Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Advanced Persistent Threat”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Multiple social platforms reveal actionable signals for software vulnerability awareness: A study of GitHub, Twitter and Reddit

Software vulnerabilities are flaws in computer systems that leave users open to attack. In many cases, these vulnerabilities go unnoticed and remain unresolved in codebases. Thus, awareness of software vulnerabilities among the public is crucial to ensure effective cybersecurity practices, the development of high quality software, and ultimately national security. This awareness can be better understood by studying the spread and evolution of software vulnerability discussions in online communities. This work is the first to evaluate and contrast how discussions about software vulnerabilities spread on three social platforms -- Twitter, GitHub, and Reddit. To lay the groundwork, we showcase a novel fundamental framework for measuring information spread that identifies the spread mechanisms and observables across platforms, the units of information, and the groups of measurements that can be applied to focus on a specific phenomena e.g., information cascades. We then analyze and contrast social network topologies for three example social networks and measure the scale and speed of the spread of discussion of specific vulnerabilities to understand how far and how widely they spread, how many users participate in discussions, and the duration of their spread. To demonstrate the awareness of more impactful software vulnerabilities, a subset of our analysis focuses on vulnerabilities targeted during recent major cyber attacks as well as vulnerabilities exploited by advanced persistent threat groups. We discover that usually, vulnerability discussions start on GitHub, before occurring on Twitter and Reddit. While studying how some user-level and content-level characteristics influence vulnerability spread, we observe that Twitter discussions started by users predicted to be humans have larger size, breadth, depth, adoption rate, lifetime, and structural virality compared to those started by users predicted to be bots. On Reddit, we contrast the differences in thread structure that originate from posts with positive, negative and neutral polarity. We find that posts that are positive have larger, deeper and wider discussions compared to negative and neutral posts. We anticipate the results of our analysis to not only increase the understanding of software vulnerability awareness but also inform models for simulating information spread across multiple social environments online.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Center of Excellence for Operational Technology

The Center of Excellence for Operational Technology Traditional Presentation Abstract 2025 National Laboratories Information Technology Summit | Denver, CO Traditional Presentation Session Managing cybersecurity risk in Operational Technology (OT) presents a significant challenge across the Department, and critically, at many of the national laboratories. This includes IT-OT convergence, aging OT systems, cost of updating OT systems, and increased Advanced Persistent Threat efforts against OT including the 16 critical infrastructure sectors as listed in Presidential Policy Directive 21. DoE’s Office of Science and NNSA’s Office of the Chief Information Officer are taking the lead in addressing this challenge to include critical systems, by establishing the Center of Excellence (CoE) for Operational Technology. Championed by NNSA Deputy Chief Information Officer Steven McAndrews and the Office of Science Chief Information Officer Shila Cooch, the CoE for OT was chartered in February 2025 to address the challenges of OT cybersecurity and compliance. The CoE for OT will create partnerships and leverage expertise from across the NNSA National Security Enterprise and DOE Labs, Plants and Sites. The CoE will also collaborate with colleagues in other government agencies, industry partners and academia. The CoE for OT discussion at the National Laboratories Information Technology Summit ’25 will include the genesis of the CoE, stated goals, organizational structure, and the effort to attract OT subject matter experts to join the CoE effort to share knowledge and expertise. The discussion will include opportunities to get involved and contribute to this important effort. This session will be led by CoE for OT Co-Chairs Matt Kwiatkowski, Fermi National Laboratory Chief Information Security Officer, and Steven Weldon, Savannah River National Laboratory Cyber Program Director at the Georgia Cyber Center. The session will be of particular interest to CIOs, CTOs, CISOs, as well as IT and OT practitioners.

