Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “threat analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Development of LpxH Inhibitors Chelating the Active Site Dimanganese Metal Cluster of LpxH

Abstract Despite the widespread emergence of multidrug‐resistant nosocomial Gram‐negative bacterial infections and the major public health threat it brings, no new class of antibiotics for Gram‐negative pathogens has been approved over the past five decades. Therefore, there is an urgent medical need for developing effective novel antibiotics against multidrug‐resistant Gram‐negative pathogens by targeting previously unexploited pathways in these bacteria. To fulfill this crucial need, we have been investigating a series of sulfonyl piperazine compounds targeting LpxH, a dimanganese‐containing UDP‐2,3‐diacylglucosamine hydrolase in the lipid A biosynthetic pathway, as novel antibiotics against clinically important Gram‐negative pathogens. Inspired by a detailed structural analysis of our previous LpxH inhibitors in complex with K. pneumoniae LpxH ( Kp LpxH), here we report the development and structural validation of the first‐in‐class sulfonyl piperazine LpxH inhibitors, JH‐LPH‐45 ( 8 ) and JH‐LPH‐50 ( 13 ), that achieve chelation of the active site dimanganese cluster of Kp LpxH. The chelation of the dimanganese cluster significantly improves the potency of JH‐LPH‐45 ( 8 ) and JH‐LPH‐50 ( 13 ). We expect that further optimization of these proof‐of‐concept dimanganese‐chelating LpxH inhibitors will ultimately lead to the development of more potent LpxH inhibitors for targeting multidrug‐resistant Gram‐negative pathogens.

Pharmacology & Pharmacy↗
DOE OSTI2021

Machine Intelligence to Detect, Characterise, and Defend against Influence Operations in the Information Environment

Social media has enabled a new era of manipulation in the information and cognitive domains. Deceptive content—misleading, falsified, and fabricated—is routinely created and spread in the modern social media environment with the intent to create confusion and widen political and social divides, and exploit the societal conflict exacerbated by these divides in the real-world (aka physical domain). Such disinformation campaigns demonstrate a threat to the integrity of economic, political, cultural, public health, and national security institutions around the world. In this work we overview our artificial intelligence (AI) capabilities to detect, describe, and defend against information operations on Twitter as an example social platform to understand the influence of misleading and falsified content diffusion and better enable those charged with defending against such manipulation to enable responsive parties to counter it. We first present novel linguistically-informed deep learning (DL) models for misinformation and disinformation detection, and present an in-depth linguistic analysis of psycho-linguistic markers across broad deception categories. We then demonstrate how our models perform in the multilingual and multimodal setting and categorize falsified and misleading content based on the intent to deceive. We also provide a large-scale analysis to describe user behavior and spread patterns while engaging with deceptive content and report novel findings about the immediate diffusion of deceptive content by characterizing the vulnerable sub-populations and their demographics, and explicitly measuring speed and scale of deception spread to uncover who shares deceptive content, how quickly, how much, and how evenly. In addition, we measure audience reactions to misinformation and disinformation at scale, distinguishing the reactions of users identified as bots versus humans. Finally, we take advantage of deep translation and generation models to create unique solutions for real-time defense against digital deception and discuss how to apply causal inference to prescribe and intervene into strategic communications jointly across information, cognitive, and physical domains.

artificial intelligence, deep learning, neural lan↗
DOE OSTI2024

Emulation and detection of physical faults and cyber-attacks on building energy systems through real-time hardware-in-the-loop experiments

