Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “attack modeling”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20
All sourcesNASA NTRSDOE OSTI
DOE OSTI2026

Hydrodynamic Modelling for Tidal Energy Kites: Cooperative Research and Development Final Report, CRADA Number CRD-24-30123

The primary goal of the work is to improve accuracy of hydrodynamic loads acting on the lifting surface of the kite turbine due to complex air-water-lifting body interaction in a low-order numerical model using high-fidelity numerical input. The result of this study will help the Participant better design control algorithms for the kite turbine so that the turbine can harvest more energy while maintaining stability of the platform as well as its reliability. The use of hydrodynamic coefficients/load components from computational fluid dynamic simulation will inform better inputs for a medium-fidelity dynamic model (specifically an OrcaFlex model) which is intended for use in rapid design iterations in the design process.

16 TIDAL AND WAVE POWER↗
DOE OSTI2025

Detecting Living-off-the-land Attacks Using K-means And Graph Convolutional Networks

The code ingests Zeek logs derived from network packet captures and goes through data preprocessing before it gets passed into a K-Means model that labels each device as either a client or server. Graph Convolutional Network (GCN) model is used to obtain the embeddings to represent the features in lower dimension. Last, K-means cluster analysis is used to cluster the embeddings for each class.

Quach, Anna [Idaho National Laboratory (INL), Idah↗
DOE OSTI2020

Multi-class decision system for categorizing industrial asset attack and fault types

According to some embodiments, a plurality of monitoring nodes may each generate a series of current monitoring node values over time that represent a current operation of the industrial asset. A node classifier computer, coupled to the plurality of monitoring nodes, may receive the series of current monitoring node values and generate a set of current feature vectors. The node classifier computer may also access at least one multi-class classifier model having at least one decision boundary. The at least one multi-class classifier model may be executed and the system may transmit a classification result based on the set of current feature vectors and the at least one decision boundary. The classification result may indicate, for example, whether a monitoring node status is normal, attacked, or faulty.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Digital Twin for Self-Security of Smart Inverters

Smart inverters connected to a communication network are susceptible to man-in-the-middle attacks. In this paper, a self-security approach is implemented using the digital twin concept for smart inverters. The digital twin is formed using the inverter’s normal operating region and the inverter’s dynamic model. Then, the incoming setpoints are autonomously examined using the digital twin, and only the safe setpoints are engaged to the inverter’s local controller. This paper demonstrates how the inverter’s normal operating region and dynamic model are formed. In particular, the normal operation region is experimentally verified by changing the P and Q setpoints engaged to the local controller, using a laboratory setup including a three-phase 3-kVA SiC-MOSFET inverter and a 12-kW NHR 9410 regenerative power grid emulator. The results demonstrate that the self-security technique can potentially protect inverters from man-in-the-middle attacks by examining the incoming commands (new setpoints) using the inverter’s digital twin before engaging the setpoints to the local controller.

Hossen, Tareq↗
DOE OSTI2023

Using SWMM for emergency response planning: A case study evaluating biological agent transport under various rainfall scenarios and urban surfaces

To assist in emergency preparedness for a biological agent terrorist attack or accidental pathogen release, potential contaminant levels and migration pathways of spores spread by urban stormwater were evaluated using a Storm Water Management Model (SWMM) of U.S. Coast Guard Base Elizabeth City, North Carolina. The high temporal-spatial resolution SWMM model was built using spore concentrations in stormwater runoff from asphalt, grass, and concrete collected from a point-scale field study. The subsequent modeled contamination scenarios included a notional plume release and point releases mimicking the field study under three rainfall conditions. The rainfall scenarios included a 6-hour natural rainfall event on Dec. 8, 2021 and two design storms (2-year and 100-year events). The observed spore concentrations from asphalt and concrete from the actual field experiment were applied to calibrate the washoff parameters in the SWMM model, using an exponential washoff function. The calibrated washoff coefficient (c 1 ) and exponent (c 2 ) were 0.01 and 1.00 for asphalt, 0.05 and 1.45 for grass, and 2.45 and 1.00 for concrete, respectively. The calibrated SWMM model simulated spore concentrations in runoff at times and magnitudes similar to the field study data. In the point release modeled scenario, the concrete surface generated 55.6% higher average spore concentrations than asphalt. Similarly, in the field experiment, a 175% (p < 0.05) higher average spore concentration in surface runoff was observed from concrete than from asphalt. Here, this study demonstrates how SWMM may be used to evaluate spore washoff from urban surfaces under different precipitation amounts, intensities, and durations, and how visualized spatial migration pathways in stormwater runoff may be used for emergency planning and remediation.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Imaging active site chemistry and protonation states: NMR crystallography of the tryptophan synthase α-aminoacrylate intermediate

