Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “secure data”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 991 records · Page 55

Tonlé Sap Food Security & Agriculture III: Evaluating Changes in Ecosystem Vitality and Freshwater Health in the Tonlé Sap Basin using Remotely Sensed Data

Tonlé Sap Lake, located in Cambodia, Southeast Asia, is one of the most productive inland fisheries in the world. With the unique reverse flow hydrology of the Tonlé Sap River, this freshwater system contains rich biodiversity and provides critical freshwater resources for the local community. Overfishing, stronger seasonality, drought, dam construction, forest fires, and untreated industrial domestic sewage threaten the ecosystem vitality and economic success of Tonlé Sap. In collaboration with Conservation International and the Cambodian Ministry of Water Resources and Meteorology’s Tonlé Sap Authority, we calibrated and finalized remotely-sensed proxies for sub-indicators of the Freshwater Health Index (FHI). We used NASA Earth observation data from Moderate Resolution Imaging Spectroradiometer (MODIS), and the Gravity Recovery and Climate Experiment (GRACE). These datasets were used in RS proxies and a Soil and Water Assessment Tool (SWAT) model that previous teams developed for sub-indicators of FHI. They included landcover, bank modification, and water quality metrics. It was determined that the ground water storage in Tonlé Sap Lake exhibited a slight declining trend over from April 1st, 2002 to February 3rd, 2017. To calculate chlorophyll-a concentration in the Tonlé Sap Lake, we used Copernicus Global Land Service mission data which provided a Trophic State Index of the lake. Between January 1st, 2000 and December 31st, 2020, the lake and surrounding region within the study area boundary displayed a slight decrease in vegetation density and consistently high chlorophyll-a concentrations. The SWAT model calculated nitrogen and phosphorus content measured in outlet points of the lake. We demonstrated that remotely sensed data is valuable for providing additional information for the FHI, but is not fully capable of replacing its in situ counterpart. We also concluded the water quantity is on a slowly declining trend within the basin.

Joey Lindsay↗

NASA SensorWeb and OGC Standards for Disaster Management

I. Goal: Enable user to cost-effectively find and create customized data products to help manage disasters; a) On-demand; b) Low cost and non-specialized tools such as Google Earth and browsers; c) Access via open network but with sufficient security. II. Use standards to interface various sensors and resultant data: a) Wrap sensors in Open Geospatial Consortium (OGC) standards; b) Wrap data processing algorithms and servers with OGC standards c) Use standardized workflows to orchestrate and script the creation of these data; products. III. Target Web 2.0 mass market: a) Make it simple and easy to use; b) Leverage new capabilities and tools that are emerging; c) Improve speed and responsiveness.

Mandl, Dan↗

A Review of Visualization Methods for Cyber-Physical Security: Smart Grid Case Study

Cyber-Physical Systems (CPSs) are becoming increasingly complex and interconnected as they attempt to meet the demands of evolving society. As a result, monitoring and maintaining them becomes a more complex and demanding task for control system operators and cyber defenders. While the literature on visualization techniques in the context of cybersecurity is extensive, the same cannot be said for studies on visualization for the security of cyber-physical systems. This paper aims to fill that gap by: 1) defining the main features of a visualizations workflow for security visualizations in cyber-physical systems. The workflow includes the acquisition of cyber and physical data, processing of data, selection, and configuration of both visualization tools and end-user interactions. 2) Providing an overview of cyber-physical security visualization systems, with a focus on smart grids as a case study. Finally, we use the perspectives gained from this analysis to provide insights and directions for future research and design of cyber-physical visualization techniques.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Power System Waveform Datasets for Machine Learning

The desire for increased visibility across the electricity grid will necessarily increase the deployment of sensing and measurement devices and associated data management needs to unprecedented levels. For the existing sensing and measurement infrastructure, there remains a great amount of “value” yet to be extracted through advanced data management and analytics. Availability of more data will not, by itself, lead to changes in grid visibility, security, and resiliency. To create the predictive and prescriptive environment required to enable new markets and transactions for customer revenue and a reliable grid, the data must be collected, organized, evaluated, and analyzed using sophisticated algorithms to provide actionable information allowing operators and customers to reliably manage an increasingly complex grid. Progress in artificial intelligence (AI) has been largely driven by large, publicly available datasets that can be used to train AI algorithms such as MNIST, a database of handwritten images of digits, and ImageNet, an image database of everyday objects. These types of publicly available databases of real-world training datasets have been largely credited for advancement of image processing, computer vision, and deep learning algorithms that these use cases deploy. However, in the power systems industry to date, there are few databases with proper event labeling, and data access to a publicly available collection of power system event waveforms that will allow users to interact with grid signature data. Publicly available datasets of power system event waveforms, such as the DOE/EPRI dataset, often lack critical metadata or contain limited examples of each event type, and data formats vary widely across these datasets.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Crop-CASMA - A Web GIS Tool for Cropland Soil Moisture Monitoring and Assessment Based on SMAP Data

