Engineering PapersSearch

SEARCH · Engineering Papers

Results for “ATTs”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

Collection And Analysis Of Telemetry For The Cyote Heuristic

CATCH CLI focuses on gathering telemetry data, storing it in the Neo4j database, querying for Mitre ATT&CK patterns, and creating STIX 2.1 reports. Key Components: Analysis Modules: Analyze data to detect attack patterns. GoSTOTS Collection Engines: Collect telemetry data. These tools can be used together or individually. Analysis modules rely on data from specific engines to identify attack patterns. Source Code Organization: Engines: CATCH/catch/cmd/collection Modules: CATCH/catch/cmd/analysis CGUI Overview CATCH Graphical User Interface (CGUI) offers a graphical shell to execute CATCH CLI, allowing easy editing of: Analysis Modules Database configurations Profiles (collection and device settings) Neo4j Overview Neo4j is a graph database using the Cypher query language, storing data in JSON. It seamlessly integrates with STIX 2.1 data for: Data Submission: CATCH Collection Engines Data Querying: Analysis Modules CATCH modifies STIX 2.1 data for Neo4j submission and reverts it back during querying. STIG Overview Structured Threat Intelligence Graph (STIG) is a tool for creating, editing, querying, analyzing, and visualizing threat intelligence using STIX 2.1 and storing data in Neo4j. Usage Tools can be run: Manually (CLI): Refer to CATCH documentation User Interface: Run ./cgui/CGUI or go run ./cgui/ Additional Information Logging System: Detailed in the config documentation Further Documentation: Available for CATCH and CGUI

Madsen, MichaelJ. [Idaho National Laboratory (INL)

Retrieval Augmented Generation for Robust Cyber Defense

In cybersecurity, the ability to efficiently analyze and respond to vulnerabilities, weaknesses, attack patterns, and threat tactics is critical for effective defense strategies. With the increasing complexity and volume of cybersecurity data, traditional methods of querying and retrieving information are often inadequate. To address this challenge, we implemented Retrieval-Augmented Generation (RAG) systems—CyRAG and GraphCyRAG—that integrate large language models (LLMs) with both structured data from relational databases and knowledge graphs such as Neo4j. CyRAG is designed to handle structured data, focusing on CVE (Common Vulnerabilities and Exposures) and CWE (Common Weakness Enumeration) entities to generate accurate and context-rich responses. In contrast, GraphCyRAG leverages Neo4j knowledge graphs to retrieve interconnected information from CVE, CWE, CAPEC (Common Attack Pattern Enumeration and Classification), and ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) datasets. By utilizing Neo4j’s graph-based framework, GraphCyRAG enables deeper traversal of relationships between vulnerabilities and attack patterns, providing cybersecurity analysts with more comprehensive insights into potential attack vectors and mitigation strategies. Our preliminary results demonstrate that integrating knowledge graphs with RAG significantly enhances both the accuracy and depth of threat analysis, allowing for the retrieval of dynamic, real-time data and the generation of contextually aware responses. This approach helps analysts uncover hidden relationships between cyber entities, predict exploit paths, and prioritize mitigation efforts effectively. The integration of RAG with cybersecurity knowledge graphs represents a significant advancement in cybersecurity threat intelligence, enabling more informed decision-making and stronger defense strategies.

97 MATHEMATICS AND COMPUTING

Radio Frequency Spectrum Audit to Inventory Private Cellular Base Station Infrastructure

The ever-changing cellular communication landscape makes it difficult to identify, map, and localize cellular base stations. Localizing cellular base stations provides various advantages, including information security, cybersecurity, spectrum management, and interference detection. For example, the MITRE ATT&CK® (Adversarial Tactics, Techniques, and Common Knowledge architecture) [1] and Common Attack Pattern Enumeration and Classification [2] emphasize the importance of being able to minimize the cyber security threat presented by unregulated private cellular base stations (PCBS). The majority of published research looks at the malicious use of PCBSs and focuses on using data retrieved from user equipment (UE), data obtained from an application on the UE, or data shared between the UE and a mobile network to locate it. This innovative strategy, however, focuses on the passively discovered uniqueness of radio frequency (RF) transmissions from commercial cellular infrastructure received in a designated monitoring position (DMP).

