Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “threat”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 451 records · Page 25
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Cyber Informed Engineering (CIE) Principles Slide Presentation [Slides]

This document describes the concept and application of Cyber-Informed Engineering (CIE), a methodology that integrates cyber threat awareness into all stages of the systems engineering life cycle. It delineates how CIE enhances the security posture of critical infrastructure systems, which are increasingly targeted by sophisticated cyber threats. The exposition proceeds to methodically walk through the twelve foundational principles of CIE, each serving as a strategic guidepost for embedding cybersecurity into the fabric of system design, development, operation, and maintenance. The principles highlight the importance of proactive and comprehensive security measures that span from risk assessment to continuous improvement, ensuring that systems are not only designed with security in mind but are also resilient in the face of evolving cyber threats.

42 ENGINEERING↗
DOE OSTI2024

Physical & Cyber Security Modeling Interfacing Through Dante and ARCADE

Physical security is increasingly facing new threats from cyber attackers, for which there is little research in the way of characterizing this threat. This report discusses the efforts to combine cyber and physical security modeling tools to investigate this novel combinatorial threat space. To accomplish this, the Dante force-on-force modeling and simulation software and the Advanced Reactor Cyber Analysis and Development Environment (ARCADE) were integrated. Dante provides a 3D environment which models the physical world, while ARCADE provides the cyber and control systems world.

42 ENGINEERING↗
DOE OSTI2024

Retrieval Augmented Generation for Robust Cyber Defense

In cybersecurity, the ability to efficiently analyze and respond to vulnerabilities, weaknesses, attack patterns, and threat tactics is critical for effective defense strategies. With the increasing complexity and volume of cybersecurity data, traditional methods of querying and retrieving information are often inadequate. To address this challenge, we implemented Retrieval-Augmented Generation (RAG) systems—CyRAG and GraphCyRAG—that integrate large language models (LLMs) with both structured data from relational databases and knowledge graphs such as Neo4j. CyRAG is designed to handle structured data, focusing on CVE (Common Vulnerabilities and Exposures) and CWE (Common Weakness Enumeration) entities to generate accurate and context-rich responses. In contrast, GraphCyRAG leverages Neo4j knowledge graphs to retrieve interconnected information from CVE, CWE, CAPEC (Common Attack Pattern Enumeration and Classification), and ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) datasets. By utilizing Neo4j’s graph-based framework, GraphCyRAG enables deeper traversal of relationships between vulnerabilities and attack patterns, providing cybersecurity analysts with more comprehensive insights into potential attack vectors and mitigation strategies. Our preliminary results demonstrate that integrating knowledge graphs with RAG significantly enhances both the accuracy and depth of threat analysis, allowing for the retrieval of dynamic, real-time data and the generation of contextually aware responses. This approach helps analysts uncover hidden relationships between cyber entities, predict exploit paths, and prioritize mitigation efforts effectively. The integration of RAG with cybersecurity knowledge graphs represents a significant advancement in cybersecurity threat intelligence, enabling more informed decision-making and stronger defense strategies.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Assessment of Physical Security Modeling and Simulation in the Vulnerability Assessment Process

This report provides a comprehensive assessment of physical security modeling and simulation tools available for use in the vulnerability assessment (VA) process for nuclear facilities. It outlines the historical evolution of VA methodologies, emphasizing the transition from traditional layer-based approaches to a more holistic framework that integrates detection probabilities directly into combat simulations. The document details the critical components of the VA process, including the characterization of targets, threats, and protective measures, as well as the development of adversary scenarios that reflect both insider and outsider threats. It highlights the importance of performance assurance programs, emphasizing the need for continuous evaluation and testing of security systems to ensure their effectiveness against evolving threats. Additionally, the report discusses the significance of utilizing accredited modeling and simulation tools in accredited areas to accurately represent adversary actions and the corresponding responses of protective forces. By establishing a systematic approach to VA, this document aims to enhance the overall security posture of nuclear facilities, ensuring compliance with regulatory standards while effectively mitigating risks associated with potential adversarial actions.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2024

