Engineering PapersSearch

SEARCH · Engineering Papers

Results for “Advanced Persistent Threat”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

Analyzing Risks and Vulnerabilities of Various Computer Systems and Undergoing Exploitation using Embedded Devices

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere has heightened from airports to communication among the military branches legionnaires. With advanced persistent threats (APTs) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated, patched and secured state in a launch control system environment. Attacks on critical systems are becoming more and more relevant and frequent. Nation states are hacking into critical networks that might control electrical power grids or water dams as well as carrying out advanced persistent threat (APTs) attacks on government entities. NASA, as an organization, must protect its self from attacks from all different types of attackers with different motives. Although the International Space Station was created, there is still competition between the different space programs. With that in mind, NASA might get attacked and breached for various reasons such as espionage or sabotage. My project will provide a way for NASA to complete an in house penetration test which includes: asset discovery, vulnerability scans, exploit vulnerabilities and also provide forensic information to harden systems. Completing penetration testing is a part of the compliance requirements of the Federal Information Security Act (FISMA) and NASA NPR 2810.1 and related NASA Handbooks. This project is to demonstrate how in house penetration testing can be conducted that will satisfy all of the compliance requirements of the National Institute of Standards and Technology (NIST), as outlined in FISMA. By the end of this project, I hope to have carried out the tasks stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, as well as policies and procedures.

Penetration Testing

Addressing Software Security

Historically security within organizations was thought of as an IT function (web sites/servers, email, workstation patching, etc.) Threat landscape has evolved (Script Kiddies, Hackers, Advanced Persistent Threat (APT), Nation States, etc.) Attack surface has expanded -Networks interconnected!! Some security posture factors Network Layer (Routers, Firewalls, etc.) Computer Network Defense (IPS/IDS, Sensors, Continuous Monitoring, etc.) Industrial Control Systems (ICS) Software Security (COTS, FOSS, Custom, etc.)

software

IT Security Support for the Spaceport Command Control Systems Development Ground Support Development Operations

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere was heightened from Airports to the communication among the military branches legionnaires. With advanced persistent threats (APTs) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated and secured state in a launch control system environment. FISMA is a law that is mandated by the government to follow when government agencies secure networks and devices. My role on this project is to ensure network devices and systems are in compliance with NIST, as outlined in FISMA. I will achieve this by providing assistance with security plan documentation and collection, system hardware and software inventory, malicious code and malware scanning and configuration of network devices i.e. routers and IDSsIPSs. In addition I will be completing security assessments on software and hardware, vulnerability assessments and reporting, conducting patch management and risk assessments. A guideline that will help with compliance with NIST is the SANS Top 20 Critical Controls. SANS Top 20 Critical Controls as well as numerous security tools, security software and the conduction of research will be used to successfully complete the tasks given to me. This will ensure compliance with FISMA and NIST, secure systems and a secured network. By the end of this project, I hope to have carried out stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, policies and procedures.

computer information security

IT Security Support for the Spaceport Command Control Systems Development Ground Support Development Operations

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere has heightened from airports to the communication among the military branches legionnaires. With advanced persistent threats (APT's) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated and secured state in a launch control system environment. FISMA is a law that is mandated by the government to follow when government agencies secure networks and devices. My role on this project is to ensure network devices and systems are in compliance with NIST, as outlined in FISMA. I will achieve this by providing assistance with security plan documentation and collection, system hardware and software inventory, malicious code and malware scanning, and configuration of network devices i.e. routers and IDS's/IPS's. In addition, I will be completing security assessments on software and hardware, vulnerability assessments and reporting, and conducting patch management and risk assessments. A guideline that will help with compliance with NIST is the SANS Top 20 Critical Controls. SANS Top 20 Critical Controls as well as numerous security tools, security software and the conduction of research will be used to successfully complete the tasks given to me. This will ensure compliance with FISMA and NIST, secure systems and a secured network. By the end of this project, I hope to have carried out the tasks stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, as well as policies and procedures.

security

Engineering the Interface: Advanced Surface Technologies for Lunar Dust Management and Equipment Longevity

