Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 757 records · Page 42

Quantifying Surface Water Dynamics at 30 Meter Spatial Resolution in the North American High Northern Latitudes 1991-2011

The availability of a dense time series of satellite observations at moderate (30 m) spatial resolution is enabling unprecedented opportunities for understanding ecosystems around the world. A time series of data from Landsat was used to generate a series of three maps at decadal time step to show how surface water has changed from 1991 to 2011 in the high northern latitudes of North America. Previous attempts to characterize the change in surface water in this region have been limited in either spatial or temporal resolution, or both. This series of maps was generated for the NASA Arctic and Boreal Vulnerability Experiment (ABoVE), which began in fall 2015. These maps show a nominal extent of surface water by using multiple observations to make a single map for each time step. This increases the confidence that any detected changes are related to climate or ecosystem changes not simply caused by short duration weather events such as flood or drought. The methods and comparison to other contemporary maps of the region are presented here. Initial verification results indicate 96% producer accuracy and 54% user accuracy when compared to 2-m resolution World View-2 data. All water bodies that were omitted were one Landsat pixel or smaller, hence below detection limits of the instrument.

Carroll, Mark↗

Evaluation of the Radiation Susceptibility of a 3D NAND Flash Memory

We evaluated the heavy ion and proton-induced single-event effects (SEE) for a 3D NAND flash. The 3D NAND showed similar single-event upset (SEU) sensitivity to a planar NAND of similar density and performance in the multiple-cell level (MLC) storage mode. However, the single-level-cell (SLC) storage mode of the 3D NAND showed significantly reduced SEU susceptibility. Additionally, the 3D NAND showed less MBU susceptibility than the planar NAND, with reduced number of upset bits per byte and reduced cross sections overall. However, the 3D architecture exhibited angular sensitivities for both base and face angles, reflecting the anisotropic nature of the SEU vulnerability in space. Furthermore, the SEU cross section decreased with increasing fluence for both the 3D NAND and the latest generation planar NAND, indicating a variable upset rate for a space mission. These unique characteristics introduce complexity to traditional ground irradiation test procedures.

single-event upset (SEU)↗

Re-Tooling the Agency's Engineering Predictive Practices for Durability and Damage Tolerance

Over the past decade, the Agency has placed less emphasis on testing and has increasingly relied on computational methods to assess durability and damage tolerance (D&DT) behavior when evaluating design margins for fracture-critical components. With increased emphasis on computational D&DT methods as the standard practice, it is paramount that capabilities of these methods are understood, the methods are used within their technical limits, and validation by well-designed tests confirms understanding. The D&DT performance of a component is highly dependent on parameters in the neighborhood of the damage. This report discusses D&DT method vulnerabilities.

Piascik, Robert S.↗

Optical Design of the STAR-X Telescope

Top-level science goals of the Survey and Time-domain Astrophysical Research eXplorer (STAR-X) include: investigations of most violent explosions in the universe, study of growth of black holes across cosmic time and mass scale, and measure how structure formation heats majority of baryons in the universe. To meet these goals, the field-of-view of the telescope should be about 1 square-degree, the angular resolution should be 5 arc-seconds or below across large part of the field-of-view. The on-axis effective area at 1 KeV should be about 2,000 sq cm. Payload cost and launch considerations limit the outer diameter, focal length, and mass to 1.3 meters, 5 meters, and 250 kilograms, respectively. Telescope design is based on a segmented meta-shell approach we have developed at Goddard Space Flight Center for the STAR-X telescope. The telescope shells are divided into 30-degree segments. Individual telescopes and meta-shells are nested inside each other to meet the effective area requirements in 0.5 - 6.0 KeV range. We consider Wolter-Schwarzschild, and Modified-Wolter-Schwarzschild telescope designs as basic building blocks of the nested STAR-X telescope. These designs offer an excellent resolution over a large field of views. Nested telescopes are vulnerable to stray light problems. We have designed a multi-component baffle system to eliminate direct and single-reflection light paths inside the telescopes. Large number of internal and external baffle vane structures are required to prevent stray rays from reaching the focal plane. We have developed a simple ray-trace based tool to determine the dimensions and locations of the baffles. In this paper, we present the results of our trade studies, baffle design studies, and optical performance analyses of the STAR-X telescope.

