Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “defense”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

A critical review of cyber-physical security for building automation systems

Modern Building Automation Systems (BASs), as the brain that enable the smartness of a smart building, often require increased connectivity both among system components as well as with outside entities, such as the cloud, to enable low-cost remote management, optimized automation via outsourced cloud analytics, and increased building-grid integrations. As smart buildings move towards open communication technologies, providing access to BASs through the building's intranet, or even remotely through the Internet, has become a common practice. However, increased connectivity and accessibility come with increased cyber security threats. BASs were historically developed as closed environments with limited cyber-security considerations. As a result, BASs in many buildings are vulnerable to cyber-attacks that may cause adverse consequences, such as occupant discomfort, excessive energy usage, and unexpected equipment downtime. Therefore, there is a strong need to advance the state-of-the-art in cyber-physical security for BASs and provide practical solutions for attack mitigation in buildings. However, an inclusive and systematic review of BAS vulnerabilities, potential cyber-attacks with impact assessment, detection & defense approaches, and cyber resilient control strategies is currently lacking in the literature. This review paper fills the gap by providing a comprehensive up-to-date review of cyber-physical security for BASs at three levels in commercial buildings: management level, automation level, and field level. The general BASs vulnerabilities and protocol-specific vulnerabilities for the four dominant BAS protocols (i.e., BACnet, KNX, LonWorks, and Modbus) are reviewed, followed by a discussion on four attack targets and seven potential attack scenarios. Furthermore, the impact of cyber-attacks on BASs is summarized as signal corruption, signal delaying, and signal blocking. The typical cyber-attack detection and defense approaches are identified at the three levels. Cyber resilient control strategies for BASs under attack are categorized into passive and active resilient control schemes. Open challenges and future opportunities are finally discussed.

97 MATHEMATICS AND COMPUTING↗

Neighborhood Keeper

Neighborhood Keeper is a collective defense and community-wide visibility solution that provides a more effective industrial cyber defense by sharing threat intelligence at machine-speed across industries and geographic regions.

99 GENERAL AND MISCELLANEOUS↗

Air-coupled tsunamis generated from impacts and airbursts: Our understanding before Hunga-Tonga Hunga-Ha'apai

The effort to prevent or mitigate the effects of an impact on Earth is known as planetary defense. A significant component of planetary defense research involves risk assessment. Much of our understanding of the risk from near-Earth objects comes from the geologic record in the form of impact craters, but not all asteroid impacts are crater-forming events. Small asteroids explode before reaching the surface, generating an airburst, and most impacts into the ocean do not penetrate the water to form a crater in the sea floor. The risk from these non-crater-forming ocean impacts and airbursts is difficult to quantify and represents a significant uncertainty in our assessment of the overall threat. We are currently working to better understand impact scenarios that can generate dangerous tsunamis.

54 ENVIRONMENTAL SCIENCES↗

Long-term CRISPR locus dynamics and stable host-virus co-existence in subsurface fractured shales

Viruses are the most ubiquitous biological entities on Earth. Even so, elucidating the impact of viruses on microbial communities and associated ecosystem processes often requires identification of unambiguous host-virus linkages-an undeniable challenge in many ecosystems. Subsurface fractured shales present a unique opportunity to first make these strong linkages via spacers in CRISPR-Cas arrays and subsequently reveal complex long-term host-virus dynamics. Here, we sampled two replicated sets of fractured shale wells for nearly 800 days, resulting in 78 metagenomes from temporal sampling of six wells in the Denver-Julesburg Basin (Colorado, USA). At the community level, there was strong evidence for CRISPR-Cas defense systems being used through time and likely in response to viral interactions. Within our host genomes, represented by 202 unique MAGs, we also saw that CRISPR-Cas systems were widely encoded. Together, spacers from host CRISPR loci facilitated 2,110 CRISPR-based viral linkages across 90 host MAGs spanning 25 phyla. We observed less redundancy in host-viral linkages and fewer spacers associated with hosts from the older, more established wells, possibly reflecting enrichment of more beneficial spacers through time. Leveraging temporal patterns of host-virus linkages across differing well ages, we report how host-virus co-existence dynamics develop and converge through time, possibly reflecting selection for viruses that can evade host CRISPR-Cas systems. Together, our findings shed light on the complexities of host-virus interactions as well as long-term dynamics of CRISPR-Cas defense among diverse microbial populations.

