Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “IT security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 649 records · Page 36
All sourcesNASA NTRSDOE OSTI
NASA NTRS2022

Research Report: Progress on Building a File Observatory for Secure Parser Development

Parsing untrusted data is notoriously challenging.Failure to handle maliciously crafted data correctly can (anddoes) lead to a wide range of vulnerabilities. The Languagetheoretic security (LangSec) philosophy seeks to obviate the needfor developers to apply ad hoc solutions by, instead, offeringformally correct and verifiable input handling throughout thesoftware development lifecycle. One of the key components indeveloping secure parsers is a broad coverage corpus that enablesdevelopers to understand the problem space for a given formatand to use, potentially, as seeds for fuzzing and other automatedtesting. In this paper, we offer an update on work reportedat the LangSec 2021 conference on the development of a fileobservatory to gather and enable analysis on a diverse collectionof files at scale. The initial focus of the observatory is on PortableDocument Format (PDF) files and file formats typically embeddedin PDFs. In this paper, we report on refactoring the ingestprocess, applying new analytic methods, and improving the User Interface.

Stonebraker, Ryan↗
NASA NTRSDate not supplied

Simulating Secure Data Exchange and Storage for Urban Air Mobility Environments

In this paper I give some background on UAM, the need for security in UAM, as well as blockchain. Then I discuss how blockchain can facilitate a secure exchange and storage of data in a UAM environment, focusing on a simulation we developed to that simulates a UAM environment. Specifically, the simulation focuses on the negotiation between UAM operators, PSUs, and the DSS when two operators want to claim the same airspace. We discuss how this process, as well as the subsequent vehicle telemetry data, is captured in the blockchain.

UAM↗
NASA NTRSDate not supplied

Simulating Secure Data Exchange and Storage for Urban Air Mobility Environments

Urban Air Mobility (UAM) defines an environment for managing operations of vertical takeoff and landing (VTOL) and short takeoff and landing (STOL) vehicles in an urban environment. Within a UAM environment, UAM operators manage fleets of vehicles, relying on Providers of Services for UAM (PSUs) for managing flights in a region of airspace. Flight plan deconfliction is primarily performed by the Discovery and Synchronization Service (DSS), and the Federal Aviation Administration (FAA) maintains control over the UAM space via the FAA-Industry Exchange Protocol (FIDXP). UAM is a federated environment with many different entities owning and operating vehicles, PSUs, and other services. These entities often need to interoperate or access data generated by other organizations. This paper demonstrates the feasibility of using blockchain to facilitate a secure data exchange and storage for this flight information in a UAM environment. In particular, this paper is focused on flight plans and telemetry data. A blockchain network was developed with a set of smart contracts for managing relevant flight data. Hyperledger Fabric was chosen as it is performent, scalable, and allows organizations to reuse existing public key infrastructure (PKI) for identity management. A set of simulated UAM services were also developed. These services propose flight plans and negotiate with other UAM services for airspace access. All interactions between UAM services, as well as vehicle telemetry data, is recorded onto the blockchain. Vehicle telemetry data is generated by a vehicle flight simulation service. This paper successfully demonstrates the feasibility of using blockchain as a secure data exchange and storage mechanism in a UAM environment.

UAM↗
DOE OSTI2020

Secure and Cost-Effective Micro Phasor Measurement Unit (PMU)-Like Metering for Behind-the-Meter (BTM) Solar Systems Using Blockchain-Assisted Smart Inverters: Preprint

Recently, there is increasing interest in using behind-the-meter (BTM) solar systems for grid services. However, providing visibility and operational situational awareness of BTM solar systems mainly operated by small-scale solar inverters is challenging due to the requirement of relatively expansive networked observation tools (e.g., micro phasor measurement units (uPMUs)) and consequent cybersecurity threats through networks. This paper presents a secure, cost-effective, uPMUs-like metering method using a blockchain-assisted smart (BAS) inverters for a BTM solar system. The proposed BAS inverter consisting of an internet-of-things device as a node of a local blockchain network enables the secure provision of inverter measurement data for grid services. The BAS inverter sends the encrypted local measurement data with a timestamp to a local blockchain miner. Once the blockchain miner generates a tamper-resistant metering ledger including the measurements, it is used to assess the situational awareness of the BTM solar system. The concept of the proposed metering using the BAS inverters is validated by experimental studies.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

