Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “attack modeling”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 397 records · Page 22

Laser transit anemometer measurements on a slender cone in the Langley unitary plan wind tunnel

A laser transit anemometer (LTA) system was used to probe the boundary layer on a slender (5 degree half angle) cone model in the Langley unitary plan wind tunnel. The anemometer system utilized a pair of laser beams with a diameter of 40 micrometers spaced 1230 micrometers apart to measure the transit times of ensembles of seeding particles using a cross-correlation technique. From these measurements, boundary layer profiles around the model were constructed and compared with CFD calculations. The measured boundary layer profiles representing the boundary layer velocity normalized to the edge velocity as a function of height above the model surface were collected with the model at zero angle of attack for four different flow conditions, and were collected in a vertical plane that bisected the model's longitudinal center line at a location 635 mm from the tip of the forebody cone. The results indicate an excellent ability of the LTA system to make velocity measurements deep into the boundary layer. However, because of disturbances in the flow field caused by onboard seeding, premature transition occurred implying that upstream seeding is mandatory if model flow field integrity is to be maintained. A description and results of the flow field surveys are presented.

Humphreys, William M., Jr.↗

Boundary Layer Transition on Slender Cones in Conventional and Low Disturbance Mach 6 Wind Tunnels

An experimental investigation was conducted on a 5-degree half-angle cone and a 5-degree half-angle flared cone in a conventional Mach 6 wind tunnel to examine the effects of facility noise on boundary layer transition. The influence of tunnel noise was inferred by comparing transition onset locations determined from the present test to that previously obtained in a Mach 6 low disturbance quiet tunnel. Together, the two sets of experiments are believed to represent the first direct comparison of transition onset between a conventional and a low disturbance wind tunnel using a common test model and transition detection technique. In the present conventional hypersonic tunnel experiment, separate measurements of heat transfer and adiabatic wall temperatures were obtained on the conical models at small angles of attack over a range of Reynolds numbers, which resulted in laminar, transitional, and turbulent flow. Smooth model turbulent heating distributions are compared to that obtained with transition forced via discrete surface roughness. The model nosetip radius was varied to examine the effects of bluntness on transition onset. Despite wall to total temperature differences between the transient heating measurements and the adiabatic wall temperature measurement, the two methods for determining sharp cone transition onset generally yielded equivalent locations. In the 'noisy' mode of the hypersonic low disturbance tunnel, transition onset occurred earlier than that measured in the conventional hypersonic tunnel, suggesting higher levels of freestream acoustic radiation relative to the conventional tunnel. At comparable freestream conditions, the transition onset Reynolds number under low disturbance conditions was a factor of 1.3 greater than that measured on flared cone in the LaRC conventional hypersonic tunnel and a factor of 1.6 greater that the flared cone run in the low disturbance tunnel run 'noisy'. Navier-Stokes mean flow computations and linear stability analysis were conducted to assess the experimental results and have indicated N factors associated with sharp flared cone transition onset to be approximately a factor of 2 lower than that inferred from the corresponding low disturbance tunnel measurements.

Horvath, Thomas J.↗

Low-Speed Investigation of the Static Lateral Stability and Control Characteristics of a 1/6-Scale Model of the Republic XF-84H Airplane with the Propeller Operating

An investigation was made to determine the static lateral stability and control characteristics of a l/6-scale model of the Republic XF-84H airplane with the propeller operating. The model had a 40deg swept wing of aspect ratio 3.45 and had a thin 3-blade supersonic-type propeller. Many modifications to the basic configuration were investigated in attempts to alleviate lateral and directional trim problems which appeared to be associated with propeller slipstream rotation. Although significant benefits were realized with several modifications, none of those tested would be expected to afford satisfactory behavior for all normal flight conditions. A marked left-wing roll-off tendency was indicated at high angles of attack for the basic model configuration. Projection of only the left slat was the most effective remedy found for this problem with the propeller operating. The use of differential wing-flap deflection also appeared to offer a promising means for reducing the roll-off tendency with power on. The large sidewash over the vertical tail, associated with slip- stream rotation, severely restricted the conditions for which directional , trim could be maintained. A small triangular dorsal fin, oriented opposite to the slipstream rotation, was found very effective in reducing the adverse sidewash flow at the tail.