NMR-assisted crystallography-the integrated application of solid-state NMR, X-ray crystallography, and first-principles computational chemistry-holds significant promise for mechanistic enzymology: by providing atomic-resolution characterization of stable intermediates in enzyme active sites, including hydrogen atom locations and tautomeric equilibria, NMR crystallography offers insight into both structure and chemical dynamics. Here, this integrated approach is used to characterize the tryptophan synthase α-aminoacrylate intermediate, a defining species for pyridoxal-5'-phosphate-dependent enzymes that catalyze β-elimination and replacement reactions. For this intermediate, NMR-assisted crystallography is able to identify the protonation states of the ionizable sites on the cofactor, substrate, and catalytic side chains as well as the location and orientation of crystallographic waters within the active site. Most notable is the water molecule immediately adjacent to the substrate β-carbon, which serves as a hydrogen bond donor to the ε-amino group of the acid-base catalytic residue βLys87. From this analysis, a detailed three-dimensional picture of structure and reactivity emerges, highlighting the fate of the L-serine hydroxyl leaving group and the reaction pathway back to the preceding transition state. Reaction of the α-aminoacrylate intermediate with benzimidazole, an isostere of the natural substrate indole, shows benzimidazole bound in the active site and poised for, but unable to initiate, the subsequent bond formation step. When modeled into the benzimidazole position, indole is positioned with C3 in contact with the α-aminoacrylate C $\bar{β}$ and aligned for nucleophilic attack. Here, the chemically detailed, three-dimensional structure from NMR-assisted crystallography is key to understanding why benzimidazole does not react, while indole does.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2024

Sulphate resistance of low‐clinker engineered cementitious composites examined by MicroXRF imaging

Abstract Engineered cementitious composites (ECC) are a class of high‐performing fibre‐reinforced cementitious materials recognised for their increased ductility and durability compared to conventional cement‐based materials, owing to their autogenously controlled tight crack widths, even when subjected to high strains. To reduce ECC's environmental impact, this research examines the use of a low‐clinker binder − limestone‐calcined clay cement (LC3) − as an alternative to portland cement (PC), along with fly ash to further reduce the clinker proportion and the embodied CO 2 of the formulations. In conventional concrete, LC3 hydrates to a denser microstructure resulting from the synergistic reaction between limestone and calcined clay. At the lower water contents typical of ECC and with the presence of fly ash, the influence of the binder composition on the microstructure is difficult to anticipate. To examine the influence of these compositional variables on microstructure, permeability and durability, the sulphate resistance of LC3‐based ECC is explored. Specifically, the ECC‐LC3 blends are designed with high clinker replacement rate of 75% by mass of binder and contain either conventional fly ash or reclaimed fly ash at 50% by mass of binder. Expansion of ECC‐LC3 samples subjected to standard sodium sulphate test conditions was measured up to 12 months and the depth of penetration of sulphates into the ECC‐LC3 of varying compositions was quantified using micro‐X‐Ray Fluorescence (microXRF) imaging and modelling. The expansion results show that the ECC‐LC3 formulations performed better than the PC samples and can provide adequate resistance to external sulphate attack, even when reclaimed fly ashes are used in place of the conventional ash. In addition, the shallow penetration of sulphate into these cementitious composites demonstrates the low diffusion coefficients values that were determined using the quantitative data from MicroXRF imaging.

Microscopy↗
DOE OSTI2020

Using new edges for anomaly detection in computer networks

Creation of new edges in a network may be used as an indication of a potential attack on the network. Historical data of a frequency with which nodes in a network create and receive new edges may be analyzed. Baseline models of behavior among the edges in the network may be established based on the analysis of the historical data. A new edge that deviates from a respective baseline model by more than a predetermined threshold during a time window may be detected. The new edge may be flagged as potentially anomalous when the deviation from the respective baseline model is detected. Probabilities for both new and existing edges may be obtained for all edges in a path or other subgraph. The probabilities may then be combined to obtain a score for the path or other subgraph. A threshold may be obtained by calculating an empirical distribution of the scores under historical conditions.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Assessing the Threat: Weaving Cybersecurity into the Building Development Process