The Data Foundry: Secure Collaboration for the Geothermal Industry: Preprint

The Data Foundry provides secure, cloud-based storage and universal access to digital information, enabling the greater geothermal industry to collaborate seamlessly with the Department of Energy (DOE), national labs, universities, and private organizations. Originally developed to support the EGS Collab project, the Data Foundry has been expanded to support FORGE, EDGE, and other DOE-funded projects, some collaborative, some private, by providing each project with a secure space and the ability to fine-tune individual access controls. In response to user feedback, it now also features improved integration with DOE’s Geothermal Data Repository (GDR), to provide a clear and convenient pathway from collaboration to publication, and to register collaborative data projects with well-known data registries like Data.gov and the National Geothermal Data System (NGDS). This paper will explore how recent concerns raised by data-centric, proprietary projects have informed development on the Data Foundry and highlight improvements designed to streamline workflows, improve access control, and promote the timely dissemination of information to the geothermal industry.

Data Foundry↗
DOE OSTI2021

Arctic Community Engagement: Enhancing Energy Affordability, Resilience, Security

The changing Arctic geopolitical and natural environment presents significant new challenges and opportunities for innovation, economic development, and sustainable energy, as well as enhancing resilience and security in Alaska communities and the greater Arctic region. NREL's Arctic strategy focuses on addressing the impacts of climate change, developing a clean energy and weatherization workforce in the arctic, advancing energy innovation, developing climate appropriate and affordable housing, and ensuring energy security in an era of growing geopolitical threats.

Alaska↗
DOE OSTI2021

Solvability, Operability, and Security for Cyber-Physical Systems: New Computational Methods with Revised Assumptions

In this paper discusses the use and integration of disparate but complementary tools for dealing with solvability, operability, and security challenges in Cyber-Physical Systems (CPSs): the Koopman Operator (KO) for solvability, Disjunctive Programming (DP) for operability, and Multi-Level Optimisation (MLO) for security. These methods can obviate the need for some of the traditional assumptions used in modelling CPSs. This paper demonstrates the methods' capabilities and considers ways to advance each method individually. It concludes by discussing how to integrate the different methods and identify useful synergies generated by doing so.

koopman operator, disjunctive programming, multi-l↗
DOE OSTI2021

Systems and methods for control system security

A resilient security agent determines a cyber and/or physical health of a control system by, inter alia, communicating cyber-physical key data through cyber-physical control paths of the system, and determining error introduced by the communication. The resilient security agent may be further configured to verify the integrity of acquired cyber-physical state information. The cyber health of the control system may be evaluated by comparing the acquired cyber state information to one or more cyber state profiles. The physical health of the control system may be evaluated by comparing the acquired physical state information to one or more physical state profiles.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

UNREVIEWED DISPOSAL QUESTION EVALUATION: Disposal of the TRU Waste Processing Center Mixed Low Level Waste at the Area 5 Radioactive Waste Management Site, Nevada National Security Site, Nye County, Nevada

This Unreviewed Disposal Question Evaluation (UDQE) assesses whether the U.S. Department of Energy (DOE), National Nuclear Security Administration (NNSA) Transuranic (TRU) Waste Processing Center Mixed Low Level Waste (MLLW), FWORCHMLLW103, Revision 13 [TWPC 2021]), is suitable for shallow land burial (SLB) at the Area 5 Radioactive Waste Management Site (RWMS) on the Nevada National Security Site (NNSS). Disposal of the TRU Waste Processing Center MLLW meets all performance objectives of DOE Manual DOE M 435.1-1, Radioactive Waste Management Manual, Chapter IV, Section P (DOE 1999). The TRU Waste Processing Center MLLW waste stream is recommended for acceptance without conditions.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2021

Y-12 NATIONAL SECURITY COMPLEX LEU-MO FEEDSTOCK FABRICATION UPDATE

The Y-12 National Security Complex (Y-12) participates in the fuel fabrication pillar of lhe National Nuclear Security Administration's (NNSA's) Office of Material Minimization and Management (M3) Office of Conversion Pillar. Y-12's primary responsibility is to establish a reliable fabrication process of low-enriched uranium-molybdenum (LEU-Mo) feedstock tor United States High Performance Research Reactors (US HPRRs). This update compares US HPRR LEU-Mo feedstock fabrication ettorts over the past several casting campaigns at Y-12 which vary in process methodologies and fabrication parameters. With recent changes to the latest feedstock casting campaign, Process Design Standard-2 (PD-STD-2). Y-12 has seen a significant decrease in isotopic uranium variability of the fuel feedstock fabricated.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2022

Recommendations for Secure Transport: Material Conveyance Physical Protection Technology

