SEARCH · Engineering Papers
Results for “Computer Security”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Adapting Secure MultiParty Computation to Support Machine Learning in RF Sensor Networks.
Abstract not provided.
Use My Data, But Don't Make Me Share It: Hybrid Secure MultiParty Computation for Privacy-Preserving Machine Learning.
Abstract not provided.
Tools for Administration of a UNIX-Based Network
Several computer programs have been developed to enable efficient administration of a large, heterogeneous, UNIX-based computing and communication network that includes a variety of computers connected to a variety of subnetworks. One program provides secure software tools for administrators to create, modify, lock, and delete accounts of specific users. This program also provides tools for users to change their UNIX passwords and log-in shells. These tools check for errors. Another program comprises a client and a server component that, together, provide a secure mechanism to create, modify, and query quota levels on a network file system (NFS) mounted by use of the VERITAS File SystemJ software. The client software resides on an internal secure computer with a secure Web interface; one can gain access to the client software from any authorized computer capable of running web-browser software. The server software resides on a UNIX computer configured with the VERITAS software system. Directories where VERITAS quotas are applied are NFS-mounted. Another program is a Web-based, client/server Internet Protocol (IP) address tool that facilitates maintenance lookup of information about IP addresses for a network of computers.
Cloud Computing in a Secured Environment: An Opportunity for Large and Small Contractor Partnerships
This slide presentation reviews the opportunities for contractor partnerships to develop secure environment cloud computing, from the perspective of a small business.
Fusing Edge Computing with Transport Security by Leveraging the Controller Area Network Transport Security Tracking and Reporting (C-STAR) Unit
Rapid advances in embedded system complexity and capability provides exciting opportunities for transportation security deployment. Manufacturers and developers of these embedded systems continue to provide lower cost and more powerful solutions that can be leveraged by researchers and engineers. Furthermore, deploying these devices at the “edge” of the Internet-of-Things (IoT) infrastructure provides opportunities for highly capable applications in transport security. In an edge computation architecture, the device is co-located at the source of the data in the larger IoT structure – this provides computational capability at the location directly where the data is collected. For shipment transport security, this provides a direct compute node for digestion of data and mitigation actions in real-time. In our application, the vehicle provides a significant amount of this data that can be processed in real-time via the Controller Area Network Transport Security Tracking and Reporting (C-STAR) edge device. Utilization of a computational node located on the vehicle, such as the C-STAR, capitalizes on previously discussed opportunities of edge architectures. In this paper, we will discuss this security solution’s usability, current deployments, and scalability to further applications in transport security. First, we will cover the supported vehicle platforms that can leverage the C-STAR technology. This will be particularly relevant to medium- and heavy-duty vehicles transporting high-risk shipments. Second, we will speak to current deployments of the C-STAR that are ongoing. Finally, we will discuss additional areas for expansion such as maturing the onboard algorithms through continuing collaborations.
Guidelines for developing NASA (National Aeronautics and Space Administration) ADP security risk management plans
This report presents guidance to NASA Computer security officials for developing ADP security risk management plans. The six components of the risk management process are identified and discussed. Guidance is presented on how to manage security risks that have been identified during a risk analysis performed at a data processing facility or during the security evaluation of an application system.
Guidelines for contingency planning NASA (National Aeronautics and Space Administration) ADP security risk reduction decision studies
Guidance is presented to NASA Computer Security Officials for determining the acceptability or unacceptability of ADP security risks based on the technical, operational and economic feasibility of potential safeguards. The risk management process is reviewed as a specialized application of the systems approach to problem solving and information systems analysis and design. Reporting the results of the risk reduction analysis to management is considered. Report formats for the risk reduction study are provided.
Selected Papers from the 2017 IEEE Symposium on Security and Privacy
For 38 years, the IEEE Symposium on Security and Privacy has been the premier forum for presenting computer security and electronic privacy developments and for bringing together leading researchers and practitioners. We invited authors to submit revised versions of their symposium papers, recast as articles suitable for publication in IEEE Security & Privacy magazine. Specifically, we asked the original authors to revise their papers to speak to the magazine's audience, which goes beyond the symposium's traditional academically focused audience to also include policymakers and practitioners.
The Father Christmas worm
Given here is an overview analysis of the Father Christmas Worm, a computer worm that was released onto the DECnet Internet three days before Christmas 1988. The purpose behind the worm was to send an electronic mail message to all users on the computer system running the worm. The message was a Christmas greeting and was signed 'Father Christmas'. From the investigation, it was determined that the worm was released from a computer (node number 20597::) at a university in Switzerland. The worm was designed to travel quickly. Estimates are that it was copied to over 6,000 computer nodes. However, it was believed to have executed on only a fraction of those computers. Within ten minutes after it was released, the worm was detected at the Space Physics Analysis Network (SPAN), NASA's largest space and Earth science network. Once the source program was captured, a procedural cure, using the existing functionality of the computer operating systems, was quickly devised and distributed. A combination of existing computer security measures, the quick and accurate procedures devised to stop copies of the worm from executing, and the network itself, were used to rapidly provide the cure. These were the main reasons why the worm executed on such a small percentage of nodes. This overview of the analysis of the events concerning the worm is based on an investigation made by the SPAN Security Team and provides some insight into future security measures that will be taken to handle computer worms and viruses that may hit similar networks.
System and method for key generation in security tokens
Functional randomness in security tokens (FRIST) may achieve improved security in two-factor authentication hardware tokens by improving on the algorithms used to securely generate random data. A system and method in one embodiment according to the present invention may allow for security of a token based on storage cost and computational security. This approach may enable communication where security is no longer based solely on onetime pads (OTPs) generated from a single cryptographic function (e.g., SHA-256).