Kwiatkowski, Matt [Fermilab]↗
DOE OSTI2015

Dominion. A game exploring information exploitation

FlipIt is a game theoretic framework published in 2012[1] to investigate optimal strategies for managing security resources in response to Advanced Persistent Threats. It is a two-player game wherein a resource is controlled by exactly one player at any time. A player may move at any time to capture the resource, incurring a move cost, and is informed of the last time their opponent has moved only upon completing their move. Thus, moves may be wasted and takeover is considered \stealthy", with regard to the other player. The game is played for an unlimited period of time, and the goal of each player is to maximize the amount of time they are in control of the resource minus their total move cost, normalized by the current length of play. Marten Van Dijk and others[1] provided an analysis of various player strategies and proved optimal results for certain subclasses of players. We extend their work by providing a reformulation of the original game, wherein the optimal player strategies can be solved exactly, rather than only for certain subclasses. We call this reformulation Dominion, and place it within a broader framework of stealthy move games. We de ne Dominion to occur over a nite time scale (from 0 to 1), and give each player a certain number of moves to make within the time frame. Their expected score in this new scenario is the expected amount of time they have control, and the point of the game is to dominate as much of the unit interval as possible. We show how Dominion can be treated as a two player, simultaneous, constant sum, unit square game, where the gradient of the bene t curves for the players are linear and possibly discontinuous. We derive Nash equilibria for a basic version of Dominion, and then further explore the roles of information asymmetry in its variants. We extend these results to FlipIt and other cyber security applications.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Clean Energy Cybersecurity Accelerator Cohort 1: Authentication and Authorization

In the 2023 National Cybersecurity Strategy, the Biden-Harris Administration defines the need for a "defensible, resilient digital ecosystem where it is costlier to attack systems than defend them." The strategy cites the Clean Energy Cybersecurity Accelerator (CECA) as an exemplary effort to bolster the security and resilience of clean energy generation. These efforts help "secure the clean energy grid of the future and [generate] security best practices that extend to other critical infrastructure sectors" and promise broad and far-reaching impacts to bridge the capabilities of private industry and the needs of energy production. Cohort 1 of CECA launched in the fall of 2022 with a focus on solutions that provide strong authentication and authorization for industrial control systems to mitigate attacks on the energy grid. Authentication and authorization verify that the identity (authentication) and permissions (authorization) of a user or device are aligned with their assigned roles. Weaknesses in either can have serious repercussions. To assess the strength of Cohort 1's solutions, CECA devised threat scenarios grounded in historical precedents: the CECA team reviewed exploits from real-world case studies of state-sponsored actors to match the assessment's attack paths and targets. Cohort 1 results provided the energy industry, product vendors, and related agencies valuable insights into the efficacy and applicability of solutions in common system configurations under realistic threat scenarios. The results of the assessment highlight points for interrogation and improvement in subsequent technology iterations. CECA's evaluations are part of an ongoing conversation and collaboration to bolster U.S. cyber resilience against adversaries today and in the future.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

Reinforcement Learning for feedback-enabled cyber resilience

The rapid growth in the number of devices and their connectivity has enlarged the attack surface and made cyber systems more vulnerable. As attackers become increasingly sophisticated and resourceful, mere reliance on traditional cyber protection, such as intrusion detection, firewalls, and encryption, is insufficient to secure the cyber systems. Cyber resilience provides a new security paradigm that complements inadequate protection with resilience mechanisms. A Cyber-Resilient Mechanism (CRM) adapts to the known or zero-day threats and uncertainties in real-time and strategically responds to them to maintain the critical functions of the cyber systems in the event of successful attacks. Feedback architectures play a pivotal role in enabling the online sensing, reasoning, and actuation process of the CRM. Reinforcement Learning (RL) is an important gathering of algorithms that epitomize the feedback architectures for cyber resilience. It allows the CRM to provide dynamic and sequential responses to attacks with limited or without prior knowledge of the environment and the attacker. In this work, we review the literature on RL for cyber resilience and discuss the cyber-resilient defenses against three major types of vulnerabilities, i.e., posture-related, information-related, and human-related vulnerabilities. Here we introduce moving target defense, defensive cyber deception, and assistive human security technologies as three application domains of CRMs to elaborate on their designs. The RL algorithms also have vulnerabilities themselves. We explain the major vulnerabilities of RL and present develop several attack models where the attacker target the information exchanged between the environment and the agent: the rewards, the state observations, and the action commands. We show that the attacker can trick the RL agent into learning a nefarious policy with minimum attacking effort. The paper introduces several defense methods to secure the RL-enabled systems from these attacks. However, there is still a lack of works that focuses on the defensive mechanisms for RL-enabled systems. Last but not least, we discuss the future challenges of RL for cyber security and resilience and emerging applications of RL-based CRMs.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Hypergames and Cyber-Physical Security for Control Systems

