SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
The presentation would provide how Module-OT could provide security to the cyber physical systems that are interacting with digital, analog, physical, and human components.
Cyber-physical systems (CPSs) require reliable, safe, and secure control of critical infrastructure, combining computational and networking capabilities, which heighten the risk of cyber attacks. These attacks can disrupt the physical process, causing unforeseen consequences. One solution is the use of fully homomorphic encryption (FHE) to protect the control loop, allowing for secure computations and communications without compromising signal and control system privacy. The challenge with FHE, however, is its requirement for inputs to be integers. This paper introduces a modified Learning With Errors (LWE) FHE approach that encodes control system dynamics and signals into integers. Our proposed scheme leverages a generalized LWE encoding function and modifies the Gentry-Sahai-Waters (GSW) gadget decomposition tool to encrypt the control system. Using the modified LWE scheme, we formalize a fully encrypted control system, supported by simulated results.
Critical experiments, sometimes referred to zero-power reactors, are crucial tools in developing and validating nuclear physics predictions and thus an indispensable capability to ensure criticality safety during all parts of the nuclear fuel cycle and in reducing uncertainties in reactor physics predictions toward optimizing nuclear energy production. The System Physics Advanced Reactor Facility (SPARC) project was recently initiated to enable large-scale criticality experiments using a horizontal split table machine well suited toward solid core materials systems (fuel, moderator, reflector). The facility selected for this mission was a former pool-type research reactor building and thus also well suited toward a second critical experiment capability able to house full-size light-water reactor (LWR) fuel bundles. A conceptual design study was undertaken to review past water tank critical experiments used for LWR physics experiments and to develop an early engineering design for a new critical assembly tank (CAT). The work described here shows that a relatively simple CAT concept can be constructed and deployed in the SPARC facility to meet the urgent demands for new critical experiments on advanced LWR fuel bundles designs. The SPARC facility layout is conducive to the receipt and upending of LWR fuel bundles using existing containers and equipment from the LWR industry. The facility’s overhead crane can then be used to handle fuel bundles and place them in a vertical storage rack or in the CAT for critical experiments, both of which fit within the building’s “open basement” alongside other equipment planned for SPARC and the horizontal split table. A slightly lower area in the basement can serve as a large drain tank so that fail-safe valves drain the CAT reactor tank for safe shutdown. Neutronic configurations were determined where a 3 × 3 array of fuel bundles can be surrounded by full-length “loose rods” to adjust reactivity so that critical is achieved when the bundles are fully submerged. Viable configurations were determined for both pressurized- and boiling-water-reactor-type fuel bundles. This design concept was used to develop an early planning basis for establishing the CAT capability alongside the otherwise planned SPARC project in order to help streamline the process. Recent presidential executive orders have highlighted the need to achieve power uprates in LWR plants and the CAT capability will be a crucial element of these initiatives. Based on the work described herein, it is recommended that an earnest and timely project begin in order to establish this urgently needed capability.
Water cyber-physical systems (CPSs) have gained increasing interest to improve operational efficiency and reliability. However, due to growing exposure to cyber-physical attacks, cybersecurity and resilience against the attacks have become significant concerns. There have been efforts to improve cybersecurity in water CPSs, yet few attempts to investigate resilience against cyber-physical attacks. This study contributes to characterizing resilience of a water CPS and investigating potential resilience strategies. An advanced resilience measure integrating withstanding, absorptive, adaptive, and restorative capability of a system is proposed and applied to the C-town water distribution network (WDN) for 15 failure set scenarios with a pressure-driven hydraulic simulation. The results provide identification of failure sets and unfavorable operational conditions that make the system more vulnerable to the cyber-physical attacks and in turn produce low resilience and capabilities. It is also found that, after recovery of a disrupted component, adjustment of overall operational interactions across system components is needed for complete restoration of disrupted functionality. The findings provide insights on infrastructure investment with resilience strategies in cyber and physical water system domains.
Cyber-physical systems form a critical but vulnerable backbone to US critical infrastructure. Recent high-profile cyber-attacks have shown the need for increased assessment and hardening of these systems. However, such assessments and investigations into advanced technologies to harden these systems is difficult due to their operational nature. Instead, modeling of these systems is heavily leveraged. Investigation into these complex systems and their potential cascading failures requires comprehensive modeling of both the cyber and physical components of the system. This paper introduces SCEPTRE, an emulation capability to address this need.
Smart buildings are equipped with a plethora of cyber-physical systems, such as Internet of Things (IoT) devices and building automation systems. These devices, especially in commercial buildings, use legacy communications and hardware that were not designed with cybersecurity in mind. With increasing cyber threats in recent years, smart buildings have become an increasing target for attacks, but not enough published data are available from these incidents to study or replicate the scenarios to defend buildings. As part of the U.S. Department of Energy-funded project focusing on developing the Building Intelligence with Layered Defense Using Security-Constrained Optimization and Security Risk Detection (BUILD-SOS) platform, we developed a cybersecurity test bed for smart buildings. This test bed includes a building simulation tool, virtual devices, emulated operational technology networks, and remote hardware-in-the-loop. Using this test bed, we performed different cyberattacks on the smart building model and collected both physical building data, to understand the impacts on the building, and network data, to aid in separating mechanical faults from cyberattacks during the detection. This test bed is a significant tool in protecting smart buildings from cyberattacks because it can aid in both cybersecurity analysis and the evaluation of other cyberattack detection tools by testing the tools in a secure environment without impacting the building operations.
