Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Incident Mitigation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

Fatigue Management Strategies for the Stratospheric Observatory for Infrared Astronomy

Operation of the Stratospheric Observatory for Infrared Astronomy entails a great deal of night-time work, with the potential for both acute and chronic sleep loss, as well as circadian rhythm dysynchrony. Such fatigue can result in performance decrements, with an increased risk of operator error. The NASA Dryden Flight Research Center manages this fatigue risk by means of a layered approach, to include: 1) Education and Training 2) Work Schedule Scoring 3) Obtained Sleep Metrics 4) Workplace and Operational Mitigations and 5) Incident or Accident Investigation. Specifically, quantitative estimation of the work schedule score, as well as the obtained sleep metric, allows Supervisors and Managers to better manage the risk of fatigue within the context of mission requirements.

Bendrick, Gregg↗

Uncertainty-Aware and Explainable Human Error Detection in the Operation of Nuclear Power Plants

The timely and accurate identification of incidents, such as human factor error, is important to restore nuclear power plants (NPPs) to a stable state. However, the identification of abnormal operating conditions is difficult because of the existence of multiple scenarios. In addition, to implement mitigation actions rapidly after an incident occurs, operators must accurately identify an incident by monitoring the trends of many variables. The mental burden posed by this can increase human error and cause failure in identifying incidents. Failure to identify incidents directly results in erroneous mitigation measures, which are detrimental to NPPs. In this study, we leverage uncertainty-aware models to identify such errors and thereby increase the chances of mitigating them. We use the data collected from a physical test bed. The goal is to identify both certain and accurate models. For this, the two main aspects of focus in this study are explainable artificial intelligence (XAI) and uncertainty quantification (UQ). While XAI elucidates the decision pathway, UQ evaluates decision reliability. Their integration paints a comprehensive picture, signifying that understanding decisions and their confidence should be interlinked. Thus, in this study we leverage UQ measures (e.g. entropy and mutual information) along with Shapley additive explanations to gain insights into the features contributing to both accuracy and uncertainty in error identification. Furthermore, our results show that uncertainty-aware models combined with XAI tools can explain the artificial intelligence–prescribed decisions, with the potential of better explaining errors for the operators.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Autonomous Assessment and Predictive Capabilities for Low-Altitude Urban Flight Operations

The integration of unmanned aerial vehicles in the national airspace will introduce new vehicle types, technologies, and operational paradigms for which safety must be maintained and hazards mitigated. One approach is to attempt to design for possible hazards and unsafe incidents that can occur at different phases of flight (pre-flight, in-flight, and post-flight) and during ground operations. Another is to mitigate safety incidents by implementing changes to policies, procedures, regulations, and design to cover personnel, equipment, and aircraft during operations. These and other techniques, not described herein, are typically conservative or adhoc in that they reduce the likelihood of risk after safety incidents have occurred. In this work, the goal is to develop a more predictive capability to monitor and mitigate risk and hazards to safety “in-time” enough for decisions to be made. In line with NASA’s Aeronautics Mission Directorate Strategic Thrust 5 [1] (In-Time System-Wide Safety Assurance), the System-Wide Safety (SWS) project under which this work falls, is developing and demonstrating innovative and safety-oriented solutions that enable modernization and aviation transformation. To that effect, this work will detail data-driven efforts on the SWS project to develop a number of safety-critical services for in-time monitoring and mitigation of hazards to low-altitude flight operations. First, hazards to these operations are identified based on previous work by NASA [2,3] and others in the aerospace industry. These hazards include (i) unsafe proximity to other vehicles, property, and people on the ground, (ii) critical system failures such as communication signal/GPS loss, unexpected propulsion system degradation, engine/power failure, and (iii) operational/environmental issues such as severe weather and gusty winds. For these hazards, safety metrics, which can be quantified and assessed are defined, models to monitor and predict them are developed, and flight test data is generated to develop, validate, and test these models, considering the complex interplay of the different hazards that define them [4-6]. In addition, the uncertainty in the non-deterministic effects that cannot be modeled nor predicted and unknown unknowns that arise after design/testing and during operations must be handled in rigorous manner. As a result, for each of the developed safety metrics, their dependencies on one another are characterized and a framework for handling the uncertainties inherent in the modeling, algorithms, and measurements required for prediction is also developed [7]. To that effect, this presentation will describe the safety metrics and services already developed and underway under the System-Wide Safety project that utilize data-driven techniques for the identification of anomalies, precursors, and trends (APTs) to monitor and mitigate hazards to safety, in-time, for urban flight operations in low-altitude airspace.

