Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 649 records · Page 36
All sourcesNASA NTRSDOE OSTI
NASA NTRS1997

AIAA Survivability Technical Committee Draft

A relatively new area of interest in aerospace systems survivability is the growing threat of spacecraft penetration by orbital debris. Orbital debris, or "space junk", is composed of the man-made remnants of non-functioning spacecraft still orbiting the Earth. NASA estimates that there are currently over 100,000 orbital debris particles 1 centimeter in diameter or larger that cannot be tracked by existing radar, with the population growing at approximately 4% per year in low earth orbits. With an average velocity of over 8.7 km/sec, these projectiles can penetrate and disable many vulnerable spacecraft systems. Since the likelihood of spacecraft penetration increases with spacecraft surface area, large spacecraft (such as the International Space Station) and communication satellite fleets (such as Iridium) have begun to adopt survivability enhancement strategies similar to those employed by combat aircraft. Collision avoidance maneuvers are commonly practiced by the Space Shuttle and are planned by the International Space Station to decrease their susceptibility to impact by trackable orbital debris; likewise, improved shielding, internal equipment placement, and improved crew operations following penetration can reduce the vulnerability of spacecraft to loss following orbital debris impact. Computer simulations such as the Manned Spacecraft and Crew Survivability (MSCSurv) program at the NASA-Marshall Space Flight Center have recently been developed to quantify and reduce the likelihood of crew or spacecraft loss following orbital debris penetration. The AIAA Survivability Technical Committee is working to enable the transfer of military-developed survivability technologies to help the aerospace industry cope with this growing threat.

Shipman, Jim↗
NASA NTRS2000

Simulating the Composite Propellant Manufacturing Process

There is a strategic interest in understanding how the propellant manufacturing process contributes to military capabilities outside the United States. The paper will discuss how system dynamics (SD) has been applied to rapidly assess the capabilities and vulnerabilities of a specific composite propellant production complex. These facilities produce a commonly used solid propellant with military applications. The authors will explain how an SD model can be configured to match a specific production facility followed by a series of scenarios designed to analyze operational vulnerabilities. By using the simulation model to rapidly analyze operational risks, the analyst gains a better understanding of production complexities. There are several benefits of developing SD models to simulate chemical production. SD is an effective tool for characterizing complex problems, especially the production process where the cascading effect of outages quickly taxes common understanding. By programming expert knowledge into an SD application, these tools are transformed into a knowledge management resource that facilitates rapid learning without requiring years of experience in production operations. It also permits the analyst to rapidly respond to crisis situations and other time-sensitive missions. Most importantly, the quantitative understanding gained from applying the SD model lends itself to strategic analysis and planning.

Williamson, Suzanne↗
NASA NTRS1998

Cockpit Interruptions and Distractions: Effective Management Requires a Careful Balancing Act

Managing several tasks concurrently is an everyday part of cockpit operations. For the most part, crews handle concurrent task demands efficiently, yet crew preoccupation with one task to the detriment of performing other tasks is one of the more common forms of error in the cockpit. Most pilots are familiar with the December 1972 L1011 crash that occurred when the crew became preoccupied with a landing gear light malfunction and failed to notice that someone had inadvertently bumped off the autopilot. More recently a DC-9 landed gear-up in Houston when the crew, preoccupied with an stabilized approach, failed to recognize that the gear was not down because they had not switched the hydraulic pumps to high. We have recently started a research project to study why crews are vulnerable to these sorts of errors. As part of that project we reviewed NTSB reports of accidents attributed to crew error; we concluded that nearly half of these accidents involved lapses of attention associated with interruptions, distractions, or preoccupation with one task to the exclusion of another task. We have also analyzed 107 ASRS reports involving competing tasks; we present here some of our conclusions from those ASRS reports. These 107 reports involved 21 different types of routine tasks crews neglected at a critical moment while attending to another task. Sixty-nine percent of the neglected tasks involved either failure to monitor the current status or position of the aircraft or failure to monitor the actions of the pilot flying or taxiing. Thirty-four different types of competing activities distracted or preoccupied the pilots. Ninety percent of these competing activities fell into one of four broad categories: communication (e.g., discussion among crew or radio communication), heads-down work (e.g., programming the FMS or reviewing approach plates), responding to abnormals, or searching for VMC traffic. We will discuss examples of each of these four categories and suggest things crews can do to reduce their vulnerability to these and similar situations.