A Real-Time Testbed for Smart Inverter Cyber Security Studies

Distributed energy resources (DER) have become a popular solution to modern-day issues surrounding the efficiency and reliability of power generation, as well as climate change concerns. Energy centers are shifting towards incorporating smart inverters with embedded functionalities such as high voltage ride through (HVRT), low voltage ride through (LVRT), active and reactive power compensation. However, the integration of smart inverters leave DER systems highly vulnerable to cybersecurity threats. The distributed network protocol 3 (DNP3) is a common method of communication between grid-tied hardware. Despite its popularity, the level of security leaves all hardware connected to the grid at risk of severe cyber-attacks. Thus, it is important to study any potential cybersecurity threats towards grid-tied smart inverters to mitigate cybersecurity vulnerabilities and refine existing cyber-security protections. This report describes the proposed testbed design to study cybersecurity threats to smart inverters. The testbed utilizes a real-time simulation case in RSCAD that includes a grid-tied wind turbine (WT) topology featuring two back-to-back two-level voltage source converters (BTB,2L-VSCs) and a permanent magnet synchronous machine (PMSM). The simulated case runs within the NovaCor real time digital simulator (RTDS). This report focuses on the design and implementation of a single module of the GTNETx2 card as a distributed network protocol and the configuration of an IEEE 1518 DNP database file that includes input and output variables mapped to different connection points in the grid that transmit and receive discrete, analog, and binary signals on command. This allows realistic emulation of the communication between the smart inverter and the grid for cybersecurity studies.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Financial Analysis of the Smallmouth Bass Flows implemented at the Glen Canyon Dam during Water Year 2024

The Glen Canyon Dam (GCD) is a Colorado River Storage Project (CRSP) power resource that is a component of the Salt Lake City Area Integrated Projects (SLCA/IP). The 2016 record of decision (ROD) for the GCD long-term experimental and management plan (LTEMP) final Environmental Impact Statement (EIS) specifies criteria for GCD monthly water releases, daily and hourly operating limits, and experimental releases. This report presents a financial analysis of the Smallmouth bass (Micropterus dolomieu) (SMB) flows implemented at GCD during Water Year (WY) 2024. These bypass flows were introduced by the U.S. Bureau of Reclamation (USBR) as an emergency response to the growing threat posed by invasive SMB in the Colorado River ecosystem downstream of the dam. SMB are a non-native predatory species that pose a significant threat to native fish populations, including the endangered humpback chub (Gila cypha). The thermal regime below GCD, typically cold due to hypolimnetic releases from Lake Powell, has historically served as a thermal barrier limiting SMB establishment. However, persistently low reservoir levels in recent years have reduced stratification in Lake Powell, allowing warmer water to be released downstream. This has enabled SMB to spawn successfully below the dam, prompting urgent ecological concerns. To mitigate the risk of SMB proliferation, the USBR implemented a series of bypass flows in WY 2024. Drawn from a lower elevation than the penstocks, the bypass structures released cooler water downstream. These short-duration bypass flows aimed to keep temperatures cool enough to prevent SMB from spawning, thereby reducing the ecological threat posed by this invasive species. Although motivated by ecological objectives, these bypass flows came with financial tradeoffs. Releasing water through the bypass structures instead of the turbines at GCD reduced hydropower generation, resulting in a significantly lower financial position for Western Area Power Administration (WAPA), which is responsible for marketing the electricity produced by the GCD Powerplant. This report analyzes the financial impact of the SMB flows implemented from July to November 2024. These experimental releases led to an estimated financial cost of approximately $18.9 million, primarily driven by the substantial volume of water diverted through the bypass structures. This study applies an integrated set of tools to estimate WAPA financial impacts by simulating GCD under two types of cases; namely, (1) a “With Experiment” case that mimics the water operations that actually occurred, including the SMB bypass flows, and (2) a “Without Experiment” case that simulates operations under the assumption that the SMB flows did not occur. Both cases comply with LTEMP hourly and daily operating criteria, and the monthly water release volumes are assumed to be identical under both cases. The Colorado River Storage Project Python-based model (CRiSPPy) model was the main modeling tool used to simulate the dispatch of the GCD hydropower plant and associated water releases from Lake Powell. In the modeling process, the research team used extensive data sets and historical information on SLCA/IP power plant characteristics, hydrologic conditions, and WAPA’s power purchases and sales prices.