Saha, Timo T.↗

Design of the STAR-X Telescope

Top-level science goals of the Survey and Time-domain Astrophysical Research eXplorer (STAR-X) include: investigations of most violent explosions in the universe, study of growth of black holes across cosmic time and mass scale, and measure how structure formation heats majority of baryons in the universe. To meet these goals, the field-of-view of the telescope should be about 1 square-degree, the angular resolution should be 5 arc-seconds or below across large part of the field-of-view. The on-axis effective area at 1 KeV should be about 2,000 sq cm. Payload cost and launch considerations limit the outer diameter, focal length, and mass to 1.3 meters, 5 meters, and 250 kilograms, respectively. Telescope design is based on a segmented meta-shell approach we have developed at Goddard Space Flight Center for the STAR-X telescope. The telescope shells are divided into 30-degree segments. Individual telescopes and meta-shells are nested inside each other to meet the effective area requirements in 0.5 - 6.0 KeV range. We consider Wolter-Schwarzschild, and Modified-Wolter-Schwarzschild telescope designs as basic building blocks of the nested STAR-X telescope. These designs offer an excellent resolution over a large field of views. Nested telescopes are vulnerable to stray light problems. We have designed a multi-component baffle system to eliminate direct and single-reflection light paths inside the telescopes. Large number of internal and external baffle vane structures are required to prevent stray rays from reaching the focal plane. We have developed a simple ray-trace based tool to determine the dimensions and locations of the baffles. In this paper, we present the results of our trade studies, baffle design studies, and optical performance analyses of the STAR-X telescope.

Saha, Timo T.↗

Cyber-Attack Methods, Why They Work on Us, and What to Do

Basic cyber-attack methods are well documented, and even automated with user-friendly GUIs (Graphical User Interfaces). Entire suites of attack tools are legal, conveniently packaged, and freely downloadable to anyone; more polished versions are sold with vendor support. Our team ran some of these against a selected set of projects within our organization to understand what the attacks do so that we can design and validate defenses against them. Some existing defenses were effective against the attacks, some less so. On average, every machine had twelve easily identifiable vulnerabilities, two of them "critical". Roughly 5% of passwords in use were easily crack-able. We identified a clear set of recommendations for each project, and some common patterns that emerged among them all.

cybersecurity↗

Analyzing Cyber Security Threats on Cyber-Physical Systems Using Model-Based Systems Engineering

The spectre of cyber attacks on aerospace systems can no longer be ignored given that many of the components and vulnerabilities that have been successfully exploited by the adversary on other infrastructures are the same as those deployed and used within the aerospace environment. An important consideration with respect to the mission/safety critical infrastructure supporting space operations is that an appropriate defensive response to an attack invariably involves the need for high precision and accuracy, because an incorrect response can trigger unacceptable losses involving lives and/or significant financial damage. A highly precise defensive response, considering the typical complexity of aerospace environments, requires a detailed and well-founded understanding of the underlying system where the goal of the defensive response is to preserve critical mission objectives in the presence of adversarial activity. In this paper, a structured approach for modeling aerospace systems is described. The approach includes physical elements, network topology, software applications, system functions, and usage scenarios. We leverage Model-Based Systems Engineering methodology by utilizing the Object Management Group's Systems Modeling Language to represent the system being analyzed and also utilize model transformations to change relevant aspects of the model into specialized analyses. A novel visualization approach is utilized to visualize the entire model as a three-dimensional graph, allowing easier interaction with subject matter experts. The model provides a unifying structure for analyzing the impact of a particular attack or a particular type of attack. Two different example analysis types are demonstrated in this paper: a graph-based propagation analysis based on edge labels, and a graph-based propagation analysis based on node labels.

