Managing a Vulnerability Testing Program
A good vulnerability testing program can help reduce system compromises, provide a way of assessing and measuring improvements in security, and motivate everyone to get involved.
SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
A good vulnerability testing program can help reduce system compromises, provide a way of assessing and measuring improvements in security, and motivate everyone to get involved.
A delay circuit includes a first network having an input and an output node, a second network having an input and an output, the input of the second network being coupled to the output node of the first network. The first network and the second network are configured such that: a glitch at the input to the first network having a length of approximately one-half of a standard glitch time or less does not cause the voltage at the output of the second network to cross a threshold, a glitch at the input to the first network having a length of between approximately one-half and two standard glitch times causes the voltage at the output of the second network to cross the threshold for less than the length of the glitch, and a glitch at the input to the first network having a length of greater than approximately two standard glitch times causes the voltage at the output of the second network to cross the threshold for approximately the time of the glitch. The method reduces the vulnerability of a latch to single event upsets. The latch includes a gate having an input and an output and a feedback path from the output to the input of the gate. The method includes inserting a delay into the feedback path and providing a delay in the gate.
A delay circuit includes a first network having an input and an output node, a second network having an input and an output, the input of the second network being coupled to the output node of the first network. The first network and the second network are configured such that: a glitch at the input to the first network having a length of approximately one-half of a standard glitch time or less does not cause tile voltage at the output of the second network to cross a threshold, a glitch at the input to the first network having a length of between approximately one-half and two standard glitch times causes the voltage at the output of the second network to cross the threshold for less than the length of the glitch, and a glitch at the input to the first network having a length of greater than approximately two standard glitch times causes the voltage at the output of the second network to cross the threshold for approximately the time of the glitch. A method reduces the vulnerability of a latch to single event upsets. The latch includes a gate having an input and an output and a feedback path from the output to the input of the gate. The method includes inserting a delay into the feedback path and providing a delay in the gate.
Human settlements, both large and small, are where the vast majority of people on the Earth live. Expansion of cities both in population and areal extent, is a relentless process that will accelerate in the 21st century. As a consequence of urban growth both in the United States and around the globe, it is important to develop an understanding of how urbanization will affect the local and regional environment. Of equal importance, however, is the assessment of how cities will be impacted by the looming prospects of global climate change and climate variability. The potential impacts of climate change and variability has recently been annunciated by the IPCC's "Climate Change 2007" report. Moreover, the U.S. Climate Change Science Program (CCSP) is preparing a series of "Synthesis and Assessment Products" (SAPs) reports to support informed discussion and decision making regarding climate change and variability by policy matters, resource managers, stakeholders, the media, and the general public. We are authors on a SAP describing the effects of global climate change on human settlements. This paper will present the elements of our SAP report that relate to what vulnerabilities and impacts will occur, what adaptation responses may take place, and what possible effects on settlement patterns and characteristics will potentially arise, on human settlements in the U.S. as a result of climate change and climate variability. We will also present some recommendations about what should be done to further research on how climate change and variability will impact human settlements in the U.S., as well as how to engage government officials, policy and decision makers, and the general public in understanding the implications of climate change and variability on the local and regional levels. Additionally, we wish to explore how technology such as remote sensing data coupled with modeling, can be employed as synthesis tools for deriving insight across a spectrum of impacts (e.g. public health, urban planning for mitigation strategies) on how cities can cope and adapt to climate change and variability. This latter point parallels the concepts and ideas presented in the U.S. National Academy of Sciences, Decadal Survey report on "Earth Science Applications from Space: National Imperatives for the Next Decade and Beyond" wherein the analysis of the impacts of climate change and variability, human health, and land use change are listed as key areas for development of future Earth observing remote sensing systems.
This slide presentation defines remote sensing, and presents examples of remote sensing and astronaut photography, which has been a part of many space missions. The presentation then reviews the project aimed at analyzing urban vulnerability to climate change, which is to test the hypotheses that Exposure to excessively warm weather threatens human health in all types of climate regimes; Heat kills and sickens multitudes of people around the globe every year -- directly and indirectly, and Climate change, coupled with urban development, will impact human health. Using Multiple Endmember Spectral Mixing Analysis (MESMA), and the Phoenix urban area as the example, the Normalized Difference Vegetation Index (NDVI) is calculated, a change detection analysis is shown, and surface temperature is shown.
