Browse Topic: Data privacy

Items (37)
Find
testing tasks 2 jms test citSAE-PP-004629/28/2021
2 go
SintzADMIN, Jeneane, SintzUSER, Jeneane
Challenges in Integrating Cybersecurity into Existing Development Processes2020-01-01444/14/2020
For an established development process and a team accustomed to this process, adding cybersecurity features to the product initially means inconvenience and reduced productivity without perceivable benefits. Adapting development processes to take cybersecurity into account introduces challenges not present in engineering divisions so far. Strategies designed to deal with these challenges differ in the way in which added duties are assigned and cybersecurity topics are integrated into the already existing process steps. Cybersecurity requirements often clash with existing system requirements or established development methods, leading to low acceptance among developers, and introducing the need to have clear policies on how friction between cybersecurity and other fields is handled. A cybersecurity development approach is frequently perceived as introducing impediments, that bear the risk of cybersecurity measures receiving a lower priority to reduce inconvenience. Moreover, this leads to frustration among cybersecurity developers when their proposals are not accepted, and they feel their work is not appreciated. On the other hand, putting too much emphasis on cybersecurity leads to feature creep and makes the development unnecessarily complicated without producing appropriate results. It seems natural to orientate oneself by how safety topics are handled in the development process and adjust this to accommodate cybersecurity. It is, however, not clear in which way these added responsibilities should be assigned, as conflicts of interest occur when a single person must additionally take cybersecurity goals into account, which might be clashing with other project goals this person is responsible for. Ideally, cybersecurity aspects are considered and integrated into development processes not only to fulfill customer and legal requirements, but also to enable developers of functionalities not directly related to cybersecurity to produce better and more robust results as shortcuts are no longer easily possible.
Lenhart, Patric, Arndt, Paul, von Wedel, Jana, Beul, Christian, Weldert, Jan
Harness Wireless IoT Sensors for Integrated Building ManagementTBMG-361533/1/2020
The Internet of Things (IoT) is proving its impact on the real estate sector. According to forecasts, building automation will lead the growth rate of connected devices in 2020. Smart building endpoints are expected to grow by 42 percent next year, reaching the staggering number of 440 million. Facility managers, real estate owners, as well as commercial and industrial businesses are looking to deploy IoT for its multifold benefits — from augmenting building efficiency and lowering costs, to improving tenants’ experience. These exciting opportunities come from granular insights into disparate aspects of building operations — all accessible from a centralized management platform.
Data Privacy in the Emerging Connected Mobility Services: Architecture, Use Cases, Privacy Risks, and Countermeasures11-02-01-000410/14/2019
The rapid development of connected and automated vehicle technologies together with cloud-based mobility services is transforming the transportation industry. As a result, huge amounts of consumer data are being collected and utilized to provide personalized mobility services. Using big data poses serious challenges to data privacy. To that end, the risks of privacy leakage are amplified by data aggregations from multiple sources and exchanging data with third-party service providers, in face of the recent advances in data analytics. This article provides a review of the connected vehicle landscape from case studies, system characteristics, and dataflows. It also identifies potential challenges and countermeasures.
Li, Huaxin, Ma, Di, Medjahed, Brahim, Kim, Yu Seung, Mitra, Pramita
Maintaining Data Protection and Security for the Connected CarTBMG-3527110/1/2019
The connected car has already become a reality. It is a subject not just electrifying customers and manufacturers but also security researchers and IT experts. And in a worst-case scenario, criminal hackers as well. For years, security experts have observed the fact that the desktop PC is not the only target of digital attacks anymore. A large part of the malware is now customized to hit mobile devices. It would be negligent to believe that this development would leave the connected car unmolested.
About Face!19AVEP09_059/1/2019
To win acceptance, deployment of facial-recognition technology needs to fit within a picture-perfect consumer and legal framework that balances benefits with privacy protection. Whether it's using your face to confirm payment over your smartphone, monitoring your child at day-camp, or being confirmed as a ticketholder going to a concert, the possibilities for facial recognition technology are virtually endless-and the technology already has become ubiquitous. It's a natural expansion to see automotive applications including vehicle entry and starting and driver-monitoring features. But as we seek new uses, test existing technology and launch practical solutions, there are risks and considerations that might impact certain deployments, as well as the underlying design and testing.