MBSE↗

Evaluating Process Effectiveness to Reduce Risk

It is well documented that government agencies do not have the same incentive as the private sector to focus on process effectiveness and continual improvement of those processes. It is also well documented whenever government agencies fail to deliver efficient, effective, consistent, and fair services to the citizens. In spite of the various "reinventing government" and "effectiveness initiatives" of the past decades, and in spite of the efforts on the part of many agencies to improve, government in general still lags behind industry in creating a culture of effective processes and systems. While the tragic events that unfolded recently in Flint, Michigan, teach us that running government "like a business" does not always take the needs of the citizenry into account, there are many lessons and techniques from the private sector that government agencies can use to improve. The incentive to improve, while mandated by various administrations1, needs to come from within the workforce, in order to effectively take root. The best, most effective incentive is to reduce, control or eliminate risk. Government agencies face some of the same risks as the private sector, while some are unique. While ISO 310002 has been around since 2009, risk has taken on increased visibility within the private sector with the advent of the emphasis on risk-based thinking in ISO 9001:20153. The relationship between risk-based thinking and effective processes is simple and direct. Those processes that are well thought out and standardized (i.e. Plan-Do-Check-Act), will have taken into account the applicable policy, statutory, regulatory, safety, quality and technical parameters, which may not occur to someone performing the process with minimal experience or training; and thus protect the employees, the public and the agency from statutory and regulatory violations; delay in providing services; non-delivery of services; harm to public or employee safety and health; cost overruns; breaches in security; loss of confidence in government; failure of publicly funded projects; damage to the environment; ethics violations, and the list goes on; with local, national and even international consequences. The Plan-Do-Check-Act process, also known as the "process approach" can be used at any time to establish and standardize a process, and it can also be used to check periodically for "process creep" (i.e., informal, unauthorized changes that have occurred over time), any necessary updates and improvements. While ISO 9001 compliance is not mandated for all government agencies, if interpreted correctly, it can be useful in establishing a framework and implementing effective management systems and processes.4 Another method that can be used to evaluate effectiveness is the scorecard definitions in Mallory's Process Management Standard5 as a basis for evaluating work on the process level on effective, and continuously improved and improving processes. With processes on the lower end of the scale, agencies are vulnerable to a great many risks, with employees and managers making up many of the rules as they go, leading to the above listed negative results. Without clear guidance for nominal operations, off-nominal situations can, and do, increase the likelihood of chaos. In an increasingly technical environment, with inter-agency communication and collaboration becoming the norm, agencies need to come to grips with the fact that processes can become rapidly outdated, and that the technical community should take on an increased role in the maturation of the agency's processes. Industry has long known that effective processes are also efficient, and process improvement methods such as Kaizen, Lean, Six Sigma, 5S, and mistake proofing lead to increased productivity, improved quality, and decreased cost. Again, government agencies have different concerns, but inefficiencies and mistakes can have dire and wide reaching consequences for the public that they serve. While no one goes to work planning to cause harm, it is up to agencies to establish upper level systems, which make establishment and compliance with processes possible. Again, Mallory provides us with a Systems Management Standard6, similar to the Process Management Standard, with a scale of 0-5 for systems effectiveness and maturity. Deming determined that "eighty-five percent of the reasons for failure are deficiencies in the systems and process rather than the employee. The role of management is to change the process rather than badgering individual employees to do better." 7 It is not just the working level employees who need effective processes, but the mid-and upper level managers as well. A disciplined management culture sets the tone for the employees, aids both routine and off-nominal decision-making, and incorporates risk -based thinking into the systems and processes as a matter of normal activity. Figure 1, illustrates the relationship between ineffective and effective processes and risk, through the use of the "stoplight" colors that are commonly used to show serious situations (red), situations which may be improving or deteriorating depending on trends (yellow), and situations that are under control and continuously improved (green).