This slide presentation reviews some of the effects that global change has on urban areas in the United States and how the growth of urban areas will affect the environment. It presents the elements of our Synthesis and Assessment Report (SAP) report that relate to what vulnerabilities and impacts will occur, what adaptation responses may take place, and what possible effects on settlement patterns and characteristics will potentially arise, on human settlements in the U.S. as a result of climate change and climate variability. We will also present some recommendations about what should be done to further research on how climate change and variability will impact human settlements in the U.S., as well as how to engage government officials, policy and decision makers, and the general public in understanding the implications of climate change and variability on the local and regional levels. Additionally, we wish to explore how technology such as remote sensing data coupled with modeling, can be employed as synthesis tools for deriving insight across a spectrum of impacts (e.g. public health, urban planning for mitigation strategies) on how cities can cope and adapt to climate change and variability. This latter point parallels the concepts and ideas presented in the U.S. National Academy of Sciences, Decadal Survey report on "Earth Science Applications from Space: National Imperatives for the Next Decade and Beyond" wherein the analysis of the impacts of climate change and variability, human health, and land use change are listed as key areas for development of future Earth observing remote sensing systems.
The Fertile Crescent, its hilly flanks and surrounding drylands has been a critical region for studying how climate has influenced societal change, and this review focuses on the region over the last 20,000 years. The complex social, economic, and environmental landscapes in the region today are not new phenomena and understanding their interactions requires a nuanced, multidisciplinary understanding of the past. This review builds on a history of collaboration between the social and natural palaeoscience disciplines. We provide a multidisciplinary, multiscalar perspective on the relevance of past climate, environmental, and archaeological research in assessing present day vulnerabilities and risks for the populations of southwest Asia. We discuss the complexity of palaeoclimatic data interpretation, particularly in relation to hydrology, and provide an overview of key time periods of palaeoclimatic interest. We discuss the critical role that vegetation plays in the human–climate–environment nexus and discuss the implications of the available palaeoclimate and archaeological data, and their interpretation, for palaeonarratives of the region, both climatically and socially. We also provide an overview of how modelling can improve our understanding of past climate impacts and associated change in risk to societies. We conclude by looking to future work, and identify themes of “scale” and “seasonality” as still requiring further focus. We suggest that by appreciating a given locale's place in the regional hydroscape, be it an archaeological site or palaeoenvironmental archive, more robust links to climate can be made where appropriate and interpretations drawn will demand the resolution of factors acting across multiple scales.
The NASA Carbon Monitoring System (CMS) and Arctic-Boreal Vulnerability Experiment (ABoVE) have been planned and funded by the NASA Earth Science Division. Both programs have a focus on engaging stakeholders and developing science useful for decision making. The resulting programs have funded significant scientific output and advancements in understanding how satellite remote sensing observations can be used to not just study how the Earth is changing, but also create data products that are of high utility to stakeholders and decisions makers. In this paper we focus on documenting thematic diversity of research themes and methods used, and how the CMS and ABoVE themes are related. We do this through developing a Correlated Topic Model on the 521 papers produced by the two programs and plotting the results in a network diagram. Through analysis of the themes in these papers, we document the relationships between researchers and institutions participating in CMS and ABoVE programs and the benefits from sustained engagement with stakeholders due to recurring funding. We note an absence of policy engagement in the papers and conclude that funded researchers need to be more ambitious and explicit in drawing the connection between their research and carbon policy implications in order to meet the stated goals of the CMS and ABoVE programs.
Recent developments of high-powered unmanned aerial vehicles (UAVs) have allowed for urban air mobility (UAM) to become a reality. While these flying cars' propulsive technology has almost become economically viable, the infrastructure to allow these vehicles to operate in an urban environment is still lacking. With numerous known vulnerabilities in UAVs and commercial aircraft, manufacturers have not addressed cybersecurity in the scope of urban air mobility.
Recent developments of high-powered unmanned aerial vehicles (UAVs) have allowed for urban air mobility (UAM) to become a reality. While these flying cars' propulsive technology has almost become economically viable, the infrastructure to allow these vehicles to operate in an urban environment is still lacking. With numerous known vulnerabilities in UAVs and commercial aircraft, manufacturers have not addressed cybersecurity in the scope of urban air mobility.
