SEARCH · Engineering Papers

Results for “Attack surface analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

All sources NASA NTRS DOE OSTI

NASA NTRSDate not supplied

Icing Physics Studies Using the 3D SIDRM Test Article: Aerodynamic and Supercooled Liquid Icing Analysis

In-flight icing is an important safety issue and is a factor that affects aircraft design and performance. Newer regulations are driving a need for improvements in airframe and engine icing simulation capability. Experimental data is required for development of icing physics models and simulation validation. To that end, this paper discusses analyzed data from icing tests conducted with a 3D test article in 2022 at the NASA Icing Research Tunnel. The test article, whose geometry is representative of an inter-compressor duct and strut region of a turbofan engine, has been designed and constructed to study the physics of supercooled water icing and ice crystal icing. The surfaces of the Simulated Inter-compressor Duct Research Model (SIDRM) can be heated to simulate the warm surfaces of the turbofan inter-compressor duct. The test article is instrumented with pressure taps, heaters, heat flux gauges, and thermocouples, while a 3D laser scanner, cameras, and a scale to measure ice mass were utilized to characterize the icing behavior. The aim of these tests was to generate ice accretions on the SIDRM test article under well-characterized supercooled liquid icing and ice crystal icing conditions. This paper discusses measurements related to aerodynamic tests and supercooled liquid icing tests that were conducted. Aerodynamic measurements were analyzed and compared to computational simulations and were found to be in good agreement for the range of airspeeds (50 to 230 knots) and angles of attack (0 to 4°) tested. Various parametric sweeps were conducted during the supercooled liquid icing portion of the test entry (cloud median volumetric diameter ranged from 15 to 90 µm, total air temperature from -3 to -17 °C, angle of attack from 0 to 4°, and accretion time from 5 to 20 min). These sweeps were performed to measure that parameter’s impact on ice accretion size, location, characteristics (such as glaze/rime ice and shedding behavior), and test article surface temperature. Analysis of the test data showed that clouds composed of larger drops, colder air temperatures, smaller angles of attack, and longer spray times were the primary parameters that resulted in accretions with greater ice mass. Test article angle of attack and cloud droplet size influenced the location of ice accretion as these two parameters directly impact collection efficiency. With respect to icing characteristics, total air temperature dictated icing type, and smaller cloud drop size along with warmer air temperatures resulted in greater amounts of ice shedding. Surface temperature increased during ice accretion from the release of latent (fusion) heat, where total air temperature and cloud drop size impacted the amount of surface temperature change. The icing measurements collected during the SIDRM tests will be used to develop and validate 3D computational engine icing tools, such as GlennICE, that predictively assesses the onset and growth of ice. One of the goals of the sponsoring NASA project is to develop simulation models and tools that can assist in the design and certification of engines for flight in icing conditions in a cost‑effective way.

supercooled liquid icing↗

NASA NTRSDate not supplied

Icing Physics Studies Using the 3D SIDRM Test Article: Aerodynamic and Supercooled Liquid Icing Analysis

In-flight icing is an important safety issue and is a factor that affects aircraft design and performance. Newer regulations are driving a need for improvements in airframe and engine icing simulation capability. Experimental data is required for development of icing physics models and simulation validation. To that end, this paper presents the analysis of the supercooled liquid icing data subset from tests conducted in 2022 at the NASA Icing Research Tunnel that studied both supercooled water and ice-crystal icing. The test article that was utilized replicated 3D geometrical features of an inter-compressor duct and strut region of a turbofan engine. The surfaces of the Simulated Inter-compressor Duct Research Model (SIDRM) can be heated to simulate the warm surfaces of the turbofan inter-compressor duct. The test article is instrumented with pressure taps, heaters, heat flux gauges, and thermocouples, while a 3D laser scanner, cameras, and a scale to measure ice mass were utilized to characterize the icing behavior. The aim of these tests was to generate ice accretions on the SIDRM test article under well-characterized supercooled liquid icing and ice crystal icing conditions. This paper discusses measurements related to aerodynamic testing and supercooled liquid icing tests that were conducted. Aerodynamic measurements were analyzed and compared to computational simulations and were found to be in good agreement for the range of airspeeds (50 to 230 knots) and angles of attack (0 to 4°) tested. Various parametric sweeps were conducted during the supercooled liquid icing portion of the test entry (cloud median volumetric diameter ranged from 15 to 90 µm, total air temperature from -3 to -17 °C, angle of attack from 0 to 4°, and accretion time from 5 to 20 min). These sweeps were performed to measure that parameter’s impact on ice accretion size, location (icing extent), characteristics (such as glaze/rime ice and shedding behavior), and test article surface temperature. Analysis of the test data showed that clouds composed of larger drops, colder air temperatures, smaller angles of attack, and longer spray times were the primary parameters that resulted in accretions with greater ice mass. Test article angle of attack and cloud droplet size influenced the location of ice accretion as these two parameters directly impact collection efficiency. With respect to icing characteristics, total air temperature dictated icing type, and smaller cloud drop size along with warmer air temperatures resulted in greater amounts of ice shedding. Surface temperature increased during ice accretion from the release of latent (fusion) heat, where total air temperature and cloud drop size impacted the amount of surface temperature change. The icing measurements collected during the SIDRM tests will be used to develop and validate 3D computational engine icing tools, such as GlennICE, that predictively assesses the onset and growth of ice. One of the goals of the sponsoring NASA project is to develop simulation models and tools that can assist in the design and certification of engines for flight in icing conditions in a cost effective way.

