Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Penetration Testing”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
NASA NTRS2014

Scalable Asset Discovery, Vulnerability Scanning, and Penetration Testing for Remote Sites and Wireless Spectrums Utilizing an Embedded Linux Plug - PwniPlug and the Raspberry Pi B+ as a Sample Pen Test

All devices attached to the NASA KSC network are subject to security vulnerability scanning and/or penetration testing. In today's changing environment, vulnerable and/or unprotected systems can easily be overlooked. Systems that are not properly managed can become a potential threat to the operational integrity of our systems and networks. This includes all NASA (internal and external) information systems within NASA KSC Internet Protocol (IP) address space, and NASA KSC facilities. The Office of the Chief Information Officer (OCIO) recommends that all NASA Centers and information systems be subject to penetration testing on a regular interval in accordance with the guidelines identified by the National Institute of Standards and Technology (NIST). (ITS-HBK-2810.04-02A) Protecting information and equipment at NASA is an area of increasing concern. In addition to the CPU's on the network; Supervisory, Control and Data Acquisition (SCADA) systems are especially vulnerable because these systems have lacked standards, use embedded controllers with little computational power and informal software, are connected to physical processes, have few operators, and are increasingly also being connected to corporate networks. The scope of work is comprised of several individual components which together build upon previous work by Drew Branch, NASA KSC Intern. The Pwn Plug is the selected COTS (Commercial-Off-The-Shelf) device chosen to test simplification of mandatory IT Security tasks. The device will be utilized to provide services to NASA KSC and enable an assessment of infrastructure soundness and regulatory compliance in an efficient, economical, and business responsive manner. The Pwn Plug is designed as a pen testing appliance which provides a hardware platform that can support commercial penetration testing efforts at significantly reduced costs. The expected outcomes are: 1) External Penetration Testing, 2) Social Engineering, 3) Procedural Documentation, 4) Recommended Remediation Action Plan, 5) System Retest & Remediation Attestation and 6) Final Reports, out briefing and Presentation. Due to physical and material constraints beyond intern and mentor control, the project was redefined as a working pen-test scenario. Limitations of lab availability and tools dictated an academic exercise. This report was developed within the scenario guidelines suggested by the project mentor. The guidelines were to be creative in developing a Pen Test program for a client.

Penetration Testing↗
NASA NTRS2013

Network Penetration Testing and Research

This paper will focus the on research and testing done on penetrating a network for security purposes. This research will provide the IT security office new methods of attacks across and against a company's network as well as introduce them to new platforms and software that can be used to better assist with protecting against such attacks. Throughout this paper testing and research has been done on two different Linux based operating systems, for attacking and compromising a Windows based host computer. Backtrack 5 and BlackBuntu (Linux based penetration testing operating systems) are two different "attacker'' computers that will attempt to plant viruses and or NASA USRP - Internship Final Report exploits on a host Windows 7 operating system, as well as try to retrieve information from the host. On each Linux OS (Backtrack 5 and BlackBuntu) there is penetration testing software which provides the necessary tools to create exploits that can compromise a windows system as well as other operating systems. This paper will focus on two main methods of deploying exploits 1 onto a host computer in order to retrieve information from a compromised system. One method of deployment for an exploit that was tested is known as a "social engineering" exploit. This type of method requires interaction from unsuspecting user. With this user interaction, a deployed exploit may allow a malicious user to gain access to the unsuspecting user's computer as well as the network that such computer is connected to. Due to more advance security setting and antivirus protection and detection, this method is easily identified and defended against. The second method of exploit deployment is the method mainly focused upon within this paper. This method required extensive research on the best way to compromise a security enabled protected network. Once a network has been compromised, then any and all devices connected to such network has the potential to be compromised as well. With a compromised network, computers and devices can be penetrated through deployed exploits. This paper will illustrate the research done to test ability to penetrate a network without user interaction, in order to retrieve personal information from a targeted host.