42 ENGINEERING

Precursor Analysis Report: Blackmatter Ransomware Attack on New Cooperative 2021

The BlackMatter Ransomware Attack on New Cooperative 2021 Precursor Analysis Report leverages publicly available information about the New Cooperative cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. The BlackMatter ransomware was first identified in July 2021 and is reported to have infected more than 50 corporations around the world. , The Iowa-based grain cooperative, New Cooperative, was impacted by the BlackMatter ransomware on or before 18 September 2021. The adversary likely resided on New Cooperative’s networks for 15 days prior to encrypting its network and demanding New Cooperative pay $5.9 million in ransom by 25 September to unlock systems and prevent 1 terabyte (TB) of sensitive data from being publicly released. It is not clear if New Cooperative paid the ransom. The full impact of the ransomware attack is not known; however, according to New Cooperative’s general manager, the attack caused the company’s automated processes to revert back to processes used in the 1970s. , As of 6 October, only 50 percent of New Cooperative’s operations were utilizing automated processes. The company took eight weeks to rebuild the entire network and information technology (IT) systems from the ground up, which puts the date of fully recovery around 13 November. Researchers and analysts identified 20 unique techniques utilized during the attack with a total of 404 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Seventeen of the identified techniques used during the New Cooperative cyber attack were precursors to the triggering event. Analysis identified 360 observables associated with these precursor techniques, 284 of which were assessed to have an increased likelihood of being perceived in the 15 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF

ATF Cladding Mechanical Properties Report: Capability Demonstration

This report documents post-irradiation examination (PIE) activities performed in FY 2025 at Oak Ridge National Laboratory on chromium-coated (Cr-coated) and uncoated advanced zirconium alloy claddings irradiated in the High Flux Isotope Reactor (HFIR) to approximately 4 displacements per atom (dpa), corresponding to ~40 GWd/t burnup. Specimens were prepared in axial tension (ATT) and ring tension (RTT) geometries, and passive silicon carbide thermometry was employed to determine irradiation temperatures, which averaged 38–43 °C below the 330 °C design target.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS

Vulcan-Forge: Architecture and Design of a Multi-Modal Forensic Analysis Plugin for CALDERA

Forge and VULCAN together describe an open-architecture cybersecurity analysis ecosystem that unifies forensic artifact processing, detection engineering, and vulnerability intelligence within integrated platforms. Forge operates as a plugin for MITRE CALDERA, ingesting diverse evidence formats—including EVTX, PCAP/PCAPNG, CSV, JSON, YAML, XML, binaries, and archives—to construct a unified artifact graph enriched with severity scoring, TLP classification, and audit trails. It provides subsystems for artifact parsing, streaming structured-data visualization, NetworkMiner-based packet inspection, PE/.NET binary analysis, and LLM-assisted triage and rule generation, with outputs validated against CCCS-YARA and pySigma schemas. VULCAN complements this by serving as a cybersecurity analyst platform that integrates a Neo4j knowledge graph, Qdrant vector retrieval, SSVC-based triage, and a local LLM to deliver CVE intelligence and forensic analysis through a multi-source ingest pipeline drawing from NVD, CISA KEV, EPSS, MITRE ATT&CK, and CAPEC. Together, they bridge structured threat intelligence with automated forensic analysis and detection workflows.

