Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “attack detection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

Silazane to silica

Thin film silica and/or methyl silicone were detected on most external surfaces of the retrieved LDEF. Known sources of silicone in or on the LDEF appear inadequate to explain the ubiquitous presence of the silica and silicone films. Hexamethyldisilazane (HMDS) was used as the Challenger tile waterproofing compound for the Challenger/LDEF deployment mission. HMDS releases NH3 which depolymerizes silicone RTV's. Polyurethanes were also attacked. Much of the silica/silicone contamination of LDEF resulted from HMDS.

Harvey, Gale A.↗

Watching for light: An enterprise roadmap for trustworthy laser threat warning (LTW) to protect national assets

Comprehensive space force protection must include effective and trustworthy laser threat warning (LTW). Effective LTW will detect and characterize threats to space assets and thus enhance space deterrence. LTW must be trustworthy: able to categorize threats and non-threats by being both sensitive to true events and resistant to false alarms. Outside of the laboratory, the statistics and even the roles of lasers become unclear. In the chain of events leading to an attack, the laser may be the last link to be understood. Human situational awareness and informal reasoning must blend statistics with circumstantial evidence to visualize these chains before they are clear. This paper sets out an industrial model for an enterprise that will routinely produce trustworthy LTW. By incorporating psychology and economics, this enterprise can overcome the difficulties and perils of cooperation in networked defense and intelligence. This roadmap suggests how the enterprise can incentivize distracted actors with different goals to share what they know and coordinate what they do.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Dynamic concurrent learning method to neutralize cyber attacks and faults for industrial asset monitoring nodes

Input signals may be received from monitoring nodes of the industrial asset, each input signal comprising time series data representing current operation. A neutralization engine may transform the input signals into feature vectors in feature space, each feature vector being associated with one of a plurality of overlapping batches of received input signals. A dynamic decision boundary may be generated based on the set of feature vectors, and an abnormal state of the asset may be detected based on the set of feature vectors and a predetermined static decision boundary. An estimated neutralized value for each abnormal feature value may be calculated based on the dynamic decision boundary and the static decision boundary such that a future set of feature vectors will be moved with respect to the static decision boundary. An inverse transform of each estimated neutralized value may be performed to generate neutralized signals comprising time series data that are output.

97 MATHEMATICS AND COMPUTING↗

In-flight flow visualization characteristics of the NASA F-18 high alpha research vehicle at high angles of attack

Surface and off-surface flow visualization techniques have been used to visualize the three-dimensional separated flows on the NASA F-18 high alpha research vehicle at high angles of attack. Results near alpha = 25 deg to 26 deg and alpha = 45 deg to 49 deg are presented. Both the forebody and leading-edge extension (LEX) vortex cores and breakdown locations were visualized using smoke. Forebody and LEX vortex separation lines on the surface were defined using an emitted-fluid technique. A laminar separation bubble was also detected on the nose cone using the emitted fluid technique and was similar to that observed in the wind-tunnel test, but not as extensive. Regions of attached, separated, and vortical flow were noted on the wing and the leading-edge flap using tufts and flow cones, and compared well with limited wind-tunnel results.

Fisher, David F.↗

Using Structured Intelligence Graph (STIG) to protect our critical infrastructure against cyber attacks [Poster]

STIG is a revolutionary cybersecurity tool developed by researchers at the U. S. Department of Energy's Idaho National Laboratory and it is a software that allows utility owners and operators to easily visualize, create, and edit cyberthreat intelligence information. STIG uses Structured Threat Information eXpression (STIX) and converts complex data on cybersecurity vulnerabilities into a visualization that is easy to understand and act on. With STIG, utility owners and operators have a common system for sharing threat intelligence information, thus increasing the chances of detecting and mitigating cyber exploits before they lead to a cyberattack.