Okolo, Wendy A.↗

Numerical Analysis of Blast Effects and Mitigation in the Far-Field from Small Explosions

Requirements for explosive safety are often given in terms of a “K-Factor”, correlating incident blast effects with the distance and TNT equivalent weight of an explosion. Traditionally, this is conducted using empirical correlations to experimental measurements (e.g., the Kingery–Bulmash equations). In the far-field, empirical verification of incident overpressure and impulse magnitudes can be difficult; extrapolations from data give expected values at reasonable standoff distances that sometimes are too small to measure on available equipment but are larger than some regulations require. The present paper describes the results of numerical hydrocode analysis to verify the expected incident overpressure and impulse from small hemispherical ground charges of TNT at these relatively large distances. Furthermore, the dynamic effect of incident blast waves on lightweight, modular mitigation barriers is studied to gauge their effectiveness at providing safety standard compliance.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Aerospace Safety Advisory Panel

This report presents the results of the Aerospace Safety Advisory Panel (ASAP) activities during 2002. The format of the report has been modified to capture a long-term perspective. Section II is new and highlights the Panel's view of NASA's safety progress during the year. Section III contains the pivotal safety issues facing NASA in the coming year. Section IV includes the program area findings and recommendations. The Panel has been asked by the Administrator to perform several special studies this year, and the resulting white papers appear in Appendix C. The year has been filled with significant achievements for NASA in both successful Space Shuttle operations and International Space Station (ISS) construction. Throughout the year, safety has been first and foremost in spite of many changes throughout the Agency. The relocation of the Orbiter Major Modifications (OMMs) from California to Kennedy Space Center (KSC) appears very successful. The transition of responsibilities for program management of the Space Shuttle and ISS programs from Johnson Space Center (JSC) to NASA Headquarters went smoothly. The decision to extend the life of the Space Shuttle as the primary NASA vehicle for access to space is viewed by the Panel as a prudent one. With the appropriate investments in safety improvements, in maintenance, in preserving appropriate inventories of spare parts, and in infrastructure, the Space Shuttle can provide safe and reliable support for the ISS for the foreseeable future. Indications of an aging Space Shuttle fleet occurred on more than one occasion this year. Several flaws went undetected in the early prelaunch tests and inspections. In all but one case, the problems were found prior to launch. These incidents were all handled properly and with safety as the guiding principle. Indeed, launches were postponed until the problems were fully understood and mitigating action could be taken. These incidents do, however, indicate the need to analyze the Space Shuttle certification criteria closely. Based on this analysis, NASA can determine the need to receritfy the vehicles and to incorporate more stringent inspections throughout the process to minimize launch schedule impact. A highly skilled and experience workforce will be increasingly important for safe and reliable operations as the Space Shuttle vehicles and infrastructure continue to age.