The identification of the Stuxnet worm in 2010 provided a highly publicized example of a cyber attack that physically damaged an industrial control system. This raised public awareness about the possibility of similar attacks against other industrial targets—including critical infrastructure. Here, we use hypergames to analyze how strategic perturbations of sensor readings and calibrated parameters can be used to manipulate a system that employs optimal control. Hypergames form an extension of game theory that enables us to model strategic interactions where the players may have significantly different perceptions of the game(s) they are playing. Past work with hypergames has focused on relatively simple interactions consisting of a small set of discrete choices for each player. Here, we apply single-stage hypergames to larger systems with continuous variables. We find that manipulating constraints can be a more effective attacker strategy than manipulating objective function parameters. Moreover, the attacker need not change the underlying system to carry out a successful attack—it may be sufficient to deceive the defender controlling the system. It is possible to scale our approach up to even larger systems, but this will depend on the characteristics of the system in question, and we identify several characteristics that will make those systems amenable to hypergame analysis.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Design and Development of a High Fidelity Cyber-Physical Testbed

In order to ensure that future critical infrastructure systems are resilient to various types of such advanced and persistent threats, it is important to develop and integrate tailored solutions that holistically address cyber-attack detection and mitigation in a timely manner such that adverse system impacts that impact a large population are avoided. Further, it is essential to create environments that allow control, protection and communication to exist within a realistic environment to analyze the effects of adverse conditions and system operating modes. This project aims to establish a high-fidelity testbed environment for modeling and simulating a single microgrid all the way up to a network of microgrids along with baseline controls, protection, and associated cyber communication. This is an important activity because accurately modeling and simulating the various power-electronics-based DERs and loads in a microgrid is critical to adequately capturing their behaviors over a wide range of off-normal conditions, as well as to evaluate the resilience of the system using the developed controls. The work presented in this report focuses on the process of building this high-fidelity testbed and the associated experimentation it enables. The model enables the creation of high-fidelity use cases and associated datasets that have been used extensively within the initiative to study resilience and support novel control development and prototyping. The work heavily leverages existing capability that is part of the high-fidelity cyber-physical system experimentation lab to create a power hardware-in-the-loop setup. The report also details the creation of an automated model building platform that can enable high-fidelity real-time models to be built without much effort allowing existing low-fidelity models to be analyzed in higher fidelity. Lastly, the report also discusses efforts center around scaling to large complex power system models to make the experimentation more effective.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

Decision Tree Based Anomaly Detection for Remedial Action Scheme in Smart Grid using PMU Data

The advanced and persistent cyber threats facing the critical infrastructure such as the smart grid are exponentially rising which require sophisticated defense strategy. Remedial Action Scheme (RAS), also known as Special Protection Scheme (SPS), relies on the interconnected cyber physical system for automated protection which is exposed to the multitude of vulnerabilities. In this paper, we propose an innovative approach to develop an Intelligent Remedial Action Scheme (IRAS) which can detect and distinguish cyber attacks from the physical disturbances in smart grid and later take smart corrective actions as required to minimize the impact on system reliability and economy. Specifically, we have proposed the decision tree based anomaly detection methodology which can distinguish between the normal tripping during power line faults and malicious tripping attack on the physical relays in the context of RAS. The classification model is developed using differential features of voltage and current phasors. Next, as a proof of concept, we have implemented and validated the proposed methodology in cyber physical environment at Iowa State's PowerCyber testbed. Finally, the proposed methodology is tested on modified IEEE 39 bus system in offline and real-time mode. Our experimental results show that the proposed method is efficient in detecting attacks and performing corrective actions within an acceptable time frame.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Analytical Tools to Assess Polymer Biodegradation: A Critical Review and Recommendations

Many petroleum-derived plastic materials are highly recalcitrant and persistent in the environment, posing significant threats to human and ecological receptors due to their accumulation in ecosystems. In recent years, research efforts have focused on advancing biological methods for polymer degradation. Enzymatic depolymerization has emerged as particularly relevant for biobased plastic recycling, potentially scalable for industrial use. Biodegradation involves adsorption to the plastic solid surface, followed by an interfacial reaction, resulting in cleavage of bonds of polymer chains exposed on the surface. Here, widely varying substrate-specific kinetics are observed, with the polymer’s properties possessing a significant impact on the rate of this interfacial catalysis. Thus, there is a critical need for sensitive and accurate characterization of the material surface during and after interfacial depolymerization to fully understand the reaction mechanisms. Here, we provide a critical review of a range of techniques used in the analysis of material surfaces to characterize the chemical, topological, and morphological features relevant to the study of enzymatic biocatalysis, including microscopy techniques, spectroscopic techniques (e.g., X-ray diffraction analysis, Fourier transform infrared attenuated total reflectance spectroscopy, and mass spectrometry detection of analytes associated with degradation). Techniques for evaluation of surface energy and topology in their relevancy for sensitive detection of biological surface modifications are also discussed. In addition, this paper provides an overview of the strengths of these techniques and compares their performance in both sensitivity and throughput, including emerging techniques, which can be useful, particularly for the rapid analysis of the surface properties of polymeric materials in high-throughput screening of candidate biocatalysts. This research serves as a starting point in selecting and applying appropriate methodologies that provide direct evidence to the ongoing biotic degradation of polymeric materials.