Timely, frequent, and complete cropland soil moisture information acquired throughout the growing season is critical for agricultural policy, production, food security, and food prices. The NASA Soil Moisture Active and Passive (SMAP) mission provides a reliable data source for cropland soil moisture assessment. This paper presents Crop-CASMA- a web GIS application tool for cropland soil moisture monitoring and assessment based on SMAP data. This interactive Web service-based GIS application tool enables CONUS SMAP derived soil moisture data visualization, dissemination, and analytics. In this paper, we describe the Crop-CASMA application system architecture, the application implementation, and the data it serves. In addition, we also present a few snapshots of the Crop-CASMA data for cropland soil moisture monitoring. The release of Crop-CASMA greatly enhances the user experience and facilitates using soil moisture data products for crop condition monitoring and decision support.

Zhengwei Yang↗

Crop-CASMA - A Web GIS Tool for Cropland soil moisture Monitoring and Assessment Based on SMAP Data

Timely, frequent, and complete cropland soil moisture information acquired throughout the growing season is critical for agricultural policy, production, food security, and food prices. The NASA Soil Moisture Active and Passive (SMAP) mission provides a reliable data source for cropland soil moisture assessment. This paper presents Crop-CASMA - a web GIS application tool for cropland soil moisture monitoring and assessment based on SMAP data. This interactive Web service-based GIS application tool enables CONUS SMAP derived soil moisture data visualization, dissemination, and analytics. In this paper, we describe the Crop-CASMA application system architecture, the application implementation, and the data it serves. In addition, we also present a few snapshots of the Crop-CASMA data for cropland soil moisture monitoring. The release of Crop-CASMA greatly enhances the user experience and facilitates using soil moisture data products for crop condition monitoring and decision support.

Reichle, Rolf H.↗

3D Imaging with Structured Illumination for Advanced Security Applications

Three-dimensional (3D) information in a physical security system is a highly useful discriminator. The two-dimensional data from an imaging systems fails to provide target distance and three-dimensional motion vector, which can be used to reduce nuisance alarm rates and increase system effectiveness. However, 3D imaging devices designed primarily for use in physical security systems are uncommon. This report discusses an architecture favorable to physical security systems; an inexpensive snapshot 3D imaging system utilizing a simple illumination system. The method of acquiring 3D data, tests to understand illumination design, and software modifications possible to maximize information gathering capability are discussed.

42 ENGINEERING↗

Embedding security into ferroelectric FET array via in situ memory operation

Non-volatile memories (NVMs) have the potential to reshape next-generation memory systems because of their promising properties of near-zero leakage power consumption, high density and non-volatility. However, NVMs also face critical security threats that exploit the non-volatile property. Compared to volatile memory, the capability of retaining data even after power down makes NVM more vulnerable. Existing solutions to address the security issues of NVMs are mainly based on Advanced Encryption Standard (AES), which incurs significant performance and power overhead. In this paper, we propose a lightweight memory encryption/decryption scheme by exploiting in-situ memory operations with negligible overhead. To validate the feasibility of the encryption/decryption scheme, device-level and array-level experiments are performed using ferroelectric field effect transistor (FeFET) as an example NVM without loss of generality. Besides, a comprehensive evaluation is performed on a 128 × 128 FeFET AND-type memory array in terms of area, latency, power and throughput. Compared with the AES-based scheme, our scheme shows ~22.6×/~14.1× increase in encryption/decryption throughput with negligible power penalty. Furthermore, we evaluate the performance of our scheme over the AES-based scheme when deploying different neural network workloads. Our scheme yields significant latency reduction by 90% on average for encryption and decryption processes.