Dismukes, R. K.↗
NASA NTRS2004

Toward Synthesis, Analysis, and Certification of Security Protocols

Implemented security protocols are basically pieces of software which are used to (a) authenticate the other communication partners, (b) establish a secure communication channel between them (using insecure communication media), and (c) transfer data between the communication partners in such a way that these data only available to the desired receiver, but not to anyone else. Such an implementation usually consists of the following components: the protocol-engine, which controls in which sequence the messages of the protocol are sent over the network, and which controls the assembly/disassembly and processing (e.g., decryption) of the data. the cryptographic routines to actually encrypt or decrypt the data (using given keys), and t,he interface to the operating system and to the application. For a correct working of such a security protocol, all of these components must work flawlessly. Many formal-methods based techniques for the analysis of a security protocols have been developed. They range from using specific logics (e.g.: BAN-logic [4], or higher order logics [12] to model checking [2] approaches. In each approach, the analysis tries to prove that no (or at least not a modeled intruder) can get access to secret data. Otherwise, a scenario illustrating the &tack may be produced. Despite the seeming simplicity of security protocols ("only" a few messages are sent between the protocol partners in order to ensure a secure communication), many flaws have been detected. Unfortunately, even a perfect protocol engine does not guarantee flawless working of a security protocol, as incidents show. Many break-ins and security vulnerabilities are caused by exploiting errors in the implementation of the protocol engine or the underlying operating system. Attacks using buffer-overflows are a very common class of such attacks. Errors in the implementation of exception or error handling can open up additional vulnerabilities. For example, on a website with a log-in screen: multiple tries with invalid passwords caused the expected error message (too many retries). but let the user nevertheless pass. Finally, security can be compromised by silly implementation bugs or design decisions. In a commercial VPN software, all calls to the encryption routines were incidentally replaced by stubs, probably during factory testing. The product worked nicely. and the error (an open VPN) would have gone undetected, if a team member had not inspected the low-level traffic out of curiosity. Also, the use secret proprietary encryption routines can backfire, because such algorithms often exhibit weaknesses which can be exploited easily (see e.g., DVD encoding). Summarizing, there is large number of possibilities to make errors which can compromise the security of a protocol. In today s world with short time-to-market and the use of security protocols in open and hostile networks for safety-critical applications (e.g., power or air-traffic control), such slips could lead to catastrophic situations. Thus, formal methods and automatic reasoning techniques should not be used just for the formal proof of absence of an attack, but they ought to be used to provide an end-to-end tool-supported framework for security software. With such an approach all required artifacts (code, documentation, test cases) , formal analyses, and reliable certification will be generated automatically, given a single, high level specification. By a combination of program synthesis, formal protocol analysis, certification; and proof-carrying code, this goal is within practical reach, since all the important technologies for such an approach actually exist and only need to be assembled in the right way.

Schumann, Johann↗
NASA NTRS2003

The response of Dahl salt-sensitive and salt-resistant female rats to a space flight model

Vitamin D metabolism in the Dahl salt-sensitive (S) rat, a model of salt-induced hypertension, differs from that in the Dahl salt-resistant (R) rat. We have tested the hypothesis that differences in vitamin D metabolism would render the Dahl S rat more susceptible than the Dahl R rat to the effects of a space flight model. Dahl female rats were tail suspended (hind limb unloaded) for 28 days, while fed a low salt (3 g/kg sodium chloride) diet. Plasma 25-OHD concentrations of S rats were significantly lower than that of R rats. Plasma 1,25-(OH)2D concentration was 50% lower in unloaded than in loaded S rats, but was unaffected in unloaded R rats. The left soleus muscle weight and breaking strength of the left femur (torsion test) were 50% and 25% lower in unloaded than in loaded S and R rats. The mineral content of the left femur, however, was significantly lower (by 11%) only in unloaded S rats. We conclude that female S rats are more vulnerable than female R rats to decreases in plasma 1,25-(OH)2D concentration and femur mineral content during hind limb unloading, but equally vulnerable to muscle atrophy and reduced breaking strength of the femur.