Shepherd, Christena C.↗

Preliminary Investigation of Impact of Technological Impairment on Trajectory-Based Operations

The Next Generation Air Transportation System (NextGen) incorporates collaborative air traffic management and Trajectory-Based Operations (TBO) in order to significantly increase the capacity, efficiency, and predictability of operations in the National Airspace System (NAS), without decreasing safety. This is enabled by airspace users and service providers sharing knowledge about operations that allows prediction of the complete 4D flight trajectory with as little uncertainty as possible. Additionally, new software and hardware technology is critical to reaching NextGen goals, especially with regard to TBO. What if the technologies that are critical for TBO were to be impaired or fail completely? Should there be a malfunction of a piece of the technology, it must be ensured that the whole system does not break down completely or suffer severe impairment. Instead, operations need to be maintained proportionally to the problem and safety needs to be ensured (graceful degradation). This paper proposes a systematic framework to investigate the vulnerability of TBO to technology disruption, and determine the impact of technological impairment on TBO. Two representative technologies are chosen for detailed investigation and the impact of their impairment on the degradation of TBO is illustrated using a weather-related scenario. XXXX There are several possible directions of future work. We believe it is desirable to develop methods to quantitatively assess the impact of technological disruption on TBO and to have the simulation tools to validate the impact. The availability of prognostics and health management methods could be leveraged to predict technological failure/disruption, thus predicting how TBO will be a ected, and possibly pro-actively mitigating the impact. It is important to develop large-scale scenarios where the e ect of technological impairment is prominent, and identify methods to quantitatively assess the extent of TBO degradation. An important goal of such an investigation is the development of failure-resistant resilient trajectory-based oper- ations. Resilience14, 15 is the property of a system to \bounce back" and resume at least a signi cant portion of its functionalities after degradation due to technological impairment(s). A systems resilience includes properties such as \bu ering capacity" (quantifying disruptions the system can absorb or adapt to without a fundamental breakdown in performance or in the systems structure), \ exibility" (ability to restructure itself in response to external changes or pressures), "margin" (how closely the system is currently operating rela- tive to one or another kind of performance boundary), \tolerance" (whether the system gracefully degrades as stress/pressure increase, or collapses quickly when pressure exceeds adaptive capacity), etc. Future work needs to focus on quantifying and improving the resilience of TBO, and identifying resilient design solutions for aviation.

TBO↗

Lost in Translation: the Case for Integrated Testing

The building of a spacecraft is complex and often involves multiple suppliers and companies that have their own designs and processes. Standards have been developed across the industries to reduce the chances for critical flight errors at the system level, but the spacecraft is still vulnerable to the introduction of critical errors during integration of these systems. Critical errors can occur at any time during the process and in many cases, human reliability analysis (HRA) identifies human error as a risk driver. Most programs have a test plan in place that is intended to catch these errors, but it is not uncommon for schedule and cost stress to result in less testing than initially planned. Therefore, integrated testing, or "testing as you fly," is essential as a final check on the design and assembly to catch any errors prior to the mission. This presentation will outline the unique benefits of integrated testing by catching critical flight errors that can otherwise go undetected, discuss HRA methods that are used to identify opportunities for human error, lessons learned and challenges over ownership of testing will be discussed.

Young, Aaron↗

Cyber-Threat Assessment for the Air Traffic Management System: A Network Controls Approach