Murphy, Brandon F.↗
NASA NTRS2019

Liquid Penetrant Testing at Goddard Space Flight Center

An overview of liquid penetrant testing at Goddard Space Flight Center and an introduction of the author to the NASA Engineering and Safety Center Nondestructive Evaluation Technical Discipline Team is provided, including author biography, an overview of NASA spaceflight customers and their applications, a high-level description of research and development initiatives, two case-studies of flight project applications, and an introduction to the rest of the Goddard Space Flight Center Nondestructive Evaluation team and their respective roles in the organization.

Smith, Nathan A.↗
NASA NTRS1967

Liquid penetrant testing

Programmed instruction training textbook on liquid penetrant nondestructive testing

Source record↗
NASA NTRS2001

Low Velocity Earth-Penetration Test and Analysis

Modeling and simulation of structural impacts into soil continue to challenge analysts to develop accurate material models and detailed analytical simulations to predict the soil penetration event. This paper discusses finite element modeling of a series of penetrometer drop tests into soft clay. Parametric studies are performed with penetrometers of varying diameters, masses, and impact speeds to a maximum of 45 m/s. Parameters influencing the simulation such as the contact penalty factor and the material model representing the soil are also studied. An empirical relationship between key parameters is developed and is shown to correlate experimental and analytical results quite well. The results provide preliminary design guidelines for Earth impact that may be useful for future space exploration sample return missions.

Fasanella, Edwin L.↗
NASA NTRS1981

Operational evaluation of thunderstorm penetration test flights during project Storm Hazards '80

The National Aeronautics and Space Administration is conducting a research project called Storm Hazards '80 in order to study the prediction, detectability and avoidance of the hazards of severe storms for aircraft operations. The project, using a highly instrumented NASA F-106B airplane to penetrate thunderstorms, gathered and correlated data from both airborne and ground based instrumentation. The objectives of this project are to determine the effects of lightning on the design and operation of aircraft composite structures and digital electronic systems. The data will be used to determine the correlation of lightning hazards with other severe storm hazards, such as heavy precipitation, hail, turbulence and wind-shear, in order to develop an initial data base for use in design and avoidance. The NASA F-106B was equipped with a weather radar, stormscope, lightning measurement instrumentation and air sampling equipment. This paper will focus on the operational aspects of thunderstorm penetrations and the pilot techniques used to avoid the extremely hazardous portions of the storm such as the tornadoes and hail. It will deal with the effects of the storm elements on the aircraft hardware, avionics and the crew.

Keyser, G. L., Jr.↗
NASA NTRS1969

Instruction manuals for liquid penetrant nondestructive testing

Manuals provide quality control and test personnel with basic information on liquid penetrant testing. Topics covered include scope of application, equipment and materials used, test procedures, safety precautions, quality control, and comparison of liquid penetrant testing with other nondestructive testing processes.

Source record↗
NASA NTRS1979

Preliminary results of penetrator field test program, Tonopah, Nevada, 16-28 April 1979

Subscale (0.63 scale) penetrators impacted various sizes of volcanic rocks resting on and within compacted plays sediments. All penetrators were identical in size, shape, weight, and impact velocity. Although minor variations in impact angle were documented, the final orientation of the buried penetrators was primarily a consequence of the size, shape, and depth of the rocks encountered during impact. In situ measurements of impacted penetrators revealed that surface and buried layers of rocks having diameters up to 3 times the penetrator diameter caused only small ( 10 deg) angles of deflection. Only large single rocks greater than 10 times the penetrator diameter caused deflections appreciably greater than 10 deg. The large deflection angles followed by the penetrator were strongly influenced by fracture planes that developed in the rock as it broke apart. No catastrophic failure of the penetrator occurred during these tests. A cross section of the path of each penetrator through the ground is shown together with details on orientation before, during, and after the tests. Comparisons are made with results of previous subscale penetrator tests, and conclusions are drawn with respect to full-scale Mars penetrator performance.