59 BASIC BIOLOGICAL SCIENCES↗

The ectomycorrhizal fungus Pisolithus microcarpus encodes a microRNA involved in cross-kingdom gene silencing during symbiosis

Significance Plant genomes encode hundreds of genes controlling the detection, signaling pathways, and immune responses necessary to defend against pathogens. Pathogens, in turn, continually evolve to evade these defenses. Small RNAs, such as microRNAs (miRNAs), are one mechanism used by pathogens to overcome plant defenses and facilitate plant colonization. Mounting evidence would suggest that beneficial microbes, likewise, use miRNAs to facilitate symbiosis. Here, we demonstrate that the beneficial fungus Pisolithus microcarpus encodes a miRNA that enters plant cells and stabilizes the symbiotic interaction. These results demonstrate that beneficial fungi may regulate host gene expression through the use of miRNAs and sheds light on how beneficial microbes have evolved mechanisms to colonize plant tissues.

59 BASIC BIOLOGICAL SCIENCES↗

The “Brookhaven Brassie” and the Response to the Three Mile Island Accident

In the mid-1970s, American civil defense authorities became increasingly concerned with the potential threat of fission reactor accidents. Research from the Defense Civil Preparedness Agency began to be aimed not just at the ever-present threat of nuclear warfare, but also peacetime emergencies as part of a "dual use" philosophy. The Brookhaven National Laboratory received funding to create a prototype radioiodine air sampling system, with multiple publications detailing the creation of the air sampler itself and a special CD V-700 survey meter that accompanied it. In late March 1979, the system found its first operational employment at the reactor accident at Three Mile Island, Pennsylvania. Despite successful use and further study, the BNL Air Sampler was not widely fielded by the federal government. However, lessons learned from its employment and development may be applicable to contemporary radiological emergency response.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Cybersecurity Enhancement for Multi-Infeed High-Voltage DC Systems

Composed of multiple two-terminal high-voltage DC (HVDC) transmission systems, a multi-infeed HVDC (MIDC) system exchanges massive power among multiple asynchronous AC systems. However, as an intrinsically cyber-physical system, an MIDC system could suffer from cyber-attacks, leading to massive power mismatches in multiple AC systems, and resulting in catastrophic consequences. Since the sequential responses of an MIDC system and interconnected AC systems are in different timescales, this paper first establishes a two-timescale model to evaluate the sequential impacts caused by cyber-attacks. Then, an event-triggered cyber-defense strategy is proposed to enhance the cybersecurity of an MIDC system by mitigating multiple non-simultaneous cyber-attacks. Whenever new cyber-attack events occur, the proposed cyber-defense strategy, which is mathematically modeled as a mixed-integer quadratic programming problem, is executed on-line and updated in an event-triggered manner. Here, simulation results on an MIDC system demonstrate that the low-cost and almost blind cyber-attacks can cause severe frequency deviations, and the proposed strategy can mitigate multi-cyber-attacks effectively.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Dose Coefficient Calculation for Use in Dosimetry Assessment of a Fission-Based Weapon

In the event of a fission-based weapon or improvised nuclear device (IND) detonation, dose coefficients can be harnessed to provide dose assessments for defense, emergency preparedness, and consequence management, as well as to prospectively inform the assessment of radiation biomarkers and development of medical prophylaxis countermeasures for defense and homeland security stakeholders and decision-makers. Although dose coefficients have previously been calculated for this group, they would apply specifically to the studied population, the 1945 Japanese cohort, after which their anthropomorphic computational phantoms were modeled. For this reason, applications to other populations may be limited, and instead, an assessment of a more standardized population is desired. We employed a series of computational human phantoms representing international reference individuals: UF/NCI voxel phantom series containing newborn, 1-, 5-, 10-, 15-, and 35-year-old males and females. Irradiation of the phantoms was simulated using the Monte Carlo N-Particle transport code to determine organ dose coefficients under four idealized irradiation geometries at three distances from the detonation hypocenter at Hiroshima and Nagasaki using DS02 free-in-air prompt neutron and photon fluence spectra. Through these simulations, age-specific dose coefficients were determined for individual organs. Various articulated PIMAL stylized phantoms were simulated as well to estimate the effect of body posture on dose coefficients and determine the effect of posture on dosimetric estimation and reconstruction. Results additionally demonstrate that 137 Cs and the Watt fission spectra are not ideal general surrogate sources for fission weapons, which may be considered for experimental testing of medical countermeasures. Supplementary data provided tabulates the compilation of organ dose-rate coefficients in this study.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Integrated Military Systems

The Integrated Military Systems (IMS) Center at Sandia National Laboratories is a technical systems integrator of high-risk, high-impact systems. It provides cutting-edge technologies, subsystems, solutions, and products that provide a competitive advantage at every point of engagement. Building on more than six decades of experience, IMS seeks to pursue and provide solutions to the most challenging national security issues. We leverage technical capabilities from the Laboratories' core mission and innovatively apply technology to defense problems. IMS' diverse capabilities produce revolutionary technologies in the areas such as precision strike and defense, autonomy, NG&C, directed energy, signal processing/ATR, lethality and threat assessment, and systems engineering. Our talented engineers and staff take a problem from initial design all the way through testing and fielding.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Understanding Structures of Cyber Competition in an Era of Major Power Rivalry