Sleeman, William C., Jr.↗

Trust Model System for the Energy Grid of Things Network Communications

Network communication is crucial in the Energy Grid of Things (EGoT). Without a network connection, the energy grid becomes just a power grid where the energy resources are available to the customer uni-directionally. A mechanism to analyze and optimize the energy usage of the grid can only happen through a medium, a communications network, that enables information exchange between the grid participants and the service provider. Security implementers of EGoT network communication take extraordinary measures to ensure the safety of the energy grid, a critical infrastructure, as well as the safety and privacy of the grid participants. With the dynamic nature of network communication of the EGoT, the information provided by the customer or the service provider can be falsified by a malicious attacker. Therefore, a trust model is necessary to monitor any abnormal activities. This paper describes a distributed trust model system that meets the need of the EGoT. This paper describes methods for evaluating and improving the distributed trust model using standard hypothesis testing metrics such as true positive, false positive, true negative, false negative, equal error rate, and F1 score. Example calculations are shown based on generated sample data.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Results of tests of advanced flexible insulation vortex and flow environments in the North American Aerodynamics Laboratory lowspeed wind tunnel using 0.0405-scale Space Shuttle Orbiter model 16-0 (test OA-309)

An experimental investigation (Test OA-309) was conducted using 0.0405-scale Space Shuttle Orbiter Model 16-0 in the North American Aerodynamics Laboratory 7.75 x 11.00-foot Lowspeed Wind Tunnel. The primary purpose was to locate and study any flow conditions or vortices that might have caused damage to the Advanced Flexible Reusable Surface Insulation (AFRSI) during the Space Transportation System STS-6 mission. A secondary objective was to evaluate vortex generators to be used for Wind Tunnel Test OS-314. Flowfield visualization was obtained by means of smoke, tufts, and oil flow. The test was conducted at Mach numbers between 0.07 and 0.23 and at dynamic pressures between 7 and 35 pounds per square foot. The angle-of-attack range of the model was -5 degrees through 35 degrees at 0 or 2 degrees of sideslip, while roll angle was held constant at zero degrees. The vortex generators were studied at angles of 0, 5, 10, and 15 degrees.

Marshall, B. A.↗

Rotary balance data for a typical single-engine general aviation design for an angle-of-attack range of 8 deg to 90 deg. 2: High-wing model A

Aerodynamic characteristics obtained in a rotational flow environment utilizing a rotary balance located in the Langley spin tunnel are presented in plotted form for a 1/5-scale, single-engine, high-wing, general aviation airplane model. The configurations tested included various tail designs and fuselage shapes. Data are presented without analysis for an angle of attack range of 8 to 90 degrees and clockwise and counter-clockwise rotations covering an Omega b/2 v range from 0 to 0.85.

Mulcay, W.↗

Towards Query-Efficient Black-Box Adversary with Zeroth-Order Natural Gradient Descent

Despite the great achievements of the modern deep neural networks (DNNs), the vulnerability/robustness of state-of-the-art DNNs raises security concerns in many application domains requiring high reliability. Various adversarial attacks are proposed to sabotage the learning performance of DNN models. Among those, the black-box adversarial attack methods have received special attentions owing to their practicality and simplicity. Black-box attacks usually prefer less queries in order to maintain stealthy and low costs. However, most of the current black-box attack methods adopt the first-order gradient descent method, which may come with certain deficiencies such as relatively slow convergence and high sensitivity to hyper-parameter settings. In this paper, we propose a zeroth-order natural gradient descent (ZO-NGD) method to design the adversarial attacks, which incorporates the zeroth-order gradient estimation technique catering to the black-box attack scenario and the second-order natural gradient descent to achieve higher query efficiency. The empirical evaluations on image classification datasets demonstrate that ZO-NGD can obtain significantly lower model query complexities compared with state-of-the-art attack methods.

