire hazard, infrastructure exposure, and limited suppression capacity converge. The index provides a consistent, scalable framework for state energy offices and utilities to screen counties for vegetation management, optimization of outage management system deployment, and to inform wildfire mitigation plans.

Critical infrastructure↗

Synthetic residential load models for smart city energy management simulations

The ability to control tens of thousands of residential electricity customers in a coordinated manner has the potential to enact system-wide electric load changes, such as reduce congestion and peak demand, among other benefits. To quantify the potential benefits of demand-side management and other power system simulation studies (e.g. home energy management, large-scale residential demand response), synthetic load datasets that accurately characterize the system load are required. This study designs a combined top-down and bottom-up approach for modelling individual residential customers and their individual electric assets, each possessing their own characteristics, using time-varying queueing models. The aggregation of all customer loads created by the queueing models represents a known city-sized load curve to be used in simulation studies. The three presented residential queueing load models use only publicly available data. An open-source Python tool to allow researchers to generate residential load data for their studies is also provided. The simulation results presented consider the ComEd region (utility company from Chicago, IL) and demonstrate the characteristics of the three proposed residential queueing load models, the impact of the choice of model parameters, and scalability performance of the Python tool.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Industry involvement in IPAD through the Industry Technical Advisory Board

In 1976 NASA awarded The Boeing Company a contract to develop IPAD (Integrated Programs for Aerospace-Vehicle Design). This contract included a requirement for Boeing to form an Industrial Technical Advisory Board (ITAB), with members representing major aerospace and computer companies. The purpose of this board was to guide the development of IPAD. The specific goal of IPAD is to increase United States aerospace industry productivity through the application of computers to manage engineering data. This goal clearly is attainable; in fact, IPAD's influence can reach beyond the aerospace industry to many businesses where product development is based on the design-building process. An enhanced IPAD, therefore, is a national asset of significance. The role of ITAB in guiding the development of this system is described.

Swanson, W. E.↗

Orbital Debris Ontology, Terminology, and Knowledge Modeling

The looming threat orbital debris poses to assets in orbit demands solutions. As the orbital population grows, so does this hazard, but so does the sea of data. The problem is also an opportunity for interdisciplinary innovation and cooperation. This paper focuses on the data and information management aspect of developing solutions for a sustainable and safe orbital space environment. The corresponding author’s in-progress work to develop an orbital debris domain ontology is summarized in order to discuss knowledge modeling for this domain. Methodological approaches of this effort can also contribute to standards efforts and address terminological and policy questions. Leveraging the growing volumes of orbital debris and space situational awareness (SSA) data will create a more complete picture of the orbital space environment. Part of the solution will be: consistent and correct data interpretation, sharing orbital debris and SSA data in one form or another, terminology development & harmonization, and knowledge or domain modeling. To facilitate this, [Rovetto, 2015/16] discussed ontology development for the orbital debris domain. This paper lists concepts from that paper, and subsequently developed concepts [2-9]. Ontology engineering is an interdisciplinary field related to knowledge representation and reasoning in artificial intelligence, semantic technologies and the so-called semantic web. An ontology is effectively a computable and semantically rich terminology that presents a knowledge or domain model for a topic area. Expressions of knowledge or assertions are stored using formally defined term. This knowledge base is reasoned over to yield answers to queries, among other things. Ontologies have been developed in knowledge-based projects across various disciplines, and used for such things as search engines, chatbots, enterprise knowledge graphs, etc. Ontologies support: interoperability, automated reasoning, data sharing and integration, data search and retrieval, and communicating the meaning of data. The Orbital Debris Ontology (ODO), and related ontologies [Rovetto & Kelso 2016] [Rovetto 2016, 2017], were proposed to help achieve this. ODO, for instance, is intended as a domain ontology that can be used across federated databases, offering an explicitly specified set of concepts describing the orbital debris domain. Its meaning-rich taxonomy will provide a sharable semantics for orbital debris data to, in part, consistently communicate the meaning of data to both humans and machines, and tag data elements in space object catalogs to help afford inference tasks, decision support, knowledge discovery, and information integration. ODO and the SSA ontology (SSAO) is part of the overall Orbital Space Domain Ontology concept, which is conceived as a broader domain reference ontology. It aims to provide a knowledge representation structure of the orbital space environment, a common semantic model, and develop a sharable terminology. Collectively this will provide common meaning for datasets, a high-level taxonomy or classification for orbital space objects, and thus means to characterize space objects. Ongoing efforts have included using visualizations, R, JSON-LD, and contemporary semantic technologies. Potential applications and interdisciplinary partnerships include web-based platforms, web apps, visualizations, and academia projects. Community input and participation may yield a more widely understood domain model as well as facilitate terminological standards. For example, the proposed conceptual, terminological and ontological analysis may contribute to such efforts as the Space Debris Mitigation Requirements in the International Standards Organization by developing more precise, consistent and coherent terms and definitions. Projects that seek to develop in-house ontologies can use ODO and related ontologies as domain reference ontologies. This paper was developed independent of author affiliations. Readers are encouraged to contact corresponding author(1) with general interest and potential opportunities to support or realize the described project.

