Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “integrity attacks”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Security Enhancement of Network Constraint Grid-Edge Energy Management System

Network constrained grid edge energy management system (EMS) provides economic solution for active and reactive power dispatch of distributed energy resources (DERs) at the grid edge level. Grid edge EMS ensures secure interconnection of a circuit segment to the distribution system by maintaining grid code requirements (e.g. IEEE 1547–2018). Grid edge EMS is dependent on communication to receive load measurement, which brings a risk of unobservable false data injection attacks (FDIAs). To mitigate the risk, this paper proposes a framework to enhance resilient operation of grid edge EMS by detecting the unobservable FDIAs on loads and replacing them with forecasted values. In this work, a two-step detection algorithm is proposed. In first step, conventional residual based algorithm is deployed. Autoencoder (AE) based data driven mechanism is included in second step to detect the presence of unobservable FDIAs. After ensuring the presence of FDIA, its specific location is detected by checking the maximum residue values till the predefined threshold value is reached. Detected false data injected loads are then replaced with forecasted load values following long-short term memory (LSTM) based forecast to ensure resilient performance of grid edge EMS in the presence of attacks. This proposed security enhancement framework for grid edge EMS is evaluated in IEEE 13 bus system with three integrated DERs. Numerical simulation shows the validation of the proposed framework by reducing voltage violation in real operation of grid edge EMS.

cyber attack detection↗
NASA NTRS1981

Wing-alone aerodynamic characteristics at high angles of attack

An experimental investigation has been conducted to determine wing-alone supersonic aerodynamic characteristics at high angles of attack. The family of wings tested varied in aspect ratio from 0.5 to 4.0 and taper ratio from 0.0 to 1.0. The wings were tested at angles of attack ranging from 0 to 60 deg and Mach numbers from 1.6 to 4.6. The aerodynamic characteristics were obtained by integrating local pressures measured over the wing surface. Comparison of these data with the limited available data from the literature indicate the present data are free of sting interference effects through the test range of angle of attack. Presented and discussed are results showing the effects of model geometry, Mach number and angle of attack on aerodynamic characteristics consisting of normal force, pitching moment, bending moment, longitudinal center-of-pressure locations, and lateral center-of-pressure locations.

Stallings, R. L., Jr.↗
DOE OSTI2019

A Moving Target Defense Control Framework for Cyber-Physical Systems

This paper considers the problem of efficiently and securely controlling cyber-physical systems that are operating in uncertain, and adversarial environments. To mitigate sensor, actuator attacks, and performance loss due to such attacks, we formulate a secure control algorithm that consists of a proactive and a reactive defense mechanism. The proactive mechanism, which is based on the principles of moving target defense, utilizes a stochastic switching structure to dynamically and continuously alter the parameters of the system, while hindering the attacker's ability to conduct successful reconnaissance to the system. The unpredictability of the current actuator and sensor is optimized using an information entropy measure, which is induced by probabilistic switching. The reactive mechanism on the other side, detects potentially attacked components, namely sensors and actuators, by leveraging online data to compute an integral Bellman error. A rigorous mathematical framework is presented to guarantee the stability of the equilibrium point of the closed-loop system, and provide a quantified bound on the performance loss when utilizing both reactive and proactive mechanisms. Simulation results show the efficacy of the proposed approaches on a benchmark aircraft model.

42 ENGINEERING↗
NASA NTRS1987

Wind tunnel evaluation of a truncated NACA 64-621 airfoil for wind turbine applications

An experimental program to measure the aerodynamic performance of a NACA 64-621 airfoil with a truncated trailing edge for wind turbine applications has been conducted in the Ohio State University Aeronautical and Astronautical Research Laboratory 6 in. by 21 in. pressurized wind tunnel. The blunted or trailing edge truncated (TET) airfoil has an advantage over similar trailing edge airfoils because it is able to streamline a larger spar structure, while also providing aerodynamic properties that are quite good. Surface pressures were measured and integrated to determine the lift, pressure drag, and moment coefficients over angles of attack ranging from -14 to +90 deg at Mach 0.2 and Reynolds numbers of 1,000,000 and 600,000. Results are compared to the NACA 0025, 0030, and 0035 thick airfoils with sharp trailing edges. Comparison shows that the 30 percent thick NACA 64-621-TET airfoil has higher maximum lift, higher lift curve slope, lower drag at higher lift coefficients, and higher chordwise force coefficient than similar thick airfoils with sharp trailing edges.