Zhao, Pu↗

Rotary balance data for a typical single-engine general aviation design for an angle of attack range of 8 deg to 90 deg. 1: Low wing model C

Aerodynamic characteristics obtained in a helical flow environment utilizing a rotary balance located in the Langley spin tunnel are presented in plotted form for a 1/6 scale, single engine, low wing, general aviation model (model C). The configurations tested included the basic airplane and control deflections, wing leading edge and fuselage modification devices, tail designs and airplane components. Data are presented without analysis for an angle of attack range of 8 deg to 90 deg and clockwise and counter clockwise rotations covering an omega b/2v range from 0 to .9.

Mulcay, W. J.↗

Low Subsonic Pressure Distributions on Three Rigid Wings Simulating Paragliders with Varied Canopy Curvature and Leading-Edge Sweep

An investigation has been made in the Langley 7- by 10-foot transonic tunnel to determine the subsonic pressure distribution of three paraglider models through an angle-of-attack range from 0 deg to 74 deg. Three rigid metal models simulated a 45 deg basic flat planform paraglider with leading-edge sweep angles of 61.6 deg, 52.5 deg, and 48.6 deg. These configurations resulted in one-half-circle, one-third-circle, and one-quarter-circle semispan trailing-edge curvature when viewed from downstream. The results of the investigation are presented as curves of chordwise pressure distributions at four spanwise locations.

Fournier, Paul G.↗

Sign-OPT: A Query-Efficient Hard-label Adversarial Attack

We study the most practical problem setup for evaluating adversarial robustness of a machine learning system with limited access: the hard-label black-box attack setting for generating adversarial examples, where limited model queries are allowed and only the decision is provided to a queried data input. Several algorithms have been proposed for this problem but they typically require huge amount (>20,000) of queries for attacking one example. Among them, one of the state-of-the-art approaches (Cheng et al., 2019) showed that hard-label attack can be modeled as an optimization problem where the objective function can be evaluated by binary search with additional model queries, thereby a zeroth order optimization algorithm can be applied. In this paper, we adopt the same optimization formulation but propose to directly estimate the sign of gradient at any direction instead of the gradient itself, which enjoys the benefit of single query. Using this single query oracle for retrieving sign of directional derivative, we develop a novel query-efficient Sign-OPT approach for hard-label black-box attack. We provide a convergence analysis of the new algorithm and conduct experiments on several models on MNIST, CIFAR-10 and ImageNet. We find that Sign-OPT attack consistently requires 5X to 10X fewer queries when compared to the current state-of-the-art approaches, and usually converges to an adversarial example with smaller perturbation.

Cheng, Minhao↗

Characterization of Collection Efficiency of the Common Research Model Midspan Wing Section in the IRT

This paper presents a preliminary study for the characterization of collection efficiency from icing tests conducted in the Icing Research Tunnel at NASA Glenn Research Center. A test method previously developed for measuring the attachment line maximum collection efficiency of a swept NACA 0012 airfoil model at zero angle of attack was applied to the leading-edge region of a 65%-scale version of the Common Research Model midspan wing section. A correlation for the stagnation line maximum collection efficiency as a function of the modified inertia parameter was obtained with LEWICE3D simulations utilizing a discrete number of drop diameters. It was then compared with the collection efficiency measurement data obtained in the IRT. For the experimental collection efficiency, two ice shape digitization procedures were utilized to extract 2-D chord-wise ice shape profiles, i.e., the Maximum Combined Cross Section or MCCS, and the Minimum Combined Cross Section or Min CCS, at selected span-wise locations from the 3-D scanned ice shapes. The preliminary result showed that the rime ice thickness method can be used to characterize the collection efficiency distribution, for conditions free of ice erosion, in the main ice shape region. However, a high-order statistical processing of the ice scan is needed for estimating the mean ice thickness in areas where feathers are prevalent. From the limited comparison of the experimental and LEWICE3D collection efficiency data in the CRM65 MS model leading edge area, it was shown that the attachment line maximum collection efficiency is reasonably estimated by the best curve-fit correlation in the range of modified inertia parameter tested. A tighter alignment control of the iced and cold clean model scans is needed to improve the comparison. Further evaluation of this correlation is recommended to assess its applicability for Common Research Model type swept wing icing scaling analysis.