97 MATHEMATICS AND COMPUTING

Applications to aircraft propulsion systems

Estimates of the prospects for quiet airplanes in the future are summarized. The SST using afterburning turbojets and no sound suppression is estimated to produce 129 EPNdb on the sideline. Suppression devices and operating techniques can reduce this noise markedly. The present fleet of 707's and DC-8's produces noises nearly as high as 120 decibels on approach. Combinations of sound absorbing devices and engine modifications are expected to give a noise near 100 decibels. The new advanced technology transports (ATT) are being studied with two noise goals in mind: one is 10 decibels and the other is 20 decibels below the FAR level of 106 on takeoff. New trijets using new quiet engines are expected to meet 90 EPNdb. Future advances in technology are expected to yield another 5 decibels to give noise levels of 80 EPNdb. The STOL airplane has a noise goal of 95 EPNdb along a sideline 500 feet from the runway.

Sanders, N. D.

Advanced subsonic long-haul transport terminal area compatibility study. Volume 2: Research and technology recommendations

The Terminal Area Compatibility (TAC) study is briefly summarized for background information. The most important research items for the areas of noise congestion, and emissions are identified. Other key research areas are also discussed. The 50 recommended research items are categorized by flight phase, technology, and compatibility benefits. The relationship of the TAC recommendations to the previous ATT recommendations is discussed. The bulk of the document contains the 50 recommended research items. For each item, the potential payoff, state of readiness, recommended action and estimated cost and schedule are given.

Source record

Long range view of materials research for civil transport aircraft

The impact of various material technology advancements on the economics of civil transport aircraft is investigated. Benefits of advances in both airframe and engine materials are considered. Benefits are measured primarily by improvements in return on investment for an operator. Materials research and development programs which lead to the greatest benefits are assessed with regards to cost, risk, and commonality with other programs. Emphasis of the paper is on advanced technology subsonic/transonic transports (ATT type aircraft) since these are likely to be the next generation of commercial transports.

Ardema, M. D.

Long range view of materials research for civil transport aircraft

The impact of various material technology advancements on the economics of civil transport aircraft is investigated. Benefits of advances in both airframe and engine materials are considered. Benefits are measured primarily by improvements in return on investment for an operator. Materials research and development programs which lead to the greatest benefits are assessed with regards to cost, risk, and commonality with other programs. Emphasis of the paper is on advanced technology subsonic/transonic transports (ATT type aircraft) since these are likely to be the next generation of commercial transports.

Ardema, M. D.

Side forces on a tangent ogive forebody with a fineness ratio of 2.5 at high angles of attack and low speed

A wind tunnel study to determine the subsonic aerodynamic characteristics, at high angles of attack, of a tangent ogive forebody with a fineness ratio of 2.5, is reported. Static longitudinal and lateral-directional stability data were obtained at Reynolds numbers ranging from 0.4 x 1 million to 3.7 x 1 million (based on base diameter) at a Mach number of 0.25. Angle of attack was varied from 36 deg to 88 deg at zero sideslip. It was found that at low Reynolds numbers the forebody does not have a side force att high angles of attack; however, at Reynolds numbers above about 2 x 1 million, a side force occurs in the angle of attack range from 45 deg to 80 deg. The maximum side force is as large as the maximum normal force. The maximum normal force coefficient varies between 1.0 and 2.0 over the Reynolds number range tested and occurs at angles of attack near 65 deg.

Keener, E. R.

Orbit attitude processor. STS-1 bench program verification test plan

A plan for the static verification of the STS-1 ATT PROC ORBIT software requirements is presented. The orbit version of the SAPIENS bench program is used to generate the verification data. A brief discussion of the simulation software and flight software modules is presented along with a description of the test cases.

Mcclain, C. R.

A new synthetic route to a family of non-classical addition-type thermoplastics. I - Concept and demonstration

A synthesis scheme was developed for a host of nonclassical addition-type thermoplastics (ATT) that can be cured by an addition reaction, leading to a linear polymer structure. The synthesis involves the reaction of an acetylene-terminated prepolymer with either a bismaleimide (BMI) or a biscitraconimide. A new polymer, designated LaRC-RP80, synthesized using this scheme, was found to exhibit several significantly improved properties over the commercial BMI, Kerimid 601, including an eight-fold increase in toughness while maintaining a high Tg, a higher (by 167 C) heat stability, and a 50-percent increase in moisture resistance. In addition, LaRC-RP80 has good hot/wet lap shear strength and processes easily at 288 C without voids in the finished product.