supercooled liquid icing↗

DOE OSTI2024

Deciphering Discrepancies: A Comparative Analysis of Docker Image Security

As the use of microservices continues to grow and become a foundational approach to architecting software solutions, ensuring the security of microservices is paramount. Docker images have emerged as the predominant solution to containerize microservices–and thus, Docker images are becoming a large attack surface. Thus, reducing vulnerabilities in Docker images will reduce microservice cyberattacks. A common way to find vulnerabilities in Docker images employs static analysis tools like Trivy and Grype. However, these tools frequently generate disparate vulnerability reports when analyzing the same Docker image, thus causing uncertainty in tool selection. We collected 927 Docker images, analyzed them with Trivy and Grype, and compared the vulnerabilities reported in each image. Among the 865 images found to have vulnerabilities, Trivy and Grype disagreed on both the number of vulnerabilities and the vulnerability IDs found therein. Since both tools interface with external vulnerability databases, some discrepancies can be attributed to how the tools interface with these external resources. The external vulnerability databases partially overlap and frequently contradict one another, thereby creating challenges for static analysis tool developers and end users alike. This New Ideas and Emerging Results (NIER) study contains new and critical information that practitioners need for selecting and using static analysis tools–given that increases in the use of Docker technologies means increases in the size of the attack surfaces.

Boles, Brittany [Montana State University]↗

DOE OSTI2025

Braxton Marlatt Intern Poster

The Internet of Things (IoT) encompasses a vast network of interconnected devices embedded with software, sensors, and network connectivity, enabling data collection and exchange. While IoT technology revolutionizes various industries, it also introduces significant security challenges. This research focuses on enhancing IoT security through the implementation of Zero Trust Architecture concepts, specifically targeting the Network and Device pillars of the Cybersecurity and Infrastructure Security Agency’s Zero Trust Maturity Model. By generating Codified Attack Surfaces (CAS) using custom Structured Threat Information eXpression bundles, this project aims to provide enhanced visibility into network communications, detect vulnerabilities in device firmware, and improve the overall security posture for IoT devices and networks. The methodology involves defining custom STIX schema and objects, collecting data from intra-IoT traffic, external network traffic, and firmware analysis, and automating the conversion and correlation of this data into STIX bundles. The automated generation of attack surfaces offers comprehensive insights into activity, vulnerabilities, and anomalies within an IoT environment, enabling proactive threat identification and mitigation.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2020

Deconstructing the Nuclear Supply Chain Cyber-Attack Surface

The nuclear supply chain cyber-attack surface is a large, complex network of interconnected stakeholders and activities. The global economy has widened and deepened the supply chain resulting in larger numbers of geographically dispersed locations and increased difficulty ensuring the authenticity and security of digital assets. Although the nuclear industry has made significant strides in securing facilities from cyber-attacks, the supply chain remains vulnerable. This paper provides further details on each of the elements in the Digital I&C System Supply Chain Cyber-Attack Surface, including supply chain lifecycle activities, key stakeholders, touchpoints, and attack types. Deconstructing this attack surface provides insights into supply chain threats, vulnerabilities, and consequences. These insights will lead to improvements in cybersecurity supply chain risk analysis, development of new cybersecurity supply chain processes and tools, and enhancement of overall supply chain resilience.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASA NTRS1979