47 OTHER INSTRUMENTATION↗

Braxton Marlatt Intern Poster

The Internet of Things (IoT) encompasses a vast network of interconnected devices embedded with software, sensors, and network connectivity, enabling data collection and exchange. While IoT technology revolutionizes various industries, it also introduces significant security challenges. This research focuses on enhancing IoT security through the implementation of Zero Trust Architecture concepts, specifically targeting the Network and Device pillars of the Cybersecurity and Infrastructure Security Agency’s Zero Trust Maturity Model. By generating Codified Attack Surfaces (CAS) using custom Structured Threat Information eXpression bundles, this project aims to provide enhanced visibility into network communications, detect vulnerabilities in device firmware, and improve the overall security posture for IoT devices and networks. The methodology involves defining custom STIX schema and objects, collecting data from intra-IoT traffic, external network traffic, and firmware analysis, and automating the conversion and correlation of this data into STIX bundles. The automated generation of attack surfaces offers comprehensive insights into activity, vulnerabilities, and anomalies within an IoT environment, enabling proactive threat identification and mitigation.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

A demonstration of CMOS VLSI circuit prototyping in support of the site facility using the 1.2 micron standard cell library developed by National Security Agency

Two silicon CMOS application specific integrated circuits (ASICs), a data generation chip, and a data checker chip were designed. The conversion of the data generator circuitry into a pair of CMOS ASIC chips using the 1.2 micron standard cell library is documented. The logic design of the data checker is discussed. The functions of the control circuitry is described. An accurate estimate of timing relationships is essential to make sure that the logic design performs correctly under practical conditions. Timing and delay information are examined.

Smith, Edwyn D.↗

Efficient packet forwarding using cyber-security aware policies

For balancing load, a forwarder can selectively direct data from the forwarder to a processor according to a loading parameter. The selective direction includes forwarding the data to the processor for processing, transforming and/or forwarding the data to another node, and dropping the data. The forwarder can also adjust the loading parameter based on, at least in part, feedback received from the processor. One or more processing elements can store values associated with one or more flows into a structure without locking the structure. The stored values can be used to determine how to direct the flows, e.g., whether to process a flow or to drop it. The structure can be used within an information channel providing feedback to a processor.

97 MATHEMATICS AND COMPUTING↗

Efficient packet forwarding using cyber-security aware policies

For balancing load, a forwarder can selectively direct data from the forwarder to a processor according to a loading parameter. The selective direction includes forwarding the data to the processor for processing, transforming and/or forwarding the data to another node, and dropping the data. The forwarder can also adjust the loading parameter based on, at least in part, feedback received from the processor. One or more processing elements can store values associated with one or more flows into a structure without locking the structure. The stored values can be used to determine how to direct the flows, e.g., whether to process a flow or to drop it. The structure can be used within an information channel providing feedback to a processor.

97 MATHEMATICS AND COMPUTING↗

Detecting False Data Injection Attacks Against Power System State Estimation With Fast Go-Decomposition Approach

State estimation is a fundamental function in modern energy management system, but its results may be vulnerable to false data injection attacks (FDIAs). FDIA is able to change the estimation results without being detected by the traditional bad data detection algorithms. In this paper, we propose an accurate and computational attractive approach for FDIA detection. In this work, we first rely on the low rank characteristic of the measurement matrix and the sparsity of the attack matrix to reformulate the FDIA detection as a matrix separation problem. Then, four algorithms that solve this problem are presented and compared, including the traditional augmented Lagrange multipliers (ALMs), double-noise-dual-problem (DNDP) ALM, the low rank matrix factorization, and the proposed new “Go Decomposition (GoDec).” Numerical simulation results show that our GoDec algorithm outperforms the other three alternatives and demonstrates a much higher computational efficiency. Furthermore, GoDec is shown to be able to handle measurement noise and applicable for large-scale attacks.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Enhancing Nuclear and Radiological Security in Polarized Times: Safeguarding Against Extremist Insider Threats