Robert J. Rovetto↗

Work Smarter, Not Harder: Improving Energy Efficiency and Safety through Smarter Ventilation: Preprint

Ventilation is a key component to maintaining healthy, safe indoor air quality. Especially important in laboratories, ventilation is the first line of defense against airborne hazards produced during research activities. Though a vital component, laboratory ventilation systems are often victim to ineffective operation, posing a risk to the most important asset - the researchers. Furthermore, system inefficiencies can lead to up to 50% wasted energy. To improve both energy efficiency and safety in laboratories, we present the Smart Labs Toolkit - a resource developed by the U.S. Department of Energy Federal Energy Management Program and the International Institute for Sustainable Laboratories that guides laboratory stakeholders through a straight-forward, holistic approach to achieve dynamic, high-performance laboratories. Smart Labs enable safe and efficient world class science to occur in laboratories through high-performance methods. A Smart Labs program employs a combination of physical, administrative, and management techniques to assess, optimize, and manage high performance laboratories. We will focus on a central component of the Smart Labs approach - the Laboratory Ventilation Risk Assessment, a systematic process for identifying risk due to airborne hazards to inform the operation of dynamic ventilation that optimizes safety and efficiency. Case studies of organizations who have successfully implemented Smart Labs ventilation management programs will also be shared. In learning ventilation strategies successful in critical laboratory environments, learn the tools and resources needed to successfully manage energy in any building through smarter, safer ventilation.

buildings↗

Survey and Gap Prioritization of U.S. Electric Vehicle Charge Management Deployments

The goal of this study was to survey and characterize the scope of current technical and programmatic knowledge pertaining to EV charge management technologies and practices in the US and relevant international jurisdictions. This characterization of existing field demonstrations and knowledge derived were used to determine gaps in the SCM demonstration landscape. Addressing these gaps through research and demonstration could increase confidence in the U.S. that load management and EV charge control could achieve overarching societal benefits. A survey of charge management deployments and input from stakeholders was completed to determine the state-of-the-art of smart charge management (SCM) where SCM is defined as controlling the amount of power exchanged between chargers and EVs to meet customers' charging needs while also responding to external power demand or pricing signals to provide load management, resilience, or other benefits to the customer and electric grid. The survey was the basis of the gap analysis in this report and determines which areas are well understood, with high confidence, and which areas need further investigation. Existing examples of EV charge management are characterized here to determine aspects that are ready for widespread deployment and have been demonstrated in the field. These include demonstration studies, pilots, programs, and EV-specific tariffs. In all, 110 examples of charge management were characterized. The data sources were public literature and utility filings as well as targeted interviews. In addition, 43 interviews with stakeholders were conducted with a consistent set of questions used in each interview. This study prioritized gaps in demonstrated SCM capabilities based on 1) Urgency of the particular use-case to offset traditional grid assets, 2) Impact, extensibility, and scaling of results across the entire spectrum of 3000+ utility service territories including projected technical and market potential for a given grid service, and 3) Value of federal funding in addressing the gap, including potential to leverage and/or add scope to existing field demonstrations funded by other non-federal funding mechanisms.

