Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “attack modeling”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 487 records · Page 27

Plant Nutrition Influences Resistant Maize Defense Responses to the Fall Armyworm ( Spodoptera frugiperda )

Plants are often confronted by different groups of herbivores, which threaten their growth and reproduction. However, they are capable of mounting defenses against would-be attackers which may be heightened upon attack. Resistance to insects often varies among plant species, with different genotypes exhibiting unique patterns of chemical and physical defenses. Within this framework, plant access to nutrients may be critical for maximal functioning of resistance mechanisms and are likely to differ among plant genotypes. In this study, we aimed to test the hypothesis that access to nutrition would alter the expression of plant resistance to insects and alter insect performance in a manner consistent with fertilization regime. We used two maize (Zea mays) genotypes possessing different levels of resistance and the fall armyworm (Spodoptera frugiperda) as model systems. Plants were subjected to three fertilization regimes prior to assessing insect-mediated responses. Upon reaching V4 stage, maize plants were separated into two groups, one of which was infested with fall armyworm larvae to induce plant defenses. Plant tissue was collected and used in insect bioassays and to measure the expression of defense-related genes and proteins. Insect performance differed between the two plant genotypes substantially. For each genotype, fertilization altered larval performance, where lower fertilization rates hindered larval growth. Induction of plant defenses by prior herbivory substantially reduced naïve fall armyworm growth in both genotypes. The effects between fertilization and induced defenses were complex, with low fertilization reducing induced defenses in the resistant maize. Gene and protein expression patterns differed between the genotypes, with herbivory often increasing expression, but differing between fertilization levels. The soluble protein concentrations did not change across fertilization levels but was higher in the susceptible maize genotype. These results demonstrate the malleability of plant defenses and the cascading effects of plant nutrition on insect herbivory.

54 ENVIRONMENTAL SCIENCES↗

Remarkable self-degradation of Cu/SAPO-34 selective catalytic reduction catalysts during storage at ambient conditions

A model Cu/SAPO-34 SCR catalyst with all Cu species maintained as isolated Cu(II) ions is synthesized herein. Following lengthy storage on the shelf under ambient conditions, this catalyst completely and irreversibly deactivates upon any heat treatments above ~100 °C. Via detailed characterizations with surface area/pore volume analysis, XRD, H 2 -TPR, and 27 Al, 29 Si and 31 P solid-state NMR, as well as continuous wave and pulsed EPR studies, it is concluded that over the course of storage, the SCR active sites [Cu(OH)] + and Brønsted acid sites ≡Si-O(H)-Al≡ are attacked by H 2 O molecules trapped in the SAPO-34 framework pores, and undergo hydrolysis to form copper hydroxide and terminal Al sites. Upon thermal treatment, these species interact with each other to form copper-aluminate-like species, leading to irreversible deactivation of this catalyst. This deactivation mechanism does not require or necessarily lead to extensive degradation (i.e., crystallinity loss) of the SAPO-34 support.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Measuring Equality in Machine Learning Security Defenses: A Case Study in Speech Recognition

Over the past decade, the machine learning security community has developed a myriad of defenses for evasion attacks. An understudied question in that community is: for whom do these defenses defend? This work considers common approaches to defending learned systems and how security defenses result in performance inequities across different sub-populations. We outline appropriate parity metrics for analysis and begin to answer this question through empirical results of the fairness implications of machine learning security methods. We find that many methods that have been proposed can cause direct harm, like false rejection and unequal benefits from robustness training. The framework we propose for measuring defense equality can be applied to robustly trained models, preprocessing-based defenses, and rejection methods. We identify a set of datasets with a user-centered application and a reasonable computational cost suitable for case studies in measuring the equality of defenses. In our case study of speech command recognition, we show how such adversarial training and augmentation have non-equal but complex protections for social subgroups across gender, accent, and age in relation to user coverage. We present a comparison of equality between two rejection-based defenses: randomized smoothing and neural rejection, finding randomized smoothing more equitable due to the sampling mechanism for minority groups. This represents the first work examining the disparity in the adversarial robustness in the speech domain and the fairness evaluation of rejection-based defenses.