13 HYDRO ENERGY↗
DOE OSTI2025

Cyber-Physical Tabletop Exercise for Small Modular Reactor Facilities

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping costs reasonable to make nuclear energy competitive. This evolving threat landscape includes adversaries having offensive cyber capabilities to attack information technology (IT) systems and operation technology (OT) systems. These adversaries may have the ability to attack the physical protection system (PPS) networks with potential consequential impacts that could degrade the effectiveness of the PPS. These cyber attacks may also be used to attack the safety and operational systems used to operate and ensure the safety of the reactor. Additionally, adversaries may gain access to unmanned aerial systems (UAS) that may be used to provide reconnaissance and surveillance of the facility, provide information to the adversaries, and be equipped with kinetic capabilities such as explosives or weapons that can be used to directly attack the facility. The Department of Energy’s Office of Nuclear Energy’s Advanced Reactor Safeguards and Security (ARSS) program funded Sandia National Laboratories (SNL) and Idaho National Laboratory (INL) to develop a cyber-physical tabletop exercise (TTX). This exercise was conducted on a hypothetical small modular reactor (SMR) facility, and only considered a potential adversary cyber attack on the PPS to a physical attack on the hypothetical facility to achieve a radiological release. This cyber-physical TTX is meant to provide lessons learned to integrate the cyber security system design and the physical protection system (PPS) design to decrease design, operation, and maintenance costs as well as increase effectiveness for defending against design basis threat attacks at the facility. This TTX will also provide a framework and method for SMR and microreactor vendors to conduct their own cyber-physical TTX and gain impactful insights to improving the cyber and physical protection system design for their SMR or microreactor facility design.

42 ENGINEERING↗
DOE OSTI2025

Cyber Conservative Operations

In an era of increasingly sophisticated and pervasive cyber threats, robust cyber resilience strategies are more critical than ever. This paper introduces the concept of Cyber Conservative Operations, a proactive approach designed to assist critical infrastructure owners and operators in managing risk and maintaining resilience in the face of imminent, yet not occurring, cyber events. By leveraging the principles of Cyber-Informed Engineering (CIE) and the energy sector’s practice of conservative operations, Cyber Conservative Operations offer a framework for planning and executing coordinated active defense and resilience-oriented actions ahead of cyber events. This approach aims to minimize the consequences of digitally-enabled hazards and ensure swift recovery from anticipated cyber threats. Cyber Conservative Operations enhance the ability of owners and operators to execute pre-planned defense and resilience actions, thereby reducing the impact of digitally-enabled hazards. These operations are crucial for addressing impacts that cannot be precisely quantified or forecasted and for preparing organizations for rapid recovery from imminent digital threats. The paper begins with a discussion of conservative operations as applied to the bulk power system (BPS), a current mechanism allowing BPS entities to enact defensive operating plans to mitigate impending grid unreliability. Building on this model, we present a concept for implementing cyber conservative operations at asset owner facilities. The paper concludes with two case studies of cyber conservative operations drawn from high-profile cyber events, illustrating the practical application and benefits of this proactive approach.

42 - ENGINEERING↗
DOE OSTI2024

Trust-Based Detection and Mitigation of Cyber Attacks in Distributed Cooperative Control of Islanded AC Microgrids

In this study, we address the challenge of detecting and mitigating cyber attacks in the distributed cooperative control of islanded AC microgrids, with a particular focus on detecting False Data Injection Attacks (FDIAs), a significant threat to the Smart Grid (SG). The SG integrates traditional power systems with communication networks, creating a complex system with numerous vulnerable links, making it a prime target for cyber attacks. These attacks can lead to the disclosure of private data, control network failures, and even blackouts. Unlike machine learning-based approaches that require extensive datasets and mathematical models dependent on accurate system modeling, our method is free from such dependencies. To enhance the microgrid’s resilience against these threats, we propose a resilient control algorithm by introducing a novel trustworthiness parameter into the traditional cooperative control algorithm. Our method evaluates the trustworthiness of distributed energy resources (DERs) based on their voltage measurements and exchanged information, using Kullback-Leibler (KL) divergence to dynamically adjust control actions. We validated our approach through simulations on both the IEEE-34 bus feeder system with eight DERs and a larger microgrid with twenty-two DERs. The results demonstrated a detection accuracy of around 100%, with millisecond range mitigation time, ensuring rapid system recovery. Additionally, our method improved system stability by up to almost 100% under attack scenarios, showcasing its effectiveness in promptly detecting attacks and maintaining system resilience. These findings highlight the potential of our approach to enhance the security and stability of microgrid systems in the face of cyber threats.

Computer Science↗
NASA NTRS1974

ASTP simulated lightning test report

A simulated lightning test was conducted on the backup spacecraft for the Apollo Soyuz Test Project mission (CSM-119) to determine the susceptibility of the Apollo spacecraft to damage from the indirect effects of lightning. It is demonstrated that induced lightning effects from low-level injected currents can be scaled linearly to those which are obtained in a full threat lightning stroke. Test results indicate that: (1) many of the power and signal critical circuits would fail if subjected to full-threat lightning, (2) pyrotechnic circuits are safe for full-threat lightning, and (3) common-mode voltages exceeded the failure criteria level for all but three of the circuits tested.