33 ADVANCED PROPULSION SYSTEMS↗

Customer enrollment and participation in building demand management programs: A review of key factors

Increasing the efficiency and flexibility of electricity demand is necessary for ensuring a cost-effective and reliable transition to zero-carbon electricity systems. Such demand-side management (DSM) resources have been procured by utilities for decades via energy efficiency and demand response programs; however, the key drivers of program enrollment and customer participation levels remain poorly understood — even as governments and grid planners seek to scale up the deployment of DSM assets to meet climate targets. Here we systematically review the evidence on multiple factors that may influence customer enrollment and participation in building DSM programs, focusing primarily on residential and commercial buildings. We examine the contexts in which relationships between DSM factors and outcomes are most often explored and with which methods; we also score the strength, direction, and internal consistency of each factor's reported impact on the enrollment and participation outcomes. We find that studies most commonly assess the effects of economic incentives for load flexibility on program participation levels, often using simulation-based methods in lieu of measured data. Few studies focus on program enrollment outcomes or regulatory drivers of either enrollment or participation, and gaps are also evident in the coverage of emerging DSM opportunities like load electrification. Removal of structural barriers (e.g., the lack of controls infrastructure) and the use of third party services (e.g., load aggregators) are the factors with the largest positive impacts on DSM outcomes, but no single factor emerges as clearly most impactful. For a given factor, the range of reported impacts typically varies widely across the relevant studies reviewed. Our findings provide a snapshot of the state of knowledge about building DSM and customer decision-making, and they expose key gaps in understanding that must be filled if building DSM is to expand as a critical resource for operating clean power grids.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

'Green-in-Three' IT Solutions Protecting Workers and the Environment - 12526

The U.S. Department of Energy (DOE), Environmental Management (EM), DOE Richland Operations Office (RL), Mission Support Alliance (MSA), and Lockheed Martin Services, Inc. (LMSI), Information Technology partnered in an effort to reduce environmental impacts, energy use, and operating costs and improve worker safety through consolidation, centralization, and standardization of Information Technology (IT) assets on the Hanford Site. Green-in-Three is an IT Value strategy, which is moving Hanford from an inefficient, antiquated 20. Century IT architecture to a smart, green, flexible 21. Century IT architecture that delivers information anywhere at any time to Hanford Mission partners. The 'Green-in-three' efforts to date have had a significant impact on meeting and exceeding the overall IT Value Strategy to decrease IT maintenance and delivery costs and move Hanford into a smart, green, and flexible 21. Century IT architecture. Some of the results and impacts are as follows: - Thirteen data centers were reduced to two, freeing up approximately 279 m{sup 2} (3000 ft{sup 2})) of space; - Reduced data center energy use 50%, from 120,000 to 60,000 kW; - Excessed 9 metric tons (10 tons) of server equipment; - Removed and properly disposed of 2871 kg (6,300 lb) lead acid batteries; - Projects saved over $1 M in fiber and copper cable installation through 2011; - Developed or improved partnerships with local, state, and federal agencies, Tribes, and Site contractors; - Increased wireless coverage for improved access to remote areas. Moving forward to 2012, the impact of these accomplishments will be realized in the years to come. IT services will be delivered in days instead of months. Field personnel will have access to information at the point of performance, reducing travel time. Remote monitoring, telemetry, and/or video can be conducted using the wireless network; reducing travel time for field inspections. Emergency personnel have access to critical information at the incident site, saving valuable time. Full deployment of the VoIP technologies will reduce power use by 1,000,000 kWh/yr for telecommunications equipment, driving home the IT Value Strategy of Green-in-Three. (author)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