• Artificial intelligence (AI) / machine learning ↗

Oxidation Behavior and Property Degradation of Nuclear Graphites

During its multidecade operation in the core of nuclear reactors, graphite components are subjected to aggressive and continuous exposure to a high field of ionizing and neutron irradiation, high temperature, and various types of present and postulated chemical attacks. High density, high crystallinity polygranular synthetic graphite is unique among other materials for its extraordinary capacity of resisting and adapting to the aggression inflicted by high temperature, high energy neutron bombardment and ionizing gamma radiation. But, as a carbonaceous material, even though of very high purity, graphite is reactive towards common oxidizing agents: oxygen, carbon dioxide, water. Safe operation of HTGRs relies, among other aspects, on engineered safeguard systems for efficient and continuous protection of graphite components against oxidation. Graphite oxidation behavior was, and continues to be, an important direction of theoretical and experimental research, engineering analyses, models and simulations, and design and safety regulations. The avalanche of publications, reports, experimental data, computer codes, and regulatory documents related to oxidation behavior of nuclear graphite is now accelerating to new levels, prompted by the increased interest for nuclear energy as a clean, carbon-free energy source. Even though public’s perception of nuclear energy advantages may still be influenced by the memories of past accidents of nuclear reactors from generations II and III, the community of informed scientists and engineers, regulators and statemen knows that generation IV of nuclear reactors is designed at very high safety standards, doubled by great advances of scientific knowledge and technological progress. One of routes of these recent advances is directed at better understanding of graphite oxidation behavior, its relationship with graphite manufacturing and microstructural properties, along with the effects of various environmental factors and process variables. Together, the recent progress in manufacturing, properties characterization, and modeling of intricated physical and chemical processes that concur to the oxidation behavior led to development of powerful simulation codes able to analyze various scenarios of normal operation and hypothetical off-normal events, and thus to clearly specify the allowable parameters envelopes for the designers, constructors, and operators of current and future modular HTGRs. This review begins with an introduction on manufacturing methods, structure, and properties of nuclear graphite, including basic requirements that this specialty graphite type must satisfy for nuclear use. It continues with a chapter on environmental effects on nuclear graphite, where emphasis is placed less on irradiation and much more on oxidation phenomena, their safety implications, and the basic traits of chronic and acute oxidation by air (oxygen) and water (humidity, steam). Particular attention is placed on the three graphite grades of interest for this document (IG-110, NBG-18, PCEA). A chapter on properties degradation induced by oxidation follows, with focus on density, dimensional, and mechanical properties changes. The next chapter is intended as a brief review of various approaches used for modeling of graphite oxidation behavior. It summarizes the progress of oxidation models, from the early attempts to complex computational approaches interfaced with specialized computer codes designed for nuclear reactor simulations. Last, a list is presented of knowledge gaps where more research is needed. A short summary concludes the review.

36 MATERIALS SCIENCE↗

National Security Programs - Cyber: MMAREJBLIGE – Modular Multi Agent Grid Emulation for Joined Breakdowns in Linked Generative Emulations - 23-0644

Modular Multi Agent Grid Emulations for Joined Breakdowns in Linked Generative Emulations (MMAREJBLIGE) introduces an agent-based modeling framework into real-time cyber-physical emulation to achieve a context-aware environment that introduces operator/attacker/external-condition variability to improve emulation fidelity and testing rigor. We detail our agent framework design, internal communication via message passing, and time synchronization, as well as the individual components of the system. We include a brief analysis of several scenarios run on a real-time, hardware-in-the-loop, Industrial Control Systems (ICS) test-bed which include normal operation, physical disruption, disruption with mitigation, and disruption with mitigation during a cyber denial-of-service (DOS) attack.