A modification to linearized theory for prediction of pressure loadings on lifting surfaces at high supersonic Mach numbers and large angles of attack

A new linearized-theory pressure-coefficient formulation was studied. The new formulation is intended to provide more accurate estimates of detailed pressure loadings for improved stability analysis and for analysis of critical structural design conditions. The approach is based on the use of oblique-shock and Prandtl-Meyer expansion relationships for accurate representation of the variation of pressures with surface slopes in two-dimensional flow and linearized-theory perturbation velocities for evaluation of local three-dimensional aerodynamic interference effects. The applicability and limitations of the modification to linearized theory are illustrated through comparisons with experimental pressure distributions for delta wings covering a Mach number range from 1.45 to 4.60 and angles of attack from 0 to 25 degrees.

Carlson, H. W.↗

NASA NTRS1993

Vortex features of F-106B aircraft at subsonic speeds

A NASA Langley Research Center flight-research experiment to study the vortex-flow structure and separated-flow origins over an F-106B aircraft wing is described and subsonic 1 g data from various techniques are presented. Off-surface techniques, such as vapor screen, image enhancement, photogrammetry, and computer graphics are integrated to analyze vortex-flow systems. The spatial location of vortex cores and their tracks over the wing are derived from this analysis as a function of angle of attack and Reynolds number. Multiple vortices are observed and are likely attributed to small surface distortions in the wing leading-edge region. Comparisons of off-surface determined vortex core location and reattachment point approximation from the vapor-screen technique are made with those from the on-surface techniques of static pressure and oil flow and show generally good agreement. Wind-tunnel vortex features showed reasonably good agreement with flight results over the forward part of the wing for angles of attack from 16 to 20 deg.

Lamar, John E.↗

NASA NTRS2005

Analysis of Black Bearing Balls from a Space Shuttle Body Flap Actuator

A significantly deteriorated ball bearing mechanism from a body flap actuator on Space Shuttle OV-103 was disassembled and the balls submitted for analysis in conjunction with Return to Flight activities. The OV-103 balls, referred to as the "black balls", were subjected to X-ray photoelectron spectroscopy (XPS), Fourier transform infrared (FT-IR) and Raman micro spectroscopy, surface profilometry, and optical and electron microscopy. The spectroscopic results in combination with microscopy analysis allowed a determination of the lubricant degradation pathway. The chemical attack mechanism does not adequately explain the unique visual appearance of the black balls. Numerous efforts have unsuccessfully focused on duplication of the phenomena causing this unique surface structure and appearance of the black balls. Further detail will be presented supporting these conclusions along with plausible explanations of the unique black appearance to the balls.

Sovinski, Marjorie F.↗

DOE OSTI2023

Influence of native oxide film on corrosion behavior of additively manufactured stainless steel 316L

The influence of the native oxide film on passive film properties and localized corrosion of additively manufactured SS 316L was studied in 1 wt% HCl by XPS characterization, electrochemical polarization curves, and post-test morphology analysis by SEM. Increased Cr oxidation kinetics was observed in the as-polished sample with the native oxide film resulting in formation of an overall more protective and compact film compared to the cathodically-activated sample. Electrochemical analysis showed that corrosive attack varied between dislocation cell boundaries to cell interiors depending on the initial surface state and polarization conditions. In conclusion, a corrosion mechanism is proposed to explain this variation.

36 MATERIALS SCIENCE↗

NASA NTRS2013

Comparison of Force and Moment Coefficients for the Same Test Article in Multiple Wind Tunnels

This paper compares the results of force and moment measurements made on the same test article and with the same balance in three transonic wind tunnels. Comparisons are made for the same combination of Reynolds number, Mach number, sideslip angle, control surface configuration, and angle of attack range. Between-tunnel force and moment differences are quantified. An analysis of variance was performed at four unique sites in the design space to assess the statistical significance of between-tunnel variation and any interaction with angle of attack. Tunnel to tunnel differences too large to attribute to random error were detected were observed for all forces and moments. In some cases these differences were independent of angle of attack and in other cases they changed with angle of attack.