NASA Program Biomedical Research and Countermeasur↗
NASA NTRS2007

A New Paradigm for Assessing the Role of Agriculture in the Climate System and in Climate Change

This paper discusses the diverse climate forcings that impact agricultural systems, and contrasts the current paradigm of using global models downscaled to agricultural areas (a top-down approach) with a new paradigm that first assesses the vulnerability of agricultural activities to the spectrum of environmental risk including climate (a bottom-up approach). To illustrate the wide spectrum of climate forcings, regional climate forcings are presented including land-use/land-cover change and the influence of aerosols on radiative and biogeochemical fluxes and cloud/precipitation processes, as well as how these effects can be teleconnected globally. Examples are presented of the vulnerability perspective, along with a small survey of the perceived drought impacts in a local area, in which a wide range of impacts for the same precipitation deficits are found. This example illustrates why agricultural assessments of risk to climate change and variability and of other environmental risks should start with a bottom-up perspective.

Pielke, Roger A., Sr.↗
NASA NTRS2009

Microwave Sterilization and Depyrogenation System

A fully functional, microgravity-compatible microwave sterilization and depyrogenation system (MSDS) prototype was developed that is capable of producing medical-grade water (MGW) without expendable supplies, using NASA potable water that currently is available aboard the International Space Station (ISS) and will be available for Lunar and planetary missions in the future. The microwave- based, continuous MSDS efficiently couples microwaves to a single-phase, pressurized, flowing water stream that is rapidly heated above 150 C. Under these conditions, water is rapidly sterilized. Endotoxins, significant biological toxins that originate from the cell walls of gram-negative bacteria and which represent another defining MGW requirement, are also deactivated (i.e., depyrogenated) albeit more slowly, with such deactivation representing a more difficult challenge than sterilization. Several innovations culminated in the successful MSDS prototype design. The most significant is the antenna-directed microwave heating of a water stream flowing through a microwave sterilization chamber (MSC). Novel antenna designs were developed to increase microwave transmission efficiency. These improvements resulted in greater than 95-percent absorption of incident microwaves. In addition, incorporation of recuperative heat exchangers (RHxs) in the design reduced the microwave power required to heat a water stream flowing at 15 mL/min to 170 C to only 50 W. Further improvements in energy efficiency involved the employment of a second antenna to redirect reflected microwaves back into the MSC, eliminating the need for a water load and simplifying MSDS design. A quick connect (QC) is another innovation that can be sterilized and depyrogenated at temperature, and then cooled using a unique flow design, allowing collection of MGW at atmospheric pressure and 80 C. The final innovation was the use of in-line mixers incorporated in the flow path to disrupt laminar flow and increase contact time at a given flow rate. These technologies can be employed in small-scale systems for efficient production of MGW in the laboratory or in a range of larger systems that meet various industrial requirements. The microwave antennas can also be adapted to selectively sterilize vulnerable connections to ultra-pure water production facilities or biologically vulnerable systems where microorganisms may intrude.

Akse, James R.↗
NASA NTRS2010

Modeling Regular Replacement for String Constraint Solving

Bugs in user input sanitation of software systems often lead to vulnerabilities. Among them many are caused by improper use of regular replacement. This paper presents a precise modeling of various semantics of regular substitution, such as the declarative, finite, greedy, and reluctant, using finite state transducers (FST). By projecting an FST to its input/output tapes, we are able to solve atomic string constraints, which can be applied to both the forward and backward image computation in model checking and symbolic execution of text processing programs. We report several interesting discoveries, e.g., certain fragments of the general problem can be handled using less expressive deterministic FST. A compact representation of FST is implemented in SUSHI, a string constraint solver. It is applied to detecting vulnerabilities in web applications

Fu, Xiang↗
NASA NTRS2010

Climate Change, Nutrition and Food Security in Sub-Saharan Africa

Food security and nutrition in sub-Saharan Africa have long been affected by variations in the weather. Vulnerability to these hazards, along with economic shocks and an adverse political environment, is often uneven in a community. Some individuals and households are more susceptible to emergencies or crises than others, and thus determining who is most vulnerable are and how they are responding to a shock or crises is essential to understand the impact on food security. Daily, quantitative and global observations derived from satellite remote sensing instruments can contribute to understanding how food production has declined due to drought, flood or other weather-related hazard, but it can say nothing about the likelihood that the people living in that area are suffering food insecurity as a result. As Amartya Sen argued, a famine can occur even when there is an absolute surplus of food in a region. Thus organizations like the US Agency for International Development's Famine Early Warning Systems Network (FEWS NET) work to integrate biophysical and socio-economic indicators together with on-the ground assessments to estimate the food security consequences of a variety of events. Climate change is likely to restructure local, regional and global agricultural systems and commodity markets. Although remote sensing information has been used to identify seasonal production declines for the past two decades, new ways of using the data will need to be developed in order to understand, document and respond to the impact of climate change on food security as it is manifested in shorter term shocks. In this article, the contribution of remote sensing is explained, along with the other factors that affect food security