42 ENGINEERING↗

An airfoil-based synthetic actuator disk model for wind turbine aerodynamic and structural analysis

Here, this study introduces an airfoil-based refinement technique to enhance the Actuator Disk Model (ADM) for improved wind turbine aerodynamic load prediction and structural simulation in conjunction with Large Eddy Simulations of the wind flow. While ADM offers higher computational efficiency than the more detailed but resource-intensive Actuator Line Model (ALM), it traditionally lacks the resolution needed to capture the localized blade forces accurately. To address this limitation, we introduce a refinement technique that uses airfoil-specific data and employs interpolation-based grid point refinement, achieving ALM-comparable accuracy while preserving ADM's efficiency. Unlike conventional ADM that provides only rotor-disk averaged forces, our synthetic method tracks transient aerodynamic load variations over multiple blade revolutions, allowing us to calculate the distributions of maximum and minimum loads during typical cycles. Applied to the NREL 5 MW reference turbine, our enhanced ADM accurately predicts key aerodynamic parameters (angle of attack, axial velocity, lift, drag, axial and tangential forces along the blades) as well as structural responses (blade tip deflection, maximum stress, and stress concentration). Our results show that the tip deflection ranges from 2.33m (3.69 % of blade length) to 4.28m (6.79 %), with maximum stress concentration occurring near the blade root. This research demonstrates that a refined synthetic ADM approach can serve as a computationally efficient alternative for both aerodynamic analysis and structural simulation of wind turbine blades subjected to realistic wind fields.

17 WIND ENERGY↗

Visualization and efficient generation of constrained high-dimensional theoretical parameter spaces

We describe a set of novel methods for efficiently sampling high-dimensional parameter spaces of physical theories defined at high energies, but constrained by experimental measurements made at lower energies. Often, theoretical models such as supersymmetry are defined by many parameters, $\mathcal{O}$(10 – 100), expressed at high energies, while relevant experimental constraints are often defined at much lower energies, preventing them from directly ruling out portions of the space. Instead, the low-energy constraints define a complex, potentially non-contiguous subspace of the theory parameters. Naive scanning of the theory space for points which satisfy the low-energy constraints is hopelessly inefficient due to the high dimensionality, and the inverse problem is considered intractable. As a result, many theoretical spaces remain under-explored. We introduce a class of modified generative autoencoders, which attack this problem by mapping the high-dimensional parameter space to a structured low-dimensional latent space, allowing for easy visualization and efficient generation of theory points which satisfy experimental constraints. An extension without dimensional compression, which focuses on limiting potential information loss, is also introduced.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗

Selective penetration behavior of microgels in superpermeable channels and reservoir matrices

Gel treatment is an effective way to attack excessive water production in many mature oilfields around the world. Selective penetration is desired for successful gel treatments. That is, gel materials should easily penetrate the target zones (i.e., channeling features such as superpermeable channels) without entering/damaging the nontarget zones (i.e., reservoir matrices or oil zones). This study revealed that presence of threshold penetration pressure (ΔP th ) was responsible for selective penetration behavior of tested microgels. The concept of ΔP th was utilized to figure out favorable working conditions for effective gel treatments. Microgel dispersions were injected into superpermeable (super-k) sandpacks (mimicking super-k channels in reservoirs, 60–221 darcies), heterogeneous models with super-k channels (79–230 darcies), and sandstone cores (mimicking reservoir matrices, 50–5000 md). The results demonstrated that a minimum differential driving pressure (i.e., threshold penetration pressure, ΔP th ) was required to push microgel particles to penetrate channels or matrices. The critical penetration behavior was closely related to the particle/pore size ratio. Low ΔP th at smaller particle/pore ratios was beneficial to allow easy penetration of gel materials into the channeling zones. On the contrary, high ΔPth at larger particle/pore ratios was desirable to prevent gel materials from massively invading and damaging the matrices. Instead, the gel particles accumulated at the inlet surface, and a gel cake was gradually formed. The cake further prevented the invasion of the gels. The cake could be removed by chemical breakers to resume the injectivity/productivity of the matrices. Correlations were developed to describe the relationship between ΔP th and particle/pore ratio. A distinct transition was identified at the particle/pore ratio of about 3. This research could help identify the favorable conditions to achieve successful gel treatments. In an effective conformance treatment, the particle/pore ratio in the channel should be sufficiently low to allow easy penetration of gel materials into the channel (e.g., particle/pore ratio<2 in this study). Meanwhile, the particle/pore ratio in the matrix should be large enough to support a high ΔP th and thus prevent massive gel invasion into the matrix. This study advances the current pore scale studies (a single particle passing through a single channel) to Darcy-scale characterization.