Colachis, Matthew↗
DOE OSTI2015

Computational modeling of drug-resistant bacteria. Final report

Initial proposal summary: The evolution of antibiotic-resistant mutants among bacteria (superbugs) is a persistent and growing threat to public health. In many ways, we are engaged in a war with these microorganisms, where the corresponding arms race involves chemical weapons and biological targets. Just as advances in microelectronics, imaging technology and feature recognition software have turned conventional munitions into smart bombs, the long-term objectives of this proposal are to develop highly effective antibiotics using next-generation biomolecular modeling capabilities in tandem with novel subatomic feature detection software. Using model compounds and targets, our design methodology will be validated with correspondingly ultra-high resolution structure-determination methods at premier DOE facilities (single-crystal X-ray diffraction at Argonne National Laboratory, and neutron diffraction at Oak Ridge National Laboratory). The objectives and accomplishments are summarized.

60 APPLIED LIFE SCIENCES↗
NASA NTRSDate not supplied

Engineering the Interface: Advanced Surface Technologies for Lunar Dust Management and Equipment Longevity

Through the Artemis program, NASA intends to develop a sustainable human foothold on the Moon, ultimately paving the way for crewed exploration of Mars. The Moon's hostile environment poses numerous obstacles, including exposure to radiation, temperature extremes, micrometeoroid threats, and particularly the persistent problem of lunar dust. Lunar dust impacts nearly every aspect of surface operations through adhesion and abrasion mechanisms, with contamination from anthropogenic activities (landing, rovers) far outweighing natural phenomena. Multiple adhesion pathways contribute to surface contamination in the lunar environment, including van der Waals forces, electrostatic forces, chemical reaction, and magnetic forces from elemental iron deposits. Sharp asperities from micrometeoroid bombardment and atmospheric absence increase interaction potential and enable mechanical interlocking. Low cohesion between dust particles exacerbates these challenges, as minimal interaction potential between dust and nearby surfaces overcomes particle cohesion, causing contamination. Lunar dust adhesion mitigation technologies can be categorized as either active, requiring external energy, or passive, relying on intrinsic material properties. Ultrasonic and electrodynamic technologies have been developed to the highest technology readiness level for active approaches. Passive strategies primarily focus on surface chemistry and topography modifications. At NASA Langley Research Center, approaches include surface migration agents to reduce surface energy, topographical modification using laser ablation patterning, and tailored surface conductivity to reduce intrinsic adhesion force. Performance has been evaluated using custom-built ultrasonic and centrifuge instruments. Plume-surface interactions from lunar landers can propel micrometer-sized particles at velocities up to 1000 m s-1.8 These particles pose risks to landers, habitats and infrastructure, leading to erosion, degradation, and reduced component lifespan. A panel recovered from Surveyor III was determined to have been severely abraded because of lunar dust displaced from the Apollo 12 lunar module that landed 160 m away. The performance of metallic surfaces has been evaluated via high velocity single particle impact using the laser-induced project impact test (LIPIT) facility at the University of Utah. Peridynamics modeling, a form of continuum mechanics that uses a nonlocal approach enabling greater simulation capabilities of crack initiation and fracture, has also been utilized to gain greater insight into material response during impact events. Lunar dust contamination challenges extend to power generation systems and moving equipment. Cables, rotation stages, and other mechanisms may experience limited range of motion and reduced lifetime due to dust infiltration. NASA Langley Research Center has evaluated traditional aerospace alloys, softgoods, wear resistant ceramics, and several polymer and polymer composite materials. Test methods have included traditional techniques like Taber abrasion testing, as well as designed test configurations developed in the DUSTE (dust, ultraviolet radiation, and space thermal environmental) chamber that reproduce mechanism functions in operational environment. Beyond laboratory experiments, several flight experiments have been conducted. Materials were exposed to the low Earth orbit environment on the Materials International Space Station Experiment (MISSE) and to the lunar surface environment through the Aegis Aerospace Regolith Adherence Characterization (RAC) payload and the Honeybee Robotics PlanetVac payload. Determining lunar dust's impact on surface exploration and habitation requires comprehensive experimental and computational capabilities combined with lessons learned from initial lunar activities. Identifying the greatest environmental challenges and developing mitigation technologies provides the clearest path toward successfully, expeditiously, and efficaciously completing NASA's mission. This presentation will discuss ongoing efforts at NASA Langley Research Center and collaborator contributions to these critical objectives.