Dukarski, Jennifer
Editorial19AVEP09_019/1/2019
Although editor-in-chief Lindsay Brooke's cover story detailing the foundations of Israel's surging tech sector helps to explain the nation's expanding expertise in all things cyber-secure, much of this issue deals with security and privacy of another kind-the access we grant almost daily to all manner of digital “providers” of goods and services. The access we'll be expected to cede is in exchange for some of the promising new features of the looming connected-vehicle future.
Visnic, Bill
What M&E Can Teach the AV Industry About Data19AVEP07_057/1/2019
Media & entertainment offers important learnings on data retention, management, scalability and security. At first glance, autonomous vehicles would seem to have little in common with the Media and Entertainment (M&E) industry, beyond action-movie car chases and in-vehicle entertainment screens. But AVs and M&E do have a lot in common when it comes to their data. Both generate hundreds of petabytes of data per year. Both need to manage that data for retrieval and value and both need to store that data with security and protection.
Coari, Jason, Pastor, Mark
Editorial19AVEP05_015/1/2019
AVs, data and ‘surveillance capitalism’ I finally hit my limit after seeing a Twitter post-from, almost paradoxically, a privacy engineer at Google-showing a taxi cab in Asia with a passenger-area screen announcing it was employing facial recognition “to deliver the most optimized content” to the rider. “The image data is discarded immediately,” the little tablet professed.
Visnic, Bill
A Blockchain-Backed Database for Qualified Parts2019-01-13433/19/2019
Certain standard parts in the aerospace industry require qualification as a prerequisite to manufacturing, signifying that the manufacturer’s capacity to produce parts consistent with the performance specifications has been audited by a neutral third-party auditor, key customer, and/or group of customers. In at least some cases, a certifying authority provides manufacturers with certificates of qualification which they can then present to prospective customers, and/or lists qualified suppliers in a Qualified Parts List or Qualified Supplier List available from that qualification authority. If this list is in an infrequently updated and/or inconsistently styled format as might be found in a print or PDF document, potential customers wishing to integrate qualification information into their supplier tracking systems must use a potentially error-prone manual process that could lead to later reliance on out-of-date or even forged data. This paper proposes a blockchain-backed database for such applications, facilitating integration with integrators’ electronic systems including near real-time data updates and a reliable audit trail of changes, certificates that provide more reliable signals of data integrity, and a better user interface with enhanced search capabilities. Though piloted with some centralized control related to the centralized issuance of qualifications, the paper describes how blockchain technology in this application could allow a consortium of companies to manage such a database in a decentralized structure like a decentralized autonomous organization. The proposed database also introduces generalizable data structures which can lend powerful dynamism to other data stores in domains with similar data structures or challenges. This paper describes an example implementation converting the TS200 Qualified Manufacturers List to a blockchain-backed database with search and administrative interfaces. The paper further discusses practical challenges associated with implementing such a database and future directions for additional capabilities.
Towne, W. Ben
Risk Analysis of Blockchain Application for Aerospace Records Management2019-01-13443/19/2019
Blockchain as a technology has been successfully deployed in the financial industry. As the technology continues to mature, there are opportunities to use this to solve operational challenges in Aerospace. One of the common use cases is replacing paper records as a proof of compliance with a blockchain enabled distributed ledger. Commonly available open source blockchain frameworks have security ingrained in the components. However, replacing paper records with a blockchain based distributed ledger will require investigation of potential risks involved in the end to end usage of this technology for records management. The objective of this paper is to elucidate potential risks in an aviation record management workflow environment enabled by blockchain and suggest requirements to mitigate the risks. In addition requirements for Blockchain based systems will be proposed, which will guarantee minimum functional requirements like Protection of confidential information Integrity of the information in a record Safeguards against unauthorized access The potential gaps are understood using an illustrative end to end blockchain based process along with their conceptual high level intermediate steps. For example: Authenticated trusted digital identities of the participants whose transactions are recorded in distributed ledgers Trusted source which distributes these identities and has a mechanism to update, revoke and safely secure these identities Trusted methods to ensure detection if the digital identities are compromised Trusted method to demonstrate controlled authorization process for digital identities as per access control rules Trusted methods to demonstrate the generation of accounting logs
Kar, Satyanarayan, Kasimsetty, Vinay, Barlow, Susan, Rao, Sujay
11 Reasons to Use Automated Metrology2019-01-13693/19/2019
Aerospace structures manufacturers find themselves frequently engaged in large-scale 3D metrology operations, conducting precision measurements over a volume expressed in meters or tens of meters. Such measurements are often done by metrologists or other measurement experts and may be done in a somewhat ad-hoc fashion, i.e., executed in the most appropriate method according to the lights of the individual conducting the measurement. This approach is certainly flexible but there are arguments for invoking a more rigorous process. Production processes, in particular, demand an automated process for all such “routine” measurements. Automated metrology offers a number of advantages including enabling data configuration management, de-skilling of operation, real time input data error checking, enforcement of standards, consistent process execution and automated data archiving. It also reduces training, setup time, data manipulation and analysis time and improves reporting. This paper draws on experiences from a recent automated metrology project and examines some of the challenges and benefits of successful measurement automation.