Pater, Ruth H.

IRDS prototyping with applications to the representation of EA/RA models

The requirements and system overview for the Information Resources Dictionary System (IRDS) are described. A formal design specification for a scaled down IRDS implementation compatible with the proposed FIPS IRDS standard is contained. The major design objectives for this IRDS will include a menu driven user interface, implementation of basic IRDS operations, and PC compatibility. The IRDS was implemented using Smalltalk/5 object oriented programming system and an ATT 6300 personal computer running under MS-DOS 3.1. The difficulties encountered in using Smalltalk are discussed.

Lekkos, Anthony A.

Quasar populations in a cosmological constant-dominated flat universe

Most physical properties derived for quasars, as single entities or as a population, depend upon the cosmology assumed. In this paper, we calculate the quasar luminosity function and some related quantities for a flat universe dominated by a cosmological constant Lambda (Lambda = 0.9, Omega = 0.1) and compare them with those deduced for a flat universe with zero cosmological constant (Lambda = 0, Omega = 1). We use the ATT quasar survey data (Boyle et al. 1990) as input in both cases. The data are fitted well by a pure luminosity evolution model for both the cosmologies but with different evolutionary parameters. From the luminosity function, we predict (extrapolate) a greater number of quasars at faint apparent magnitudes (twice the number at B = 24, z is less than 2.2) for the Lambda-dominated universe. This population of faint quasars at high redshift would result in a higher incidence of gravitational lensing. The total luminosity of the quasar population and the total mass tied up in black hole remnants of quasars is not sensitive to the cosmology. However, for a Lambda cosmology, this mass is tied up in fewer but more massive black holes.

Malhotra, Sangeeta

Whirl Flutter Studies for a SSTOL Transport Demonstrator

A proposed new class of aircraft - the Advanced Theater Transport (ATT) will combine strategic range and high payload with 'Super-STOL' (short take-off and landing) capability. It is also proposed to modify a YC-15 into a technology demonstrator with a 20-deg tilt wing; four, eight-bladed propellers; cross-shafted gearboxes and V-22 engines. These constitute a unique combination of design features that potentially affect performance, loads and whirl-mode stability (whirl flutter). NASA Ames Research Center is working with Boeing and Hamilton Sundstrand on technology challenges presented by the concept; the purpose of NASA involvement is to establish requirements for the demonstrator and for early design guidance, with emphasis on whirl flutter. CAMRAD II is being used to study the effects of various design features on whirl flutter, with special attention to areas where such features differ from existing aircraft, notably tiltrotors. Although the stability margins appear to be more than adequate, the concept requires significantly different analytical methods, principally including far more blade modes, than typically used for tiltrotors.

Acree, C. W., Jr.

A Survey of Cyber Threats and Security Controls Analysis for Urban Air Mobility Environments

Since the cyber threat landscape changes daily, cybersecurity needs to be an ongoing activity for every organization within the UAM environments. This paper will provide information on identified cyber threats and controls associated with an instance of the Urban Air Mobility (UAM) environment. The MITRE ATT&CK model and framework and the selection of cyber threats and the National Institute of Standards and Technology publications for security control identification and cybersecurity risk identification will be leveraged for analysis.

Cyber Threats

Cyber Threats and Security Controls Analysis for Urban Air Mobility Environments

Since the cyber threat landscape changes daily, cybersecurity needs to be an ongoing activity for every organization within the UAM environments. This paper will provide information on identified cyber threats and controls associated with an instance of the Urban Air Mobility (UAM) environment. The MITRE ATT&CK model and framework and the selection of cyber threats and the National Institute of Standards and Technology publications for security control identification and cybersecurity risk identification will be leveraged for analysis.

Urban Air Mobility