Deloach, Richard↗

NASA NTRS1989

High speed turboprop aeroacoustic study (single rotation). Volume 1: Model development

A frequency-domain noncompact-source theory for the steady loading and volume-displacement (thickness) noise of high speed propellers has been developed and programmed. Both near field and far field effects have been considered. The code utilizes blade surface pressure distributions obtained from three-dimensional nonlinear aerodynamic flow field analysis programs as input for evaluating the steady loading noise. Simplified mathematical models of the velocity fields induced at the propeller disk by nearby wing and fuselage surfaces and by angle-of-attack operation have been developed to provide estimates of the unsteady loading imposed on the propeller by these potential field type interactions. These unsteady blade loadings have been coupled to a chordwise compact propeller unsteady loading noise model to provide predictions of unsteady loading noise caused by these installation effects. Finally, an analysis to estimate the corrections to be applied to the free-field noise predictions in order to arrive at the measurable fuselage sound pressure levels has been formulated and programmed. This analysis considers the effects of fuselage surface reflection and diffraction together with surface boundary layer refraction. The steady loading and thickness model and the unsteady loading model have been verified using NASA-supplied data for the SR-2 and SR-3 model propfans. In addition, the steady loading and thickness model has been compared with data from the SR-6 model propfan. These theoretical models have been employed in the evaluation of the SR-7 powered Gulfstream aircraft in terms of noise characteristics at representative takeoff, cruise, and approach operating conditions. In all cases, agreement between theory and experiment is encouraging.

Whitfield, C. E.↗

NASA NTRS2006

Anomalistic Disturbance Torques during the Entry Phase of the Mars Exploration Rover Missions: A Telemetry and Mars-Surface Investigation

Shortly after landing on Mars, post-flight analysis of the "Spirit" entry data suggested that the vehicle experienced large, anomalistic oscillations in angle-of-attack starting at about M=6. Similar analysis for "Opportunity " found even larger oscillations starting immediately after maximum dynamic pressure at M=14. Where angles-of-attack of 1-2 degrees were expected from maximum dynamic pressure to drogue deployment, the reconstructions suggested 4 to 9 degrees. The next Mars lander, 2007 Phoenix project, was concerned enough to recommend further exploration of the anomalies. Detailed analysis of "Opportunity" data found significant anomalies in the hypersonic aerodynamic torques. The analysis showed that these torques were essentially fixed in the spinning vehicle. Nearly a year after landing, the "Oportunity" rover took pictures of its aeroshell on the surface, which showed that portions of the aeroshell thermal blanket assembly still remained. This blanket assembly was supposed to burn off very early in the entry. An analysis of the aeroshell photographs led to an estimate of the aerodynamic torques that the remnants could have produced. A comparison of two estimates of the aerodynamic torque perturbations (one extracted from telemetry data and the other from Mars surface photographs) showed exceptional agreement. Trajectory simulations using a simple data derived torque perturbation model provided rigid body motions similar to that observed during the "Opportunity" entry. Therefore, the case of the anomalistic attitude behavior for the "Opportunity" EDL is now considered closed and a suggestion is put forth that a similar event occurred for the "Spirit" entry as well.

Tolson, Robert H.↗

DOE OSTI2020

The Nuclear Digital I&C System Supply Chain Cyber-Attack Surface

The nuclear supply chain attack surface is a large, complex network of interconnected stakeholders and activities. The global economy has widened and deepened the supply chain, resulting in larger numbers of geographically dispersed locations and increased difficulty ensuring the authenticity and security of digital assets. Although the nuclear industry has made significant strides in securing facilities from cyber-attacks, the supply chain remains vulnerable. This paper outlines supply chain threats and vulnerabilities and provides a Digital I&C System Supply Chain Cyber-Attack Surface diagram to illustrate the complexity of securing hardware, firmware, software, and system information throughout the entire supply chain lifecycle. The knowledge presented in this paper provides a foundation to use in cybersecurity supply chain risk analysis and to guide future supply chain research and development efforts leading to enhancement of a nuclear facility’s overall security posture.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

NASA NTRS2021

Pretest Computational Assessment of Boundary Layer Transition in the NASA Juncture Flow Model with an NACA 0015-Based Wing