The increasing use of remote or mobile access, integrated wearable technologies, data exchange, and cloud-based data analytics in modern smart buildings is steering the building industry towards open communication technologies. The increased connectivity and accessibility could lead to more cyber-attacks in smart buildings. On the other hand, physical faults (e.g., HVAC -heating, ventilation, and air-conditioning faults) may have similar adverse impacts as those from the cyber-attacks on building energy systems, such as occupant discomfort, energy wastage, and equipment downtime. However, current physical behavior-based anomaly detection methods fail to differentiate between cyber-attacks and physical faults in building energy systems. Moreover, the challenge in collecting real-world threat data with ground truth has led researchers to rely on numerical models with user-defined assumptions, which may not accurately reflect real-world conditions due to the lack of in-situ experimental datasets. To address these challenges and gaps, this paper presents a flexible hardware-in-the-loop (HIL) testbed for generating cyber-attack and physical fault datasets and demonstrating threat detection algorithms in a real building automation system (BAS) environment. This testbed combines hardware (i.e., real BAS with local HVAC controllers and a physical network) with software (i.e., high-fidelity models to represent behaviors of building envelope and HVAC energy systems), enabling emulations of realistic threats. Five HIL experiments, including one baseline without any threats, two with physical faults, and two with cyber-attacks, were conducted to generate datasets containing detailed network traffic and system states. A joint classification framework, incorporating a network analyzer and a physical HVAC fault detector, was proposed to automatically detect cyber-physical abnormalities on BAS at both the network and the physical HVAC levels. The network analyzer comprises a conditional random fields (CRF) based command validator and a statistics-based detection strategy. The fault detector employs a weather and schedule-based pattern matching and feature-based principal component analysis (WPM-FPCA) method. Evaluation of the classification using four metrics from the multi-class confusion matrix revealed an average accuracy of 90.2%, recall of 89.7%, precision of 88.5% and F1-score of 89.2%. Finally, these results demonstrate that the proposed joint classification framework can effectively differentiate between specific types of cyber-attacks (e.g., device reinitialization attack, network Denial-of-Service attack) and physical faults (e.g., air handling unit operational fault, cooling coil valve stuck) in real time for improved building energy management.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2023

Machine Learning-based Intrusion Detection for Smart Grid Computing: A Survey

Machine learning (ML)-based intrusion detection system (IDS) approaches have been significantly applied and advanced the state-of-the-art system security and defense mechanisms. In smart grid computing environments, security threats have been significantly increased as shared networks are commonly used, along with the associated vulnerabilities. However, compared to other network environments, ML-based IDS research in a smart grid is relatively unexplored, although the smart grid environment is facing serious security threats due to its unique environmental vulnerabilities. In this article, we conducted an extensive survey on ML-based IDS in smart grids based on the following key aspects: (1) The applications of the ML-based IDS in transmission and distribution side power components of a smart power grid by addressing its security vulnerabilities; (2) dataset generation process and its usage in applying ML-based IDSs in the smart grid; (3) a wide range of ML-based IDSs used by the surveyed papers in the smart grid environment; (4) metrics, complexity analysis, and evaluation testbeds of the IDSs applied in the smart grid; and (5) lessons learned, insights, and future research directions.

SCADA↗
DOE OSTI2023

LANL Test Engineering’s Structural Dynamics Research and Development Efforts [Slides]

LANL's priority roles are serving as a nuclear weapons design agency and a nuclear weapons production agency; addressing nuclear threats; and performing national security science, technology, and engineering. LANL’s Test Engineering organization serves the national mission of maintaining a strategic nuclear deterrent by providing high-quality, empirical evidence through the execution and assessment of weapons system and component testing. Shock and vibration environmental testing provides one key piece of evidence for evaluation and qualification of these systems and components in the service environments incurred during a lifetime in the stockpile. LANL’s Test Engineering group continuously pursues research and development in structural dynamics to improve shock and vibration testing capabilities, processes, and analysis techniques to increase the fidelity of service environment recreations in laboratory testing settings. This talk will highlight several ongoing projects to represent these R&D efforts.