24 POWER TRANSMISSION AND DISTRIBUTION↗

1. Physical Security Engineering by Design for Nuclear Facilities; 2. Nuclear Power Plant Site Security Management – A Security Strategy; 3. The UAE Women in Nuclear Energy Security

1. Security by design, or SeBD, is a comprehensive approach that integrates the physical protection system of a nuclear plant into every stage of its existence. This includes planning, designing, constructing, commissioning, and operating the facility, using a combination of analytical, physical, technological, and procedural measures. Essentially, SeBD involves intentionally applying and incorporating security into all aspects of design and operation throughout the entire lifecycle of a facility. By implementing this methodology throughout various phases such as program development, process implementation, staff training and procedures management in conjunction with plant equipment, facilities can be optimized to minimize security risks without compromising functional design requirements. This ultimately improves the overall security posture of the site and reduces the need for costly modifications or additional security resources post-design. 2. A site security strategy is a living document that is revised on a periodic or event-driven basis, ensuring that site security operations and corresponding procedures provide long-term, effective protection for the entire nuclear power plant (NPP) site. A site security strategy aims to mitigate threats across the entire NPP site via in-depth defense approaches and mutual support; therefore, if a layer is omitted or altered, then the effect across all layers must be re-evaluated. Therefore, the aim of the site security strategy is to provide an appropriate, scalable security regime that deters, denies, delays, and detects incidents and, equally importantly, reassures legitimate users and the regulator that due diligence and regulatory compliance have been achieved, ensuring that the site is safe and secure. Robust access control for vehicles and pedestrians is at the heart of the strategy. Vehicle and pedestrian searching and screening are seen as the strongest mitigation methods against vehicle- and pedestrian-borne attacks. The security strategy must also be supported through comprehensive staff training and the development of robust processes, procedures, and planning. If all these measures are to be effective, then training must be implemented during each phase of construction, partial operation/commissioning, and full operation. No single element of site security is completely isolated from the influence of other elements. Ideally, consideration of all key elements will result in a security strategy that is integrated and proportional to the threat and that does not over specify individual security solutions through the application of isolated measures but rather applies a holistic, all-encompassing approach. 3. When women enter the labor force, numerous positive outcomes emerge, including increased GDP, educational gains, and decreased maternal mortality. Despite these benefits, women's employment rates and equality vary significantly worldwide as does support for women in the workforce. This paper will explore the multifaceted benefits of women's employment, the factors influencing labor force participation rates, and the urgency to achieve gender equality as outlined in the 2015 United Nations Sustainable Development Goals (SDGs). It will then examine the emerging presence of women in the traditionally male-dominated nuclear field, specifically within the United Arab Emirates (UAE) as a testament to their resilience and determination to break social norms and advance gender equality.

Zineddin, Dr. Z.↗

SEDONA: SpEctroscopic Detection of Nerve Agents

Los Alamos National Laboratory developed the only portable screener to accurately detect the chemical nerve agents, providing results in seconds. Current airport detection system cannot scan for the threat of organophosphorus nerve agents and insecticides. Small quantities of these toxic chemicals can very quickly cause widespread exposure and severe symptoms. SEDONA screens through an unopened bottle using the principles of nuclear magnetic resonance spectroscopy. The system could be deployed and operated with minimal training. SEDONA dramatically reduces the likelihood of a successful nerve agent attack at airports, government buildings, embassies, sporting events, concerts, and political rallies.

47 OTHER INSTRUMENTATION↗

Malware Analysis Report for SolarWinds.Orion.Core.BusinessLayer.dll

SolarWinds Orion is a software suite designed to provide “single pane of glass” monitoring of network devices and applications. On December 13 2020, FireEye revealed that SolarWinds Orion was the victim of a supply chain attack and that the SolarWinds signed file SolarWinds.Orion.Core.BusinessLayer.dll contained a backdoor. SolarWinds deployed the back-doored patch to customers beginning in March 2020. FireEye first identified this backdoor and labeled it SUNBURST. The backdoor is composed of roughly 4,000 lines1 of lightly obfuscated .NET within the SolarWinds.Orion.Core.BusinessLayer.OrionImprovementBusinessLayer class of the malicious dll. The backdoor’s capabilities include: the ability to detect and potentially disable antivirus and forensics tools, basic command and control via DNS, and more advanced command and control via HTTP.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Flight validation of a pulsed smoke flow visualization system