Over the past two decades, the cyber domain has emerged and evolved into a key strategic domain for nations across the globe. Security strategies are espoused by heads of state that focus on how to manage the increasingly enormous, crosscutting impact that the cyber domain has on national security across economic, military, intelligence, intellectual property, and countless other facets. These strategies frequently evolve, and even change entirely, as leaders adapt to new technologies and administrations change. Even if these strategies did not change at all, they would take inordinate amounts of time to effectively implement within the organizational structures of government. The time required to go from setting department and agency-level goals, to the time small teams have well-oiled processes and expertise to accomplish tactical objectives that meet the strategic vision is lengthy. With near certainty, by the time objectives and vision are implemented, the landscape, strategy, or both has changed entirely. While this churn will likely never cease due to the rapidly changing nature of the cyber domain, this problem raises an important question: can governmental structures be organized to rapidly adapt to changing cyber strategies? As offices responsible for particular missions in cyberspace shuffle about within the bureaucracy, are technical capabilities enabled or enhanced? No matter how advanced a particular technical capability is or how adept the staff is at solving problems, they will be ineffective if placed haphazardly within the organization: the right authorities may not exist for their office, the correct lines of interpersonal communication may not be established properly, or insufficient resources have not been allocated to effectively deploy a brilliant technical solution. This concept of organizational agility in the context of national cyber capabilities is important when taking into account the National Defense Strategy’s emphasis on cyber capability and the ability of the United States to compete and rapidly adapt to new challenges posed by rivals. As a nation, we are at a point where technology evolves rapidly enough to warrant thoughtful and nimble changes to the bureaucratic structures that support how cyber operations are carried out. Taking these questions and cross-comparing them to the organizational structures across China, Russia, and the United States provides for an interesting thought experiment. As non-democratic regimes, China and Russia have differing priorities and internal power dynamics than the United States and thus organize their governments differently. By combining known and broadcasted strategies of these nations with the observed technical capabilities demonstrated in the public domain, we can begin to see how organizational structures map to strategic goals and directly enable technical capabilities. Insight can be gained by introducing organizational structures into traditional analysis focusing solely around strategies and capabilities; additionally, otherwise unknown capabilities or intents might be discovered or inferred by analyzing organizational structures alone. Analyzing cyber operations from this oft-overlooked perspective could potentially provide useful insight and more concrete actions that can be undertaken to realize the National Defense Strategy’s goals.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Nuclear Targeting Terms for Engineers and Scientists Revised Edition

This is a revised version of LA-UR-17-20752, Nuclear Targeting Terms for Engineers and Scientists, March 1, 2017. The discussion of compounding for damage and compounding for reliability was reworded for clarity. The Department of Defense has a methodology for targeting nuclear weapons, and a jargon that is used to communicate between the analysts, planners, aircrews, and missile crews. The typical engineer or scientist in the Department of Energy may not have been exposed to the nuclear weapons targeting terms and methods. This report provides an introduction to the terms and methodologies used for nuclear targeting. Its purpose is to prepare engineers and scientists to participate in wargames, exercises, and discussions with the Department of Defense. Terms such as Circular Error Probable, probability of hit and damage, damage expectancy, and the physical vulnerability system are discussed. Methods for compounding damage from multiple weapons applied to one target are presented.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Pits 101: The four types of nuclear weapons modernization activities

We learned why we don’t need plutonium to make new pits in an earlier edition of Pits 101, but why do we need new pits from a national security standpoint? A plutonium pit, or the core of a nuclear weapon, is like a weapon’s battery. The pits that Los Alamos will make in coming years will be like new batteries for nuclear weapons in the existing stockpile. Pit production is mandated in order to meet Department of Defense (DOD) requirements by our primary customer, the National Nuclear Security Administration (NNSA), which is a semi-autonomous agency within the Department of Energy. NNSA’s mission is to “deliver safe, secure, reliable warheads for an effective nuclear deterrent.” As Marv Adams, head of NNSA Defense Programs, describes, it’s a mission that is simple to state, but challenging to deliver.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

A section 110 evaluation of the huron king test chamber, area 3, nevada national security site, nye county, nevada