02 PETROLEUM↗

Modeling design and control problems involving neural network surrogates

Here, we consider nonlinear optimization problems that involve surrogate models represented by neural networks. We demonstrate first how to directly embed neural network evaluation into optimization models, highlight a difficulty with this approach that can prevent convergence, and then characterize stationarity of such models. We then present two alternative formulations of these problems in the specific case of feedforward neural networks with ReLU activation: as a mixed-integer optimization problem and as a mathematical program with complementarity constraints. For the latter formulation we prove that stationarity at a point for this problem corresponds to stationarity of the embedded formulation. Each of these formulations may be solved with state-of-the-art optimization methods, and we show how to obtain good initial feasible solutions for these methods. We compare our formulations on three practical applications arising in the design and control of combustion engines, in the generation of adversarial attacks on classifier networks, and in the determination of optimal flows in an oil well network.

97 MATHEMATICS AND COMPUTING↗

Enterprise Artificial Intelligence Strategy for Los Alamos National Laboratory

In the 1984 martial arts drama film, The Karate Kid, a young Daniel LaRusso is unexpectedly placed in an adversarial environment unable to eYectively adapt to a series of new threats and limitations. Fortunately for the main character, once placed under the tutelage of a Mr. Miyagi, he finds resiliency not through the adoption of new tools, but a re-focused set of fundamentals. Much in the same way that Daniel learns waxing on and buYing oY car wax by hand has rewards for Karate, LANL is choosing the harder path of self-hosting Large Language Models (LLMs) for enterprise use instead of only relying on buying access to a hosted AI service like Azure’s OpenAI Application Programming Interface (API). We also are not willing to wait for software-as-a-service (SAAS) AI services to meet us where we need to be from a FedRAMP accreditation standpoint. Our operations regularly depend on access at CUI, UCNI, ITAR and other FIPS-199 moderate-impact data levels and hosting our own services gives us the right security and compliance posture to be useful across the broad range of our work at LANL. With the rise in threats to critical infrastructure, cloud service providers (CSPs), and supply chain attacks from both state and non-state actors, we are not placing the bet that SAAS hosted AI services will be available when we need them. Should a major event occur, we do not want our staY and operations left without a pathway for us to fix the problem and resume the use of AI tools.

42 ENGINEERING↗

Data Centers and Digital Assurance Workshop 2 – Prioritizing Digital Assurance Challenges, Session 2

The second session of the TADA (Technical Assistance for Digital Assurance) Data Centers Cohort, held on November 10, 2025, focused on prioritizing digital assurance challenges at the intersection of data centers and the electric grid. Building on the foundational concepts introduced in Workshop 1, this session deepened the application of the Threat–Vulnerability–Consequence (TVC) framework and emphasized the urgency of addressing cybersecurity, supply chain integrity, and operational reliability. Participants explored the growing convergence of digital and physical systems, the expanding attack surface due to global supply chain dependencies, and the implications of AI-driven load behavior. Real-world incidents—including the Volt Typhoon campaign and vulnerabilities in Solarman and Deye platforms—were analyzed to illustrate the risks of unpatched systems, insecure APIs, and inadequate vendor oversight. Key themes included architecture and interface weaknesses, governance gaps, and human and procedural shortcomings. The workshop also examined the evolving regulatory landscape, highlighting new federal mandates around Foreign Entity of Concern (FEOC) compliance and large-load reliability standards. Through interactive exercises, stakeholders ranked and mapped digital assurance risks from their respective perspectives—utilities, operators, and vendors—laying the groundwork for mitigation strategies and shared accountability models to be developed in Workshop 3. Session 2 of 3.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