Source record↗

Long-term trends in urban NO 2 concentrations and associated paediatric asthma incidence: estimates from global datasets

Combustion-related nitrogen dioxide (NO 2 ) air pollution is associated with paediatric asthma incidence. We aimed to estimate global surface NO 2 concentrations consistent with the Global Burden of Disease study for 1990-2019 at a 1 km resolution, and the concentrations and attributable paediatric asthma incidence trends in 13 189 cities from 2000 to 2019. We scaled an existing annual average NO 2 concentration dataset for 2010-12 from a land use regression model (based on 5220 NO 2 monitors in 58 countries and land use variables) to other years using NO 2 column densities from satellite and reanalysis datasets. We applied these concentrations in an epidemiologically derived concentration-response function with population and baseline asthma rates to estimate NO 2 -attributable paediatric asthma incidence. We estimated that 1.85 million (95% uncertainty interval [UI] 0.93-2.80 million) new paediatric asthma cases were attributable to NO 2 globally in 2019, two thirds of which occurred in urban areas (1.22 million cases; 95% UI 0.60-1.8 million). The proportion of paediatric asthma incidence that is attributable to NO 2 in urban areas declined from 19.8% (1.22 million attributable cases of 6.14 million total cases) in 2000 to 16.0% (1.24 million attributable cases of 7.73 million total cases) in 2019. Urban attributable fractions dropped in high-income countries (-41%), Latin America and the Caribbean (-16%), central Europe, eastern Europe, and central Asia (-13%), and southeast Asia, east Asia, and Oceania (-6%), and rose in south Asia (+23%), sub-Saharan Africa (+11%), and north Africa and the Middle East (+5%). The contribution of NO 2 concentrations, paediatric population size, and asthma incidence rates to the change in NO 2 -attributable paediatric asthma incidence differed regionally. Despite improvements in some regions, combustion-related NO 2 pollution continues to be an important contributor to paediatric asthma incidence globally, particularly in cities. Mitigating air pollution should be a crucial element of public health strategies for children.

60 APPLIED LIFE SCIENCES↗

Facility design consideration for continuous mix production of class 1.3 propellant

In November of 1989, NASA awarded the Advanced Solid Rocket Motor (ASRM) contract to Lockheed Missiles and Space Company (LMSC) for production of advanced solid rocket motors using the continuous mix process. Aerojet ASRM division (AAD) was selected as the facility operator and RUST International Corporation provided the engineering, procurement, and construction management services. The continuous mix process mandates that the mix and cast facilities be 'close-coupled' along with the premix facilities, creating unique and challenging requirements for the facility designer. The classical approach to handling energetic materials-division into manageable quantities, segregation, and isolation-was not available due to these process requirements and quantities involved. This paper provides a description of the physical facilities, the continuous mix process, and discusses the monitoring and detection techniques used to mitigate hazards and prevent an incident.

Williamson, K. L.↗

Exercise Design Guidance for Solar Cybersecurity

The intent of this resource is to provide recommendations on how State Energy Offices and Public Utility Commissions might design an energy emergency exercise, drill, or other simulation focused on solar cybersecurity scenarios . Exercise practitioners, planners, or facilitators interested in exploring solar cybersecurity incident response, preparedness, recovery, or mitigation may find this a valuable resource . This is an advanced supplementary resource for persons or entities with prior exercise experience and knowledge . It should not be used as a baseline educational resource for how to conduct and evaluate an exercise . It is based on a set of standard concepts, terms, and procedures that are common among the exercise community . This tool may be referenced in conjunction with the Hypothetical Solar Cyberattack Scenarios and Impacts tool within the CATSS Toolkit

14 SOLAR ENERGY↗

Fabrication processes for effectively transparent contacts

In conventional solar cells with metal contacts, a non-negligible fraction of the incoming solar power is immediately lost either through absorption or reflection upon interaction with the contacts. Effectively transparent contacts (“ETCs”) for solar cells can be referred to as three-dimensional contacts designed to redirect incoming light onto a photoabsorbing surface of a solar cell. In many embodiments, the ETCs have triangular cross-sections. Such ETCs can be placed on a photoabsorbing surface such that at least one of their sides forms an angle with the photoabsorbing surface. In this configuration, the ETCs can redirect incident light onto the photoabsorbing surface, mitigating or eliminating reflection loss compared to conventional solar cells. When constructed in accordance with a number of embodiments of the invention, ETCs can be effectively transparent and highly conductive.