42 ENGINEERING↗
DOE OSTI2024

A graph embedding‐based approach for automatic cyber‐physical power system risk assessment to prevent and mitigate threats at scale

Abstract Power systems are facing an increasing number of cyber incidents, potentially leading to damaging consequences to both physical and cyber aspects. However, the development of analytical methods for the study of large‐scale power infrastructures as cyber‐physical systems is still in its early stages. Drawing inspiration from machine‐learning techniques, the authors introduce a method inspired by the principles of graph embedding that is tailored for quantitative risk assessment and the exploration of possible mitigation strategies of large‐scale cyber‐physical power systems. The primary advantage of the graph embedding approach lies in its ability to generate numerous random walks on a graph, simulating potential access paths. Meanwhile, it enables capturing high‐dimensional structures in low‐dimensional spaces, facilitating advanced machine‐learning applications, and ensuring scalability and adaptability for comprehensive network analysis. By employing this graph embedding‐based approach, the authors present a structured and methodical framework for risk assessment in cyber‐physical systems. The proposed graph embedding‐based risk analysis framework aims to provide a more insightful perspective on cyber‐physical risk assessment and situation awareness for power systems. To validate and demonstrate its applicability, the method has been tested on two cyber‐physical power system models: the Western System Coordinating Council (WSCC) 9‐Bus System and the Illinois 200‐Bus System , thereby showing its advantages in enhancing the accuracy of risk analysis and comprehensiveness of situational awareness.

Sun, Shining↗
DOE OSTI2021

Relationship Extraction: Automatic Information Extraction and Organization for Supporting Analysts in Threat Assessment

In order for analysts to be able to do their work, they sift through hundreds, thousands, or even millions of documents to make connections between entities of interest. This process is time consuming, tedious, and prone to potential error from missed connections or connections made that should not have been. There exist many tools in natural language processing, or NLP, to extract information from documents. However, when it comes to relationship extraction, there has been varied success. This project began with a goal to solve the relationship extraction problem which developed into a deeper understanding of the problem and the associated challenges for solving this problem on a general scale. In this report, we explain our research and approach to relationship extraction, identify other auxiliary problems in NLP that provide additional challenges to solving relationship extraction generally, explain our analysis of the current state of relationship extraction, and postulate future work to address these problems.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Evaluating SWAT + model uncertainties for human and natural outcomes: Application in a Great Lakes agricultural watershed

Nutrient exports from agricultural lands in the Great Lakes Region pose significant threats to water quality and ecological health through eutrophication, hypoxia, and harmful algal blooms. Climate change and agricultural adaptation practices complicate future nutrient loading due to intensified hydrologic cycles and land use decisions. Our research focuses on evaluating the Soil and Water Assessment Tool (SWAT) plus model parametric uncertainties for human and natural outcomes across different scales. These factors are integral to ensuring a balance between productive agricultural practices and maintaining the health of watershed hydrology. However, uncertainties in modeling such complex interactions pose significant challenges, limiting our ability to precisely determine critical factors that influence crop yield and soil moisture. Our analysis employs Sobol global sensitivity analysis to evaluate first-order, second order, and total-order indices for SWAT crop growth parameter, ensuring comprehensive assessment of individual and interactive effects on model outputs. The objective is to identify the parameters that significantly affect model outputs for crop yield and soil moisture and improve our understanding of their interactions at the basin and hydrological response unit (HRU) scale. Our case study, the Portage River Watershed, which drains into Lake Erie, is chosen to better capture finer scale interactions crucial for predicting nutrient loading under future climate scenarios. This foundational work is aimed at setting the stage for the future development of an agent-based model (ABM). The ABM model would incorporate SWAT outputs to dynamically simulate decision-making processes.

Bunyon, Enock↗
DOE OSTI2025

Standardized Residue Numbering and Secondary Structure Nomenclature in the Class D β-Lactamases

Over 1370 class D β-lactamases are currently known, and they pose a serious threat to the effective treatment of many infectious diseases, particularly in some pathogenic bacteria where evolving carbapenemase activity has been reported. Detailed understanding of their molecular biology, enzymology, and structural biology are critically important, but the lack of a standardized residue numbering scheme and inconsistent secondary structure annotation has made comparative analyses sometimes difficult and cumbersome. Compounding this, in the post-AlphaFold world where we currently find ourselves, an extraordinary wealth of detailed structural information on these enzymes is literally at our fingertips; therefore it is vitally important that a standard numbering system is in place to facilitate the accurate and straightforward analysis of their structures. In conclusion, here we present a residue numbering and secondary structure scheme for the class D enzymes based on the sequence and structure of OXA-48 and apply it to test targets to demonstrate the ease with which it can be used.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2020