Flynn, Robert, Miller, Carson
Securing the Future of Healthcare through the Right Cybersecurity ArchitectureTBMG-324468/1/2018
In 2017, the healthcare industry experienced a dramatic surge in cyberattacks. Thousands of healthcare organizations around the world suffered various attacks — from data theft to ransomware attacks. Among them was the notorious WannaCry ransomware attack, which affected over 300,000 machines across 150,000 countries, including the United States. As many as 200,000 Windows systems were impacted by WannaCry, including nearly 50 healthcare facilities in the UK, and dozens more in the United States. The infections from WannaCry impacted medical devices as well, putting hospital staff — and patient safety — at risk.
Robust Method for Data Protection and Change DetectionTBMG-275559/1/2017
Methods exist for processing an original data sequence in order to generate information about the data for the purposes of integrity measurement, ownership demonstration, and authentication. The first category is digital watermarking, the second is data hashing, and the third is error detection coding. In the present context, watermarking is often used for ownership demonstration and authentication purposes; data hashing is often used for integrity measurement purposes; and as with data hashing, error detection coding is used to measure data integrity. However, the latter is normally done as part of data transmission protocol, and therefore addresses transmission errors rather than tampering.
Designing Cybersecurity into Connected Medical DevicesTBMG-273188/1/2017
Cyber threats to health delivery organizations (HDOs) and the medical device industry as a whole have hit a new level of maturity in the last year. A decade ago, the attack scene was dominated by academic papers about theoretical attacks on connected medical devices.1 Then we started seeing data breaches on connected medical devices primarily as a means to access personal healthcare information.2 In the last year, however, at least two major events occurred where attackers directly monetized attacks on medical devices. In August 2016, a short stock seller openly published video and details about cybersecurity attacks on a medical device maker’s implantable cardiac devices. Predictably, the device manufacturer’s stock fell.3 In May 2017, the WannaCry ransomware compromised both hospital systems and medical devices. While there are multiple reasons each attack succeeded, it is clear that attackers are becoming bolder, and medical devices are not immune.
Authenticated Sensor Interface DeviceTBMG-268395/1/2017
Researchers at the Savannah River National Laboratory (SRNL) have developed a device to read data, encrypt the information, and distribute it electronically to multiple locations, providing a one-way data pathway that segregates each destination to prevent cross-party data manipulation. Previous “data diode” devices employ computer-based communication channels such as fiber-connected data cards between the sender and receiver. No integrated data authentication is performed, and data is sensitive to external attack and manipulation.
Secure and Privacy-Preserving Data Collection Mechanisms for Connected Vehicles2017-01-16603/28/2017
Nowadays, the automotive industry is experiencing the advent of unprecedented applications with connected devices, such as identifying safe users for insurance companies or assessing vehicle health. To enable such applications, driving behavior data are collected from vehicles and provided to third parties (e.g., insurance firms, car sharing businesses, healthcare providers). In the new wave of IoT (Internet of Things), driving statistics and users’ data generated from wearable devices can be exploited to better assess driving behaviors and construct driver models. We propose a framework for securely collecting data from multiple sources (e.g., vehicles and brought-in devices) and integrating them in the cloud to enable next-generation services with guaranteed user privacy protection. To achieve this goal, we design fine-grained privacy-aware data collection and upload policies that balance between enforcing privacy requirements and optimizing resource consumption (e.g., processing, network bandwidth). The optimal policy will be determined by the privacy index of the integrated multi-source data to be used by the specific service and the desired resource usage. Real-world experiments and privacy leakage analysis are conducted to address privacy issues in vehicle data collection and integration, raise public awareness around privacy leakage, and validate the proposed system.
