Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Cybersecurity”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 883 records · Page 49
All sourcesNASA NTRSDOE OSTI
NASA NTRS2017

Requirements for an Integrated UAS CNS Architecture

The National Aeronautics and Space Administration (NASA) Glenn Research Center (GRC) is investigating revolutionary and advanced universal, reliable, always available, cyber secure and affordable Communication, Navigation, Surveillance (CNS) options for all altitudes of UAS operations. In Spring 2015, NASA issued a Call for Proposals under NASA Research Announcements (NRA) NNH15ZEA001N, Amendment 7 Subtopic 2.4. Boeing was selected to conduct a study with the objective to determine the most promising candidate technologies for Unmanned Air Systems (UAS) air-to-air and air-to-ground data exchange and analyze their suitability in a post-NextGen NAS environment. The overall objectives are to develop UAS CNS requirements and then develop architectures that satisfy the requirements for UAS in both controlled and uncontrolled air space. This contract is funded under NASAs Aeronautics Research Mission Directorates (ARMD) Aviation Operations and Safety Program (AOSP) Safe Autonomous Systems Operations (SASO) project and proposes technologies for the Unmanned Air Systems Traffic Management (UTM) service. Communications, Navigation and Surveillance (CNS) requirements must be developed in order to establish a CNS architecture supporting Unmanned Air Systems integration in the National Air Space (UAS in the NAS). These requirements must address cybersecurity, future communications, satellite-based navigation APNT, and scalable surveillance and situational awareness. CNS integration, consolidation and miniaturization requirements are also important to support the explosive growth in small UAS deployment. Air Traffic Management (ATM) must also be accommodated to support critical Command and Control (C2) for Air Traffic Controllers (ATC). This document therefore presents UAS CNS requirements that will guide the architecture.

Templin, Fred↗
NASA NTRS2017

Security Vulnerability Profiles of NASA Mission Software: Empirical Analysis of Security Related Bug Reports

NASA develops, runs, and maintains software systems for which security is of vital importance. Therefore, it is becoming an imperative to develop secure systems and extend the current software assurance capabilities to cover information assurance and cybersecurity concerns of NASA missions. The results presented in this report are based on the information provided in the issue tracking systems of one ground mission and one flight mission. The extracted data were used to create three datasets: Ground mission IVV issues, Flight mission IVV issues, and Flight mission Developers issues. In each dataset, we identified the software bugs that are security related and classified them in specific security classes. This information was then used to create the security vulnerability profiles (i.e., to determine how, why, where, and when the security vulnerabilities were introduced) and explore the existence of common trends. The main findings of our work include:- Code related security issues dominated both the Ground and Flight mission IVV security issues, with 95 and 92, respectively. Therefore, enforcing secure coding practices and verification and validation focused on coding errors would be cost effective ways to improve mission's security. (Flight mission Developers issues dataset did not contain data in the Issue Category.)- In both the Ground and Flight mission IVV issues datasets, the majority of security issues (i.e., 91 and 85, respectively) were introduced in the Implementation phase. In most cases, the phase in which the issues were found was the same as the phase in which they were introduced. The most security related issues of the Flight mission Developers issues dataset were found during Code Implementation, Build Integration, and Build Verification; the data on the phase in which these issues were introduced were not available for this dataset.- The location of security related issues, as the location of software issues in general, followed the Pareto principle. Specifically, for all three datasets, from 86 to 88 the security related issues were located in two to four subsystems.- The severity levels of most security issues were moderate, in all three datasets.- Out of 21 primary security classes, five dominated: Exception Management, Memory Access, Other, Risky Values, and Unused Entities. Together, these classes contributed from around 80 to 90 of all security issues in each dataset. This again proves the Pareto principle of uneven distribution of security issues, in this case across CWE classes, and supports the fact that addressing these dominant security classes provides the most cost efficient way to improve missions' security. The findings presented in this report uncovered the security vulnerability profiles and identified the common trends and dominant classes of security issues, which in turn can be used to select the most efficient secure design and coding best practices compiled by the part of the SARP project team associated with the NASA's Johnson Space Center. In addition, these findings provide valuable input to the NASA IVV initiative aimed at identification of the two 25 CWEs of ground and flight missions.