Security related questions for Cyber Physical Systems (CPS) have attracted much research attention in searching for novel methods for attack-resilient control and/or estimation. Specifically, false data injection attacks (FDIAs) have been shown to be capable of bypassing bad data detection (BDD), while arbitrarily compromising the integrity of state estimators and robust controller even with very sparse measurements corruption. Moreover, based on the inherent sparsity of pragmatic attack signals, ℓ1 -minimization scheme has been used extensively to improve the design of attack-resilient estimators. For this, the theoretical maximum for the percentage of compromised nodes that can be accommodated has been shown to be 50%. In order to guarantee correct state recoveries for larger percentage of attacked nodes, researchers have begun to incorporate prior information into the underlying resilient observer design framework. For the most pragmatic cases, this prior information is often obtained through some data-driven machine learning process. Existing results have shown strong positive correlation between the tolerated attack percentages and the precision of the prior information. In this paper, we present a pruning method to improve the precision of the prior information, given corresponding stochastic uncertainty characteristics of the underlying machine learning model. Then a weighted ℓ1 -minimization is proposed based on the pruned prior. The theoretical and simulation results show that the pruning method significantly improves the observer performance for much larger attack percentages, even when moderately accurate machine learning model used.
A digital twin must seek to represent all applicable functional components of the system of interest. Different expertise is required for understanding the physical system being modeled than the skills needed for transforming those models into a functional digital twin through physics modeling, machine learning analysis, and visualization. The diversity of knowledge requires a multi-disciplinary team to ensure all system details are captured. Team members also need a method to verify that the data they generate within their domain can be effectively communicated to professionals in other fields. To address this challenge, this work provides an approach for developing a digital twin framework to remotely monitoring nuclear facilities. Through this, general knowledge of the framework is presented along with two examples to solidify the process. The AGN-201 digital twin and microreactor digital twins provide varying levels of complexity in a potential nuclear facility, where common threads are identified and lessons learned are provided. The goal of this research is to aid future researchers by providing a formula for a successful digital twin and in turn reducing the development time of nuclear system digital twins, specifically for remote monitoring.
Recently, a multi-scale modeling system with unified physics was developed at NASA Goddard. It consists of (1) a cloud-resolving model (Goddard Cumulus Ensemble model, GCE model), (2) a regional scale model (a NASA unified weather research and forecast, WRF), (3) a coupled CRM and global model (Goddard Multi-scale Modeling Framework, MMF), and (4) a land modeling system. The same microphysical processes, long and short wave radiative transfer and land processes and the explicit cloud-radiation, and cloud-land surface interactive processes are applied in this multi-scale modeling system. This modeling system has been coupled with a multi-satellite simulator to use NASA high-resolution satellite data to identify the strengths and weaknesses of cloud and precipitation processes simulated by the model. In this talk, a review of developments and applications of the multi-scale modeling system will be presented. In particular, the microphysics development and its performance for the multi-scale modeling system will be presented.
Although doping with alkali atoms is a powerful technique for introducing charge carriers into physical systems, the resulting charge-transfer systems are generally not air stable. Here, in this paper, we describe computationally a strategy towards increasing the stability of alkali-doped materials that employs stoichiometrically unbalanced salt crystals with excess cations (which could be deposited during, e.g., in situ gating) to achieve doping levels similar to those attained by pure alkali metal doping. The crystalline interior of the salt crystal acts as a template to stabilize the excess dopant atoms against oxidation and deintercalation, which otherwise would be highly favorable. We characterize this doping method for graphene, NbSe 2 , and Bi 2 Se 3 and its effect on direct-to-indirect band gap transitions, 2D superconductivity, and thermoelectric performance. Salt intercalation should be generally applicable to systems which can accommodate this “ionic crystal” doping (and particularly favorable when geometrical packing constraints favor nonstoichiometry).
Solar system, solar physics, planetary atmospheres and structure, and origin of planets and moon - conference
As a number of diverse satellite systems (both Low Earth Orbit and Geostationary systems) are being designed and deployed, it becomes increasingly important to be able to test these systems under realistic traffic loads. While software simulations can provide valuable input into the system design process, it is crucial that the physical system be tested so that actual network devices can be employed and tuned. These tests need to utilize traffic patterns that closely mirror the expected user load, without the need to actually deploy an end-user network for the test. In this paper, we present trafgen. trafgen uses statistical information about the characteristics of sampled network traffic to emulate the same type of traffic over the test network. This paper compares sampled terrestrial network traffic with emulated satellite network traffic over the NASA ACTS satellite.