Domestic violent extremism has been on the rise in recent years, fueled by growing political polarization, the COVID-19 pandemic, and the spread of misinformation online. This concerning trend raises an important question: has this increase in extremist violence manifested in more incidents involving radioactive or nuclear (RN) materials and a corresponding security concern? To explore this question, we analyzed existing data on events involving chemical, biological, radiological, or nuclear materials over time. Specifically, we examined the rate of RN-related incidents, the targets of these events, and the ideologies motivating the perpetrators by using the Violent Non-State Actor Chemical, Biological, Radiological, and Nuclear Event Database from the National Consortium for the Study of Terrorism and Responses to Terrorism. Our analysis aimed to determine whether the broader rise of violent extremism has translated to an elevated risk of attacks involving RN materials. Results of the analysis revealed that there was no clear increase in events involving RN material in the dataset. However, given the rarity of these events, this conclusion does not indicate that such a trend might not appear in coming years if violent extremism continues to rise. To address the potential risk presented by violent extremism, in addition to quantifying the frequency of RN events, we also reviewed traits that could make organizations more susceptible to insider threats from radicalized employees. Focusing on the literature around counterproductive workplace behavior, we identified organizational characteristics that might increase the risk of malicious acts committed by radicalized insiders. These risk factors include abusive leadership, situational constraints, and organizational injustice. Finally, using these organizational risk characteristics, we discuss interventions that organizations with RN material can take to reduce their risk of attacks stemming from violent extremism while still protecting individual rights to privacy and civil liberties. Overall, this article provides an overview of the intersections between rising domestic extremism, insider threats, and risks posed by RN materials. We present current data on trends and patterns in this space as well as practical guidance for organizational resilience.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Non-intrusive data authentication systems and methods

Systems and methods are disclosed that create a separate digital and cryptographically secure signal “branch” to a secondary observer from a primary signal path of an information system. The information system may be a measurement system. The secure signal branch is creating without interfering with the primary signal path. In such a manner, the secondary observer may authenticate reported data while not interfering with the signal of the information system.

97 MATHEMATICS AND COMPUTING↗

Acoustic Measurements of Solvent Extraction Processes in Support of Safeguards

The proposed poster focuses on using acoustic monitoring to advance detection techniques for reprocessing equipment in support of nuclear safeguards. The usage of free air acoustic monitoring has been previously demonstrated at Idaho National Laboratory (INL) at facilities such as the Advanced Test Reactor and the National Security Test Range. However, this work focuses on a deployment environment dedicated to monitoring separation processes, using solvent extraction equipment such as centrifugal contactors. This environment offers an opportunity for signal discovery and in characterizing acoustic signatures of the equipment in operation. This data can support the development of safeguards by design and security by design measures for aqueous reprocessing facilities. Furthermore, this type of monitoring can aid in early detection and identification of removed materials indicating diversion, which is essential for initiating material recovery and actor identification. The results of this work include data from nine low-frequency acoustic sensors used to investigate potential acoustic characteristics of centrifugal contactors used in multi-stage processes. The results also discuss the correlation between the signatures and the operation of the contactor banks.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗

A Conceptual Architecture for National Biosurveillance: Moving Beyond Situational Awareness to Enable Digital Detection of Emerging Threats

Despite numerous calls for improvement, the U.S. biosurveillance enterprise remains a patchwork of uncoordinated systems that fail to take advantage of the rapid progress in information processing, communication, and analytics made in the past decade. By synthesizing components from the extensive biosurveillance literature, we propose a conceptual framework for a national biosurveillance architecture and provide suggestions for implementation. The framework differs from the current federal biosurveillance development pathway in that it is not focused on systems useful for “situational awareness,” but is instead focused on the long-term goal of having true warning capabilities. Therefore, a guiding design objective is the ability to digitally detect emerging threats that span jurisdictional boundaries, because attempting to solve the most challenging biosurveillance problem first provides the strongest foundation to meet simpler surveillance objectives. Core components of the vision are: (1) a whole-of-government approach to support currently disparate federal surveillance efforts that have a common data need, including those for food safety, vaccine and medical product safety, and infectious disease surveillance; (2) an information architecture that enables secure, national access to electronic health records, yet does not require that data be sent to a centralized location for surveillance analysis; (3) an inference architecture that leverages advances in ‘big data’ analytics and learning inference engines—a significant departure from the statistical process control paradigm that underpins nearly all current syndromic surveillance systems; and, (4) an organizational architecture with a governance model aimed at establishing national biosurveillance as a critical part of the U.S. national infrastructure. Although it will take many years to implement, and a national campaign of education and debate to acquire public buy-in for such a comprehensive system, the potential benefits warrant increased consideration within the U.S. government.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