vulnerability↗
NASA NTRS2018

Assessing C2 Communications for UAS Traffic Management

The National Aeronautics and Space Administration's (NASA) Unmanned Aircraft Systems (UAS) Traffic Management (UTM) project works to develop tools and technologies essential for safely enabling civilian low-altitude UAS operations. Currently there is no established infrastructure to enable and safely manage the widespread use of low-altitude airspace and UAS operations, regardless of the type of UAS. The UTM technical challenge will develop comprehensive and validated airspace operations and integration requirements to safely enable large-scale persistent access to visual line of sight and autonomous beyond visual line of sight small UAS in low-altitude airspace. Within the UTM project, a number of communications technologies to support UTM command and control (C2) are under investigation. In particular, commercial networked cellular systems are being tested and assessed for their ability to meet the reliability, scalability, cybersecurity and redundancy required. NASA Glenn Research Center is studying some of the aspects of employing such networks for UTM C2 communications. This includes the development of a test platform for sensing and characterizing the airborne C2 communications environment at various altitudes and in various terrains and topologies, measuring such aspects as received signal strength and interference. System performance aspects such as latency in the link, handover performance, packet error loss rate, drop outs, coverage gaps and other aspects impacting UTM operation will also be assessed. In this paper we explore some of the C2 approaches being proposed and demonstrated in the UTM project, the reliability, availability and other general C2 performance requirements, and approaches to evaluating and analyzing UTM C2 links based on commercial cellular networks.

air traffic control↗
NASA NTRS2018

Assessing C2 Communications

The National Aeronautics and Space Administration's (NASA) Unmanned Aircraft Systems (UAS) Traffic Management (UTM) project works to develop tools and technologies essential for safely enabling civilian low-altitude UAS operations. Currently there is no established infrastructure to enable and safely manage the widespread use of low-altitude airspace and UAS operations, regardless of the type of UAS. The UTM technical challenge will develop comprehensive and validated airspace operations and integration requirements to safely enable large-scale persistent access to visual line of sight and autonomous beyond visual line of sight small UAS in low-altitude airspace. Within the UTM project, a number of communications technologies to support UTM command and control (C2) are under investigation. In particular, commercial networked cellular systems are being tested and assessed for their ability to meet the reliability, scalability, cybersecurity and redundancy required. NASA Glenn Research Center is studying some of the aspects of employing such networks for UTM C2 communications. This includes the development of a test platform for sensing and characterizing the airborne C2 communications environment at various altitudes and in various terrains and topologies, measuring such aspects as received signal strength and interference. System performance aspects such as latency in the link, handover performance, packet error loss rate, drop outs, coverage gaps and other aspects impacting UTM operation will also be assessed. In this paper we explore some of the C2 approaches being proposed and demonstrated in the UTM project, the reliability, availability and other general C2 performance requirements, and approaches to evaluating and analyzing UTM C2 links based on commercial cellular networks.

aircraft communications↗
NASA NTRS2018

Reliable and Secure Surveillance, Communications and Navigation (RSCAN) for Unmanned Air Systems (UAS) in Controlled Airspace

The aviation industry faces a rapidly-emerging need for integrating Unmanned Air Systems (UAS) into the national airspace (NAS). This trend will present challenging questions for the safe operation of UAS in controlled and uncontrolled airspaces based on new Communications, Navigation and Surveillance (CNS) technologies. For example, can wireless communications data links provide the necessary capacity for accommodating ever increasing numbers of UAS worldwide? Does the communications network provide ample Internet Protocol (IP) address space to allow Air Traffic Control (ATC) to securely address each UAS? Can navigation and surveillance approaches assure safe route planning and safe separation of vehicles even in crowded skies?Under NASA contract NNA16BD84C, Boeing is developing an integrated CNS architecture to enable UAS operations in the NAS. Revolutionary and advanced CNS alternatives are needed to support UAS operations at all altitudes and in all airspaces, including both controlled and uncontrolled. These CNS alternatives must be reliable, redundant, always available, cyber-secure, and affordable for all types of vehicles including small UAS to large transport category aircraft. Our approach considers CNS requirements that address the range of UAS missions where they will be most beneficial and cost-effective.A cybersecure future UAS CNS architecture is needed to support the NASA vision for an Unmanned Air Traffic Management (UTM) system in uncontrolled airspace and a cooperative operation of manned and unmanned aircraft in the controlled global Air Traffic Management (ATM) system. The architecture must, therefore, support always-available and cyber secure operations. This paper presents UAS CNS architecture concepts for large UAS operating in the ATM system in controlled airspace. Future companion works will consider small UAS operating in the UTM system in uncontrolled airspace.