Nuclear material is at higher risk of theft and sabotage during transport than during any other phase of the nuclear fuel lifecycle. Nuclear materials are transported in the public domain where adversaries have an upper hand by taking advantage of the time and location of the theft or sabotage attempt. As such, even modest threat profiles for transport of nuclear and radioactive material can require substantial detection and delay measures to support timely response. Conveyance tracking augmented with technology that improves on-the-scene situational awareness at a remote monitoring center has been adopted as a de-facto standard approach for transportation security. At present, the extended tracking and situational awareness capabilities needed for a nuclear material shipment, as is provided by the purpose designed, Transportation – Security, Tracking and Reporting (T-STAR) System, do not exist in a single commercial off-the-shelf (COTS) solution. Typically, the COTS systems that excel in one area are deficient in other areas, presenting challenges to designing well-rounded, robust systems. Still, COTS solutions can offer the basic set of tracking and situational awareness capabilities by indicating last update time, current location, and route taken. By incorporating vehicle and driver performance measures via the vehicle’s controller area network (CAN bus) and video alongside other data streams allows telemetry and other shipment information to be assessed in novel ways.This paper describes the operation, capabilities and features of various conveyance protection systems and approaches, assesses emerging technologies and how they could be used through a unified interface, and enumerates additional ways to provide early detection using vehicle, onboard technologies, effective delay technologies and approaches and simple equipment to improve protection during transport.

Shannon, Michael↗
DOE OSTI2022

Frangible security device

The present disclosure pertains to a tamper indicating security device, which indicates unauthorized duplication of and/or access to a variety of secure documents, technologies, products, and/or protected volumes.

DiMaio, Jeffrey R.↗
DOE OSTI2022

Nevada National Security Site Radiological Control Manual

Please have this STIP assigned, documented, and recorded in OSTI as Report Number DOE/NV/03624--0257 Revision 1 and Author as Radiological Control Managers' Council. This manual contains the radiological control requirements to be used for all radiological activities conducted by programs under the purview of the U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO). (Activities conducted under the purview of the U.S. Department of Energy, Office of Environmental Management Nevada[(EM Nevada] may require additional approval authorities as described in the EM Nevada Prime Contractor’s implementation plan.) Compliance with these requirements will ensure compliance with Title 10 Code of Federal Regulations (CFR) Part 835, “Occupational Radiation Protection.” This manual represents policies, guidelines, and best practices for implementing the DOE/NV/03624--0082, “Nevada National Security Site Radiation Protection Program,” (NNSS RPP) according to the requirements of 10 CFR 835.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2020

Analysis of Exposure during Transportation of Waste to the Nevada National Security Site (NNSS) - 20445

Safety is a priority for the U.S. Department of Energy (DOE) Environmental Management (EM) Nevada Program. This commitment to safety is integrated into requirements and work procedures at DOE sites across the U.S. that generate low-level radioactive waste, mixed low-level radioactive waste, and classified waste that is transported to the Nevada National Security Site (NNSS) for permanent disposal. Generators of this waste are responsible for ensuring it is packaged and transported in a safe and compliant manner. These generators and their contracted commercial carriers must comply with U.S. Department of Transportation (DOT) regulations; the Nevada National Security Site Waste Acceptance Criteria (NNSSWAC); and other applicable federal, state, and local regulations and requirements. This includes packaging and shipping the waste to meet DOT regulatory radiation dose limits to ensure public safety during transportation. NNSS waste generators have a solid safety record for complying with these stringent regulations as demonstrated by the fact that no shipments exceeding DOT dose rate limits were received at the NNSS Area 5 Radioactive Waste Management Complex (RWMC) during FY 2014 through FY 2018. A 2005 study conducted by the Desert Research Institute validated shipments to the NNSS comply with DOT radiation dose limits. In response to recent Nevada stakeholder requests for an updated study, an analysis was conducted to verify and provide evidence that the public continues to be safe from exposure to radioactive waste shipment to the NNSS. Radiation exposure from radioactive waste shipments in transit to the NNSS was evaluated. Three studies were performed: 1. Confirm compliance of waste shipments to the DOT radiation limits using dose rate surveys taken at the generator site and at the disposal site. 2. Estimate the dose to the public from waste shipments using the dosimetry results for disposal site personnel by comparing time of exposure for various individuals/scenarios. 3. Estimate the truck driver dose using the receipt dose rate surveys and time of exposure, and from dosimetry results. Study 1 confirmed compliance with the DOT dose rate limits for a sample of waste shipments (123 of 1,038) received during fiscal year (FY) 2017. Study 2 showed that the average annual radiation equivalent dose for disposal site personnel during FY 2017 was approximately 6.7% [0.415 mSv (41.5 millirem)] of the annual average dose that a person living in the U.S. receives from all sources [6.2 mSv (620 mrem)]. Maximum dose to a member of the public, a person resting/sleeping in an adjacent truck at a rest area to a waste shipment, was 0.0166 mSv (1.66 mrem), which is less than the dose received from a person taking a round trip from the east coast to the west coast of the continental U.S. on an airplane [0.07 mSv (7 mrem) per round trip]. Study 3 showed that the truck driver who made the most shipments of radioactive waste to the NNSS, who drove the most hours (estimated time of exposure 2,520 hours), during FY 2017 had a total dose of 0.15 mSv (15 mrem), which was obtained from their personal dosimeter. The annual dose recorded for disposal site personnel, the dose estimates for the public, and the truck driver dose were all a small percentage of the average radiation dose a person receives from all sources (e.g., background and medical radiation). At these levels, risk should only be described qualitatively. Radiation exposure from radioactive waste shipments to the NNSS were shown to be compliant with the DOT dose rate limits, safe, and very low (i.e., within background levels). (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2024