Li, Huaxin, Ma, Di, Medjahed, Brahim, Wang, Qianyi, Kim, Yu Seung, Mitra, Pramita
Manual of Organization and ProcedureGEIAOP0001E (Current)6/16/2016
The TechAmerica Standards & Technology department is responsible for standardization activities, and provides other appropriate technical and engineering services within the scope of TechAmerica by-laws. Standardization activities shall include those associated with Business, Engineering, and Operations Management and Processes. All activities shall be conducted in accordance with appropriate legal guidance.
Systems Management Council
Implementing Secure Command and Control in Unmanned SystemsTBMG-2311610/1/2015
Unmanned vehicles are at the forefront of an evolution, especially with the proliferation of the Internet of Things. After decades of serving mission-critical applications in government and defense, the command and control (C2) capabilities of advanced wireless data communications have begun to migrate into the public safety, research, and commercial markets. The robust and secure infrastructure necessary for the eventual proliferation of unmanned vehicles is slowly being realized. Today, however, industries such as public safety, agriculture and oil and gas are being eyed as key markets that can benefit from the use of Remotely Piloted Aircraft (RPA). For several applications, such as wildfire monitoring and border protection, RPAs can even be used to protect people and save lives.
Cyber-security for Engine ECUs: Past, Present and Future2015-01-19989/1/2015
In this paper, we outline past, present and future applications of automotive security for engine ECUs. Electronic immobilizers and anti-tuning countermeasures have been used for several years. Recently, OEMs and suppliers are facing more and more powerful attackers, and as a result, have introduced stronger countermeasures based on hardware security. Finally, with the advent of connected cars, it is expected that many things that currently require a physical connection will be done remotely in a near future. This includes remote diagnostics, reprogramming and engine calibration.
Vuillaume, Camille, Oka, Dennis Kengo, Furue, Takahiro
AUTOSAR Based Multicore Software Implementation for Powertrain Applications2015-01-01794/14/2015
The combustion engine will be the dominant drive for motor vehicles despite all the advances in the electrification of the drive train, for many years. The greater are the challenges for the automotive industry, especially in fuel consumption (CO2) and the environmental impacts of other emissions. From the fuel supply to the engine, up to the exhaust after treatment, new or improved functions are needed, which are integrated into increasingly powerful control electronics. This modern electronic engine management and powertrain controller will remain key components in the vehicle. As most of the micro controllers for future applications will be MultiCores, this paper gives an overview on how PowerSAR® supports this kind of architectures. It shows the concepts applied in the basic software area as well as for the applicative software. Further it will show the impact on the development process as well as the integration support for software delivered by the OEM. This work will give an outlook on upcoming micro controller architectures and the new challenges in the future in this domain.
Mader, Ralph, Graf, Armin, Winkler, Gerd
Google Glass for Industrial AutomationTBMG-214542/1/2015
Google Glass is equipped with a head-up display, camera, microphone, and bone conduction audio transducer serving as a loudspeaker. It also has vibration sensors and a touchpad integrated in the sidepieces of the headset. With these features, Google Glass is well suited for visualization, diagnostics, and service purposes, as well as for technical interventions and person-to-person communication.
Power Loss and Data Integrity in Military SSDsTBMG-2117212/1/2014
For the defense industry, NAND Flash, with its lack of moving parts, has made it the common storage medium for a variety of field applications. With its small size, low power usage, high performance and robustness in extreme environments, choosing solid state storage has been a clear choice from the beginning.