Ponchak, Denise S.↗
NASA NTRS2019

Quantum Technologies for UAS (QTech)

Harness the power of quantum technologies to assure the availability of UAS communications against disruptions. Make use of quantum computing (e.g. quantum optimization) and quantum communication (e.g. quantum key distribution) to address the availability cybersecurity challenge. Our approach is three-fold: (1) Utilize quantum optimization algorithms to design robust network with routing redundancy that can respond adaptively to dynamically changing real-time environment and disruptions, (2) Utilize quantum optimization algorithms resource allocation for detection, localization, and tracking of mobile communication disruption agents, (3) Utilize quantum key distribution (QKD) to execute secure key sharing in high data rate optical communication and/or anti-jamming protocols for secure RF communication.

Quantum Computing↗
NASA NTRS2009

TPSAS-NF1676L-10764-DND

An inter-agency NextGen air transportation system imposes stringent cybersecurity requirements. JPDO NCOD is working to coordinate the needs of the Agencies and industry partners in an effective information exchange.

Michael M Little↗
NASA NTRSDate not supplied

A Survey of Cyber Threat

Multiple companies are competing to develop human-crewed and unmanned aerial vehicles to provide flight in urban environments. With the growth of aerial systems and future airborne vehicle networks and the need to enable secure data exchange and service interactions within Urban Air Mobility (UAM) environments, cybersecurity has come to the forefront as a topic, highlighting the need to protect these networks from cyber-attacks. This paper will identify potential threats, vulnerabilities, and weaknesses of UAM environments, that could lead to system compromises and disruptions.

Cyber Security↗
NASA NTRSDate not supplied

Cyber Resiliency and the Implementation of a Host-Based Intrusion Detection System in an Urban Air Mobility Environment

With the growth in urban air mobility systems and the increasing reliance on interconnected technologies, ensuring the security of these complex infrastructures has become critical. As cities evolve into smart urban centers, the vulnerability to cyber threats escalates, possibly endangering citizens’ safety and the efficiency of transportation networks. In response to these challenges, this paper presents a study on implementing a Host-Based Intrusion Detection System (HIDS) tailored explicitly to urban mobility environments’ unique demands. This study explores the design, development, and deployment of the proposed HIDS, focusing on its adaptability to monitor the hybrid nature of the urban mobility environment. Leveraging machine learning algorithms and anomaly detection techniques, the HIDS is equipped to continuously monitor and analyze the behavior of individual host systems, vehicles, and devices, thereby providing a proactive approach to threat detection. Implementing a HIDS is a pivotal strategy for enhancing cyber resiliency, as it gives an organization granular visibility into internal system activities, enables rapid detection and response to anomalous behavior and cyber threats, and fortifies the organization’s overall cybersecurity posture. In conclusion, this paper highlights the significance of host-based intrusion detection in urban mobility environments and underscores the necessity of tailored security solutions to safeguard against emerging cyber threats.

UAM↗
NASA NTRSDate not supplied

Air Traffic Management Exploration

Extensible Traffic Management (xTM) is the overarching term for traffic management approaches and/or associated services that address the operation of select new entrants within flexibly allocated, designated airspace. xTM will leverage the decentralized UTM model for traffic management, creating cybersecurity challenges that are common and unique.

RAR↗
DOE OSTI2020

ModuleOT: A Hardware Security Module for Operational Technology: Preprint

With increasing penetration levels of distributed energy resources (DERs) on the distribution grid, as well as new technological advancements in the cyber space, new cyberattack vectors are being introduced, and the available attack surface is constantly increasing. Despite this increasing risk, the standard IEEE 1547-2018 does not yet recommend cybersecurity measures for DERs. To address this and to better protect data on the distribution grid - from the standpoints information security as well as operational security - ModuleOT has been developed. The module aims to significantly reduce cyberattack vectors by improving data privacy for user applications. This is accomplished by performing the core functions of encryption, authentication, authorization, certificate management, and user access control. The module integrates a custom security application with hardware cryptographic acceleration. The application secures all communications using Transmission Control Protocol over Internet Protocol (TCP/IP). These include the three most commonly used communications protocols for power systems information exchange: Modbus, Distributed Network Protocol 3 (DNP3), and Smart Energy Profile 2.0 (SEP2.0). These three protocols are also supported by IEEE 1547-2018 for all DER devices. This paper tests the data encryption/decryption feature on a physical networking test bed with emulated Modbus devices reporting grid data and presents the results.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Communications for the Future Electric Grid: Systems and Implications