NARAC Dispersion Model Product Integration With RadResponder

Work on enhanced cooperation and interoperability of Nuclear Incident Response Teams (NIRT) is a joint effort between DHS/FEMA, DOE/NNSA and EPA. One such effort was the integration between the RadResponder Network, a resource sponsored by FEMA for the management of radiological data during an emergency, and the National Atmospheric Advisory Center (NARAC), a DOE/NNSA modeling resource whose predictions are used to aid radiological emergency preparedness and response. Working together under a FEMA-sponsored project these two radiological response assets developed a capability to read and display plume model prediction results from the NARAC computer system in the RadResponder software tool. As a result of this effort, RadResponder users have been provided with NARAC modeling predictions of contamination areas, radiological dose levels, and protective action areas (e.g., areas warranting worker protection or sheltering/evacuation) to help guide protective action decisions and field monitoring surveys, and gain key situation awareness following a radiological/nuclear accident or incident (e.g., nuclear power plant accident, radiological dispersal device incident, or improvised nuclear detonation incident). This document describes the details of this integration effort.

54 ENVIRONMENTAL SCIENCES↗

Resilient U.S. Land Ports of Entry

The continued operation of Land Ports of Entry (LPOE), managed by the Customs and Border Protection (CBP) and General Services Administration% is vital to the U.S. economy and security. Border faculties are included in the Department of Homeland Security (DHS) Government Facilities Sector2, one of the 16 critical infrastructures "whose assets, systems, and networks, whether physical or virtual, are considered so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof.'" Specifically, disruptions to the flow of border crossing traffic, in the form of closures or increased border crossing wait times, impact the economy and security of all countries involved. This paper describes a process for analyzing and improving the resilience of U.S. Land Ports of Entry. For LPOE, the team believes that energy resilience is the primary objective due to the complete reliance on the e-manifest system and the increasing use of Multi-Energy Portals (MEPs). Emanifests are part of CPB's Automated Commercial Environment (ACE). They document several key pieces of information about cargo vehicles wishing to cross the border into the United States and are submitted before arriving at the port. Vehicles can be flagged for more invasive inspection based on the content of the e-manifest. MEPs are a non-intrusive inspection (NII) technology used to scan the contents of the cargo. Together MEPs and ACE serve an important role in aiding CBP with their mission to protect "the public from dangerous people and materials", and "enabling legitimate trade and travel.'" To analyze resilience of a port, the team would need to understand the port's current energy usage, which systems depend on energy and what backup systems exist, and any emergency operation plans that dictate how systems are operated in the event of a power outage. The team would also need to determine the design basis threats (DBTs) for the LPOE which could include natural disasters, manmade events, and accidents. The magnitudes of the DBTs are calculated and are then translated to expected impacts on the infrastructure and systems at the port. With this information gathered, existing LPOE models developed here at Sandia National Laboratories could be extended to support decisions about resilience. Current models are implemented in FlexSim, a 3rd party discrete event simulator. FlexSim provides 3-D visuals of physical layout that can reveal valuable insights, allows input to be variable (e.g. time it takes to interact with the CBP officer at primary inspection can vary) so that a whole range of possibilities can be captured in the results, and can be used to collect user-defined output metrics. Current LPOE models focus on cargo vehicle traffic, and process changes caused by the installation of new drive-through MEPs. Extending them to address resilience questions would require the addition of key pieces of information learned during the resilience analysis including critical systems, failure rates, and process changes for when failures occur. The primary output metric for current models is border crossing wait time. Additional metrics would also be added to the model to gain a more complete understanding of impacts related to resilience, for example, MEP scan rate. Once complete, the model could be used to analyze the effectiveness of mitigation strategies representing some future state.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Rapid Radiological/Nuclear Consequence Assessment Tools

The goal of this work is to design a tool for rapid assessment of the areas impacted by airborne plumes and fallout from a radiological/nuclear incident, such as an Improvised Nuclear Device (IND) detonation or Radiological Dispersal Device (RDD) release, for use by state and local technical specialists and emergency responders. The tool would produce information on the distances and areas near an incident location in which hazards may exist. This would inform consequence management decisions by state and local responders in the critical minutes following an event, as well as assist in emergency planning before an incident. The products would be intended for use before more detailed products are available from non-local assets, such as the federal Interagency Modeling and Atmospheric Assessment Center (IMAAC) and the Federal Radiological Monitoring and Assessment Center (FRMAC). The tool’s products could provide, for example, predictions of damage zones and dangerous fallout areas to help guide the emergency response, including protection of emergency responders and the public. The initial focus of this effort is on the more difficult IND decision support tools. Existing HAZMAT tools and RDD guidance, described in this report, can also be integrated into the decision support tool.