Blount, R. L.↗
NASA NTRS1983

Space-station crew-safety requirements

Baseline rescue and survival concepts for future space station crews are described. Preliminary studies are being carried out to identify potential threats to crew safety and means to counteract the dangers. Significant factors being considered include the type of threat, the warning time, the number of crewmembers, strategies for protection of the crew (including life-support measures redundancy), and the dependence of space station crews on ground personnel. Attention is being given to the impact of safety devices on the space station geometry and cost, as well as the equipment necessary to maintain the crew in a psychological status positive enough to cope with emergencies. Typical threats would be fire, crewmember illness or injury, and abandonment of the station. A Shuttle launch could take up to 12 days, while equipping the space station with an emergency return capsule would permit return on the same day as the capsule was occupied.

Witcofski, R. D.↗
NASA NTRS1987

Space station integrated wall design and penetration damage control

A methodology was developed to allow a designer to optimize the pressure wall, insulation, and meteoroid/debris shield system of a manned spacecraft for a given spacecraft configuration and threat environment. The threat environment consists of meteoroids and orbital debris, as specified for an arbitrary orbit and expected lifetime. An overall probability of no penetration is calculated, as well as contours of equal threat that take into account spacecraft geometry and orientation. Techniques, tools, and procedures for repairing an impacted and penetrated pressure wall were developed and tested. These techniques are applied from the spacecraft interior and account for the possibility of performing the repair in a vacuum. Hypervelocity impact testing was conducted to: (1) develop and refine appropriate penetration functions, and (2) determine the internal effects of a penetration on personnel and equipment.

Coronado, A. R.↗
NASA NTRS1993

Integrated risk management

The purpose of this report is to first present a basis or foundation for the building of an integrated risk management plan and them to present the plan. The integration referred to is across both the temporal and the hierarchical dimensions. Complexity, consequence, and credibility seem to be driving the need for the consideration of risk. Reduction of personal bias and reproducibility of the decision making process seem to be driving the consideration of a formal risk plan. While risk can be used as either a selection tool or a control tool, this paper concentrates on the selection usage. Risk relies on stated purpose. The tightness of the definition of purpose and success is directly reflected in the definition and control of risk. Much of a risk management plan could be designed by the answers to the questions of why, what, who, when, and where. However, any plan must provide the following information about a threat or risk: likelihood, consequence, predictability, reliability, and reproducibility. While the environment at NASA is seen as warm, but not hot, for the introduction of a risk program, some encouragement is seen if the following problems are addressed: no champion, no commitment of resource, confused definitions, lack of direction and focus, a hard sell, NASA culture, many choices of assessment methods, and cost. The plan is designed to follow the normal method of doing work and is structured to follow either the work break down structure or a functional structure very well. The parts of the plan include: defining purpose and success, initial threat assessment, initial risk assessment, reconciling threats and parameters, putting part of the information down and factoring the information back into the decision process as it comes back up, and developing inferences. Two major suggestions are presented. One is to build an office of risk management to be used as a resource by managers in doing the risk process. Another is to form a pilot program to try out the details in the plan and modify the method where needed.

Hunsucker, J. L.↗
NASA NTRS1995

Consistent approach to describing aircraft HIRF protection

The high intensity radiated fields (HIRF) certification process as currently implemented is comprised of an inconsistent combination of factors that tend to emphasize worst case scenarios in assessing commercial airplane certification requirements. By examining these factors which include the process definition, the external HIRF environment, the aircraft coupling and corresponding internal fields, and methods of measuring equipment susceptibilities, activities leading to an approach to appraising airplane vulnerability to HIRF are proposed. This approach utilizes technically based criteria to evaluate the nature of the threat, including the probability of encountering the external HIRF environment. No single test or analytic method comprehensively addresses the full HIRF threat frequency spectrum. Additional tools such as statistical methods must be adopted to arrive at more realistic requirements to reflect commercial aircraft vulnerability to the HIRF threat. Test and analytic data are provided to support the conclusions of this report. This work was performed under NASA contract NAS1-19360, Task 52.

Rimbey, P. R.↗
NASA NTRS1994

Long-range consequences of interplanetary collisions

As Comet Shoemaker-Levy 9 races toward its mid-July collision with the planet Jupiter, considerable public attention is focused on catastrophic impacts with the Earth -- in the past and in the future. In recent years calls have been made to develop technologies that could deflect any asteroid or comet on a collision course. Careful consideration must be given to the nature and time scale of the risk and to the cost-effectiveness and possible problems in the suggested solutions. Risk assessment, threat removal, and resources misuse are examined. The greatest concern is to have a poorly informed public -- exerting pressure for means to mitigate even non-existent threats. The only foreseeable solution is a combination of accurate orbit estimation, realistic threat assessment, and effective public education.