Blanchard, M. B.↗
NASA NTRS1992

The GBU-28 - Concept to combat

The story of the development and use of the GBU-28, the weapon used to destroy the main Iraqi command and control bunker during Operation Desert Storm, is told. The construction of the bombs, flight testing, and penetration testing are described. Emphasis is given to the choice between the F-111 and the F-15E as delivery system.

Polansky, Mark↗
NASA NTRSDate not supplied

Comparative Analysis of Thermal Runaway Heat Output as a Function of Trigger Mechanism and Cell Format

High demand for energy storage systems across many fields drives the need for safe and reliable Li-ion batteries. In order to assess the risk of using such batteries in various applications, many types of abuse tests have been developed to push battery cells to their limits and learn how they fail. In this work, internal short circuit (ISC) tests, nail penetration tests, and thermal tests were used to trigger thermal runaway in D-cell, 18650, and 21700 Li-ion cells. High-speed radiography was used to gain insight to the propagation of thermal runaway throughout the cell, while calorimetric and thermal data were recorded in real time. Post-test disassembly of the calorimeter allowed for any mass ejected from the cell to be analyzed and the distribution of mass through the calorimeter to be determined. The impact of cell geometry and trigger mechanism on post-test mass distribution, thermal runaway propagation and internal cell temperature are discussed.

Lithium-ion battery; thermal runaway; calorimetry;↗
NASA NTRS2014

Analyzing Risks and Vulnerabilities of Various Computer Systems and Undergoing Exploitation using Embedded Devices

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere has heightened from airports to communication among the military branches legionnaires. With advanced persistent threats (APTs) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated, patched and secured state in a launch control system environment. Attacks on critical systems are becoming more and more relevant and frequent. Nation states are hacking into critical networks that might control electrical power grids or water dams as well as carrying out advanced persistent threat (APTs) attacks on government entities. NASA, as an organization, must protect its self from attacks from all different types of attackers with different motives. Although the International Space Station was created, there is still competition between the different space programs. With that in mind, NASA might get attacked and breached for various reasons such as espionage or sabotage. My project will provide a way for NASA to complete an in house penetration test which includes: asset discovery, vulnerability scans, exploit vulnerabilities and also provide forensic information to harden systems. Completing penetration testing is a part of the compliance requirements of the Federal Information Security Act (FISMA) and NASA NPR 2810.1 and related NASA Handbooks. This project is to demonstrate how in house penetration testing can be conducted that will satisfy all of the compliance requirements of the National Institute of Standards and Technology (NIST), as outlined in FISMA. By the end of this project, I hope to have carried out the tasks stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, as well as policies and procedures.