A flow visualization scheme, designed to measure vortex fluid dynamics on research aircraft, was validated in flight. Strake vortex trajectories and axial core velocities were determined using pulsed smoke, high-speed video images, and semiautomated image edge detection hardware and software. Smoke was pulsed by using a fast-acting three-way valve. After being redesigned because of repeatedly jamming in flight, the valve shuttle operated flawlessly during the last two tests. A 25-percent scale, Gothic strake was used to generate vortex over the wing of a GA-7 Cougar and was operated at a local angle of attack of 22 degrees and Reynolds number of approximately 7.8 x 10(exp 5)/ft. Maximum axial velocities measured in the vortex core were between 1.75 and 1.95 times the freestream velocity. Analysis of the pulsed smoke system's affect on forebody vortices indicates that the system may reorient the forebody vortex system; however, blowing momentum coefficients normally used will have no appreciable affect on the leading-edge extension vortex system. It is recommended that a similar pulsed smoke system be installed on the F/A-18 High Angle Research Vehicle and that this approach be used to analyze vortex core dynamics during the remainder of its high-angle-of-attack research flights.

Ward, Donald T.↗

Cyber–Physical System Security of Distribution Systems

The Information and Communications Technology (ICT) for control and monitoring of power systems is a layer on top of the physical power system infrastructure. The cyber system and physical power system components form a tightly coupled Cyber–Physical System (CPS). Sources of vulnerabilities arise from the computing and communication systems of the cyber–power grid. Cyber intrusions targeting the power grid are serious threats to the reliability of electricity supply that is critical to society and the economy. In a typical Information Technology environment, numerous attack scenarios have shown how unauthorized users can access and manipulate protected information from a network domain. The need for cyber security has led to industry standards that power grids must meet to ensure that the monitoring, operation, and control functions are not disrupted by cyber intrusions. Cyber security technologies such as encryption and authentication have been deployed on the CPS. Intrusion or anomaly detection and mitigation tools developed for power grids are emerging. Furthermore, this survey paper provides the basic concepts of cyber vulnerabilities of distribution systems and CPS security. The important ICT subjects for distribution systems covered in this paper include Supervisory Control And Data Acquisition, Distributed Energy Resources, including renewable energy and smart meters.

97 MATHEMATICS AND COMPUTING↗

Cyber-Physical Resiliency for Wind Power Generation

During the next three years, wind power generation is expected to add more generation capacity to the national electrical grid than any other energy sector. With new wind turbine designs rated power over 10 MW and wind farms reaching over 1 GW capacities, the consequences of cyber-attacks on wind power generation are becoming increasingly more critical. Moreover, the known vulnerabilities of wind turbine control systems and the potential damaging effects of intrusions, motivate an urgent protection improvement for the wind power generation sector. This program has developed a variety of new adaptive defense technologies that enable wind power generation systems to survive sophisticated cyberattacks by enhancing the control systems capabilities of detection, localization, and accommodation. The introduction of these technologies in the on-shore and the emerging off-shore market will result in a significantly more reliable and secure wind power infrastructure.

17 WIND ENERGY↗

Turbulence amplification in flow about an airfoil

An experimental investigation of the evolution of freestream turbulence in flow about an airfoil was conducted in order to ascertain its selective amplification induced by the stretching mechanism according to the vorticity-amplification theory. Significant amplification of the streamwise turbulent energy transpired even in the limiting flow situation studied of a symmetric airfoil at zero angle of attack where the stretching is the least. Substantiation of the stretching effect was provided by the almost 100 percent amplification of turbulence with respect to its background level in the absence of the airfoil. Realization of preferred amplification at scales larger than the neutral scale of the stagnation flow was clearly indicated by the variation of the discrete streamwise turbulent energy. Particularly important was the detection of a most amplified scale which is characteristic of the coherent substructure near the airfoil stagnation zone and, concurrently, commensurate with the boundary-layer thickness.