Brown, Molly E.↗
NASA NTRS2010

Use of Land Use Land Cover Change Mapping Products in Aiding Coastal Habitat Conservation and Restoration Efforts of the Mobile Bay NEP

The Mobile Bay region has undergone significant land use land cover change (LULC) over the last 35 years, much of which is associated with urbanization. These changes have impacted the region s water quality and wildlife habitat availability. In addition, much of the region is low-lying and close to the Gulf, which makes the region vulnerable to hurricanes, climate change (e.g., sea level rise), and sometimes man-made disasters such as the Deepwater Horizon (DWH) oil spill. Land use land cover change information is needed to help coastal zone managers and planners to understand and mitigate the impacts of environmental change on the region. This presentation discusses selective results of a current NASA-funded project in which Landsat data over a 34-year period (1974-2008) is used to produce, validate, refine, and apply land use land cover change products to aid coastal habitat conservation and restoration needs of the Mobile Bay National Estuary Program (MB NEP). The project employed a user defined classification scheme to compute LULC change mapping products for the entire region, which includes the majority of Mobile and Baldwin counties. Additional LULC change products have been computed for select coastal HUC-12 sub-watersheds adjacent to either Mobile Bay or the Gulf of Mexico, as part of the MB NEP watershed profile assessments. This presentation will include results of additional analyses of LULC change for sub-watersheds that are currently high priority areas, as defined by MB NEP. Such priority sub-watersheds include those that are vulnerable to impacts from the DWH oil spill, as well as sub-watersheds undergoing urbanization. Results demonstrating the nature and permanence of LULC change trends for these higher priority sub-watersheds and results characterizing change for the entire 34-year period and at approximate 10-year intervals across this period will also be presented. Future work will include development of value-added coastal habitat quality assessment products that will be used by the MB NEP and its partners in the planning of coastal conservation and restoration activities.

Spruce, Joseph P.↗
NASA NTRS2010

Checklists and Monitoring in the Cockpit: Why Crucial Defenses Sometimes Fail

Checklists and monitoring are two essential defenses against equipment failures and pilot errors. Problems with checklist use and pilots failures to monitor adequately have a long history in aviation accidents. This study was conducted to explore why checklists and monitoring sometimes fail to catch errors and equipment malfunctions as intended. Flight crew procedures were observed from the cockpit jumpseat during normal airline operations in order to: 1) collect data on monitoring and checklist use in cockpit operations in typical flight conditions; 2) provide a plausible cognitive account of why deviations from formal checklist and monitoring procedures sometimes occur; 3) lay a foundation for identifying ways to reduce vulnerability to inadvertent checklist and monitoring errors; 4) compare checklist and monitoring execution in normal flights with performance issues uncovered in accident investigations; and 5) suggest ways to improve the effectiveness of checklists and monitoring. Cognitive explanations for deviations from prescribed procedures are provided, along with suggestions for countermeasures for vulnerability to error.

Dismukes, R. Key↗
NASA NTRS2007

Limits of Expertise: Rethinking Pilot Error and the Causes of Airline Accidents. CRM/HF Conference, Held in Denver, Colorado on April 16-17, 2006

Reviewed NTSB reports of the 19 U.S. airline accidents between 1991-2000 attributed primarily to crew error. Asked: Why might any airline crew in situation of accident crew--knowing only what they knew--be vulnerable. Can never know with certainty why accident crew made specific errors but can determine why the population of pilots is vulnerable. Considers variability of expert performance as function of interplay of multiple factors.

Aviation accidents↗
NASA NTRS2011

Climate Change Impacts and Responses: Societal Indicators for the National Climate Assessment