14 SOLAR ENERGY↗

Informing New Concepts for UAS and Autonomous System Safety Management using Disaster Management and First Responder Scenarios

As emerging flight operations become more prevalent and increasingly automated and distributed, the capabilities for managing safety of vehicles and operations will also need to evolve. To address this challenge, the National Academies has envisioned an In-Time Aviation Safety Management System (IASMS) capability for a wide range of aviation operations including current commercial operations as well as new entrants envisioned with advanced air mobility (AAM). The suite of IASMS services, functions, and capabilities (SFCs) would be implemented in a federated approach and would address trends as well as individual operations. Through predictive modeling and data analysis, IASMS is envisioned to identify arising risks so that they can be mitigated, in-time, before a safety incident occurs. IASMS and its requisite set of SFCs must leverage a wide range of information to perform. To better understand these new needs, FSF worked with the aviation and humanitarian communities to develop and validate scenarios that include traditional aviation operations and UAS operations intermingled as they are deployed for disaster management and first responder (DMFR) situations. The three scenarios developed include: • Post Natural disaster response, such as a hurricane, involving multiple parties utilizing traditional aviation and UAS to support rescue operations, surveil damage, and locate survivors needing assistance. • Wildfire fighting in remote locations with traditional aircraft for transport and fire-retardant delivery combined with UAS for surveillance of fire locations as well as to track individual firefighter locations. • Medical Operations and AAM in Urban Environments including passenger-carrying helicopters and AAM vehicles, medical missions (such as transport of radio-pharmaceuticals), and other UAS delivery operations (such as the delivery of defibrillators). Each scenario was developed and validated by representatives with expertise in humanitarian operations, urban and rural emergency response, air traffic management, UAS operations, and traditional flight operations. The scenario definitions address roles and responsibilities of individual actors, the appropriate utilization of UAS, and the actions taken by those actors to appropriately manage risks associated with the mission and environment. The risks to aviation traffic and to people on the ground explored included potential risks arising from incompatibilities in calculating reference altitudes (eg, differing uses of AGL, MSL, barometric, or GPS-derived values), loss of command and control (C2) communications, rapid changes in weather and winds, and physical interference. For each risk, IASMS SFCs were postulated in the context of monitoring services, risk assessment capabilities, and identifying appropriate mitigation strategies. The identified SFC capabilities were envisioned from known services postulated for IASMS and for UTM. For these unique environments, IASMS SFCs are needed to address conditions such as hazardous payloads, micro-climates and urban canyons, and the need to keep uninvolved air traffic out of the area where DMFR operations are being conducted. The second phase of analysis focused on inferring the specific information needs and the SFCs for IASMS, utilizing a structure of 16 information classes to organize requirements. For each of the risks identified in the workshops, it was postulated what data sources would be necessary to monitor critical aspects of the risk (eg, surrounding air traffic, ground population, terrain, etc). to be directly measured as well as data that would be derived, which implies additional SFCs for different actors to understand what information would likely be exchanged between parties. For an IASMS to be effective, additional research is needed to develop the advanced algorithms that can address the increasingly autonomous and complex operations in differing environments and to develop means of identifying unknown risks. Looking at these scenarios highlighted a number of research issues. These include the ability to quickly "cordon off" airspace thru temporary flight restrictions (TFRs) or other means, developing clear definitions to enable automation-based algorithms for prioritizing operations, defining airspace density metrics, standardization of altitude reporting, and establishing a basis for safety data metrics definition and collection. This paper seeks to outline the development of an IASMS in the context of the DMFR scenarios and resulting demonstrations. Utilizing this contextual approach, NASA will generate recommendations for an assured safety framework for AAM operations that enables AAM operations to safely access the NAS.