Law, S. P.↗
NASA NTRS2019

Ensuring Flexibility and Security in SDN-Based Spacecraft Communication Networks Through Risk Assessment

Software-defined networking (SDN) has enabled elastic networking and resource distribution in cloud computing. The centralization and separation of the Control Plane also offers a high degree of network configurability and management, which can be used to mitigate and manage threats to the network. Space communication networks have historically been restricted and circuit switching in these networks has been a manual process. This study evaluates the potential role of SDN in space communication networks from a networking security standpoint. The evaluation covers the networking security needs of spacecraft missions and their associated assets. The results from the evaluation lead to a risk assessment that identifies vulnerabilities in an SDN-based communications architecture. Security challenges introduced into the network from integrating SDN are also considered. A risk register summarizes the severity of the attack outcomes, as well as occurrence likelihood. The study identifies Denial-of-Service (DoS) attacks as a new threat (presently unmitigated by existing security controls) that would be prevalent in an SDN-based space communication environment. A Mininet-based emulation testbed is built to demonstrate the susceptibility of spacecraft flight software to a flooding DoS attack when on an interconnected SDN-managed network. This type of attack would be highly consequential to mission assets, and therefore SDN-based space communications would need to be resilient to such attacks. Future work will need to be performed to fully characterize DoS attack methods that can apply to the space communication scenario, as well as to devise a comprehensive DoS-resilient solution.

Baker, Dylan Z.↗
DOE OSTI2014

Integrity Levels: A New Paradigm for Protecting Computing Systems

As the field of determined and increasingly sophisticated adversaries multiplies, the risk to integrity of deployed computing devices magnifies. Given the ubiquitous connectivity, substantial storage, and accessibility, the increased reliance on computer platforms make them a significant target for attackers. Over the past decade, malware has transitioned from attacking a single program to subverting the operating system (OS) kernel by means of what is commonly known as a rootkit. While computer systems require patches to fix newly discovered vulnerabilities, undiscovered vulnerabilities remain Furthermore, typical solutions utilize mechanisms that operate within the OS. If the OS becomes compromised, these mechanisms may be vulnerable to being disabled or upon detection of the potential compromise, being "shut down" until patched or otherwise mitigated. We propose an innovative approach to designing computer systems that allows the behavior or functionality of the computer system to change based on the integrity of the system. Instead of attempting to prevent or detect all malware attacks, our proposed approach allows possible graceful degradation of functionality according to the security policy specification as anomalies of security concern are detected. We believe this innovative paradigm can determine the "integrity lever of the system. Based on the integrity level, the computer system may behave differently or limit access to data.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Transmission and Distribution Real-Time Analysis Software for Monitoring and Control: Design and Simulation Testing

The US electric grid is facing operational, stability, and security challenges. Transmission system operators need some measure of visibility into distribution system renewable generation. Distribution system generation needs to support transmission system voltage. The grid is experiencing an expansion in measurement systems. How to take full advantage of this expansion and defend against attacks, both cyber and physical, poses additional challenges. This paper introduces software designed to meet these challenges. At the center of the software is an Integrated System Model (ISM) that spans from transmission to secondary distribution. The ISM is employed in real-time abnormality detection, voltage stability forecasting, and multi-mode control. The software architecture along with selected analysis modules is presented. Testing results are presented for: 1—attacks on utility infrastructure; 2—energy savings from optimal control; 3—distribution system control response during a low voltage transmission system event; 4—cyber-attacks on PV inverters, where physical inverters are used in hardware-in-the-simulation-loop studies. Contributions of this work include real-time analysis that spans from three-phase transmission through secondary distribution; an approach for detecting abnormalities that employs measurements from three independent measurement systems; and a multi-mode distribution system control that responds to cyber-attacks, physical attacks, equipment failures, and transmission system needs.