CALS Configuration Management SOW and CDRL GuidanceCMB7_3 (Historical)10/1/2014
G-33 Configuration Management
Next-Generation Mobile Tactical CommunicationsTBMG-203408/1/2014
After many years of development and well-publicized budget overruns, the DoD’s Joint Tactical Radio System program (since reorganized and renamed) has recently given birth to a set of handheld voice and data radios — so-called Rifleman radios — built by a number of traditional military radio firms, including Exelis, GD, Harris, and Thales.
Securing Connected Vehicles End to End2014-01-03004/1/2014
As vehicles become increasingly connected with the external world, they face a growing range of security vulnerabilities. Researchers, hobbyists, and hackers have compromised security keys used by vehicles' electronic control units (ECUs), modified ECU software, and hacked wireless transmissions from vehicle key fobs and tire monitoring sensors. Malware can infect vehicles through Internet connectivity, onboard diagnostic interfaces, devices tethered wirelessly or physically to the vehicle, malware-infected aftermarket devices or spare parts, and onboard Wi-Fi hotspot. Once vehicles are interconnected, compromised vehicles can also be used to attack the connected transportation system and other vehicles. Securing connected vehicles impose a range of unique new challenges. This paper describes some of these unique challenges and presents an end-to-end cloud-assisted connected vehicle security framework that can address these challenges.
Zhang, Tao, Antunes, Helder, Aggarwal, Siddhartha
Improving Signal to Noise Ratios in Defense ElectronicsTBMG-162055/1/2013
As a vertical market, “defense electronics” encompasses a huge range of systems, from portable communications to transportation, avionics, and shipborne radar. While the power architectures are as diverse as they could be, all have common operational demands — they must be robust (shock, vibration, temperature extremes), highly reliable, able to power up after periods of dormancy, and based on components with minimal obsolescence.
Autonomous Information Unit for Fine-Grain Data Access Control and Information Protection in a Net-Centric SystemTBMG-132804/1/2012
As communication and networking technologies advance, networks will become highly complex and heterogeneous, interconnecting different network domains. There is a need to provide user authentication and data protection in order to further facilitate critical mission operations, especially in the tactical and mission-critical net-centric networking environment. The Autonomous Information Unit (AIU) technology was designed to provide the fine-grain data access and user control in a net-centric system-testing environment to meet these objectives.
Optimizing the Interoperability of Military Satellite CommunicationsTBMG-82137/1/2010
Satellite communications offer mobility and communications for military operations in remote locations where terrestrial-based connectivity is not available, or is too expensive. Unfortunately, satellite connectivity brings many challenges that can impair network performance in delivering mission-critical information and applications. High-latency transport and application protocol inefficiencies, adverse weather, and interference are just a few of the causes that slow the delivery of applications and limit the amount of traffic that can run over a satellite link. Compounding these problems is interoperability among disparate military networks that can jeopardize mission-critical communications.
Managing a Network of Self-Encrypting Hard DrivesTBMG-79045/1/2010
With high-profile data breaches making headlines regularly, organizations are carefully evaluating their options for protecting mobile data. For years, software full disk encryption, (FDE), has been the preferred means of addressing this threat. But widespread adoption has been hampered by the complexity and cost surrounding these software-based FDE deployments.
Optimal Scheduling in Graphical Modeling Environments2009-01-02684/20/2009
Methods for controlling execution order in traditional text-based languages such as C and Fortran are well established. The transition to graphical programs has revealed some of the hidden issues inherent in any scheduling routine, specifically data dependency and data protection (in multirate systems). Graphical programming languages provided built-in diagnostics that allow users to analyze the data dependencies to develop optimal schedules from a data propagation perspective. This paper examines one heuristic that can be used to develop an optimal schedule for an arbitrary model.