In Time Aviation Safety Management System↗

Encapsulation of Monolayer 2D Materials Using Kinetic Energy-Controlled Pulsed Laser Deposition

The integration of monolayer (ML) two-dimensional (2D) materials into next-generation microelectronics, optoelectronics, and sensors is hindered by their sensitivity to environmental exposure. Deposition of additional layers for encapsulation or growth on ML 2D materials by versatile but energetic plasma techniques such as pulsed laser deposition (PLD) has not been considered at the monolayer level because of potential damage caused by hyperthermal species with kinetic energies (KEs) exceeding the threshold displacement energy (TDE) of the ML. Here, we describe a general strategy to understand and mitigate damage during PLD by reducing the incident KE of ablated species below the TDE of the 2D monolayer using background gas collisions. Ion flux diagnostics, combined with in situ Raman spectroscopy of monolayer graphene during PLD of amorphous boron nitride (a-BN) as a dielectric encapsulation layer, show that damage is primarily correlated with fast ions that penetrate the background gas in accordance with Beer’s Law and are often overlooked in ICCD imaging due to the dominance of the bright, delayed plasma luminescence. Significantly, if fast ions are eliminated and a ∼2 nm-thick a-BN layer is “soft landed”, the monolayer graphene is effectively protected from damage by high KE species in the boron nitride plasma plume. Deposited a-BN films display a characteristic dielectric constant of 3.6 at 100 kHz and tunable charge injection properties. Our results enable PLD as a viable option for encapsulation and thin film growth onto ML 2D materials, with implications for both fundamental research and device integration.

2D materials↗

An IDEA of What's in the Air

The Automatic Particle Fallout Monitor (APFM) is an automated instrument that assesses real-time particle contamination levels in a facility by directly imaging, sizing, and counting contamination particles. It allows personnel to respond to particle contamination before it becomes a major problem. For NASA, the APFM improves the ability to mitigate, avoid, and explain mission-compromising incidents of contamination occurring during payload processing, launch vehicle ground processing, and potentially, during flight operations. Commercial applications are in semiconductor processing and electronics fabrication, as well as aerospace, aeronautical, and medical industries. The product could also be used to measure the air quality of hotels, apartment complexes, and corporate buildings. IDEA sold and delivered its first four units to the United Space Alliance for the Space Shuttle Program at Kennedy. NASA used the APFM in the Kennedy Space Station Processing Facility to monitor contamination levels during the assembly of International Space Station components.

Source record↗

Monitoring for Flight Path Management: Inputs to Pilot Monitoring Training

The commercial aviation industry world-wide has identified a need for improved pilot monitoring (e.g., ICAO, 2016). More specifically, aviation safety data indicate that failures in pilots' monitoring for flight path management (FPM) have contributed to a range of undesired outcomes: accidents, major upsets, and non-compliance with ATC guidance. The FAA has further stated that these types of FPM failures are likely to worsen with the increasingly complex air traffic control systems and FPM concepts proposed for NextGen (https://www.faa.gov/nextgen/what_is_nextgen/) operations (e.g., see Hah et al., 2017). An important element of this additional complexity will be the introduction of new automation or artificial intelligence that is intended to work with the flight crew but can add additional monitoring burdens. One potential mitigation for this situation is to enhance pilot training for effective monitoring. NASA Ames Research Center was asked to identify and evaluate training approaches that have the potential to enhance pilots' ability to effectively monitor for FPM (with the result of improved awareness). The focus of this work is to identify, develop or validate training guidance to improve pilot monitoring/awareness regarding FPM and mitigate the recent trend of accidents and incidents, especially Loss of Control (LOC) events. The result of this work should be guidance for FAA training and standards organizations—such as the Air Carrier Training Aviation Rulemaking Committee (ACT ARC)—to aid in reducing the risk of incidents and accidents due to inadequate pilot monitoring/awareness.