As the operation of the electric grid continues to become more automated, the associated increase in sensors and systems places increasing demands for fast response, cybersecure communications. This paper presents a review of advances underway in communications and networking technologies that may be implemented to meet these future electric grid requirements.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Critical Roles of Information, Analysis, Research, and Operations in the Cyber Realm

PNNL has developed an adaptive cyber integration framework (ACIF) to facilitate the timely sharing of cyber threat information along with the advancement of situational awareness tools to enhance protection against and respond to critical infrastructure cybersecurity threats. The ACIF comprises components implemented iteratively to achieve research and mission goals. The ACIF components include data generation technologies, analytic tools development and maturation, data enrichment and fusion, trust building with stakeholders, investigative research, analytic rigor, production, and dissemination. Each component, its importance to the ACIF, and how they can be adopted and applied across other information-sharing sectors and domains are discussed in this paper.

Cyber Threat Intelligence, Cyber Security, Data En↗
DOE OSTI2021

Guided Resilience Self Assessment Application

Reliable electricity access is vital for everything from hospitals to national security. When grid disturbances occur, it is crucial to minimize the amount of time it takes to recover. Grid resiliency considers both the preparation for and recovery from high-impact low-frequency disturbances (HILF) such as weather events and cyber attacks. The Department of Energy (DOE) Wind Energy Technologies Office (WETO) funds the multi-laboratory Microgrids, Infrastructure Resilience, and Advanced Control Launchpad (MIRACL) project to investigate technologies to support and grow distributed wind. Researchers at Idaho National Laboratory (INL) contribute to resilience and cybersecurity efforts for the project, and have produced a resilience framework to evaluate system resilience based on individual system specifications. In order to make this framework easy for anyone to apply, I have coded a web application that allows users to input their power system qualities, goals, and perceived risks and then receive suggestions on how to improve their grid resiliency. The web application follows the seven steps in the planning stage of the framework process, allowing the user to input information about their grid and select from common goals, metrics, and hazards, as well as add their own. The application currently provides information about how to complete each step, requiring minimal prior knowledge of the framework. Future work for this application will include allowing the user to submit line drawings of their system and incorporate modeling tools so that the hazard simulations of applying the framework is completed for the user.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

ESPC ESA Training Series: Photovoltaic (PV) Project Considerations

This training covers technical, economic and other photovoltaic (PV) project considerations. Technical topics include cost-effectiveness, resilience, cybersecurity, and electrical considerations. In addition, other topics, such as compatibility with agency mission, site plans, coordination with the serving utility, the National Environmental Policy Act, and agency approval requirements. Considerations specific to third-party owned/third-party financed PV projects are also covered, as well as available resources and templates for project development. The training also includes a recap of the first session in the Energy Savings Performance Contracts Energy Sales Agreements (ESPC ESA) Webinar Series.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2022

Exploring Applied Cryptosystems to Formally Verify Security in Cyber-Physical Systems

This project aims to evaluate RSA as a method for public-key encryption for cyber-physical systems (CPS). As technology advances, cyber attacks are increasing, and with them, the need for cybersecurity advances; the average cost for cybercrime in the world was estimated at $6 trillion in 2021. A public-key cryptosystem that has been around since 1977, RSA has recently garnered some critiques for its fragility, computational cost, and lazy implementation. In this project I will review the mathematical derivation of RSA, analyze the practical implications of such mathematical framework for the security of RSA, and propose a formal methods based approach to verify encryption schemes for CPS.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Standardization of Smart Contracts for Energy Markets and Operation

This work presents a formal review of smart contracts, including definitions, technical requirements, and potential power and energy-related use cases. This includes in-depth discussions covering cybersecurity, legality and interoperability goals that must be taken into consideration by potential end-users. The paper presents a first attempt towards the standardization of smart contracts (SCs) within the field of power and energy as a work in progress activity under the IEEE Standards Association (IEEE SA) P2418.5 Working Group. This work also proposes a holistic, language-agnostic reference model that is intended to accelerate the adoption of Distributed Ledger Technology (DLT) by industry stakeholders by providing standardized processes. Finally, the paper discusses key takeaways that must continue to be developed to increase SC usage within the energy industry.

Blockchain, smart contracts, DLT↗