X-ray Security Imaging on Personal Dosimetry

Federal regulations mandate that personal dosimetry devices — like optically stimulated luminescence (OSLs) — must be worn by all US Department of Energy (DOE) and associated radiation workers to track their occupational dose. Unfortunately, the inadvertent passage of OSLs through x-ray security scanners can compromise their validity. With the advent of high energy, advanced resolution security technology used in airports, this once insignificant issue now requires that Radiological Control (RadCon) be able to accurately discern non-occupational dose to effected OSLs. This presentation will discuss the principles, methods, and, rather surprising, models for establishing the corrective dose estimates at the Idaho National Laboratory (INL), and its implication across the DOE.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2025

STEM Professional Development Program for Nuclear Security Science and Technology Consortium

This oral presentation captures the technical and developmental aspect of the program in support of UNLV. The goal of this project is to develop a steady pipeline of STEM educated professionals in area of national and international nuclear security. The goal is to train university students at NNSS laboratories in studies motivated by global nuclear security topics ranging from nuclear emergency response and management to physics experiments for stockpile stewardship program.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2025

A Managed Tokens Service for Securely Keeping and Distributing Grid Tokens

Fermilab is transitioning authentication and authorization for grid operations to using bearer tokens based on the WLCG Common JWT (JSON Web Token) Profile. One of the functionalities that Fermilab experimenters rely on is the ability to automate batch job submission, which in turn depends on the ability to securely refresh and distribute the necessary credentials to experiment job submit points. Thus, with the transition to using tokens for grid operations, we needed to create a service that would obtain, refresh, and distribute tokens for experimenters' use. This service would avoid the need for experimenters to be experts in obtaining their own tokens and would better protect the most sensitive long-lived credentials. Further, the service needed to be widely scalable, as Fermilab hosts many experiments, each of which would need their own credentials. To address these issues, we created and deployed a Managed Tokens Service. The service is written in Go, taking advantage of that language's native concurrency primitives to easily be able to scale operations as we onboard experiments. The service uses as its first credentials a set of kerberos keytabs, stored on the same secure machine that the Managed Tokens service runs on. These kerberos credentials allow the service to use htgettoken via condor_vault_storer to store vault tokens in the HTCondor credential managers (credds) that run on the batch system scheduler machines (HTCondor schedds); as well as downloading a local, shorter-lived copy of the vault token. The kerberos credentials are then also used to distribute copies of the locally-stored vault tokens to experiment submit points.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2025

Provable Security and Resilience in Critical Infrastructure – Next Steps

With the conclusion of the Laboratory Directed Research and Development (LDRD) project on Provable Security and Resilience (PSaR) in Critical Infrastructure, we present forward-looking technical concepts and strategies that build on the project’s outcomes and INL’s long-standing expertise in infrastructure protection. The challenge is to protect critical infrastructure and functions much more efficiently at scale than capable adversaries can attack at scale. After summarizing progress and ongoing work we’ll discuss what are the challenges that remain and what are new/emerging technologies, strategies, and processes to meet those challenges. Finally, we’ll layout concepts that integrate with other protection work in the coming year and beyond. For example, building secure function-specific platforms based on the seL4 microkernel, and considering the successes of Cyber-Informed Engineering as a model for engage, collaboration, and adoption. We look forward to your feedback and collaboration as we refine and expand this vision.

97 - MATHEMATICS AND COMPUTING↗