Penetration Testing↗
NASA NTRSDate not supplied

Effect of Vacuum on Force Response of an Ultrasonic Penetrator

Introduction: The Apollo astronauts encountered higher than expected resistances when interacting with the lunar soil via the Apollo Lunar Surface Drill (ALSD) and the trenching tool. Reducing the force required to move tools or other mechanical components through regolith will impact many steps of the resource extraction process. Force reduction has been achieved in soil materials by imparting vibration to tooling interfaces such as a vibratory farming cultivator, a percussive scoop, and ultrasonically resonant penetrators. Vibration-assisted tools in granular media reduce interaction forces by fluidizing a volume around the tool, allowing the tool to progress through a dynamic (fluid) medium instead of a static (solid) medium. This work seeks to quantify ultrasonic vibration’s effect on the force response of a penetrator in lunar soil simulant in vacuum sufficient to be within the molecular flow regime of any disturbed gases. Methods: A custom vacuum chamber setup, CUBEvac, was designed and built to facilitate penetration testing in a high vacuum environment, for comparison to penetration behavior in ambient terrestrial environment. A two-stage pumping system (Agilent Triscroll 600 roughing pump, Agilent VHS-6 oil diffusion pump) reached chamber pressures of about 5x10-6 Torr with regolith simulant in place. Figure 1 is a schematic of the heart of the assembly (note the penetration drive mechanisms above the chamber feedthrough and the regolith simulant sample in the bottom are not shown). The penetration actuation stack was comprised of a stepper motor driving a lead screw to move the ultra-sonic probe vertically inside the chamber. Motion was coordinated with an Arduino Uno. GRC-3 lunar simulant was used for this set of experiments. Samples were prepared in a four-liter stain-less steel, cylindrical pot with an internal diameter of approximately 15.56 cm (6.125 in) and a depth of 19.37 cm (7 5/8 in) for testing. The soil was baked out prior to compaction preparation as a measure to reduce soil moisture which interfered with pump down capacity. The soil was not baked again if it was removed from the vacuum chamber, prepped, and immediately returned to the vacuum chamber for pump down. The soil was compacted using a 60 Hz vibration table with a surcharge of 34 kg place on top of the soil in the container. Prepared soil samples weighed approximately 6.5 kg (bulk density 1.895-1.934 g/cm3). Two probe end effectors were tested: A cone penetrometer (static only) with a nominal diameter of 12.7 mm (0.5 in) and a nominal height of 28.6 mm (1.125 in); and a vibrating cylindrical probe measuring 12.7 mm in diameter and 50.8 mm in effective length from the tip (Figure 2). The cylindrical probe vibrated resonantly at 20 kHz with an amplitude 23 μm. The cone penetration tests were conducted to assess potential soil behavior differences in vacuum. The cylinder probe tests were conducted as the primary subject of this investigation to assess force response in vacuum. For each test, a regolith simulant sample was load-ed and compacted in the chamber, which was then evacuated for roughly 18 hours to reach the lowest possible pressure (approximately 5x10-6 Torr for most tests). The probe was then moved to about 10 mm above the soil surface before being pushed to a depth of 50 mm for the cylinder probe tests and to a depth of 100 mm for the cone penetrometer tests, both at a speed of 2 mm/s. The simulant samples were prepared the same for all tests. Ideally, they would respond consistently to probe penetration under ambient and vacuum conditions. This was evaluated by measuring the resistance of representative prepared simulant beds with a standard cone penetrometer in both environments. Results and Discussion: The resistance of the simulant samples in the vacuum tests was consistently lower than in the ambient tests as determined by the cone penetration tests. Thus, the ambient and vacuum results cannot be compared directly; work is underway to de-confound and better correlate the data. Still, figures 3-6 show that probe penetration forces are lower overall in the vacuum environment. In both environments, resonant vibration of the probe provides two useful effects: It reduces the probe penetration force and smooths the force-depth curve, significantly reducing local maxima. These effects have implications for various potential applications, such as astronaut hand-tools, where benefits (reducing astronaut effort) outweigh the cost of the additional energy re-quired to generate vibration. These results demonstrate that resonantly vibrating tools can meaningfully reduce the penetration force required for excavation, probing, and drilling tools in simulated lunar regolith deposits under vacuum levels approaching those that will be experience on the Moon’s surface. Lunar-gravity, ambient environment tests are scheduled soon. The effects of realistic temperatures and temperature gradients and deeper vacuum remain to be tested.

E Rezich↗
NASA NTRS1974

Water depth penetration film test

As part of the National Aeronautics and Space Administration Earth Resources Program, a comparative and controlled evaluation of nine film-filter combinations was completed to establish the relative effectiveness in recording water subsurface detail if exposed from an aerial platform over a typical water body. The films tested, with one exception, were those which prior was suggested had potential. These included an experimental 2-layer positive color film, a 2-layer (minus blue layer) film, a normal 3-layer color film, a panchromatic black-and-white film, and a black-and-white infrared film. Selective filtration was used with all films.

Lockwood, H. E.↗