A system and method for deriving a process-based specification for a system is disclosed. The process-based specification is mathematically inferred from a trace-based specification. The trace-based specification is derived from a non-empty set of traces or natural language scenarios. The process-based specification is mathematically equivalent to the trace-based specification. Code is generated, if applicable, from the process-based specification. A process, or phases of a process, using the features disclosed can be reversed and repeated to allow for an interactive development and modification of legacy systems. The process is applicable to any class of system, including, but not limited to, biological and physical systems, electrical and electro-mechanical systems in addition to software, hardware and hybrid hardware-software systems.
A quantum communication system includes a first quantum transceiver, a second quantum transceiver, and a quantum communication mediator (QCM) system. The transceivers have different resonant frequencies or physical systems. The QCM system receives an initial quantum signal from the first quantum transceiver. The QCM system transfers a quantum state of the initial quantum signal to a first mechanical signal and then from the first mechanical signal to a first pair of optical signals by way of a first three-wave mixing process. The QCM transfers the quantum state to a second pair of optical signals from the first pair by way of a four-wave mixing process. The QCM transfers the quantum state from the second pair of optical signals to a second mechanical signal by way of a second three-wave mixing process. The QCM transfers the quantum state from the second mechanical signal to a final quantum signal by mechanical transduction.
The objective of the research in this area of fault management is to develop and implement a decision aiding concept for diagnosing faults, especially faults which are difficult for pilots to identify, and to develop methods for presenting the diagnosis information to the flight crew in a timely and comprehensible manner. The requirements for the diagnosis concept were identified by interviewing pilots, analyzing actual incident and accident cases, and examining psychology literature on how humans perform diagnosis. The diagnosis decision aiding concept developed based on those requirements takes abnormal sensor readings as input, as identified by a fault monitor. Based on these abnormal sensor readings, the diagnosis concept identifies the cause or source of the fault and all components affected by the fault. This concept was implemented for diagnosis of aircraft propulsion and hydraulic subsystems in a computer program called Draphys (Diagnostic Reasoning About Physical Systems). Draphys is unique in two important ways. First, it uses models of both functional and physical relationships in the subsystems. Using both models enables the diagnostic reasoning to identify the fault propagation as the faulted system continues to operate, and to diagnose physical damage. Draphys also reasons about behavior of the faulted system over time, to eliminate possibilities as more information becomes available, and to update the system status as more components are affected by the fault. The crew interface research is examining display issues associated with presenting diagnosis information to the flight crew. One study examined issues for presenting system status information. One lesson learned from that study was that pilots found fault situations to be more complex if they involved multiple subsystems. Another was pilots could identify the faulted systems more quickly if the system status was presented in pictorial or text format. Another study is currently under way to examine pilot mental models of the aircraft subsystems and their use in diagnosis tasks. Future research plans include piloted simulation evaluation of the diagnosis decision aiding concepts and crew interface issues. Information is given in viewgraph form.
Security of cyber-physical systems (CPS) continues to pose new challenges due to the tight integration and operational complexity of the cyber and physical components. To address these challenges, this article presents a domain-aware, optimization-based approach to determine an effective defense strategy for CPS in an automated fashion—by emulating a strategic adversary in the loop that exploits system vulnerabilities, interconnection of the CPS, and the dynamics of the physical components. Our approach builds on an adversarial decision-making model based on a Markov Decision Process (MDP) that determines the optimal cyber (discrete) and physical (continuous) attack actions over a CPS attack graph. The defense planning problem is modeled as a non-zero-sum game between the adversary and defender. We use a model-free reinforcement learning method to solve the adversary’s problem as a function of the defense strategy. We then employ Bayesian optimization (BO) to find an approximate best-response for the defender to harden the network against the resulting adversary policy. This process is iterated multiple times to improve the strategy for both players. We demonstrate the effectiveness of our approach on a ransomware-inspired graph with a smart building system as the physical process. Numerical studies show that our method converges to a Nash equilibrium for various defender-specific costs of network hardening.
Time delays in the mathematical description of a physical system occur whenever the system is affected not only by conditions at the present time, but also by conditions which have occurred in the past. The tau-decomposition method, as refined by Lee and Hsu, is a method for studying the effects of time delay on the stability of retarded dynamical systems. In this paper, the method is extended to examine the stability and relative stability of: (1) retarded systems with many time delays; and (2) a class of neutral systems with one delay. Applications are included which illustrate the power of the technique.
This paper addresses the problem of detecting and diagnosing faults in physical systems, for which suitable system models are not available. An architecture is proposed that integrates the on-line acquisition and exploitation of monitoring and diagnostic knowledge. The focus is on the component of the architecture that discovers classes of behaviors with similar characteristics by observing a system in operation. A characterization of behaviors based on best fitting approximation models is investigated. An experimental prototype has been implemented to test it. Preliminary results in diagnosing faults of the reaction control system of the space shuttle are presented. The merits and limitations of the approach are identified and directions for future work are set.