Sagan, Carl↗
NASA NTRS1996

Ra: The Sun for Science and Humanity

To guide the development of the Ra Strategic Framework, we defined scientific and applications objectives. For our primary areas of scientific interest, we choose the corona, the solar wind, the Sun's effect on the Earth, and solar theory and model development. For secondary areas of scientific interest, we selected sunspots, the solar constant, the Sun's gravitational field, helioseismology and the galactic cosmic rays. We stress the importance of stereoscopic imaging, observations at high spatial, spectral, and temporal resolutions, as well as of long duration measurements. Further exploration of the Sun's polar regions is also important, as shown already by the Ulysses mission. From an applications perspective, we adopted three broad objectives that would derive complementary inputs for the Strategic Framework. These were to identify and investigate: possible application spin-offs from science missions, possible solar-terrestrial missions dedicated to a particular application, and possible future applications that require technology development. The Sun can be viewed as both a source of resources and of threats. Our principal applications focus was that of threat mitigation, by examining ways to improve solar threat monitoring and early warning systems. We compared these objectives to the mission objectives of past, current, and planned international solar missions. Past missions (1962-1980) seem to have been focused on improvement of scientific knowledge, using multiple instrument spacecraft. A ten year gap followed this period, during which the results from previous missions were analyzed and solar study programmes were prepared in international organizations. Current missions (1990-1996) focus on particular topics such as the corona, solar flares, and coronal mass ejections. In planned missions, Sun/Earth interactions and environmental effects of solar activity are becoming more important. The corona is the centre of interest of almost all planned missions. It seems that no international long-term strategy has yet been adopted. For these plans the number of necessary future missions can be reduced and the onboard instrumentation can be optimized by performing a comparative analysis. The study of the corona must be done from different observing locations, orbits closer to the Sun, and by different means. The Cluster mission replacement is in progress; however, if the replacement is not implemented, the ISTP programme will fade after 1998. Furthermore, the physics of the Sun's interior should be emphasized more in the Mid- and Far-Term programmes. Finally, more emphasis should be placed on monitoring space weather and forecasting Sun/Earth interactions.

Source record↗
NASA NTRS1999

Studies of Florida Thunderstorms Using LDAR, LLP, and Single Doppler Radar Data

The paper summarizes results from research conducted on thunderstorms in the vicinity of the Kennedy Space Center (KSC) Florida, between 1993 and 1998. The focus of the research was to identify procedures that would assist weather forecasters at the Cape Canaveral Air Station (CCAS) in real-time detection and forecasting of the lightning threat to launches and daily ground operations at KSC/CCAS sites. The research was divided into three topics: (1) studies aimed at improving the forecasting of the initial cloud-ground (CG) lightning threat, (2) studies aimed at improving the forecasting of the end-of-storm termination of the CG lightning threat, and (3) studies of the location of CG strikes relative to the thunderstorm radar echo and to lightning discharges aloft. Only the first two topics are covered in this preprint.

Forbes, Gregory S.↗
NASA NTRS2000

Martian Neutron Energy Spectrometer (MANES)

High energy charged particles of extragalactic, galactic, and solar origin collide with spacecraft structures and planetary atmospheres. These primaries create a number of secondary particles inside the structures or on the surfaces of planets to produce a significant radiation environment. This radiation is a threat to long term inhabitants and travelers for interplanetary missions and produces an increased risk of carcinogenesis, central nervous system (CNS) and DNA damage. Charged particles are readily detected; but, neutrons, being electrically neutral, are much more difficult to monitor. These secondary neutrons are reported to contribute 30-60% of the dose equivalent in the Shuttle and MIR station. The Martian atmosphere has an areal density of 37 g/sq cm primarily of carbon dioxide molecules. This shallow atmosphere presents fewer mean free paths to the bombarding cosmic rays and solar particles. The secondary neutrons present at the surface of Mars will have undergone fewer generations of collisions and have higher energies than at sea level on Earth. Albedo neutrons produced by collisions with the Martian surface material will also contribute to the radiation environment. The increased threat of radiation damage to humans on Mars occurs when neutrons of higher mean energy traverse the thin, dry Martian atmosphere and encounter water in the astronaut's body. Water, being hydrogeneous, efficiently moderates the high energy neutrons thereby slowing them as they penetrate deeply into the body. Consequently, greater radiation doses can be deposited in or near critical organs such as the liver or spleen than is the case on Earth. A second significant threat is the possibility of a high energy heavy ion or neutron causing a DNA double strand break in a single strike.

Maurer, R. H.↗