14 SOLAR ENERGY↗
DOE OSTI2025

Coordinated Thermal Safety Attack and Defense on EV Battery Management Systems

Battery temperature sensor and battery current sensor data which are key sensing inputs to the Battery Management Controllers in electric vehicles, are vulnerable to possible cyber/ physical manipulation due to known vulnerabilities inherited from CAN bus technology that is used for in-vehicle communications between electronic control units that transfer sensing and control data. In this paper, we first create a simulation that enables us to evaluate impact of cyber physical attacks on electric vehicle battery management system in a controlled environment that violates thermal safety. Specifically, we emulate a Level 3 - DC fast charging system with SAE J1772/CCS, integrated with standard charging controls and thermal safety controls on EVs, and various sensing data flows. Second, we propose a coordinated current and battery temperature attack that has crippling economic, and safety impacts. Third, we quantify the usability, economic and safety impacts of such attacks as a function of the extent of data manipulation. Finally, we propose a physics model driven detection technique to detect presence of such attacks.

25 ENERGY STORAGE↗
NASA NTRS1996

Free-flight investigation of forebody blowing for stability and control

A free-flight wind-tunnel investigation was conducted on a generic fighter model with forebody pneumatic vortex control for high angle-of-attack directional control. This is believed to be the first flight demonstration of a forebody blowing concept integrated into a closed-loop flight control system for stability augmentation and control. The investigation showed that the static wind tunnel estimates of the yaw control available generally agreed with flight results. The control scheme for the blowing nozzles consisted of an on/off control with a deadband. Controlled flight was obtained for the model using forebody blowing for directional control to beyond 45 deg. angle of attack.

Brandon, Jay M.↗
NASA NTRS1985

Development of ADOCS controllers and control laws. Volume 1: Executive summary

The Advanced Cockpit Controls/Advanced Flight Control System (ACC/AFCS) study was conducted by the Boeing Vertol Company as part of the Army's Advanced Digital/Optical Control System (ADOCS) program. Specifically, the ACC/AFCS investigation was aimed at developing the flight control laws for the ADOCS demonstrator aircraft that will provide satisfactory handling qualities for an attack helicopter mission. The three major elements of design considered during the study are as follows: Pilot's integrated Side-Stick Controller (SSC) -- Number of axes controlled; force/displacement characteristics; ergonomic design. Stability and Control Augmentation System (SCAS)--Digital flight control laws for the various mission phases; SCAS mode switching logic. Pilot's Displays--For night/adverse weather conditions, the dynamics of the superimposed symbology presented to the pilot in a format similar to the Advanced Attack Helicopter (AAH) Pilot Night Vision System (PNVS) for each mission phase as a function of SCAS characteristics; display mode switching logic. Volume 1 is an Executive Summary of the study. Conclusions drawn from analysis of pilot rating data and commentary were used to formulate recommendations for the ADOCS demonstrator flight control system design. The ACC/AFCS simulation data also provide an extensive data base to aid the development of advanced flight control system design for future V/STOL aircraft.

Landis, Kenneth H.↗
DOE OSTI2022

Hardware-Based Randomized Encoding for Sensor Authentication in Power Grid SCADA Systems

Supervisory Control and Data Acquisition (SCADA) systems are utilized extensively in critical power grid infrastructures. Modern SCADA systems have been proven to be susceptible to cyber-security attacks and require improved security primitives in order to prevent unwanted influence from an adversarial party. One section of weakness in the SCADA system is the integrity of field level sensors providing essential data for control decisions at a master station. In this paper we propose a lightweight hardware scheme providing inferred authentication for SCADA sensors by combining an analog to digital converter and a permutation generator as a single integrated circuit. Through this method we encode critical sensor data at the time of sensing, so that unencoded data is never stored in memory, increasing the difficulty of software attacks. We show through experimentation how our design stops both software and hardware false data injection attacks occurring at the field level of SCADA systems.