The first two phases of the NASA Juncture Flow experiment were carried out on a DLR-F6 swept-wing model and were designed to provide “CFD validation-quality” data toward the assessment and improvement of existing CFD turbulence models in predicting onset and extent of three-dimensional separated flow near the wing-juncture trailing-edge region. The next phase of experiments will involve an NACA 0015-based swept wing, as prior risk reduction experiments had indicated that this wing shape resulted in reduced separation near the juncture region than the DLR-F6 wing, thus providing a better option to evaluate the ability of CFD models to predict incipient turbulent separation. The NACA 0015 measurements will also include IR thermography to infer the variation of transition front with respect to an increasing angle of attack. The primary objective of this work is to computationally make a preliminary assessment of the transition front on both surfaces of the NACA 0015 wing at a crank-chord-based Reynolds number of 2.4 x 106 for four different angles of attack, (0°, 2.5°, 5°, and 7.5°) and to determine the dominant mechanisms responsible for transition. This assessment includes both RANS-based transition models from NASA’s OVERFLOW 2.3b flow solver and linear parabolized stability equations (PSE) stability analysis based on the Langley Stability and Transition Analysis code, LASTRAC. Linear PSE results indicate that the upper surface of the wing is dominated by Tollmien- Schlichting (TS) instabilities, and that the laminar flow region shrinks from about 50% chord to a very small region just downstream of the attachment line as the angle of attack is increased from 0° to 7.5°. Consequently, the transition fronts predicted by the Spalart- Allmaras-based amplification factor transport (AFT-2017b) equation model (which accounts for the TS instabilities alone) and the Menter’s shear-stress transport equation (SST2003)- based Langtry-Menter transition model with ability to account for both TS and crossflow effects (LM2015) compare well with those predicted using linear PSE. On the lower surface of the wing, stationary crossflow (CF) instabilities begin to appear on the inboard portion of the wing in addition to the TS-instabilities for the larger angles of attack (5° and 7.5°), further reducing the laminar flow extent within the inboard region. The LM2015 model that accounts for CF effects is able to replicate this trend but appears to predict a slightly earlier transition. The outcome of this effort will inform the experiment and, when the actual experimental data become available, provide further opportunity to assess and improve the various transition models.

CFD modeling↗

NASA NTRS2021

Pretest Computational Assessment of Boundary Layer Transition in the NASA Juncture Flow Model with an NACA 0015-Based Wing

CFD modeling↗

NASA NTRS1990

Unsteady blade surface pressures on a large-scale advanced propeller - Prediction and data

An unsteady three dimensional Euler analysis technique is employed to compute the flowfield of an advanced propeller operating at an angle of attack. The predicted blade pressure waveforms are compared with wind tunnel data at two Mach numbers, 0.5 and 0.2. The inflow angle is three degrees. For an inflow Mach number of 0.5, the predicted pressure response is in fair agreement with data: the predicted phases of the waveforms are in close agreement with data while the magnitudes are underpredicted. At the low Mach number of 0.2 (take-off) the numerical solution shows the formation of a leading edge vortex which is in qualitative agreement with measurements. However, the highly nonlinear pressure response measured on the blade suction surface is not captured in the present inviscid analysis.

Nallasamy, M.↗

NASA NTRS1979

Surface pressure data on a series of conical forebodies at Mach numbers from 1.70 to 4.50 and combined angles of attack and sideslip

Tabulated surface pressure data for a series of forebodies which have analytically defined cross sections and are based on a 20 degs half-angle cone are presented without analysis. Five of the cross sections were ellipses having axis ratios of 3/1, 2/1, 1/1, 1/2, and 1/3. The sixth cross section was defined by a curve having a single lobe. The data generally cover angles of attack from -5 degs to 20 degs at angles of sideslip from 0 degs to 5 degs for Mach numbers of 1.70, 2.50, 3.95, and 4.50 at a constant Reynolds number.

Townsend, J. C.↗

DOE OSTI2022

Cyber Attack Sequences Generation for Electric Power Grid

Security assessment of cyber-physical energy systems (CPESs) such as the electric power grid is a critical operation to maintain availability, reliability, and quality of service in the presence of persistent threats from malicious cyber actors. Existing security assessment approaches such as penetration testing and red teaming rely on subject matter expert experience and forensic cyber analysis of historical events to perform realistic, threat-informed assessments of CPES defense. CPESs have a large attack surface because of the heterogeneity and complexity of underlying topology, devices, measurements, and vulnerabilities. The aforementioned approaches lead to partial coverage of the attack surface with a large set of unknown but possible exploits. There is a need to automate the CPES attack surface discovery and contextualize it for relevant, highly probable, real-world attack scenarios. We propose a methodology and framework to facilitate the discovery of the CPES attack surface. We present a multilayer attack graph with ranked attack sequences to describe CPES failure scenarios. We present a work-in-progress framework that lists key components to automate the attack modeling and sequence generation. We demonstrate the published National Electric Sector Cybersecurity Organization Resource CPES failure scenario to highlight the trustworthiness of generated attack sequences.

Dutta, Ashutosh↗