Today’s connected lighting systems have the potential to reduce energy consumption and operational costs via the use of the data they collect and share with other building systems (e.g., HVAC, building automation, security). However, many market available products are new to being networked, and when networked components in lighting and other building systems are not sufficiently secured, they present opportunities for criminals to exploit. Further, security vulnerabilities in one system can be used as lateral steppingstones that allow access to other prized assets on the same network. These cybersecurity concerns could deter the adoption and use of connected systems, which then could jeopardize long-term national objectives for reduced energy usage. The workflows described here and presented in more detail in the referenced reports are examples of how these frameworks and tools can be put to practical use during system design and specification.

attack surface, Building development, threat analy↗
DOE OSTI2023

Machine Learning 5G Attack Detection in Programmable Logic

Machine learning-assisted network security may significantly contribute to securing 5G components. However, machine learning network security inference speeds generally require tens to hundreds of milliseconds thereby introducing significant latency in 5G operations. The inference latency can be reduced by deploying the machine learning model to programmable logic in a field programmable gate array (FPGA) at the cost of a small loss in accuracy. In order to quantify this loss, as well as to establish baseline performance inference speeds for programmable logic implementations, this work explores an autoencoder and a ß-variational autoencoder deployed on two different FPGA evaluation boards and compares accuracy and performance against an NVIDIA A100 GPU implementation. A publicly available 5G dataset containing 10 types of attacks along with normal traffic is introduced as part of the evaluation.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Leaky Buddies: Cross-Component Covert Channels on Integrated CPU-GPU Systems

Graphics Processing Units (GPUs) are ubiquitous components used across the range of today’s computing plat- forms, from phones and tablets, through personal computers, to high-end server class platforms. With the increasing importance of graphics and video workloads, recent processors are shipped with GPU devices that are integrated on the same chip. Integrated GPUs share some resources with the CPU and as a result, there is a potential for microarchitectural attacks from the GPU to the CPU or vice versa. We consider the potential for covert channel attacks that arise either from shared microarchitectural components (such as caches) or through shared contention domains (e.g., shared buses). We illustrate these two types of channels by developing two reliable covert channel attacks. The first covert channel uses the shared LLC cache in Intel’s integrated GPU architectures. The second is a contention based channel targeting the ring bus connecting the CPU and GPU to the LLC. This is the first demonstrated microarchitectural attack crossing the component boundary (GPU to CPU or vice versa). Cross-component channels introduce a number of new challenges that we had to overcome since they occur across heterogeneous components that use different computation models and are interconnected using asymmetric memory hierarchies. We also exploit GPU parallelism to increase the bandwidth of the communication, even without relying on a common clock. The LLC based channel achieves a bandwidth of 120 kbps with a low error rate of 2%, while the contention based channel delivers up to 400 kbps with a 0.8% error rate. We also demonstrate a proof- of-concept prime-and-probe side channel attack that probes the full LLC from the GPU.

Cyber secruity, high performance comptuing, Hetero↗
DOE OSTI2025

Automated Programmable Logic Controller Memory Forensics Using RGB Image Analysis and Deep Learning

The introduction of Industry 4.0 and Internet-based technologies has enhanced industrial control system operations but have inadvertently increased their vulnerabilities to cyber attacks. When an industrial control system is compromised, security analysts need to identify the root cause quickly to start the recovery process and develop mitigation strategies. Memory forensics is critical in the incident analysis process to ascertain what occurred. Approaches for analyzing the persistent memory in industrial control devices are limited and almost nonexistent for volatile memory. This chapter proposes an automated methodology for programmable logic controller memory dump analysis using computer vision and deep learning techniques. The methodology converts the sequences of bytes in a programmable logic controller memory dump to red-green-blue pixels and employs a deep learning model that learns the underlying patterns and features of pre-labeled forensic artifacts in images and segments them into distinct regions. The trained model is employed to automatically segment new memory images and identify forensic artifacts. Evaluation of the methodology on a Schneider Electric Modicon M221 programmable logic controller under code injection and code modification attacks demonstrates its ability to detect attack artifacts in memory dumps.

Asmar Awad, Rima [ORNL] (ORCID:0000000233407742)↗
DOE OSTI2021

Hardware-in-the-Loop Testbed for Cyber-Physical Security of Photovoltaic Farms

In the last decades, modem grids with distributed energy resources, such as photovoltaic (PV) farms, are increasingly vulnerable to cyber-attacks that seriously affect the stability and performance of the power system. While cyber-physical security of smart grids is extensively studied, most of the existing work focuses on the grid level and neglects the modeling and features of device-level power electronics converters (PECs). Furthermore, establishing a high-fidelity simulation testbed that can simulate harmonic frequencies of the PV farm is in urgent need. In this paper, a high-fidelity and real-time hardware-in- the-loop testbed is built to simulate the harmonics of power electronics converters for cyber-physical security of PEC-enabled PV farms. Based on this testbed, the impact of typical cyber-attacks and physical faults on the PV converter can be analyzed, thus providing a foundation for cyber-attack detection, root cause diagnosis, and resilient control to mitigate the adverse effects of cyber-attacks.