42 ENGINEERING↗
NASA NTRSDate not supplied

Wall-Modeled Large Eddy Simulation Method for Unstructured-Grid Navier-Stokes Solvers

This paper reports on the implementation and assessment of a Wall-Modeled Large-Eddy Simulation (WMLES) methodology in an unstructured-grid, node-centered flow solver, FUN3D that is developed and supported at the NASA Langley Research Center. Finite-volume (FV) and finite-element (FE) discretization schemes considered in the study provide formal second-order spatial accuracy. Large-Eddy Simulations (LES) resolve large-scale turbulent-flow features and filter out small-scale effects using the Vreman subgrid-scale model. At solid-wall boundaries, a shear-stress model is employed to provide a proper boundary-flux closure. The nonlinear equations are integrated in time using either an optimized backward difference formula or an implicit multistage Runge-Kutta temporal scheme. The implicit equations at each time step are solved by strong nonlinear iteration schemes. WMLES demonstrations are shown for two high-lift configurations, namely, the McDonnell Douglas 30P30N multielement airfoil and a NASA High-Lift Common Research Model. Results show that the WMLES approaches implemented in the FV and FE discretization methods produce consistent solutions and are capable of capturing key aerodynamic characteristics and flow structures for high-lift configurations at a wide range of angles of attack including maximum-lift conditions. In the 30P30N example, correct trends in the variations of integrated aerodynamic forces and moments, surface pressure distributions, and boundary-layer profiles are captured as the Reynolds number is increased.

CFD; turbulence modeling; High-Lift flow simulatio↗
DOE OSTI2025

Securing Federated Learning Against Active Reconstruction Attacks

Federated Learning (FL) has amassed notable attention for its ability to preserve user privacy while emphasizing the retainment of model training efficiency. Due to this potential, FL has been integrated in many domains, such as healthcare, finance, law, and industrial engineering, where data cannot be easily exchanged due to sensitive information and strict privacy laws. However, current research has indicated that FL protocols are easily compromised by active data reconstruction attacks employed by actively dishonest servers. The malicious modification of global model parameters allows an actively dishonest server to obtain a direct copy of users’ private data via gradient inversion. Here, this class of attacks is highly underexplored and continues to be a major challenge due to the intense threat model. In this paper, we propose OASIS as a scalable and modality-agnostic defense based on data augmentation that counteracts active data reconstruction attacks while preserving model performance. To generalize our defense, we uncover the intuition behind gradient inversion that enables these attacks and theoretically establish the conditions by which the defense can be considered robust regardless of attack design. From this, we formulate our defense with data augmentation that illustrates its ability to undermine the attack principle. We evaluate OASIS on five real-world datasets–two image-based (ImageNet and CIFAR100) and three text-based (Wikitext, Stack Overflow, and Shakespeare)–which span diverse uses cases such as vision tasks and language modeling. Comprehensive evaluations on these datasets exhibit the efficacy of OASIS and highlight its feasibility as a solution.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

IS BLOCKCHAIN A SUITABLE TECHNOLOGY FOR ENSURING THE INTEGRITY OF DATA SHARED BY LIGHTING AND OTHER BUILDING SYSTEMS?

Increasing amounts of data are available from lighting and other building systems. In commercial buildings, these data can be used to improve system and energy performance, detect and diagnose faults, and facilitate maintenance. Building data are not only of interest to owners and operators of the building systems, however. Owners and operators of similar buildings, manufacturers of building systems, utilities, and city agencies also have interesting use cases. Energy data can, for example, be used to verify the performance of energy-conservation measures, issue renewableenergy certificates, and financially settle grid services. Increased data sharing, however, significantly expands the cyber-attack surface, creating new challenges. In this work, blockchain is explored as an option for ensuring the integrity of data that are shared by lighting and other building systems. Blockchain fundamentals and variants are briefly reviewed, and value propositions relevant to building systems are discussed. A recently developed blockchain applicability framework (BAF) that builds upon and addresses the limitations of previous applicability models is also briefly reviewed. The BAF is used to assess the suitability of blockchain over other technologies or approaches for building-data applications, using emerging connected lighting systems as an example use case.