NASA's Arctic-Boreal Vulnerability Experiment (ABoVE) integrates field and airborne data into modeling and synthesis activities for understanding Arctic and Boreal ecosystem dynamics. The ABoVE Benchmarking System (ABS) is an operational software package to evaluate terrestrial biosphere models against key indicators of Arctic and Boreal ecosystem dynamics, i.e.: carbon biogeochemistry, vegetation, permafrost, hydrology, and disturbance. The ABS utilizes satellite remote sensing data, airborne data, and field data from ABoVE as well as collaborating research networks in the region, e.g.: the Permafrost Carbon Network, the International Soil Carbon Network, the Northern Circumpolar Soil Carbon Database, AmeriFlux sites, the Moderate Resolution Imaging Spectroradiometer, the Orbiting Carbon Observatory 2, and the Soil Moisture Active Passive mission. The ABS is designed to be interactive for researchers interested in having their models accurately represent observations of key Arctic indicators: a user submits model results to the system, the system evaluates the model results against a set of Arctic-Boreal benchmarks outlined in the ABoVE Concise Experiment Plan, and the user then receives a quantitative scoring of model strengths and deficiencies through a web interface. This interactivity allows model developers to iteratively improve their model for the Arctic-Boreal Region by evaluating results from successive model versions. We show here, for illustration, the improvement of the Lund–Potsdam–Jena-Wald Schnee und Landschaft (LPJwsl) version model through the ABoVE ABS as a new permafrost module is coupled to the existing model framework. The ABS will continue to incorporate new benchmarks that address indicators of Arctic-Boreal ecosystem dynamics as they become available.
The Ourika watershed is characterized by higher than average flood flows, a rugged topography, a sparse vegetation cover and a friable substrate that makes it vulnerable to soil erosion. Soil is an important non-renewable asset capital, providing several ecosystem services that sustain life through physical and biological regulation processes. The loss, or otherwise, redistribution of biota by soil erosion in the Ourika watershed has received little attention and thus constitutes a key knowledge gap that needs to be addressed. This study quantifies the level of erosion and maps its spatial distribution in the watershed using the Sediment Delivery Ratio (SDR) of the Integrated Valuation of Ecosystem Services and Tradeoffs model (InVEST3.6.0). The SDR maps the overland sediment generation and delivery to the stream at the watershed level using rainfall, soil properties, topography, cover management and cropping practices as predefined set of input variables. Recommended internal model calibration was used and results were compared to similar studies carried out in different parts of Morocco for validation. The results reveal that 93% of the watershed is subject to a strong rainfall aggressiveness greater than 50 MJ mm ha–1 h–1 yr1 under an average rainfall intensity of 541 mm/year, rainfall capacity to initiate the detachment and transport of soil particles by runoff, and only 11.5% of the watershed area is protected with vegetative cover. We find that overall, the Ourika watershed is losing its soil to erosion at an alarming average rate of 258.48 ton.ha–1.yr–1, a rate well above the tolerable threshold of 7ton.ha–1.yr–1. The spatial distribution of this loss shows areas that need to be urgently remedied. The primary factors for soil erosion in the Ourika watershed appear to be related to the aggressive nature of local rainfall and the inherent susceptibility of soils, which can be costly to this cash-crop region. Because rainfall intensity, soil properties, and topography are intrinsic characteristics of the watershed, we suggest that seasonally adapted cropping rotations that maintains conservative practices with a high cover management may reduce soil erosion in the Ourika watershed.
Milwaukee County has experienced an increase in flooding due to climate change and urbanization. The frequency and severity of flooding vary spatially due to differences in land cover, surface permeability, and infrastructure. Marginalized communities tend to experience disproportionately high flooding and damage due to infrastructural inequalities and limited access to resources. To quantify these differences, we used the Natural Capital Project’s Integrated Valuation of Ecosystem Services and Tradeoffs (InVEST) Urban Flood Risk Mitigation Model to calculate and create maps of runoff retention, nominal flood depth, and economic damage to buildings in Milwaukee. Our model inputs included land cover, surface permeability, and rainfall. To inform our precipitation inputs, we used NASA’s Integrated Multi-satellite Retrievals for Global Precipitation Measurement (GPM IMERG) and National Weather Service (NWS) data. We assessed the relationship between flood risk and social and environmental spatial data including redlining, racial demographics, greenspace, and community resilience. The data demonstrate that flood risk is higher in historically redlined neighborhoods, majority Hispanic and Black census block groups, areas that lack parks and trees, and areas of low community resilience as measured by the Census Bureau’s Community Resilience Estimates (CRE). These findings will support our partners, Groundwork Milwaukee and Groundwork USA, in their efforts to promote the equitable distribution of resources and support environmental health in urban spaces. The end products of this project provide our partners with tools to assess urban flooding vulnerability, guide future intervention projects, quantify the effects of environmental injustice, and improve stakeholder access to data.