14 SOLAR ENERGY↗
DOE OSTI2022

Securing against malicious control of circuit breakers in electrical substations

An example method for detecting and mitigating attacks on electric power substations comprises detecting a command to open or close a circuit breaker in the electric power substation. A modified extended substation model for the electric power substation is generated, based on the detected command and based on measurements in substation, where the modified extended substation model is a power flow model for the substation and for one or more directly connected neighboring substations. A power flow analysis is performed, using the modified extended substation model, to generate a predicted voltage for each of a plurality of nodes in the substation and in the one or more directly connected neighboring substations. Each predicted voltage is compared to a corresponding allowable voltage range, and execution of the command is blocked in response to determining that one or more of the voltages is outside the corresponding allowable voltage range.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Detection and Diagnosis of Data Integrity Attacks in Solar Farms Based on Multilayer Long Short-Term Memory Network

Photovoltaic (PV) systems are becoming more vulnerable to cyber threats. In response to this emerging concern, developing cyber-secure power electronics converters has received increased attention from the IEEE Power Electronics Society that recently launched a cyber-physical-security initiative. Here this letter proposes a deep sequence learning based diagnosis solution for data integrity attacks on PV systems in smart grids, including dc–dc and dc–ac converters. The multilayer long short-term memory networks are used to leverage time-series electric waveform data from current and voltage sensors in PV systems. The proposed method has been evaluated in a PV smart grid benchmark model with extensive quantitative analysis. As a comparison, we have evaluated classic data-driven methods, including K-nearest neighbor, decision tree, support vector machine, artificial neural network, and convolutional neural network. Comparison results verify performances of the proposed method for detection and diagnosis of various data integrity attacks on PV systems.

42 ENGINEERING↗
DOE OSTI2022

Validation of Calibrated k–ε Model Parameters for Jet-in-Crossflow

Previous efforts determined a set of calibrated, optimal model parameter values for Reynolds-averaged Navier–Stokes (RANS) simulations of a compressible jet in crossflow (JIC) using a $k–ε$ turbulence model. These parameters were derived by comparing simulation results to particle image velocimetry (PIV) data of a complementary JIC experiment under a limited set of flow conditions. Here, a $k–ε$ model using both nominal and calibrated parameters is validated against PIV data acquired from a much wider variety of JIC cases, including a realistic flight vehicle. The results from the simulations using the calibrated model parameters showed considerable improvements over those using the nominal values, even for cases that were not used in the calibration procedure that defined the optimal parameters. This improvement is demonstrated using a number of quality metrics that test the spatial alignment of the jet core, the magnitudes of multiple flow variables, and the location and strengths of vortices in the counter-rotating vortex cores on the PIV planes. These results suggest that the calibrated parameters have applicability well outside the specific flow case used in defining them and that with the right model parameters, RANS solutions for the JIC can be improved significantly over those obtained from the nominal model.

42 ENGINEERING↗
DOE OSTI2024

Examining Graphite Degradation in Molten Salt Environments: A Chemical, Physical, and Material Analysis