61 RADIATION PROTECTION AND DOSIMETRY↗

Using the Integrated Vehicle Health Management Research Test and Integration Plan Wiki to Identify Synergistic Test Opportunities

The National Aeronautics and Space Administration (NASA) and the aviation industry have recognized a need for developing a method to identify and combine resources to carry out research and testing more efficiently. The Integrated Vehicle Health Management (IVHM) Research Test and Integration Plan (RTIP) Wiki is a tool that is used to visualize, plan, and accomplish collaborative research and testing. Synergistic test opportunities are developed using the RTIP Wiki, and include potential common resource testing that combines assets and personnel from NASA, industry, academia, and other government agencies. A research scenario is linked to the appropriate IVHM milestones and resources detailed in the wiki, reviewed by the research team members, and integrated into a collaborative test strategy. The scenario is then implemented by creating a test plan when appropriate and the research is performed. The benefits of performing collaborative research and testing are achieving higher Technology Readiness Level (TRL) test opportunities with little or no additional cost, improved quality of research, and increased communication among researchers. In addition to a description of the method of creating these joint research scenarios, examples of the successful development and implementation of cooperative research using the IVHM RTIP Wiki are given.

Koelfgen, Syri J.↗

Scalable Asset Discovery, Vulnerability Scanning, and Penetration Testing for Remote Sites and Wireless Spectrums Utilizing an Embedded Linux Plug - PwniPlug and the Raspberry Pi B+ as a Sample Pen Test

All devices attached to the NASA KSC network are subject to security vulnerability scanning and/or penetration testing. In today's changing environment, vulnerable and/or unprotected systems can easily be overlooked. Systems that are not properly managed can become a potential threat to the operational integrity of our systems and networks. This includes all NASA (internal and external) information systems within NASA KSC Internet Protocol (IP) address space, and NASA KSC facilities. The Office of the Chief Information Officer (OCIO) recommends that all NASA Centers and information systems be subject to penetration testing on a regular interval in accordance with the guidelines identified by the National Institute of Standards and Technology (NIST). (ITS-HBK-2810.04-02A) Protecting information and equipment at NASA is an area of increasing concern. In addition to the CPU's on the network; Supervisory, Control and Data Acquisition (SCADA) systems are especially vulnerable because these systems have lacked standards, use embedded controllers with little computational power and informal software, are connected to physical processes, have few operators, and are increasingly also being connected to corporate networks. The scope of work is comprised of several individual components which together build upon previous work by Drew Branch, NASA KSC Intern. The Pwn Plug is the selected COTS (Commercial-Off-The-Shelf) device chosen to test simplification of mandatory IT Security tasks. The device will be utilized to provide services to NASA KSC and enable an assessment of infrastructure soundness and regulatory compliance in an efficient, economical, and business responsive manner. The Pwn Plug is designed as a pen testing appliance which provides a hardware platform that can support commercial penetration testing efforts at significantly reduced costs. The expected outcomes are: 1) External Penetration Testing, 2) Social Engineering, 3) Procedural Documentation, 4) Recommended Remediation Action Plan, 5) System Retest & Remediation Attestation and 6) Final Reports, out briefing and Presentation. Due to physical and material constraints beyond intern and mentor control, the project was redefined as a working pen-test scenario. Limitations of lab availability and tools dictated an academic exercise. This report was developed within the scenario guidelines suggested by the project mentor. The guidelines were to be creative in developing a Pen Test program for a client.

Penetration Testing↗