The Climate Change Impacts and Responses: Societal Indicators for the National Climate Assessment workshop, sponsored by the National Aeronautics and Space Administration (NASA) for the National Climate Assessment (NCA), was held on April 28-29, 2011 at The Madison Hotel in Washington, DC. A group of 56 experts (see list in Appendix B) convened to share their experiences. Participants brought to bear a wide range of disciplinary expertise in the social and natural sciences, sector experience, and knowledge about developing and implementing indicators for a range of purposes. Participants included representatives from federal and state government, non-governmental organizations, tribes, universities, and communities. The purpose of the workshop was to assist the NCA in developing a strategic framework for climate-related physical, ecological, and socioeconomic indicators that can be easily communicated with the U.S. population and that will support monitoring, assessment, prediction, evaluation, and decision-making. The NCA indicators are envisioned as a relatively small number of policy-relevant integrated indicators designed to provide a consistent, objective, and transparent overview of major variations in climate impacts, vulnerabilities, adaptation, and mitigation activities across sectors, regions, and timeframes. The workshop participants were asked to provide input on a number of topics, including: (1) categories of societal indicators for the NCA; (2) alternative approaches to constructing indicators and the better approaches for NCA to consider; (3) specific requirements and criteria for implementing the indicators; and (4) sources of data for and creators of such indicators. Socioeconomic indicators could include demographic, cultural, behavioral, economic, public health, and policy components relevant to impacts, vulnerabilities, and adaptation to climate change as well as both proactive and reactive responses to climate change. Participants provided inputs through in-depth discussion in breakout sessions, plenary sessions on break-out results, and several panels that provided key insights about indicators, lessons learned through experience with developing and implementing indicators, and thoughts on how the NCA could proceed to develop indicators for the NCA.

Kenney, Melissa A.↗
NASA NTRS2011

Physical, Ecological, and Societal Indicators for the National Climate Assessment

The National Climate Assessment (NCA) is being conducted under the auspices of the U.S. Global Change Research Program (USGCRP), pursuant to the Global Change Research Act of 1990, Section 106, which requires a report to Congress every 4 years. The current NCA (http://globalchange.gov/what-we-do/assessment/) differs in multiple ways from previous U.S. climate assessment efforts, being: (1) more focused on supporting the Nation s activities in adaptation and mitigation and on evaluating the current state of scientific knowledge relative to climate impacts and trends; (2) a long-term, consistent process for evaluation of climate risks and opportunities and providing information to support decision-making processes within regions and sectors; and (3) establishing a permanent assessment capacity both inside and outside of the federal government. As a part of ongoing, long-term assessment activities, the NCA intends to develop an integrated strategic framework and deploy climate-relevant physical, ecological, and societal indicators. The NCA indicators framework is underdevelopment by the NCA Development and Advisory Committee Indicators Working Group and are envisioned as a relatively small number of policy-relevant integrated indicators designed to provide a consistent, objective, and transparent overview of major variations in climate impacts, vulnerabilities, adaptation, and mitigation activities across sectors, regions, and timeframes. The potential questions that could be addressed by these indicators include: How do we know that there is a changing climate and how is it expected to change in the future? Are important climate impacts and opportunities occurring or predicted to occur in the future? Are we adapting successfully? What are the vulnerabilities and resiliencies given a changing climate? Are we preparing adequately for extreme events? It is not expected that the NCA societal indicators would be linked directly to a single decision or portfolio of decisions, but subsets of indicators, or the data supporting the indicator, might be used to inform decision-making processes such as the development and implementation of climate adaptation strategies in a particular sector or region.

Kenney, Melissa A.↗
NASA NTRS2011

Automated Test Case Generation for an Autopilot Requirement Prototype

Designing safety-critical automation with robust human interaction is a difficult task that is susceptible to a number of known Human-Automation Interaction (HAI) vulnerabilities. It is therefore essential to develop automated tools that provide support both in the design and rapid evaluation of such automation. The Automation Design and Evaluation Prototyping Toolset (ADEPT) enables the rapid development of an executable specification for automation behavior and user interaction. ADEPT supports a number of analysis capabilities, thus enabling the detection of HAI vulnerabilities early in the design process, when modifications are less costly. In this paper, we advocate the introduction of a new capability to model-based prototyping tools such as ADEPT. The new capability is based on symbolic execution that allows us to automatically generate quality test suites based on the system design. Symbolic execution is used to generate both user input and test oracles user input drives the testing of the system implementation, and test oracles ensure that the system behaves as designed. We present early results in the context of a component in the Autopilot system modeled in ADEPT, and discuss the challenges of test case generation in the HAI domain.

Giannakopoulou, Dimitra↗
NASA NTRS2012

Nemesis Autonomous Test System

A generalized framework has been developed for systems validation that can be applied to both traditional and autonomous systems. The framework consists of an automated test case generation and execution system called Nemesis that rapidly and thoroughly identifies flaws or vulnerabilities within a system. By applying genetic optimization and goal-seeking algorithms on the test equipment side, a "war game" is conducted between a system and its complementary nemesis. The end result of the war games is a collection of scenarios that reveals any undesirable behaviors of the system under test. The software provides a reusable framework to evolve test scenarios using genetic algorithms using an operation model of the system under test. It can automatically generate and execute test cases that reveal flaws in behaviorally complex systems. Genetic algorithms focus the exploration of tests on the set of test cases that most effectively reveals the flaws and vulnerabilities of the system under test. It leverages advances in state- and model-based engineering, which are essential in defining the behavior of autonomous systems. It also uses goal networks to describe test scenarios.