Molten-salt reactors (MSRs) are Generation IV nuclear reactors that use liquid salt as a coolant and/or fuel. In several MSR designs, graphite serves as a moderator and/or reflector. However, due to limited experimental data and operational experience, our understanding of graphite behavior in molten salt environments remains incomplete. This report aims to identify the degradation mechanisms of nuclear graphite in MSRs, detail the mechanisms of each factor, and provide an initial assessment of their impact on the structural integrity of graphite components. This assessment is based on an extensive literature review and insights from subject matter experts. Furthermore, given the limited data, a modeling strategy using existing Grizzly software is proposed for a more thorough analysis where appropriate. Additionally, it presents mitigation strategies where applicable. The report covers physical degradation mechanisms such as infiltration, erosion, and abrasion, as well as chemical degradation mechanisms including fluorination, intercalation, corrosion, and oxidation. Molten salt can infiltrate the porous structure of graphite, leading to several detrimental effects. Entrapment of fissile products within the graphite pores can cause radiation damage and could pose challenges in the handling and disposal of contaminated components. The differential thermal expansion between the infiltrated salt and graphite, along with internal stress from pressurized molten salt and volumetric heating, can compromise the structural integrity of graphite. To mitigate these effects, employing ultra-fine graphite grades and applying sealants and coatings are effective strategies. A computational model based on coupled solid mechanics and heat transfer phenomena could be used to predict the internal stresses using Grizzly software. In pebble-bed MSRs, graphite fuel pebbles can cause abrasion against reactor components due to friction and wear. The severity of wear is influenced by various factors such as temperature, environment, and the presence of lubricants. Tribological studies reveal that higher temperatures and molten salt environments, such as FLiBe, significantly reduce wear rates compared to dry conditions. Additionally, the chemical composition of the salt can further optimize graphite's tribological performance. Long-term wear effects can be modeled by incorporating surface defects into the geometry and predict stresses under thermal and radiation effects using Grizzly software. Chemical degradation of graphite in a molten salt environment can occur through fluorination and intercalation. Fluorination can occur via replacement of hydrogen or oxygen atoms, or at the active sites, but does not cause structural degradation. Intercalation, on the other hand, can lead to exfoliation, where layers of graphite separate and peel away, damaging the graphite. Protective coatings can enhance graphite's resistance to intercalation. Graphite generally exhibits good chemical stability in molten salt environments, though it can corrode under specific conditions, particularly in the presence of impurities or oxidants. Studies have shown that protective coatings, such as plasma-sprayed partially stabilized zirconia (PSZ), can effectively prevent such degradation. Corrosion behavior varies significantly with different graphite grades and coating applications, underscoring the need for detailed studies on uncoated and coated graphite to understand and mitigate corrosion mechanisms in MSRs. Research indicates that the presence of oxidants and impurities can accelerate graphite degradation in molten salts, making it essential to explore acceptable impurity limits. Oxidation is another critical degradation mechanism, leading to weight loss and structural damage due to the formation of CO and CO 2 from the reaction of carbon atoms with oxygen. This process creates new porosity and compromises graphite's integrity. While extensive research on graphite oxidation has been conducted for gas-cooled reactors, studies specific to MSRs are limited. Findings from the coal industry suggest that molten alkali metal salts can significantly accelerate graphite oxidation, a hypothesis worth exploring for fluoride salts in MSRs. Understanding oxidation behavior in MSRs is vital for developing protective measures. The analysis of post-irradiated graphite from the MSRE experiment demonstrated exceptional chemical compatibility with molten fluoride salt, suggesting that the extent of chemical attack on graphite largely depends on the salt's infiltration capability. Therefore, the use of ultra-fine grade graphite could help mitigate chemical degradation effects. Existing oxidation modeling capabilities in Grizzly, which use reaction-diffusion equations to model graphite-air interactions, could be adapted to simulate the chemical degradation effects of graphite in molten salt environments.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2022

Application of Multi-Criteria Decision Analysis Techniques for Informing Select Agent Designation and Decision Making

The Centers for Disease Control and Prevention (CDC) Select Agent Program establishes a list of biological agents and toxins that potentially threaten public health and safety, the procedures governing the possession, utilization, and transfer of those agents, and training requirements for entities working with them. Every 2 years the Program reviews the select agent list, utilizing subject matter expert (SME) assessments to rank the agents. In this study, we explore the applicability of multi-criteria decision analysis (MCDA) techniques and logic tree analysis to support the CDC Select Agent Program biennial review process, applying the approach broadly to include non-select agents to evaluate its generality. We conducted a literature search for over 70 pathogens against 15 criteria for assessing public health and bioterrorism risk and documented the findings for archiving. The most prominent data gaps were found for aerosol stability and human infectious dose by inhalation and ingestion routes. Technical review of published data and associated scoring recommendations by pathogen-specific SMEs was found to be critical for accuracy, particularly for pathogens with very few known cases, or where proxy data (e.g., from animal models or similar organisms) were used to address data gaps. Analysis of results obtained from a two-dimensional plot of weighted scores for difficulty of attack (i.e., exposure and production criteria) vs. consequences of an attack (i.e., consequence and mitigation criteria) provided greater fidelity for understanding agent placement compared to a 1-to-n ranking and was used to define a region in the upper right-hand quadrant for identifying pathogens for consideration as select agents. A sensitivity analysis varied the numerical weights attributed to various properties of the pathogens to identify potential quantitative (x and y) thresholds for classifying select agents. The results indicate while there is some clustering of agent scores to suggest thresholds, there are still pathogens that score close to any threshold, suggesting that thresholding “by eye” may not be sufficient. The sensitivity analysis indicates quantitative thresholds are plausible, and there is good agreement of the analytical results with select agent designations. A second analytical approach that applied the data using a logic tree format to rule out pathogens for consideration as select agents arrived at similar conclusions.

60 APPLIED LIFE SCIENCES↗