blockchain, connected lighting system, data integr↗
DOE OSTI2022

Security Enhancements for Distributed Energy Resource Systems Interconnected with Distribution Networks: Final Technical Report

The revised IEEE 1547 Standard defines new complex communication-adjustable voltage and frequency regulation and ride-through characteristics, while maintaining the general antiislanding requirement for unintentional islanding situations. Unintentional islanding is prohibited while intentional islanding is specifically allowed, thus effectively enabling microgrid operation mode. Further, IEEE 1547-2018 Standard introduces new requirements in terms of interoperability so that the DER plant/circuit segments may be seamlessly integrated with the utility networks but at the same time become vulnerable to a cyber-attack. Traditional cybersecurity measures including encryption, authentication and role-based access control may not be fully implementable to all communication protocols specified in the IEEE 1547 Standard. Therefore, in this project we have identified, researched, implemented and tested several cyberphysical approaches that rely mostly on the behavior of the DER circuit and may help with validating the incoming command and control action potentially coming through an insecure communications channel. Additionally, we have built semantic models and communications profiles for DER facilities and have implemented lightweight IEC 61850 based publisher-subscriber GOOSE messaging mechanism, with security extensions in terms of authentication and encryption. The project proposed information models for integration into UCA OpenFMB 2.0 profiles focusing on grid code compliance.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS1976

Heat transfer test of an 0.006-scale thin-skin thermocouple space shuttle model (50-0, 41-T) in the NASA-Ames Research Center 3.5-foot hypersonic wind tunnel at Mach 5.3 (IH28), volume 1

Data obtained from a heat transfer test conducted on an 0.006-scale space shuttle orbiter and external tank in the NASA-Ames Research Center 3.5-foot Hypersonic Wind Tunnel are presented. The purpose of this test was to obtain data under simulated return-to-launch-site abort conditions. Configurations tested were integrated orbiter and external tank, orbiter alone, and external tank alone at angles of attack of 0, + or - 30, + or - 60, + or - 90, and + or - 120 degrees. Runs were conducted at Mach numbers of 5.2 and 5.3 for Reynolds numbers of 1.0 and 4.0 million per foot, respectively. Heat transfer data were obtained from 75 orbiter and 75 external tank iron-constantan thermocouples.

Cummings, J. W.↗
NASA NTRS1992

Flight-determined benefits of integrated flight-propulsion control systems

Over the last two decades, NASA has conducted several experiments in integrated flight-propulsion control. Benefits have included improved maneuverability; increased thrust, range, and survivability; reduced fuel consumption; and reduced maintenance. This paper presents the basic concepts for control integration, examples of implementation, and benefits. The F-111E experiment integrated the engine and inlet control systems. The YF-12C incorporated an integral control system involving the inlet, autopilot, autothrottle, airdata, navigation, and stability augmentation systems. The F-15 research involved integration of the engine, flight, and inlet control systems. Further extension of the integration included real-time, onboard optimization of engine, inlet, and flight control variables; a self-repairing flight control system; and an engines-only control concept for emergency control. The F-18A aircraft incorporated thrust vectoring integrated with the flight control system to provide enhanced maneuvering at high angles of attack. The flight research programs and the resulting benefits of each program are described.

James F Stewart↗
NASA NTRS1993

Navier-Stokes computations on full-span wing-body configuration with oscillating control surfaces

Unsteady Navier-Stokes simulations have been performed for vortical flows over an 'arrow-wing' configuration of a supersonic transport in the transonic regime. Computed steady pressures and integrated force coefficients with and without control surface deflection at a moderate angle of attack are compared with experiment. For unsteady cases, oscillating trailing-edge control surfaces are modeled by using moving grids. Response characteristics between symmetric and anti-symmetric oscillatory motions of the control surfaces on the left and right wings are studied. The anti-symmetric case produces higher lift than the steady case with no deflection, and the unsteady symmetric case produces higher lift than the anti-symmetric case. The detailed analysis of the wake structure revealed a strong interaction between the primary vortex and the wake vortex sheet from the flap region when the flap is deflected up.

Obayashi, Shigeru↗