Surface Engineering↗
DOE OSTI2026

Agnostic capture of pathogens for the detection and diagnostics of emerging threats

The continued emergence of pathogens, whether novel, re-emerging, or engineered, poses a persistent global biosecurity and public health challenge. Recent outbreaks, including COVID-19, Lassa fever, Marburg virus, mpox, and avian influenza, underscore the urgent need for robust systems that enable rapid surveillance, early diagnosis, and timely countermeasures before widespread human transmission occurs. In this article, we focus on early detection technologies and systematically evaluate current diagnostic and sensing modalities. We highlight sequencing and spectroscopy as two complementary approaches capable of providing broad, agnostic detection and rich biological insight. Our analysis emphasizes that scientific innovation alone is insufficient: effective preparedness also requires improved data curation, integration, and sharing to build AI-ready resources that accelerate future responses. We argue for coordinated advances in both technological capabilities and supporting infrastructure to enable the rapid identification and characterization of emerging pathogens and to fully leverage modern science against evolving infectious threats.

Environmental health↗
DOE OSTI2025

Hurricanes and turbulent floods threaten arsenic-contaminated coastal soils and vulnerable communities

Coastal environments, particularly those adjacent to Superfund sites, are at increased risk of contaminant release during natural disasters, posing serious threats to nearby communities. To investigate this issue, we employed an advanced laboratory flood simulator to impose arsenic-contaminated sediments to turbulent flooding events. We further monitored changes in arsenic collocation and solid-phase speciation using advanced synchrotron radiation-based techniques to understand the impacts of flooding on arsenic mobility. Our results demonstrate that turbulent conditions significantly enhance the resuspension of arsenic-rich sediments, resulting in increased arsenic release into the water. This mobilization is driven by the erosion of the reduced sediments and the redox-mediated transformation and dissolution of Fe and Mn (oxyhydr) oxides, which promote the release of As(III). We found that arsenic speciation on resuspended particles is closely tied to shear stress, with As(V) prevailing at low stress and the more toxic As(III) dominating at higher stress levels. In the post-erosion phase, solid-phase As(III) decreased while dissolved As(III) increased, indicating ongoing desorption. The persistence of multiple arsenic species on resuspended particles marks them as potential long-range transport vectors. Thus, the environmental impact of flooding and sediment resuspension extends beyond the event itself, raising longer-term concerns for arsenic mobility. Our comprehensive geospatial analysis revealed substantial overlap between arsenic-contaminated soils and regions at high risk of flooding and hurricanes across the conterminous United States. This overlap disproportionately impacts economically disadvantaged and marginalized communities. Approximately 40 million Americans reside within 10 kilometers of these high-risk contaminated zones, with nearly 28 million exposed to hurricane threats and around 18 million vulnerable to flooding risks. Alarmingly, over 40% of those affected by hurricanes and 33% of those impacted by flooding belong to underrepresented minority and low-income populations. These findings highlight the urgent need for targeted mitigation strategies to protect public health and address environmental justice concerns.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRSDate not supplied

Method Development for In-situ Detection of Latent Herpesvirus DNA from Saliva using Nanopore Sequencing