Computational Methods to Accelerate Development of Corrosion Resistant Coatings for Industrial Gas Turbines

Oxidation resistant overlay coatings protect the underlying superalloy component in industrial gas turbines from oxidation attack. Rate of depletion of the Al-rich β-phase in the bond coat governs the lifetime of these coatings. The applicability of a computational method in accelerating the development of corrosion resistant coatings and significantly reducing the extensive experimental effort to predict coating lifetimes and microstructural changes in three-coated Ni-based superalloys for real operational durations (20–40 kh) was undertaken in the present study. Scanning electron microscopy (SEM), energy dispersive X-ray spectroscopy (EDX), and electron microprobe analysis (EPMA) were employed to characterize MCrAlY-coated superalloy substrates (1483, 247 and X4) after exposure at 900 °C in air + 10% H 2 O for up to 20,000 h. The model predicted the longest coating lifetime for the coating on X4 substrate. Precipitation of γ' in the coatings was correctly predicted for all three coating systems. Additionally, the model was able to predict the formation of topologically close packed (TCP)-phases in the investigated coating systems.

Pillai, Rishi R.↗

Radiation exposure induces cross-species temporal metabolic changes that are mitigated in mice by amifostine

Exposure to acute, damaging radiation may occur through a variety of events from cancer therapy and industrial accidents to terrorist attacks and military actions. Our understanding of how to protect individuals and mitigate the effects of radiation injury or Acute Radiation Syndrome (ARS) is still limited. There are only a few Food and Drug Administration-approved therapies for ARS; whereas, amifostine is limited to treating low dose (0.7–6 Gy) radiation poisoning arising from cancer radiotherapy. An early intervention is critical to treat ARS, which necessitates identifying diagnostic biomarkers to quickly characterize radiation exposure. Towards this end, a multiplatform metabolomics study was performed to comprehensively characterize the temporal changes in metabolite levels from mice and non-human primate serum samples following γ-irradiation. The metabolomic signature of amifostine was also evaluated in mice as a model for radioprotection. The NMR and mass spectrometry metabolomics analysis identified 23 dysregulated pathways resulting from the radiation exposure. These metabolomic alterations exhibited distinct trajectories within glucose metabolism, phospholipid biosynthesis, and nucleotide metabolism. A return to baseline levels with amifostine treatment occurred for these pathways within a week of radiation exposure. Together, our data suggests a unique physiological change that is independent of radiation dose or species. Furthermore, a metabolic signature of radioprotection was observed through the use of amifostine prophylaxis of ARS.

59 BASIC BIOLOGICAL SCIENCES↗

Operando XPS for Plasma Process Monitoring: A Case Study on the Hydrogenation of Copper Oxide Confined under h-BN

Here, we demonstrate that ambient pressure x-ray photoelectron spectroscopy (APXPS) can be used for in situ studies of dynamic changes in surface chemistry in a plasma environment. This opens a new and vast application space for XPS and greatly complements modern spectroscopy techniques to probe plasma-solid/liquid interactions relevant to process monitoring in the semiconductor industry, bio-medical plasma applications and plasma remediation technologies. Hexagonal boron nitride (h-BN) grown on Cu was used in this study as a well-defined model system for plasma process monitoring and because of its unique chemical, optical and electrical properties that make it a prospective material for advanced electronics. To better understand the stability and surface chemistry of h-BN during plasma assisted processing, we track in real time the plasma-induced chemical state changes of B, N and the underlying Cu substrate using APXPS equipped with an AC discharge plasma source operating at 13 Pa. Residual gas analysis (RGA) mass-spectra were concurrently collected during plasma-XPS to track reaction products formed during plasma exposure. A clear reduction of Cu x O is seen, while an h-BN layer remains intact, suggesting hydrogen radical (H • ) species can attack the exposed and h-BN covered Cu oxide patches and partially reduce the underlying substrate without significantly damaging the overlaying h-BN, which is of practical importance for development of h-BN encapsulated devices and interfaces. In addition to demonstration of plasma-XPS capabilities we discuss the observed challenges (e.g., parasitic plasma-chamber walls reactions and charging effects) and propose potential solutions.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Intergranular corrosion of Ni-30Cr in high-temperature hydrogenated water after removing surface passivating film