Milwaukee County has experienced an increase in flooding due to climate change and urbanization. The frequency and severity of flooding vary spatially due to differences in land cover, surface permeability, and infrastructure. Marginalized communities tend to experience disproportionately high flooding and damage due to infrastructural inequalities and limited access to resources. To quantify these differences, we used the Natural Capital Project’s Integrated Valuation of Ecosystem Services and Tradeoffs (InVEST) Urban Flood Risk Mitigation Model to calculate and create maps of runoff retention, nominal flood depth, and economic damage to buildings in Milwaukee. Our model inputs included land cover, surface permeability, and rainfall. To inform our precipitation inputs, we used NASA’s Integrated Multi-satellite Retrievals for Global Precipitation Measurement (GPM IMERG) and National Weather Service (NWS) data. We assessed the relationship between flood risk and social and environmental spatial data including redlining, racial demographics, greenspace, and community resilience. The data demonstrate that flood risk is higher in historically redlined neighborhoods, majority Hispanic and Black census block groups, areas that lack parks and trees, and areas of low community resilience as measured by the Census Bureau’s Community Resilience Estimates (CRE). These findings will support our partners, Groundwork Milwaukee and Groundwork USA, in their efforts to promote the equitable distribution of resources and support environmental health in urban spaces. The end products of this project provide our partners with tools to assess urban flooding vulnerability, guide future intervention projects, quantify the effects of environmental injustice, and improve stakeholder access to data.
Urban environments face hotter temperatures than suburban and rural areas due to higher concentrations of impervious surfaces, heat-retaining buildings, and lack of green space. Bridgeport, Connecticut, which was formerly a national manufacturing hub, is now the densest and most populous city in the state. Bridgeport experiences hotter temperatures, exposing its residents to more extreme temperatures than the surrounding affluent suburbs. Extreme heat affects the health of those exposed to it and intensifies energy demands. Understanding temperature differences is the first step in effectively directing mitigation efforts. Our partner, Groundwork Bridgeport, along with the Yale Urban Design Workshop, are planning a “cool corridors” project, implementing cooling infrastructure to combat urban heat. We used Landsat 8 Thermal Infrared Sensor and Landsat 9 Thermal Infrared Sensor-2 data to conduct a Land Surface Temperature analysis in Google Earth Engine for the county of Fairfield. A Principal Component Analysis was performed to identify indicators of social vulnerability in Bridgeport. We used the SOlar and LongWave Environmental Irradiance Geometry model to identify felt heat on the block level to inform where the partner should locate their cooling interventions to ensure they are most effective and equitable. We focused on the East Side of Bridgeport, which we found was 10 degrees hotter than other areas of Bridgeport and the neighboring town of Fairfield. We integrated our findings using Earth observations and additional sociodemographic and climate data into final communication products for our partners which will facilitate their selection of candidate locations for their Cool Corridors project.
Formal methods use mathematical logic and equations to prove that a system or code is secure. In this poster, I examine existing formal methods tools and their application for projects working to remediate vulnerabilities in hardware and hardware description language. This poster is focused on the tools ReWire and AutoGenILA and I hope to evaluate their benefits and weaknesses with the intention of creating an internal report on the application and weaknesses of existing formal methods tools and identifying gaps for future formal methods tool creation.
Program runtime/timing attacks exploit variations in a program’s execution times to extract sensitive information from the program (e.g. encryption keys, sensitive variable data, intellectual property). State-of-the-art solutions to runtime sidechannel attacks attempt to balance the execution time of the sensitive code for different control flow paths to eliminate the timing leakage. However, during the mitigation process, most techniques do not consider the underlying hardware/device on which the target program is supposed to run on. This can lead to over-fixing (unnecessary extra operations), under-fixing (not solving the imbalance properly), and even failures. We propose DISARM, a joint hardware-software methodology (unlike any existing solution) for mitigating runtime side-channel vulnerabilities that utilizes timing values from real embedded devices to generate targeted software fixes. We implement DISARM to support C/C++/Java source codes and validate it across 22 standard benchmarks. DISARM outperforms state-of-the-art solutions such as PENDULUM and DifFuzzAR in terms of execution time overhead (up to −46%), code size overhead (up to −10%), and correctness (no failures) on five different embedded/edge devices.
Not Available