Sadeh, W. Z.↗

Design and Integration of an Actuated Nose Strake Control System

Aircraft flight characteristics at high angles of attack can be improved by controlling vortices shed from the nose. These characteristics have been investigated with the integration of the actuated nose strakes for enhanced rolling (ANSER) control system into the NASA F-18 High Alpha Research Vehicle. Several hardware and software systems were developed to enable performance of the research goals. A strake interface box was developed to perform actuator control and failure detection outside the flight control computer. A three-mode ANSER control law was developed and installed in the Research Flight Control System. The thrust-vectoring mode does not command the strakes. The strakes and thrust-vectoring mode uses a combination of thrust vectoring and strakes for lateral- directional control, and strake mode uses strakes only for lateral-directional control. The system was integrated and tested in the Dryden Flight Research Center (DFRC) simulation for testing before installation in the aircraft. Performance of the ANSER system was monitored in real time during the 89-flight ANSER flight test program in the DFRC Mission Control Center. One discrepancy resulted in a set of research data not being obtained. The experiment was otherwise considered a success with the majority of the research objectives being met.

Flick, Bradley C.↗

Visualization of Capsule Reentry Vehicle Heat Shield Ablation Using Naphthalene PLIF

The Orion Multi-Purpose Crew Vehicle (MPCV) will use an ablative heat shield and improved understanding of the ablation process would be beneficial for design purposes. Given that ablation is a multi-physics process involving heat and mass transfer, codes aiming to predict heat shield ablation are in need of experimental data pertaining to the turbulent transport of ablation products for validation. At The University of Texas at Austin, a technique is being developed that uses planar laser-induced fluorescence (PLIF) of a low-temperature sublimating ablator (naphthalene) to visualize the transport of ablation products in a supersonic flow. Since ablation at reentry temperatures can be difficult to recreate in a laboratory setting it is desirable to create a limited physics problem and simulate the ablation process at relatively low temperature conditions using naphthalene. A scaled Orion MPCV model with a solid naphthalene heat shield has been tested in a Mach 5 wind tunnel at various angles of attack in the current work. PLIF imaging reveals the distribution of the ablation products as they are transported into the heat-shield boundary layer and over the capsule shoulders into the separated shear layer and backshell recirculation region. Visualizations of the capsule shear layer using both naphthalene PLIF and Schlieren imaging compared favorably. High concentrations of naphthalene in the capsule separated flow region, intermittent turbulent structures on the heat shield surface, and interesting details of the capsule shear layer structure were observed using the naphthalene PLIF technique. The capsule shear layer was also shown to generally appear to be more turbulent at lower angles of attack. Furthermore, the PLIF signal increased steadily over the course of a run indicating that during a wind tunnel run the model heated up and the rate of naphthalene ablation increased. The shear layer showed increasing signs of turbulence over the course of a wind tunnel run as well, likely because of the combination of increased surface roughness and surface blowing rate. PLIF imaging also detected regions with a relatively low concentration of naphthalene in the capsule backshell recirculation region that are most likely the result of cross-flow-induced vortices on the capsule afterbody.

Combs, Christopher S.↗

Cybersecurity for Grid Connected eXtreme Fast Charging (XFC) Station (CyberX) (Final Scientific/Technical Report)