Detection and Diagnosis of Data Integrity Attacks in Solar Farms Based on Multilayer Long Short-Term Memory Network

Photovoltaic (PV) systems are becoming more vulnerable to cyber threats. In response to this emerging concern, developing cyber-secure power electronics converters has received increased attention from the IEEE Power Electronics Society that recently launched a cyber-physical-security initiative. Here this letter proposes a deep sequence learning based diagnosis solution for data integrity attacks on PV systems in smart grids, including dc–dc and dc–ac converters. The multilayer long short-term memory networks are used to leverage time-series electric waveform data from current and voltage sensors in PV systems. The proposed method has been evaluated in a PV smart grid benchmark model with extensive quantitative analysis. As a comparison, we have evaluated classic data-driven methods, including K-nearest neighbor, decision tree, support vector machine, artificial neural network, and convolutional neural network. Comparison results verify performances of the proposed method for detection and diagnosis of various data integrity attacks on PV systems.

42 ENGINEERING↗
DOE OSTI2024

Utilizing HYSPLIT for Emergency Response Modeling at SRS

The threat of a disaster happening at the Savannah River Site (SRS) is low, but not zero. When an emergency arises, emergency responders utilize a variety of tools to detect, track, and mitigate the disaster. HYSPLIT is a community atmospheric dispersion model that is highly configurable and has been used operationally to simulate particle, chemical, and radionuclide releases. We have developed a preliminary user interface (UI) that configures HYSPLIT to run for a variety of Emergency Action Level (EAL) scenarios at SRS. Using a hypothetical EAL scenario of an accidental release of Pu-238 in H-area and K-area onsite, an analysis was done to show how a preliminary UI framework allows HYSPLIT to be run on a terminal without the need form an active network connection. The study was successful in multiple aspects. For the preliminary UI, users were able to input certain characteristics of the hypothetical EAL such as hours of emission (how long was Pu-238 being released), curies of release, release start time (when does the model run start), and type of radionuclide directly into the terminal. For HYSPLIT, the model was successful in being able to take the UI input, calculate the results from the inputs and output multiple figures of both total volumetric airborne concentrations and surface deposition. We used the Pu-238 Derived Intervention Level (DIL) deposition thresholds for produce, dairy, and beef for visualization of the surface deposition, showing how a release would impact ingestion pathways.

38 RADIATION CHEMISTRY, RADIOCHEMISTRY, AND NUCLEA↗
DOE OSTI2022

Valuing Resilience Benefits of Microgrids for an Interconnected Island Distribution System

Extreme climate-driven events such as hurricanes, floods, and wildfires are becoming more intense in areas exposed to these threats, requiring approaches to improve the resilience of the electrical infrastructure serving these communities. Long-duration outages caused by such high impact events propagate to economic, health, and social consequences for communities. As essential service providers, electric utilities are mandated to provide safe, economical and reliable electricity to their customers. The public is becoming less tolerant to these more frequent disruptions, especially in view of technological advances that are intended to improve power quality, reliability and resilience. One promising solution is state-of-the-art microgrids and the advanced controls employed therein. This paper presents and demonstrates an approach to technoeconomic analysis that can be used to value the avoided economic consequences of grid resilience investments, as applied to the islands of Vieques and Culebra in Puerto Rico. This valuation methodology can support policies to incorporate resilience value into any investment decision-making process, especially those which serve the public interest.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Tactical Analysis for Calculating Contextual Risk at Boundaries: Summary of Laboratory Directed Research & Development Effort