Feary, Mike↗

Analysis of Pilot Monitoring Skills and a Review of Training Effectiveness

The commercial aviation industry world-wide has identified a need for improved pilot monitoring and awareness (e.g., FAA, 2013, ICAO, 2016). More specifically, aviation safety data indicate that failures in pilots’ flight path management (FPM) monitoring and awareness have contributed to a range of undesired outcomes: accidents, major upsets, and non-compliance with air traffic control (ATC) guidance. The Federal Aviation Administration (FAA) has further stated that these types of FPM failures are likely to worsen with the increasingly complex air traffic control systems and FPM concepts proposed for NextGen (https://www.faa. gov/nextgen/what_is_nextgen/) operations (e.g., see Hah et al., 2017). Adding to this complexity is the introduction of increasingly automated aircraft systems that can increase monitoring burdens. One potential mitigation for this situation is to enhance pilot training for effective monitoring. NASA Ames Research Center was asked to identify and evaluate training approaches that have the potential to enhance pilots’ ability to effectively monitor for FPM (with the result of improved awareness). The focus of this work is to identify, develop or validate training guidance to improve pilot monitoring/awareness regarding FPM and mitigate the recent trend of accidents and incidents, especially loss of control (LOC) events. The result of this work should be input for improved industry standards and FAA guidance to reduce the risk of incidents and accidents due to inadequate pilot monitoring/awareness. This is the first of three reports that were developed for this project.

aviation human factors↗

Advanced Air Mobility and Safety Management Systems

Our current air transportation system has underserved markets, including local, regional, intraregional, and urban transportation of both people and cargo. Recent advances in aviation technology such as small highly-automated vehicles, electric aircraft, and automated air traffic are enabling business opportunities in these markets. Advanced Air Mobility, or AAM, refers to a community effort to overcome the gaps in operational rules, safety analysis, and overall acceptance, so that these new operations will be possible. For full details, please see: https://www.nasa.gov/aam As we think about how we can safely introduce these new operations, fundamental questions about how the structure of Safety Management Systems can be applied to AAM, and how that structure can be used to help us overcome the necessary technical and societal obstacles arise. Two of these questions are: • How do we tailor the requirements and desired level of monitoring and assessment to achieve safety given the breadth of possible operations and the associated risk of those operations? • How do we aid innovation by rapidly evaluating the safety of novel operations without losing associated rigor? We assume that a Safety Management System that enables these future systems will incorporate knowledge of the acceptable level of risk, and will utilize data science to automate the core monitor, assess and mitigate functions that will allow us to respond to risks and hazards in time to prevent safety incidents. In 2018, the National Academies proposed an In-Time Aviation Safety Management System (IASMS) that would advance these goals. (https://www.nap.edu/catalog/24962/in-time-aviation-safety-management-challenges-and-research-for-an) The National Academies made a clear distinction between in-time systems, in which hazards could be identified and risks mitigated in time to prevent incidents, and real-time systems, since many hazards and risks do not need real-time data and analysis to detect and mitigate.

In-Time Aviation Safety Management System↗

Implementation of an ICS Ransomware Testbed: Scenarios, Variants, and Evaluation Methods