Research toward latent herpesvirus reactivation has been intensively addressed through Space Shuttle and International Space Station (ISS) investigations. This work has provided the understanding that persistent reactivation of herpesviruses from asymptomatic crew can be detected through viral shedding in saliva, urine, and blood. Occasionally, viral reactivation from the latency stage can pose a threat to crew health (clinical manifestation) before, during, and after flight missions. Furthermore, previous work detailing correlations with immunity indicate that monitoring viral reactivation could be implemented to assess potential immune dysfunction. While in-flight monitoring is desirable, there is no well-established procedure or method for real-time evaluations, and research to date has relied on postflight, ground-based analysis. The development of portable molecular technologies like the miniPCR™ (miniPCR Bio) thermal cycler and the MinION™ sequencer (Oxford Nanopore Technologies) have confirmed that real-time monitoring is possible in extreme and low resource environments. These devices, combined with simple sample preparation methods, have been used to demonstrate bacterial identification onboard the ISS, as well as rapid viral detection in remote locations on Earth. The work here builds upon previous molecular advancements onboard the ISS toward the development and validation of a spaceflight-compatible method for viral detection from crew samples. Several herpesviruses can be detected in saliva, which provides a non-invasive means to collect samples for monitoring. While the basis for this method lies in previous spaceflight investigations, key points for method optimization include DNA extraction from saliva, viral primer selection, and bioinformatic processes for data analysis. To increase viral yield, numerous DNA extraction methods have been evaluated and will be discussed in detail. For initial development and testing, varicella-zoster virus (VZV) is being targeted though open reading frame 51 and 63 (ORF51, ORF63), as the replication origin-binding protein is highly expressed during latency. Optimization of the thermal cycling parameters has resulted in the ability to test the entire process. The full method has been tested with both viral VZV DNA standards and saliva spiked with varying concentrations of VZV. Viral sequence data were mapped to the reference sequence using minimap2. Prior to mapping, DNA sequencing reads were filtered for length and quality, barcodes were removed, and alignment identity calculated. Following further assessments, statistics were compared across multiple sequencing experiments and are being used to determine the success of the protocols. Forward work will include the incorporation of herpes simplex virus 1 (HSV-1) and Epstein-Barr virus (EBV) primers as well as the validation of results to the terrestrial qPCR standard assay. Upon full validation of the developed method, saliva will be collected from 20 healthy subjects and spiked with viral DNA. These samples will be split and assayed with the MinION and standard qPCR assay.

Hang N Nguyen↗
DOE OSTI2022

We Must Stop Fossil Fuel Emissions to Protect Permafrost Ecosystems

Climate change is an existential threat to the vast global permafrost domain. The diverse human cultures, ecological communities, and biogeochemical cycles of this tenth of the planet depend on the persistence of frozen conditions. The complexity, immensity, and remoteness of permafrost ecosystems make it difficult to grasp how quickly things are changing and what can be done about it. Here, we summarize terrestrial and marine changes in the permafrost domain with an eye toward global policy. While many questions remain, we know that continued fossil fuel burning is incompatible with the continued existence of the permafrost domain as we know it. If we fail to protect permafrost ecosystems, the consequences for human rights, biosphere integrity, and global climate will be severe. The policy implications are clear: the faster we reduce human emissions and draw down atmospheric CO 2 , the more of the permafrost domain we can save. Emissions reduction targets must be strengthened and accompanied by support for local peoples to protect intact ecological communities and natural carbon sinks within the permafrost domain. Some proposed geoengineering interventions such as solar shading, surface albedo modification, and vegetation manipulations are unproven and may exacerbate environmental injustice without providing lasting protection. Conversely, astounding advances in renewable energy have reopened viable pathways to halve human greenhouse gas emissions by 2030 and effectively stop them well before 2050. We call on leaders, corporations, researchers, and citizens everywhere to acknowledge the global importance of the permafrost domain and work towards climate restoration and empowerment of Indigenous and immigrant communities in these regions.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Autonomous System Subversion Tactics: Prototypes and Recommended Countermeasures