Through the Artemis program, NASA intends to develop a sustainable human foothold on the Moon, ultimately paving the way for crewed exploration of Mars. The Moon's hostile environment poses numerous obstacles, including exposure to radiation, temperature extremes, micrometeoroid threats, and particularly the persistent problem of lunar dust. Lunar dust impacts nearly every aspect of surface operations through adhesion and abrasion mechanisms, with contamination from anthropogenic activities (landing, rovers) far outweighing natural phenomena. Multiple adhesion pathways contribute to surface contamination in the lunar environment, including van der Waals forces, electrostatic forces, chemical reaction, and magnetic forces from elemental iron deposits. Sharp asperities from micrometeoroid bombardment and atmospheric absence increase interaction potential and enable mechanical interlocking. Low cohesion between dust particles exacerbates these challenges, as minimal interaction potential between dust and nearby surfaces overcomes particle cohesion, causing contamination. Lunar dust adhesion mitigation technologies can be categorized as either active, requiring external energy, or passive, relying on intrinsic material properties. Ultrasonic and electrodynamic technologies have been developed to the highest technology readiness level for active approaches. Passive strategies primarily focus on surface chemistry and topography modifications. At NASA Langley Research Center, approaches include surface migration agents to reduce surface energy, topographical modification using laser ablation patterning, and tailored surface conductivity to reduce intrinsic adhesion force. Performance has been evaluated using custom-built ultrasonic and centrifuge instruments. Plume-surface interactions from lunar landers can propel micrometer-sized particles at velocities up to 1000 m s-1.8 These particles pose risks to landers, habitats and infrastructure, leading to erosion, degradation, and reduced component lifespan. A panel recovered from Surveyor III was determined to have been severely abraded because of lunar dust displaced from the Apollo 12 lunar module that landed 160 m away. The performance of metallic surfaces has been evaluated via high velocity single particle impact using the laser-induced project impact test (LIPIT) facility at the University of Utah. Peridynamics modeling, a form of continuum mechanics that uses a nonlocal approach enabling greater simulation capabilities of crack initiation and fracture, has also been utilized to gain greater insight into material response during impact events. Lunar dust contamination challenges extend to power generation systems and moving equipment. Cables, rotation stages, and other mechanisms may experience limited range of motion and reduced lifetime due to dust infiltration. NASA Langley Research Center has evaluated traditional aerospace alloys, softgoods, wear resistant ceramics, and several polymer and polymer composite materials. Test methods have included traditional techniques like Taber abrasion testing, as well as designed test configurations developed in the DUSTE (dust, ultraviolet radiation, and space thermal environmental) chamber that reproduce mechanism functions in operational environment. Beyond laboratory experiments, several flight experiments have been conducted. Materials were exposed to the low Earth orbit environment on the Materials International Space Station Experiment (MISSE) and to the lunar surface environment through the Aegis Aerospace Regolith Adherence Characterization (RAC) payload and the Honeybee Robotics PlanetVac payload. Determining lunar dust's impact on surface exploration and habitation requires comprehensive experimental and computational capabilities combined with lessons learned from initial lunar activities. Identifying the greatest environmental challenges and developing mitigation technologies provides the clearest path toward successfully, expeditiously, and efficaciously completing NASA's mission. This presentation will discuss ongoing efforts at NASA Langley Research Center and collaborator contributions to these critical objectives.

Surface Engineering

Method Development for In-situ Detection of Latent Herpesvirus DNA from Saliva using Nanopore Sequencing