Ice Scailing↗

Local carbon reserves are insufficient for phloem terpene induction during drought in Pinus edulis in response to bark beetle–associated fungi

Stomatal closure during drought inhibits carbon uptake and may reduce a tree's defensive capacity. Limited carbon availability during drought may increase a tree's mortality risk, particularly if drought constrains trees' capacity to rapidly produce defenses during biotic attack. We parameterized a new model of conifer defense using physiological data on carbon reserves and chemical defenses before and after a simulated bark beetle attack in mature Pinus edulis under experimental drought. Attack was simulated using inoculations with a consistent bluestain fungus (Ophiostoma sp.) of Ips confusus, the main bark beetle colonizing this tree, to induce a defensive response. Trees with more carbon reserves produced more defenses but measured phloem carbon reserves only accounted for c. 23% of the induced defensive response. Our model predicted universal mortality if local reserves alone supported defense production, suggesting substantial remobilization and transport of stored resin or carbon reserves to the inoculation site. Our results show that de novo terpene synthesis represents only a fraction of the total measured phloem terpenes in P. edulis following fungal inoculation. Without direct attribution of phloem terpene concentrations to available carbon, many studies may be overestimating the scale and importance of de novo terpene synthesis in a tree's induced defense response.

59 BASIC BIOLOGICAL SCIENCES↗

Ultra high bypass Nacelle aerodynamics inlet flow-through high angle of attack distortion test

A flow-through inlet test program was conducted to evaluate inlet test methods and determine the impact of the fan on inlet separation when operating at large angles of attack. A total of 16 model configurations of approximately 1/6 scale were tested. A comparison of these flow-through results with powered data indicates the presence of the fan increased separation operation 3 degrees to 4 degrees over the flow through inlet. Rods and screens located at the fan face station, that redistribute the flow, achieved simulation of the powered-fan results for separation angle of attack. Concepts to reduce inlet distortion and increase angle of attack capability were also evaluated. Vortex generators located on the inlet surface increased inlet angle of attack capability up to 2 degrees and reduced inlet distortion in the separated region. Finally, a method of simulating the fan/inlet aerodynamic interaction using blockage sizing method has been defined. With this method, a static blockage device used with a flow-through model will approximate the same inlet onset of separation angle of attack and distortion pattern that would be obtained with an inlet model containing a powered fan.

Larkin, Michael J.↗

Multi-level optimization with the koopman operator for data-driven, domain-aware, and dynamic system security

Cyber-Physical Systems (CPSs) like the power grid are critically important but also increasingly vulnerable; ensuring reliable system operation in the face of disruptions is becoming more and more challenging. Multi-Level Optimization (MLO) is a powerful way to model adversarial interactions, which naturally makes it applicable to studying CPS security. However, MLO typically does not address underlying system dynamics, and incorporating nonlinear dynamics is generally infeasible. In this paper, we show how to combine MLO with the Koopman Operator (KO) to remedy this. The KO maps nonlinear dynamics to a lifted space in which those dynamics are linear, thus making it ideal for use with MLO. Moreover, the structure of the KO also provides convenient ways to incorporate domain knowledge into the data-driven process of learning the KO representation of a given system. Here we then demonstrate the use of MLO-KO on a small example problem taken from the power grid domain, discuss the scalability and computational cost of MLO-KO, and identify future research directions for this work.