The Tactical Analysis for Calculating Contextual Risk at Boundaries (TACCRAB) tool is an innovative digital twin (DT) platform and automated risk algorithm designed to transform operational decision-making in structured screening environments, with an initial focus on Southern Border Land Ports of Entry (POEs). The invention provides integration points for advanced artificial intelligence, predictive modeling, and real-time data analysis to produce a comprehensive risk management tool that enables proactive, data-informed security strategies. The core inventive features of TACCRAB center on its unique risk algorithm, which dynamically calculates contextual risk by synthesizing historical data, near real-time streaming data from the checkpoints themselves, and AI-generated predictions. Unlike traditional risk assessment methods, TACCRAB utilizes a DT to provide comprehensive operational insights, allowing stakeholders to visualize, simulate, and optimize checkpoint configurations with unprecedented speed and contextual awareness. TACCRAB's key innovation lies in its ability to combine multiple complex inputs - including technology detection probabilities, resource availability, screening pathway characteristics, and threat actor behavioral patterns - into a unified risk calculation and update these inputs based on changing operational and environmental conditions. By leveraging a DT that continuously updates and learns from linked data, TACCRAB can suggest adaptive mitigation strategies that minimize risk while maintaining operational efficiency. Particularly novel is the platform's approach to decision support, which goes beyond static risk assessment. The DT provides dynamic metrics such as wait times, resource allocation effectiveness, and potential emerging threat scenarios, enabling users to view sophisticated, relevant what-if simulations and optimize checkpoint operations in near real-time. The system's architecture allows for generalized application across different screening environments, such as secure facilities, ports of entry, and soft targets, making it a versatile tool for security and operational management. The invention distinguishes itself through its comprehensive integration of predictive modeling, AI-driven pattern discovery, and user-friendly interface design. By combining these elements, TACCRAB transforms complex risk data into actionable insights, supporting decision-makers at various organizational levels - from booth agents making split-second screening decisions to checkpoint managers optimizing the day's resource allocation to strategic planners managing long-term investments.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

Analysis of incentive policies for phosphorus recovery at livestock facilities in the Great Lakes area

Livestock operations have been highly intensified over the last decades, resulting in the advent of large concentrated animal feeding operations (CAFOs). Intensification decreases production costs but also leads to substantial environmental impacts. Specifically, nutrient runoff from livestock waste results in eutrophication, harmful algal blooms, and hypoxia. The implementation of nutrient recovery systems in CAFOs can abate nutrient releases and negative ecosystem responses, although they might negatively affect the economic performance of CAFOs. We design and analyze potential incentive policies for the deployment of phosphorus recovery technologies at CAFOs considering the geospatial vulnerability to nutrient pollution. The case study demonstration consists of 2217 CAFOs in the U.S. Great Lakes area. The results reveal that phosphorus recovery is more economically viable in the largest CAFOs due to economies of scale, although they also represent the largest eutrophication threats. For small and medium-scale CAFOs, phosphorus credits progressively improve the profitability of nutrient management systems. The integration of biogas production does not improve the economic performance of phosphorus recovery systems at most of CAFOs, as they lack enough size to be cost-effective. Furthermore, phosphorus recovery proves to be economically beneficial by comparing the net costs of nutrient management systems with the negative economic impact derived from phosphorus releases. The incentives necessary for avoiding up to 20.7.10 3 ton/year phosphorus releases and achieve economic neutrality in the Great Lakes area are estimated at $223 million/year. Additionally, the fair distribution of limited incentives is studied using a Nash allocation scheme, determining the break-even point for allocating monetary resources.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2020

A cocrystal structure of dengue capsid protein in complex of inhibitor

Dengue virus (DENV) was listed as a top 10 public health threat by the World Health Organization in 2019. No clinically approved anti-DENV drug is currently available. Here we report the high-resolution cocrystal structure (1.5 Å) of the DENV-2 capsid protein in complex with an inhibitor that potently suppresses DENV-2 but not other DENV serotypes. The inhibitor induces a “kissing” interaction between two capsid dimers. The inhibitor-bound capsid tetramers are assembled inside virions, resulting in defective uncoating of nucleocapsid when infecting new cells. Resistant DENV-2 emerges through one mutation that abolishes hydrogen bonds in the capsid structure, leading to a loss of compound binding. Structure-based analysis has defined the amino acids responsible for the inhibitor’s inefficacy against other DENV serotypes. The results have uncovered an antiviral mechanism through inhibitor-induced tetramerization of the viral capsid and provided essential structural and functional knowledge for rational design of panserotype DENV capsid inhibitors.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2021