Air transportation networks are being disrupted with increasing frequency by failures in their cyber- (computing, communication, control) systems. Whether these cyber- failures arise due to deliberate attacks or incidental errors, they can have far-reaching impact on the performance of the air traffic control and management systems. For instance, a computer failure in the Washington DC Air Route Traffic Control Center (ZDC) on August 15, 2015, caused nearly complete closure of the Centers airspace for several hours. This closure had a propagative impact across the United States National Airspace System, causing changed congestion patterns and requiring placement of a suite of traffic management initiatives to address the capacity reduction and congestion. A snapshot of traffic on that day clearly shows the closure of the ZDC airspace and the resulting congestion at its boundary, which required augmented traffic management at multiple locations. Cyber- events also have important ramifications for private stakeholders, particularly the airlines. During the last few months, computer-system issues have caused several airlines fleets to be grounded for significant periods of time: these include United Airlines (twice), LOT Polish Airlines, and American Airlines. Delays and regional stoppages due to cyber- events are even more common, and may have myriad causes (e.g., failure of the Department of Homeland Security systems needed for security check of passengers, see [3]). The growing frequency of cyber- disruptions in the air transportation system reflects a much broader trend in the modern society: cyber- failures and threats are becoming increasingly pervasive, varied, and impactful. In consequence, an intense effort is underway to develop secure and resilient cyber- systems that can protect against, detect, and remove threats, see e.g. and its many citations. The outcomes of this wide effort on cyber- security are applicable to the air transportation infrastructure, and indeed security solutions are being implemented in the current system. While these security solutions are important, they only provide a piecemeal solution. Particular computers or communication channels are protected from particular attacks, without a holistic view of the air transportation infrastructure. On the other hand, the above-listed incidents highlight that a holistic approach is needed, for several reasons. First, the air transportation infrastructure is a large scale cyber-physical system with multiple stakeholders and diverse legacy assets. It is impractical to protect every cyber- asset from known and unknown disruptions, and instead a strategic view of security is needed. Second, disruptions to the cyber- system can incur complex propagative impacts across the air transportation network, including its physical and human assets. Also, these implications of cyber- events are exacerbated or modulated by other disruptions and operational specifics, e.g. severe weather, operator fatigue or error, etc. These characteristics motivate a holistic and strategic perspective on protecting the air transportation infrastructure from cyber- events. The analysis of cyber- threats to the air traffic system is also inextricably tied to the integration of new autonomy into the airspace. The replacement of human operators with cyber functions leaves the network open to new cyber threats, which must be modeled and managed. Paradoxically, the mitigation of cyber events in the airspace will also likely require additional autonomy, given the fast time scale and myriad pathways of cyber-attacks which must be managed. The assessment of new vulnerabilities upon integration of new autonomy is also a key motivation for a holistic perspective on cyber threats.

Complex Networks↗

Heavy Ion and Proton-Induced Single Event Upset Characteristics of a 3D NAND Flash Memory

We evaluated the effects of heavy ion and proton irradiation for a 3D NAND flash. The 3D NAND showed similar single-event upset (SEU) sensitivity to a planar NAND of identical density in the multiple-cell level (MLC) storage mode. The 3D NAND showed significantly reduced SEU susceptibility in single-level-cell (SLC) storage mode. Additionally, the 3D NAND showed less multiple-bit upset susceptibility than the planar NAND, with fewer number of upset bits per byte and smaller cross sections overall. However, the 3D architecture exhibited angular sensitivities for both base and face angles, reflecting the anisotropic nature of the SEU vulnerability in space. Furthermore, the SEU cross section decreased with increasing fluence for both the 3D NAND and the Micron 16 nm planar NAND, which suggests that typical heavy ion test fluences will underestimate the upset rate during a space mission. These unique characteristics introduce complexity to traditional ground irradiation test procedures.

3D NAND Flash memory; radiation susceptibility; si↗

Modeling of Lunar Dust Contamination Due to Plume Impingement

During the Apollo missions it became apparent that lunar dust was a significant hazard. Problems included: surface obscuration during landing sequence; abrasion damage to gouge faces and helmet visors; mechanism clogging; development of space suit pressurization leaks; loss of radiator heat rejection capabilities to the point where vulnerable equipment exceeded maximum survival temperature ratings; temporary vision and respiratory problems within the Apollo Lunar Module (LM). NASA Constellation Program features many system-level components, including the Altair Lunar Lander. Altair to endure longer periods at lunar surface conditions: Apollo LM, about three days; Altair, over seven months. Program managers interested in plume-generated dust transport onto thermal control surface radiators of the first Altair created by its own landing operations.