Burke, Michael
Contests of Projects as Agents of Motivation and Continuous Improving Process: A Case Study at an auto parts manufacturer2008-36-001910/7/2008
The Contest is a corporate process that has several goals: To initiate outstanding performances within all areas, contributing to sustainable customer satisfaction, encouraging and supporting a continuous improvement process, stimulating an exchange of experiences within the group to learn better from each other. The Contest honors projects: which demonstrate an improvement regarding leadership, strategy, people motivation, partnerships & resources, processes, customer satisfaction, environmental protection or financial results which provide measurable improvements and do not date back for more than one year which are completed and show successful results, or at least are in deployment/implementation phase and show first successful results whose project content may be allowed to be shared with others. The results must have measurable improvements with Cost/Benefit analysis and the achieved improvements previously defined as project goals. The Contest promotes Knowledge transfer, Learning and Sharing and the Benchmarking Activity in organization, enhancing employee motivation by visible and official recognition from management
Avileis, Laercio, Mattos, Edson
A Vehicle-to-Vehicle Communication Database for Infrastructureless Routing2008-01-12544/14/2008
Traffic engineers use time-of-day travel time databases to characterize normal travel times on roads. This information is used by traffic management centers together with information from sensors in the highway to identify problems and to make alternate route recommendations. In this paper, the travel time database concept is extended to a vehicle-to-vehicle communications network for traffic and safety information, wherein the travel time database is generated and stored by vehicles in the network, and used by the vehicles to identify abnormal traffic conditions. This infrastructure-free approach is attractive due to the potential to eliminate highway sensor and sensor maintenance costs, which are major factors that limit the growth of traffic information beyond major roadways in urban regions. Initial work indicates that database storage requirements in the vehicle should be manageable. The database generation process is self-bootstrapping as vehicles share information on roads where they are normally driven with vehicles that are new to these roads.
Krage, Mark, Jalics, Laci, D'Silva, Siddharth H., Szczublewski, Francis
The Impact of Internet Privacy Regulation on the U.S. Mobility Industry: Nuisance or Economic Catalyst?2000-01-13693/6/2000
Internet privacy regulation has an enormous potential to impact the automotive industry financially. Automotive companies rely on Internet data collection to market directly to consumers successfully, advertise merchandise and services, and expedite a number of internal operations. Government legislation would inevitably require significant changes in these data collection methods and consequently produce large compliance costs. On the other hand, consumer distrust and business loss to the more stringently regulated European Union can also produce significant costs, if Internet privacy regulation is not more effectively enforced. The current method of enforcement, self-regulation, has been highly criticized despite considerable improvement from industry. Many privacy advocates are actively seeking legislation to remedy the problem. This paper recommends the automotive industry play a more active role in addressing Internet privacy concerns by improving self-regulation enforcement and implementing legislation if an adequate level of online privacy can not be achieved within the next year.
Nicholls, Stephen M.
CONSIDERATIONS FOR AVIONICS NETWORK DESIGNARINC428 (Current)10/9/1995
This standard provides the framework for developing a set of requirements for an avionics data bus network. This standard is intended to provide system-level considerations for the development of such a network, which may include a mix of standard data buses and private data buses.
Airlines Electronic Engineering Committee
Development of an Integrated Design Database System8919959/1/1989
A conventional CAD system is aimed primarily at making the work of creating design drawings more efficient. There are limits, however, to further improvement of design efficiency and design quality with such a system. What is needed is a CAD system that allows design information of various kinds to he compiled for ready access and exchange among designers. To realize a system of this sort, first of all a means was devised of putting into standard format the design information that needs to be included in product design drawings, and of storing this information in a database. These standard drawings are then used in creation of new drawings, by means of an editing process. Moreover, this integrated design database system allows designers to exchange information related to the design work online, in the form of drawing elements.
Yaginuma, Koji, Yamada, Yoshio, Kawata, Akitaka, Mori, Hiromi
Designing an Effective and Efficient Factory Floor Data Collection System8708884/7/1987
Computer Integrated Manufacturing (CIM) is a topic that has certainly generated a great deal of interest and debate in most manufacturing circles today. Through the implementation of a CIM strategy, an organization may realize improved operations by reducing and controlling costs, improving information flow, and increasing production accuracy. However, a manufacturing system within the CIM environment is only as good as the data that it has to work with. Production data feedback is the lifeblood of any manufacturing and production scheduling system. This paper will explore the design parameters of an effective and efficient data collection system for the factory floor. The design presented applies equally to new production facilities as well as older facilities undergoing renovation. A review of the hardware and software necessary to perform the data collection task in the areas of production, material control, and labor reporting will be presented. Installation, ease of use, system flexibility, and programmability will also be addressed. This paper will not, however, address the software aspects of processing and reporting of the data once it has been collected. This could be a topic for an entirely different discussion.
Doss, Daniel L.
Items per page:
1 – 37 of 37