Barltrop, Kevin J.↗
NASA NTRS2012

A Geometric Analysis to Protect Manned Assets from Newly Launched Objects - COLA Gap Analysis

A safety risk was identified for the International Space Station (ISS) by The Aerospace Corporation following the launch of GPS IIR-20 (March 24, 2009), when the spent upper stage of the launch vehicle unexpectedly crossed inside the ISS notification box shortly after launch. This event highlighted a 56-hour vulnerability period following the end of the launch Collision Avoidance (COLA) process where the ISS would be unable to react to a conjunction with a newly launched object. Current launch COLA processes screen each launched object across the launch window to determine if an object's nominal trajectory is predicted to pass within 200 km of the ISS (or any other manned/mannable object), resulting in a launch time closure. These launch COLA screens are performed from launch through separation plus I 00 minutes. Once the objects are in orbit, they are cataloged and evaluated as part of routine on-orbit conjunction assessment processes. However, as the GPS IIR-20 scenario illustrated, there is a vulnerability period in the time line between the end of launch COLA coverage and the beginning of standard on-orbit COLA assessment activities. The gap between existing launch and on-orbit COLA processes is driven by the time it takes to track and catalog a launched object, identify a conjunction, and plan and execute a collision avoidance maneuver. For the ISS, the total time required to accomplish an of these steps is 56 hours. To protect human lives, NASA/JSC has requested that an US launches take additional steps to protect the ISS during this "COLA gap" period. The uncertainty in the state of a spent upper stage can be quite large after all bums are complete and all remaining propellants are expelled to safe the stage. Simply extending the launch COLA process an additional 56 hours is not a viable option as the 3-sigma position uncertainty will far exceed the 200 km miss-distance criterion. Additionally, performing a probability of collision (Pc) analysis over this period is also not practical due to the limiting effects of these large orbit state uncertainties. An estimated upper bound for Pc for a typical spent upper stage if nominally aligned for a direct broadside collision with the ISS is only on the order of 10-6. For a smaller manned object such as a Soyuz capsule, the risk level decreases to an order of 10'8 . In comparison, the Air Force Range policy (AFI 91-217) for launch COLAs would only eliminate launch opportunities when conjunctions with objects exceed a Pc of 10'5 This paper demonstrates a conservative geometry-based methodology that may be used to determine if launch opportunities pose a threat to the ISS during the COLA gap period. The NASA Launch Services Program at Kennedy Space Center has developed this COLA gap analysis method and employed it fQr three NASA missions to identify potential ISS conjunctions and corresponding launch window closures during the 56-hour at-risk period. In the analysis, for each launch opportunity, the nominal trajectory of the spent upper stage and the orbit state of the ISS are propagated over the 56 hour period. Each time the upper stage crosses the orbit plane of the ISS, the relative radial and argument of latitude separations are calculated. A window cutout is identified if these separation differences fall within a mission-specific violation box, which is determined from the evaluation of a Monte Carlo dispersions analysis that quantifies the potential variation in the upper stage radial and argument of latitude differences. This paper details the results of these analyses and their impacts to each mission.

Hametz, Mark E.↗
NASA NTRS2013

Security Risk Assessment Process for UAS in the NAS CNPC Architecture

This informational paper discusses the risk assessment process conducted to analyze Control and Non-Payload Communications (CNPC) architectures for integrating civil Unmanned Aircraft Systems (UAS) into the National Airspace System (NAS). The assessment employs the National Institute of Standards and Technology (NIST) Risk Management framework to identify threats, vulnerabilities, and risks to these architectures and recommends corresponding mitigating security controls. This process builds upon earlier work performed by RTCA Special Committee (SC) 203 and the Federal Aviation Administration (FAA) to roadmap the risk assessment methodology and to identify categories of information security risks that pose a significant impact to aeronautical communications systems. A description of the deviations from the typical process is described in regards to this aeronautical communications system. Due to the sensitive nature of the information, data resulting from the risk assessment pertaining to threats, vulnerabilities, and risks is beyond the scope of this paper

data links↗