Woronowicz, Michael↗

An Overview of Science Challenges Pertaining to our Understanding of Extreme Geomagnetically Induced Currents

Vulnerability of man-made infrastructure to Earth-directed space weather events is a serious concern for today's technology-dependent society. Space weather-driven geomagnetically induced currents (GICs) can disrupt operation of extended electrically conducting technological systems. The threat of adverse impacts on critical technological infrastructure, like power grids, oil and gas pipelines, and communication networks, has sparked renewed interest in extreme space weather. Because extreme space weather events have low occurrence rate but potentially high impact, this presents a major challenge for our understanding of extreme GIC activity. In this chapter, we discuss some of the key science challenges pertaining to our understanding of extreme events. In addition, we present an overview of GICs including highlights of severe impacts over the last 80 years and recent U.S. Federal actions relevant to this community.

Ngwira, Chigomezyo M.↗

Giant Pulse Phenomena in a High Gain Erbium Doped Fiber Amplifier

High gain Erbium Doped Fiber Amplifiers (EDFAs) are vulnerable to optical damage when unseeded, e.g. due to nonlinear effects that produce random, spontaneous Q-switched (SQS) pulses with high peak power, i.e. giant pulses. Giant pulses can damage either the components within a high gain EDFA or external components and systems coupled to the EDFA. We explore the conditions under which a reflective, polarization-maintaining (PM), core-pumped high gain EDFA generates giant pulses, provide details on the evolution of normal pulses into giant pulses, and provide results on the transient effects of giant pulses on an amplifier's fused-fiber couplers, an effect which we call Fiber Overload Induced Leakage (FOIL). While FOIL's effect on fused-fiber couplers is temporary, its damage to forward pump lasers in a high gain EDFA can be permanent.

Li, Stephen X.↗

Giant Pulse Phenomena in a High Gain Erbium Doped Fiber Amplifier

High gain Erbium Doped Fiber Amplifiers (EDFAs), while revolutionizing optical communications, remain vulnerable to optical damage when unseeded, e.g. due to nonlinear effects that produce random pulses with high peak power, i.e. giant pulses. Giant pulses can damage the components in a high gain EDFA or external components and systems coupled to the EDFA. We explore the conditions under which a reflective, polarization-maintaining (PM), core-pumped high gain EDFA generates giant pulses, provide details on conditions under which normal pulses evolve into giant pulses, and provide results on the transient effects of giant pulses on amplifier's fused-fiber couplers, an effect which we call Fiber Overload Induced Leakage (FOIL). While FOIL's effect on fused-fiber couplers is temporary, its damage to forward pump lasers in a high gain EDFA can be permanent.

Li, Stephen X.↗

Ni-Ti Next Generation Bearings for Space Applications

NASA applications challenge traditional bearing materials. The rigors of launch often include heavy shock loads and exposure to corrosive environments (e.g., salt spray). Unfortunately, ball and roller bearings made from hardened steels are vulnerable to Brinell denting and rust which can limit performance and life. Ceramic materials can eliminate corrosion concerns but their high stiffness and extreme hardness actually makes denting problems worse. In this presentation, an emerging superelastic alloy, NiTi, is introduced for rolling element bearing applications. Through a decade of RD, NiTi alloy bearings have been put through a comprehensive series of life and performance tests. Hardness, corrosion, strength, stiffness, and rolling contact fatigue tests have been conducted and reported. Ball bearings ranging in size from 12 to 50mm bore have been successfully engineered and operated over a wide range of speeds and test conditions including being submerged in water. The combination of high hardness, moderate elastic modulus, low density, and intrinsic corrosion immunity provide new possibilities for mechanisms that operate under extreme conditions. Recent preliminary tests indicate that bearings can be made from NiTi alloys that are easily lubricated by conventional oils and greases and exhibit acceptable rolling contact fatigue resistance. This presentation introduces the NiTi materials systems and shows how NASA is using it to alleviate several specific problems encountered in advanced space applications.

bearings↗