Ransomware attacks on Industrial Control Systems (ICS) have emerged as a formidable threat to the United States’ critical infrastructure, eliciting grave concerns regarding national security. In March 2023, the FBI Internet Crime Complaint Center (IC3) unveiled its 2022 Internet Crime Report, highlighting a concerning 870 complaints related to ransomware impacting U.S. critical infrastructure. Of the country's 16 critical infrastructure sectors, 14 encountered at least one ransomware attack. Notably, while the Healthcare and Public Health sector suffered the most, reporting 210 attacks, sectors pivotal to ICS networks and governmental organizations were also targeted: the Defense Industrial Base reported 1 attack, Water and Wastewater Systems 3, Chemical 19, Energy 15, Government Facilities 115, and Critical Manufacturing 157. For instance, a ransomware attack on a major chemical company could jeopardize not only its production but also pose environmental risks should systems controlling hazardous materials be compromised. In 2022, three ransomware variants predominantly targeted U.S. critical infrastructure: HIVE, with 87 attacks; ALPHV/BlackCat, with 114; and LOCKBIT, with 149. Several cyber-attacks, such as the MOVEit data breach in May 2023 and the Colonial Pipeline ransomware attack in May 2021, have been so impactful that they commanded national attention. The DarkSide hacking group's assault on the Colonial Pipeline, initiated on May 6th, 2021, stands as one of the most substantial and publicly acknowledged cyber-attacks against U.S. critical infrastructure. The group exploited an exposed Virtual Private Network (VPN) password, paving the way for initial intrusion and subsequent data theft. A mere day later, DarkSide unleashed a ransomware attack that compromised vital accounting and billing systems, prompting an immediate shutdown of the pipeline to mitigate further ransomware proliferation across its network. This crisis spurred a robust response from the U.S. president and regulators, culminating in a national emergency declaration related to the pipeline shutdown on May 9th, 2021. This incident mirrors the 2017 NotPetya ransomware attack that significantly impacted the shipping giant Maersk, highlighting an urgent need for fortified cybersecurity across various industries. Future incidents, akin to the Colonial Pipeline attack, could potentially be mitigated—or entirely averted—should government agencies and private entities scrutinize system vulnerabilities, exploring various ransomware types and entry points. Proactive measures, such as conducting experiments on VPN accounts or auditing passwords to pinpoint duplicate usage across diverse systems and software, might illuminate feasible entry points and vulnerability zones within an organization's systems.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Automated Programmable Logic Controller Memory Forensics Using RGB Image Analysis and Deep Learning

The introduction of Industry 4.0 and Internet-based technologies has enhanced industrial control system operations but have inadvertently increased their vulnerabilities to cyber attacks. When an industrial control system is compromised, security analysts need to identify the root cause quickly to start the recovery process and develop mitigation strategies. Memory forensics is critical in the incident analysis process to ascertain what occurred. Approaches for analyzing the persistent memory in industrial control devices are limited and almost nonexistent for volatile memory. This chapter proposes an automated methodology for programmable logic controller memory dump analysis using computer vision and deep learning techniques. The methodology converts the sequences of bytes in a programmable logic controller memory dump to red-green-blue pixels and employs a deep learning model that learns the underlying patterns and features of pre-labeled forensic artifacts in images and segments them into distinct regions. The trained model is employed to automatically segment new memory images and identify forensic artifacts. Evaluation of the methodology on a Schneider Electric Modicon M221 programmable logic controller under code injection and code modification attacks demonstrates its ability to detect attack artifacts in memory dumps.

Asmar Awad, Rima [ORNL] (ORCID:0000000233407742)↗

Survey of Methods to Predict Controller Workload for Real-Time Monitoring of Airspace Safety

The Real Time Safety Monitoring (RTSM) approach allows for assessment and prediction of the safety margin in the National Airspace System (NAS) to help preempt incidents and accidents, rather than having to reactively mitigate them. In RTSM, the NAS is modeled using state variables, and safety metrics are defined in terms of these state variables. The safety metrics have been classified as weather-related, airspace-related, and human-related. Many of the formulated human-related safety metrics need an estimate of the controller workload for their computation. However, this computation is not trivial. Hence, in this report, we perform a literature survey to identify the different factors that enable the computation of controller workload and categorize these factors. Next, we describe studies undertaken to determine a minimal set of factors that pro- vide a correct assessment of controller workload. Lastly, we survey approaches for evaluating how well the selected factors correlate with the controllers' subjective assessment of their workload. Based on this survey, we present factors beneficial to computing and predicting controller workload in real time, and discuss the status of data sources necessary for these computations.

National Airspace System↗