Abstract High-resolution transmission electron microscopy and atom probe tomography are used to characterize the initial passivation and subsequent intergranular corrosion of degraded grain boundaries in a model Ni-30Cr alloy exposed to 360 °C hydrogenated water. Upon initial exposure for 1000 h, the alloy surface directly above the grain boundary forms a thin passivating film of Cr 2 O 3 , protecting the underlying grain boundary from intergranular corrosion. However, the metal grain boundary experiences severe Cr depletion and grain boundary migration during this initial exposure. To understand how Cr depletion affects further corrosion, the local protective film was sputtered away using a glancing angle focused ion beam. Upon further exposure, the surface fails to repassivate, and intergranular corrosion is observed through the Cr-depleted region. Through this combination of high-resolution microscopy and localized passive film removal, we show that, although high-Cr alloys are resistant to intergranular attack and stress corrosion cracking, degradation-induced changes in the underlying metal at grain boundaries make the material more susceptible once the initial passive film is breached.

(S)TEM↗

Shifting Left for Machine Learning: An Empirical Study of Security Weaknesses in Supervised Learning-based Projects

Context: Supervised learning-based projects (SLPs), i.e., software projects that use supervised learning algorithms, such as decision trees are useful for performing classification-related tasks. Yet, security weaknesses, such as the use of hard-coded passwords in SLPs, can make SLPs susceptible to security attacks. A characterization of security weaknesses in SLPs can help practitioners understand the security weaknesses that are frequent in SLPs and adopt adequate mitigation strategies. Objective: The goal of this paper is to help practitioners se-curely develop supervised learning-based projects by conducting an empirical study of security weaknesses in supervised learning-based projects. Methodology: We conduct an empirical study by quantifying the frequency of security weaknesses in 278 open source SLPs. Results: We identify 22 types of security weaknesses that occur in SLPs. We observe ‘use of potentially dangerous function’ to be the most frequently occurring security weakness in SLPs. Of the identified 3,964 security weaknesses, 23.79 % and 40.49 % respectively, appear for source code files used to train and test models. We also observe evidence of co-location, e.g., instances of command injection co-locates with instances of potentially dangerous function. Conclusion: Based on our findings, we advocate for a shift left approach for SLP development with security-focused code reviews, and application of security static analysis.

Bhuiyan, Farzana Ahamed↗

XploreNAS : Explore Adversarially Robust and Hardware-efficient Neural Architectures for Non-ideal Xbars

Compute In-Memory platforms such as memristive crossbars are gaining focus as they facilitate acceleration of Deep Neural Networks (DNNs) with high area and compute efficiencies. However, the intrinsic non-idealities associated with the analog nature of computing in crossbars limits the performance of the deployed DNNs. Furthermore, DNNs are shown to be vulnerable to adversarial attacks leading to severe security threats in their large-scale deployment. Thus, finding adversarially robust DNN architectures for non-ideal crossbars is critical to the safe and secure deployment of DNNs on the edge. This work proposes a two-phase algorithm-hardware co-optimization approach called XploreNAS that searches for hardware efficient and adversarially robust neural architectures for non-ideal crossbar platforms. We use the one-shot Neural Architecture Search approach to train a large Supernet with crossbar-awareness and sample adversarially robust Subnets therefrom, maintaining competitive hardware efficiency. Our experiments on crossbars with benchmark datasets (SVHN, CIFAR10, CIFAR100) show up to ~8–16% improvement in the adversarial robustness of the searched Subnets against a baseline ResNet-18 model subjected to crossbar-aware adversarial training. We benchmark our robust Subnets for Energy-Delay-Area-Products (EDAPs) using the Neurosim tool and find that with additional hardware efficiency–driven optimizations, the Subnets attain ~1.5–1.6× lower EDAPs than ResNet-18 baseline.

97 MATHEMATICS AND COMPUTING↗