Research toward latent herpesvirus reactivation has been intensively addressed through Space Shuttle and International Space Station (ISS) investigations. This work has provided the understanding that persistent reactivation of herpesviruses from asymptomatic crew can be detected through viral shedding in saliva, urine, and blood. Occasionally, viral reactivation from the latency stage can pose a threat to crew health (clinical manifestation) before, during, and after flight missions. Furthermore, previous work detailing correlations with immunity indicate that monitoring viral reactivation could be implemented to assess potential immune dysfunction. While in-flight monitoring is desirable, there is no well-established procedure or method for real-time evaluations, and research to date has relied on postflight, ground-based analysis. The development of portable molecular technologies like the miniPCR™ (miniPCR Bio) thermal cycler and the MinION™ sequencer (Oxford Nanopore Technologies) have confirmed that real-time monitoring is possible in extreme and low resource environments. These devices, combined with simple sample preparation methods, have been used to demonstrate bacterial identification onboard the ISS, as well as rapid viral detection in remote locations on Earth. The work here builds upon previous molecular advancements onboard the ISS toward the development and validation of a spaceflight-compatible method for viral detection from crew samples. Several herpesviruses can be detected in saliva, which provides a non-invasive means to collect samples for monitoring. While the basis for this method lies in previous spaceflight investigations, key points for method optimization include DNA extraction from saliva, viral primer selection, and bioinformatic processes for data analysis. To increase viral yield, numerous DNA extraction methods have been evaluated and will be discussed in detail. For initial development and testing, varicella-zoster virus (VZV) is being targeted though open reading frame 51 and 63 (ORF51, ORF63), as the replication origin-binding protein is highly expressed during latency. Optimization of the thermal cycling parameters has resulted in the ability to test the entire process. The full method has been tested with both viral VZV DNA standards and saliva spiked with varying concentrations of VZV. Viral sequence data were mapped to the reference sequence using minimap2. Prior to mapping, DNA sequencing reads were filtered for length and quality, barcodes were removed, and alignment identity calculated. Following further assessments, statistics were compared across multiple sequencing experiments and are being used to determine the success of the protocols. Forward work will include the incorporation of herpes simplex virus 1 (HSV-1) and Epstein-Barr virus (EBV) primers as well as the validation of results to the terrestrial qPCR standard assay. Upon full validation of the developed method, saliva will be collected from 20 healthy subjects and spiked with viral DNA. These samples will be split and assayed with the MinION and standard qPCR assay.

Hang N Nguyen

Investigating Material Behavior in Atmospheric Entry Conditions: Arc-Jet Testing Insights from Meteorite Ablation to High-Temperature Coatings.

Arc-jet testing is an indispensable tool in elucidating the complex interactions materials undergo when subjected to the extreme thermal and mechanical stresses of atmospheric entry. By replicating these harsh conditions, arc-jets enable researchers to explore critical phenomena such as ablation, melting, and spallation, generating invaluable data that informs the development of sophisticated, physics-based models. These models are pivotal not only in predicting material performance for spacecraft re-entry systems but also in assessing the threat posed by celestial bodies as they encounter Earth’s atmosphere. One of the leading facilities for such investigations is the Hypersonic Materials Environmental Test System (HyMETS) at NASA’s Langley Research Center. A pioneering test campaign conducted at HyMETS focused on unraveling the ablation mechanisms of an ordinary chondrite meteorite (Tamdakht H5) and a terrestrial analog (basalt). These studies unveiled distinct material behaviors: Tamdakht demonstrated a remarkably stable melt flow, with mass loss primarily driven by the volatilization of elements such as iron and sodium, whereas basalt exhibited more aggressive surface degradation due to the rapid decomposition of hydrated minerals, culminating in significant spallation and surface material ejection. Beyond meteorite analysis, HyMETS has also been integral in the exploration of advanced Thermal Protection Systems (TPS) such as Phenolic Impregnated Carbon Ablator (PICA), a material with extensive flight heritage in missions like Stardust, Mars Science Laboratory, Mars 2020, and Osiris-REx. PICA, when coated with NuSil CV-1144-0—a polysiloxane resin designed to prevent particle shedding—undergoes a remarkable transformation upon heating. The resin pyrolyzes to form a thin, oxidation-resistant silicon oxycarbide layer that profoundly influences the material’s thermal response through a sophisticated four-stage process. Initially, the silicon oxycarbide acts as a formidable barrier, impeding reactive interactions with the PICA char and effectively suppressing surface temperature rise and material recession. However, as the heating persists, the protective layer decomposes via carbothermal reduction, exposing the underlying char, which in turn leads to a dramatic spike in surface temperature and accelerated material erosion. In the final stage, equilibrium is reached, with recession rates aligning with those of the virgin material. This intricate understanding of PICA-NuSil behavior under extreme conditions offers valuable insights, enhancing material response models and advancing the development of next-generation TPS for space exploration.

Chemistry