One of the fielding requirements for Advanced and Small Modular Reactors (AR/SMR) is the ability to support remote and autonomous operations. Autonomous Control Systems (ACS) are found on platforms such as Autonomous Space Vehicles, Cruise Missiles, and advanced driver-assistance systems. Each of these ACS implementations depends upon a set of decision support subsystems responsible for supporting Autonomous Mission Managers (names vary based upon field and author preferences). These Autonomous Mission Managers receive inputs from system sensors (e.g., LIDAR collection from an automobile travelling down a street; transients from a nuclear reactor), and perform a set of classifications (e.g., Red Traffic Light; Small Pedestrian at 10m; Load Rejection; Single Coolant Pump Trip), and then use these classifications in combination with recommendation algorithms to achieve platform goals (e.g., Stop the Vehicle at the Traffic Light, Avoid the Small Pedestrian; Trip the Reactor to prevent a Safety Event). The design, implementation, and fielding of an ACS capability will alter the cyber-attack surface such that existing risk management plans will need to be updated to include how to protect and defend against data-science and decision-support-system attack classes. These attack classes would include protection of the design and training environments where algorithm selection and testing and training data would be obvious attack vectors. These attack classes would also require an informed set of detection and response procedures to identify anomalous behaviors and document best practices for anomaly assessment and vulnerability mitigation and remediation. Last year we published a Cyber Threat Assessment Methodology for Autonomous and Remote Operations for AR/SMRs along with a companion publication on Cyber Attack and Defense Use Cases. The focus of the methodology was on describing and enumerating ACS processes, components, and functions such that security engineers could: evaluate subversion options against the target; identify threat actor attributes and capabilities derived from each subversion option; and identify security controls and response countermeasures. The Use Cases document offered detailed methodology examples including an assessment of a Military Base SMR, an Autonomous System Decision Loop, and implementation of AR/SMR Machine Learning algorithms. Our proposal at the end of last year was to focus on implementation of subversion prototypes related to the last Use Case area: AR/SMR Machine Learning (ML) Algorithms. We included six attack scenarios in our Use Cases paper: a Poisoning Attack against ML functions implemented using an FPGA; a Trojaning Attack against ML classifiers exploiting the excitability of Nuclear Engineers; a Backdooring Attack against ML Training environments to ensure persistence of an attack vector; a False Positive Evasion Attack against multi-factor Access Control Systems using clever inputs; an Inference Attack against ML models by an Insider with access to the Operational environment; and an Adversarial Reprogramming Attack against a Material Access Control Video Surveillance System. At the beginning of this year these six attack scenarios were provided to our research teams at Georgia Tech and Idaho State University and each team successfully implemented a subversion attack against a ML implementation to include transient misclassifications. While this is a notable outcome from this type of research, this paper offers the reader insight into not only how to structure and execute these types of attacks, but into the thought process behind how the researcher investigated the problem space, performed initial algorithm implementation, and the trial-and-error behind arriving at the successful subversion prototypes. We include in this paper a set of associated Scenarios on how these subversion prototypes could be implemented and an initial set of guidance for AR/SMR architects, Nuclear Regulators, and Cyber Defenders to implement awareness and defense capabilities into their current operational portfolios.

42 ENGINEERING↗
DOE OSTI2024

Gut microbiota carbon and sulfur metabolisms support Salmonella infections

Abstract Salmonella enterica serovar Typhimurium is a pervasive enteric pathogen and ongoing global threat to public health. Ecological studies in the Salmonella impacted gut remain underrepresented in the literature, discounting microbiome mediated interactions that may inform Salmonella physiology during colonization and infection. To understand the microbial ecology of Salmonella remodeling of the gut microbiome, we performed multi-omics on fecal microbial communities from untreated and Salmonella-infected mice. Reconstructed genomes recruited metatranscriptomic and metabolomic data providing a strain-resolved view of the expressed metabolisms of the microbiome during Salmonella infection. These data informed possible Salmonella interactions with members of the gut microbiome that were previously uncharacterized. Salmonella-induced inflammation significantly reduced the diversity of genomes that recruited transcripts in the gut microbiome, yet increased transcript mapping was observed for seven members, among which Luxibacter and Ligilactobacillus transcript read recruitment was most prevalent. Metatranscriptomic insights from Salmonella and other persistent taxa in the inflamed microbiome further expounded the necessity for oxidative tolerance mechanisms to endure the host inflammatory responses to infection. In the inflamed gut lactate was a key metabolite, with microbiota production and consumption reported amongst members with detected transcript recruitment. We also showed that organic sulfur sources could be converted by gut microbiota to yield inorganic sulfur pools that become oxidized in the inflamed gut, resulting in thiosulfate and tetrathionate that support Salmonella respiration. This research advances physiological microbiome insights beyond prior amplicon-based approaches, with the transcriptionally active organismal and metabolic pathways outlined here offering intriguing intervention targets in the Salmonella-infected intestine.

59 BASIC BIOLOGICAL SCIENCES↗