Review of Intrusion Detection Methods and Tools for Distributed Energy Resources

Recent trends in the growth of distributed energy resources (DER) in the electric grid and newfound malware frameworks that target internet of things (IoT) devices is driving an urgent need for more reliable and effective methods for intrusion detection and prevention. Cybersecurity intrusion detection systems (IDSs) are responsible for detecting threats by monitoring and analyzing network data, which can originate either from networking equipment or end-devices. Creating intrusion detection systems for PV/DER networks is a challenging undertaking because of the diversity of the attack types and intermittency and variability in the data. Distinguishing malicious events from other sources of anomalies or system faults is particularly difficult. New approaches are needed that not only sense anomalies in the power system but also determine causational factors for the detected events. In this report, a range of IDS approaches were summarized along with their pros and cons. Using the review of IDS approaches and subsequent gap analysis for application to DER systems, a preliminary hybrid IDS approach to protect PV/DER communications is formed in the conclusion of this report to inform ongoing and future research regarding the cybersecurity and resilience enhancement of DER systems.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2023

Inadvertent Hatchery Rainbow Trout Oncorhynchus mykiss Discovered in Native Westslope Cutthroat Trout Oncorhynchus clarkii lewisi Habitat: A Cautionary Tale

Abstract Fish hatcheries across North America release billions of fish into the wild every year to augment harvest opportunities in sport, commercial, and tribal fisheries, as well as to recover depressed populations. Despite these benefits, wild fish populations may be negatively affected when hatchery fish compete and/or hybridize with native species. Native Westslope Cutthroat Trout Oncorhynchus clarkii lewisi have decreased by 90% across their historic range; however, the Flathead River in Montana is a rangewide stronghold for these imperiled fish. The primary threat to Westslope Cutthroat Trout is hybridization with invasive Rainbow Trout O. mykiss, which leads to hybrid swarm formation and genomic extinction. We collected Rainbow Trout in Mill Creek, a tributary of the Flathead River, downstream from a hatchery that produces the species, and used otolith 87Sr/86Sr to determine whether individual fish were inadvertently introduced from the hatchery. Differences in 87Sr/86Sr among water samples from Mill Creek and the marine-derived hatchery food provided high-classification accuracy to determine the natal origins of Mill Creek Rainbow Trout. We found that 83 of the 106 Rainbow Trout collected (78%) were of hatchery origin. Otolith microstructure analysis indicated these fish had been in Mill Creek for ~1–32 weeks prior to capture. Our results illustrate the utility of otolith 87Sr/86Sr to identify hatchery fish in natural habitats and point to a source of invasive Rainbow Trout that pose conservation risks to native fishes in the drainage.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2024

ChatGPT and Other Large Language Models for Cybersecurity of Smart Grid Applications

Cybersecurity breaches targeting electrical substations constitute a significant threat to the integrity of the power grid, necessitating comprehensive defense and mitigation strategies. Any anomaly in information and communication technology (ICT) should be detected for secure communications between devices in digital substations. This paper proposes large language models (LLMs), e.g., ChatGPT, for the cybersecurity of IEC 61850-based communications. Multi-cast messages such as generic object oriented system events (GOOSE) and sampled values (SV) are used for case studies. The proposed LLM-based cybersecurity framework includes, for the first time, data pre-processing of communication systems and human-in-the-loop (HITL) training (considering the cybersecurity guidelines recommended by humans). The results show a comparative analysis of detected anomaly data carried out based on the performance evaluation metrics for different LLMs. A hardware-in-the-loop (HIL) testbed is used to generate and extract a dataset of IEC 61850 communications.

ChatGPT↗