Progress in knowledge-based flight monitoring
Features and applications of the script-based flight monitor SECURE are described. Implemented on an on-board computer, SECURE treats a flight as a regular sequence of contexts (situations) defined in a knowledge base with a hierarchical structure for successively more finely delineated flight phases, i.e., takeoff, cruise and landing. SECURE provides normalcy references for flight monitoring and allows context identification, which allows the presentation of checklists. An implementation of SECURE, written in MACLISP, on a DC-10 flight simulator is described.
Predictive Dynamic Security Assessment through Advanced Computing
Abstract— Traditional dynamic security assessment is limited by several factors and thus falls short in providing real-time information to be predictive for power system operation. These factors include the steady-state assumption of current operating points, static transfer limits, and low computational speed. This addresses these factors and frames predictive dynamic security assessment. The primary objective of predictive dynamic security assessment is to enhance the functionality and computational process of dynamic security assessment through the use of high-speed phasor measurements and the application of advanced computing technologies for faster-than-real-time simulation. This paper presents algorithms, computing platforms, and simulation frameworks that constitute the predictive dynamic security assessment capability. Examples of phasor application and fast computation for dynamic security assessment are included to demonstrate the feasibility and speed enhancement for real-time applications.
Reactor System Facility Modification to Detect Compromised Human Machine Interfaces
This study focuses on a multi-layered Industrial Control System (ICS)/Operational Technology (OT) security architecture to aid in the discovery and mitigation of compromised Human Machine Interface (HMI)/Instrumentation & Control (I&C) based systems for modifying a prototypical reactor condition test facility called the Flowing Autoclave System (FAS) at Idaho National Laboratory (INL). This is achieved through a three-layered combination of network security solutions, hash-based algorithms, and blockchain technologies. Hash algorithms are mathematical functions used to generate a predetermined set of fixed-length values. They are widely used in computer security to verify the integrity of system information and data, both on a local network and the wider internet. Even small amounts of unauthorized system modification will cause the hash algorithm to output a set of characters that deviate significantly from its original value. Assisting secure hash functions, blockchain technology is a secure and distributed technology used to provide an immutable set of records replicated on all devices within a decentralized network. Blockchain offers a cost-effective solution to detect system compromise by providing a traceable breadcrumb trail of all network activity and data modification happening on a system. If both are used in conjunction with network monitoring tools, the integration of this three-pronged approach can become an asset in detecting suspected system compromises before any real damage can occur.
REMOTE SENSOR SECURITY THROUGH ENCODED COMPUTATION AND CRYPTOGRAPHIC SIGNATURES
Ph.D. Thesis: REMOTE SENSOR SECURITY THROUGH ENCODED COMPUTATION AND CRYPTOGRAPHIC SIGNATURES
Information Security and Integrity Systems
Viewgraphs from the Information Security and Integrity Systems seminar held at the University of Houston-Clear Lake on May 15-16, 1990 are presented. A tutorial on computer security is presented. The goals of this tutorial are the following: to review security requirements imposed by government and by common sense; to examine risk analysis methods to help keep sight of forest while in trees; to discuss the current hot topic of viruses (which will stay hot); to examine network security, now and in the next year to 30 years; to give a brief overview of encryption; to review protection methods in operating systems; to review database security problems; to review the Trusted Computer System Evaluation Criteria (Orange Book); to comment on formal verification methods; to consider new approaches (like intrusion detection and biometrics); to review the old, low tech, and still good solutions; and to give pointers to the literature and to where to get help. Other topics covered include security in software applications and development; risk management; trust: formal methods and associated techniques; secure distributed operating system and verification; trusted Ada; a conceptual model for supporting a B3+ dynamic multilevel security and integrity in the Ada runtime environment; and information intelligence sciences.
A new international standard on cybersecurity for nuclear power plants: IEC 62645 - cybersecurity requirements - 161
This paper provides an overview of the IEC 62645, an actual standard by the International Electrotechnical Commission (IEC) focused on the issue of requirements for computer security programmes and system development processes to prevent and/or minimize the impact of cyber attacks against computer-based I and C systems. Developed since 2009 and published end of 2014, the standard is intended to be used for changing or establishing new security programmes for I and C systems of operating and new Nuclear Power Plants (NPP). This paper also presents the key issues being considered in the new revision to IEC 62645, currently in process. (authors)
Interdisciplinary Education through “Edutainment”: Electric Grid Resilient Control Systems Course
As energy companies and governments attempt to get more from the existing power grid and other critical infrastructures, more automatic control systems are being applied 1-2. With this greater reliance on network-based, digital automation and the stresses of pressing existing infrastructure for greater performance, the power grid and underlying systems have become more susceptible to both malicious attacks and unexpected, natural threats. Governments and other stakeholders have chosen to address infrastructure issues by the implementation of a smarter grid. In the smart grid, operators and control systems supervise power generation, distribution, transmission, and loads to utilize these assets most efficiently3. Such extensive monitoring and control over a distributed system cause complexity that challenge systems designers and human operators in new ways. In addition, cyber vulnerability of these systems has been illustrated in many recent articles on malicious attacks to electric power systems and other similar infrastructure for natural gas, water and communications4. It is therefore critical in the next generation of control systems that resilience plays a large and critical role in the grid design and development. Resilient control systems is a field of research that seeks solutions to the complexity through a holistic approach that combines cognitive science, computer security, communications, and control systems. To enable future researchers and practitioners to assist with designing more resilient systems, science, technology, engineering and mathematics education needs to incorporate interdisciplinary topics. While electrical engineering and computer science programs in the nation include a cyber-security perspective, few if any have focused on the unique control system aspects. Human cognitive aspects are most definitely not addressed in technology education discourse. To this end, a class and education tools in resilient control systems have been created.