42 ENGINEERING↗

Net Load Redistribution Attacks on Nodal Voltage Magnitude Estimation in AC Distribution Networks

A high penetration level of smart devices and communication networks increases the threat of cyber-attacks in the distribution system. In this paper, we model a hidden, coordinated, net load redistribution attack (NLRA) in an AC distribution system. Based on local information of an attack region, the attacker’s goal is to create violations in nodal voltage magnitude estimation. Acting as a system operator equipped with global AC state estimation and bad data detection, we validate the stealthiness of the hidden NLRA in multiple attack cases. Simulation results on a modified PG&E 69-node distribution system show the validity of the proposed NLRA. The influence of NLRA on the distribution system is assessed and the impact of attack regions, attack timing, and system observability is also revealed.

Zhang, Hang↗

XSub: Explanation-Driven Adversarial Attack against Blackbox Classifiers via Feature Substitution

Despite its significant benefits in enhancing the transparency and trustworthiness of artificial intelligence (AI) systems, explainable AI (XAI) can unintentionally provide adversaries with insights into blackbox models, increasing their vulnerability to various attacks. In this paper, we develop a novel explanation-driven adversarial attack against blackbox classifiers based on feature substitution, called XSub. The key idea of XSub is to strategically replace important features (identified via XAI) in the original sample with corresponding important features of a different label, thereby increasing the likelihood of the model misclassifying the perturbed sample. XSub only requires a minimal number of queries and can be easily extended to launch backdoor attacks in case the attacker has access to the model's training data. Our evaluation shows that XSub is not only effective and stealthy but also low-cost, showcasing its feasibility across a wide range of AI applications.

adversarial attack↗

Validating a Dynamic PWR Safety and Security Model?

Nuclear power plants (NPPs) are assessed for safety and security using separate models that cannot capture how an attacker's decisions and a plant's response unfold together in real time, leaving regulators and operators without a complete picture of true plant vulnerability. Traditional probabilistic risk assessment (PRA) methods treat adversarial events as fixed initiators with predetermined outcomes, and are structurally incapable of representing the time-dependent interplay between physical security events, safety system response, and operator mitigative actions. At Idaho National Laboratory (INL), I contributed to the development and validation of Modeling and Analysis for Safety and Security using the Dynamic EMRALD Framework (MASS-DEF). Where static PRA relies on event-tree logic that cannot evolve mid-scenario, MASS-DEF couples a time-dependent dynamic PRA tool EMRALD (Event Modeling Risk Assessment using Linked Diagrams) with attack simulation software, allowing attacker behavior, plant system states, and operator actions to interact across time. My work focused on validating a general Pressurized Water Reactor (PWR) model. I traced model logic against PWR plant to identified errors in logic and confirm accuracy. I then built and tested attack scenarios against a general PWR model to verify that the model produced expected outcomes across all logical pathways. I also contributed a section to a related technical paper applying the same EMRALD platform to radiation dose modeling. Results show that MASS-DEF can quantitatively demonstrate that many plants exceed their regulatory security thresholds. This demonstrated margin provides a technically defensible basis for reducing the number of guards without compromising regulatory compliance. Physical security costs represent roughly 10% of annual operating budgets, making such reductions directly meaningful to INL's mission of sustaining existing commercial NPPs. This internship strengthened my understanding of nuclear systems, probabilistic modeling, and technical writing, and has solidified my pursuit of a career at a national laboratory.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗

CyRRL (Cyber Resilient Reinforcement Learning for grid voltage control) [SWR-24-115]

This codebase contains a multi-agent, actor-critic reinforcement learning implementation for cyber-resilient grid voltage control. It uses a 123-bus OpenDSS system as the environment, with three-phase power flow translating nodal power injections into solved nodal voltages. The reward function penalizes deviations from nominal voltage as well as reactive power dispatch, while encouraging agents to take actions that result in fast convergence to nominal conditions. The codebase models false data injection attacks and includes functionality for training, testing, hyper-parameter tuning, and visualization.

Murphy, Sinnott [National Renewable Energy Laborat↗