This report summarizes the activities conducted under the DOE VTO funded project DE- EE0008451, where ABB Inc. (ABB), in collaboration with Idaho National Laboratory (INL), APS Global (APS), and XOS Trucks (XOS) pursued the development of a cyber-resilient extreme fast charging (XFC) management system. This project entitled Cybersecurity for Grid Connected eXtreme Fast Charging (XFC) Station (CyberX) focuses on a resilient architecture for smart charging EV Supply Equipment (EVSE) device control and Coordinated Anomaly Detection System (CADS) features that can be added at the charging site depot level to increase cybersecurity. The project was split into two budget periods focused first on developing the threat model and resilient control concepts and second on testing, improving, and validating those developed resilient control algorithms and features with a focus on key vulnerabilities identified during the threat assessment portion of the project. During the first budget period of the CyberX project, the ABB led team focused on activities to identify, model, and quantitatively prioritize high-impact attack scenarios with potential cyber-physical effects while also modeling and developing concepts for a resilient control system that could securely address integration of DERs and other resources with EV charging. Development of the security focused XFC management system (XMS) was accomplished first by offline simulation using a developed XFC station or depot with 480V input level and simulating measurement inputs to monitoring and control systems in concept development. A representative distribution grid model was developed supporting an EV charging site model with BESS and 6 general EV charging models. These EV charging models allowed multiple configurations of charging level, multiple connected protection and measurement devices, and simulation function to show general compromise of EV, BESS, and protection features based on parallel threat analysis. During the second budget period, the EV site and supporting systems model was developed in more detail and converted from offline model to real-time to real-time with EV charging hardware in the loop (HIL). The resilient control architecture developed as concept in the first part of the project was further tested and validated for integration of local energy resources and XFC charging station site equipment while maintaining cybersecure operating principles. The proposed resilient architecture for smart charging and cybersecurity features consists of two main concepts developed and tested within the project. The first concept is an XFC management system (XMS) consisting of a hardware gateway, software platform, and Supervisory Control and Data Acquisition (SCADA) or Distribution Management System integration components. The second concept is a Coordinated Anomaly Detection System (CADS) which forms a primarily software-related subsystem of the total CyberX solution focused on monitoring system measurements, estimation of measurement states, and predicting current at the utility point of interaction based on machine learning for anomaly detection.

33 ADVANCED PROPULSION SYSTEMS↗

Evaluation of Flaw Detection with SLDV Methods Before/After Mechanical Patch

This report provides a summary of the testing and the experiments to evaluate the utility of laser ultrasonic testing (UT) in detecting and characterizing defects on the surface of steel plates before and after the application of an engineered composite patch for crack repair. Included are the detection and characterization of defects from a section of welded plate material taken from the Sandia National Laboratories’ full-size mockup of a spent nuclear fuel (SNF) dry storage canister which had been pre-flawed and exposed to deliquescent sea salt conditions for 2 years. The information includes a review of previously reported metallurgical characterization, and new work on detailed surface characterization of the corrosion attack using laser UT.

36 MATERIALS SCIENCE↗

PLC Vulnerabilities and Mitigations

Programmable Logic Controllers (PLCs) are used extensively in many high-importance industrial and nonindustrial settings including controlling elevators, manufacturing machines, and utility facilities such as power and natural gas, however cybersecurity protection for them has been neglected. Within recent years, PLCs have been put under more security scrutiny and experts have advocated for changes from the addition of protocol encryption and network segmentation to intrusion detection systems on the PLCs themselves. While PLC security is critical, a large portion of the PLCs available today will never receive these changes due to being legacy or the difficulty of overhauling the security on existing systems. Due to the infeasibility of applying many recommended security measures towards currently available machines, we aim to provide realistic and affordable best practices for hardening PLCs. We will first conduct security analysis and consider attack vectors within our target PLC. Once we’ve analyzed the device’s security, we will evaluate a variety of mitigation methods and create guidelines to effectively reduce the threat posed by PLC attacks with minimal disruption to operations.

42 ENGINEERING↗

AI-Based Protective Relays for Electric Grid Resiliency

The protection systems (circuit breakers, relays, reclosers, and fuses) of the electric grid are the primary component responding to resilience events, ranging from common storms to extreme events. The protective equipment must detect and operate very quickly, generally <0.25 seconds, to remove faults in the system before the system goes unstable or additional equipment is damaged. The burden on protection systems is increasing as the complexity of the grid increases; renewable energy resources, particularly inverter-based resources (IBR) and increasing electrification all contribute to a more complex grid landscape for protection devices. In addition, there are increasing threats from natural disasters, aging infrastructure, and manmade attacks that can cause faults and disturbances in the electric grid. The challenge for the application of AI into power system protection is that events are rare and unpredictable. In order to improve the resiliency of the electric grid, AI has to be able to learn from very little data. During an extreme disaster, it may not be important that the perfect, most optimal action is taken, but AI must be guaranteed to always respond by moving the grid toward a more stable state during unseen events.

24 POWER TRANSMISSION AND DISTRIBUTION↗