The U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office tasked Desert Research Institute (DRI) with the identification and evaluation of the Huron King Test Chamber as part of their cultural resources program obligations under Section 110 of the National Historic Preservation Act. The Huron King nuclear test was a vertical line-of-sight weapons effects test that took place in Area 3 on June 24, 1980. Unique to this event was a specially designed aboveground test chamber that held a model defense communications satellite in a vacuum tank meant to replicate the space environment. Sponsored by the Defense Nuclear Agency, the purpose of the experiment was to understand the response of the satellite and its materials and equipment to an electromagnetic pulse and attendant radiation. Between July and August 2022, DRI conducted an archival review on the Huron King experiment and its associated test chamber. Subsequently, pedestrian fieldwork was undertaken at the Huron King Test Chamber by DRI on September 29, 2022. During fieldwork, the outside of the test chamber was documented using a Nevada State Historic Preservation Office Architectural Resource Assessment form. This effort included verifying the substructures that compose the test chamber as determined by the archival review, as well as obtaining a detailed photographic recordation of the exterior and assessing its current condition. Notably, the site where the Huron King test took place has been abandoned and almost entirely naturalized. All of the portable instrumentation trailers, communications and data cabling, and winch systems used to retract the test chamber following the detonation were removed after completion of the experiment in 1980. Only the subsidence crater and the test chamber remain as physical evidence of this experiment. Based on these findings, DRI recommends that the Huron King Test Chamber is eligible for listing in the National Register of Historic Places (NRHP) at the local level under Significance Criteria A and C and that it meets Criteria Consideration G for properties less than 50 years old.

54 ENVIRONMENTAL SCIENCES↗

Euro-Deterrent: Analysis of Proposals for a European Nuclear Arsenal (CNSIS Paper)

The idea of a “Euro-deterrent”—a nuclear arsenal under European control and mandated to protect multiple European countries—has been proposed many times as a means for European self-defense independent of United States security guarantees under the North Atlantic Treaty Organization (NATO). This paper examines not only the concept’s multiple guises, but the reasons for their failure. It will address the idea of a Franco-British umbrella, a French umbrella, a European “pool”, and the nuclear arsenal of a hypothetical “united Europe”. Reasons for rejection largely fall into three categories: sovereignty concerns, credibility gaps, and a desire to preserve existing norms and structures. This paper concludes that the Euro-deterrent will likely remain only hypothetical unless the US unequivocally signals its intent to withdraw its nuclear umbrella from Europe, thereby forcing European countries to build a new defense arrangement.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Secure and Resilient Operations Using Open-Source Distributed Systems Platform (OpenDSP)

The goal of this project is to identify and address cybersecurity gaps by developing a multi-layer multi-channel cyber-physical defense and survival mechanism for operating distribution networks with high penetration of solar / inverter-based resource (IBR) / distributed energy resource (DER). The proposed security enhancements are built upon the distributed framework and solution architecture for both information technology (IT) and operational technology (OT) systems. The technical solutions consist of two composite functionalities and six layers: proactive defense (vulnerability assessment, communication protection, and attack detection, as layers 1-3), and adaptive self-healing (attack-resilient control, adaptive recovery, and resilient survival, as layers 4-6). These layers, built on and extended from DHS CISA Cyber Framework, establish an integrated and robust cybersecurity framework for operating large-scale distribution networks.

14 SOLAR ENERGY↗

The role of photorespiration in plant immunity

To defend themselves in the face of biotic stresses, plants employ a sophisticated immune system that requires the coordination of other biological and metabolic pathways. Photorespiration, a byproduct pathway of oxygenic photosynthesis that spans multiple cellular compartments and links primary metabolisms, plays important roles in defense responses. Hydrogen peroxide, whose homeostasis is strongly impacted by photorespiration, is a crucial signaling molecule in plant immunity. Photorespiratory metabolites, interaction between photorespiration and defense hormone biosynthesis, and other mechanisms, are also implicated. An improved understanding of the relationship between plant immunity and photorespiration may provide a much-needed knowledge basis for crop engineering to maximize photosynthesis without negative tradeoffs in plant immunity, especially because the photorespiratory pathway has become a major target for genetic engineering with the goal to increase photosynthetic efficiency.

59 BASIC BIOLOGICAL SCIENCES↗

Grid Cyber-Security Strategy in an Attacker-Defender Model

The progression of cyber-attacks on the cyber-physical system is analyzed by the Probabilistic, Learning Attacker, and Dynamic Defender (PLADD) model. Although our research does apply to all cyber-physical systems, we focus on power grid infrastructure. The PLADD model evaluates the effectiveness of moving target defense (MTD) techniques. We consider the power grid attack scenarios in the AND configurations and OR configurations. In addition, we consider, for the first time ever, power grid attack scenarios involving both AND configurations and OR configurations simultaneously. Cyber-security managers can use the strategy introduced in this manuscript to optimize their defense strategies. Specifically, our research provides insight into when to reset access controls (such as passwords, internet protocol addresses, and session keys), to minimize the probability of a successful attack. Our mathematical proof for the OR configuration of multiple PLADD games shows that it is best if all access controls are reset simultaneously. For the AND configuration, our mathematical proof shows that it is best (in terms of minimizing the attacker's average probability of success) that the resets are equally spaced apart. We introduce a novel concept called hierarchical parallel PLADD system to cover additional attack scenarios that require combinations of AND and OR configurations.

97 MATHEMATICS AND COMPUTING↗