Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “attack detection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

517 records · Page 29
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

The Design and Evaluation of Zero Trust Architecture for Electric Vehicle Charging Infrastructure: EVs @ Scale Series on EV Charging Station Cybersecurity

Implementing a zero trust architecture can significantly bolster the security of electric vehicle (EV) charging infrastructure. EV charging infrastructure includes numerous networked interfaces, each of which can present potential vulnerabilities. When these vulnerabilities are exploited, they can compromise the entire system, leading to severe operational and security risks. Zero trust is a security model that operates on the principle of "never trust, always verify," which helps manage the attack surface and limit the scope of any potential compromises. Fundamentally, this model ensures that no entity, whether inside or outside the network, is trusted by default. The design principles of zero trust include continuous verification, strict deny-by-default access controls, and micro-segmentation. Continuous verification ensures that every request is thoroughly checked, regardless of its origin. Strict access controls enforce the principle of least privilege, allowing users and devices only the minimum necessary access to perform their functions. Micro-segmentation involves dividing the network into smaller, isolated segments to prevent lateral movement in case of a breach. In the context of EV charging infrastructure, zero trust can be implemented through various strategies. For example, multi-factor authentication (MFA) can be required for engineers to access the management interfaces and control systems of charging stations. Real-time monitoring and analysis of network traffic can help detect and respond to anomalies. Systems that do not need to communicate with each other can be micro-segmented to enhance security. All communications should adhere to predefined policies to be permitted. Additionally, encrypting communications can protect sensitive information exchanged between chargers and management systems. This paper presents a zero trust architecture specifically designed for EV charging infrastructure. Implementing zero trust not only mitigates risks but also builds a resilient infrastructure capable of withstanding and quickly recovering from cyber threats. The architecture addresses six defined security objectives. A comprehensive test plan is developed to assess the architecture against these objectives, and the results of the evaluation are reported. This approach is essential for maintaining the reliability and integrity of EV charging services in an increasingly interconnected and vulnerable digital landscape. This is the first in a planned series of papers exploring the implementation of zero trust in EV charging infrastructure. Each paper will delve into different aspects and applications of zero trust, highlighting how various work processes and requirements can lead to distinct architectural designs. These architectures will be tailored to address specific security challenges and operational needs within the EV charging ecosystem, ensuring a robust and adaptable security framework.

33 ADVANCED PROPULSION SYSTEMS↗
NASA NTRS2013

Siberian Pine Decline and Mortality in Southern Siberian Mountains

The causes and resulting spatial patterns of Siberian pine mortality in eastern Kuznetzky Alatau Mountains, Siberia were analyzed based on satellite (Landsat, MODIS) and dendrochronology data. Climate variables studied included temperature, precipitation and Standardized Precipitation-Evapotranspiration Index (SPEI) drought index. Landsat data analysis showed that stand mortality was first detected in the year 2006 at an elevation of 650 m, and extended up to 900 m by the year 2012. Mortality was accompanied by a decrease in MODIS derived vegetation index (EVI).. The area of dead stands and the upper mortality line were correlated with increased drought. The uphill margin of mortality was limited by elevational precipitation gradients. Dead stands (i.e., >75% tree mortality) were located mainly on southern slopes. With respect to slope, mortality was observed within a 7 deg - 20 deg range with greatest mortality occurring on convex terrain. Tree radial incrementmeasurements correlate and were synchronous with SPEI (r sq = 0.37, r(sub s) = 80). Increasing synchrony between tree ring growth and SPEI indicates that drought has reduced the ecological niche of Siberian pine. The results also showed the primary role of drought stress on Siberian pine mortality. A secondary role may be played by bark beetles and root fungi attacks. The observed Siberian pine mortality is part of a broader phenomenon of "dark needle conifers" (DNC, i.e., Siberian pine, fir and spruce) decline and mortality in European Russia, Siberia, and the Russian Far East. All locations of DNC decline coincided with areas of observed drought increase. The results obtained are one of the first observations of drought-induced decline and mortality of DNC at the southern border of boreal forests. Meanwhile if model projections of increased aridity are correct DNC, within the southern part of its range may be replaced by drought-resistant Pinus silvestris and Larix sibirica.

tree die-off↗
NASA NTRS1995

An overview of the Evaluation of Oxygen Interactions with Materials 3 experiment: Space Shuttle Mission 46, July-August 1992

The Evaluation of Oxygen Interactions with Materials 3 (EOIM-3) flight experiment was developed to obtain benchmark atomic oxygen reactivity data and was conducted during Space Transportation System Mission 46 (STS-46), July 31 to August 7, 1992. In this paper, we present an overview of EOIM-3 and the results of the Lyndon B. Johnson Space Center (JSC) materials reactivity and mass spectrometer/carousel experiments. Mass spectrometer calibration methods are discussed briefly, as a prelude to a detailed discussion of the mass spectrometric results produced during STS-46. Mass spectrometric measurements of ambient O-atom flux and fluence are in good agreement with the values calculated using the MSIS-86 model of the thermosphere as well as estimates based on the extent of O-atom reaction with Kapton polyimide. Mass spectrometric measurements of gaseous products formed by O-atom reaction with C(13) labeled Kapton revealed CO, CO2, H2O, NO, and NO2. Finally, by operating the mass spectrometer so as to detect naturally occurring ionospheric species, we characterized the ambient ionosphere at various times during EOIM-3 and detected the gaseous reaction products formed when ambient ions interacted with the C(13) Kapton carousel sector. By direct comparison of the results of on-orbit O-atom exposures with those conducted in ground-based laboratory systems, which provide known O-atom fluences and translational energies, we have demonstrated the strong translational energy dependence of O-atom reactions with a variety of polymers. A 'line-of-centers' reactive scattering model was shown to provide a reasonably accurate description of the translational energy dependence of polymer reactions with O atoms at high atom kinetic energies while a Beckerle-Ceyer model provided an accurate description of O-atom reactivity over a three order-of-magnitude range in translational energy and a four order-of-magnitude range in reaction efficiency. Postflight studies of the polymer samples by x-ray photoelectron spectroscopy and infrared spectroscopy demonstrate that O-atom attack is confined to the near-surface region of the sample, i.e. within 50 to 100 A of the surface.

Koontz, Steven L.↗
NASA NTRS2013

Network Penetration Testing and Research

This paper will focus the on research and testing done on penetrating a network for security purposes. This research will provide the IT security office new methods of attacks across and against a company's network as well as introduce them to new platforms and software that can be used to better assist with protecting against such attacks. Throughout this paper testing and research has been done on two different Linux based operating systems, for attacking and compromising a Windows based host computer. Backtrack 5 and BlackBuntu (Linux based penetration testing operating systems) are two different "attacker'' computers that will attempt to plant viruses and or NASA USRP - Internship Final Report exploits on a host Windows 7 operating system, as well as try to retrieve information from the host. On each Linux OS (Backtrack 5 and BlackBuntu) there is penetration testing software which provides the necessary tools to create exploits that can compromise a windows system as well as other operating systems. This paper will focus on two main methods of deploying exploits 1 onto a host computer in order to retrieve information from a compromised system. One method of deployment for an exploit that was tested is known as a "social engineering" exploit. This type of method requires interaction from unsuspecting user. With this user interaction, a deployed exploit may allow a malicious user to gain access to the unsuspecting user's computer as well as the network that such computer is connected to. Due to more advance security setting and antivirus protection and detection, this method is easily identified and defended against. The second method of exploit deployment is the method mainly focused upon within this paper. This method required extensive research on the best way to compromise a security enabled protected network. Once a network has been compromised, then any and all devices connected to such network has the potential to be compromised as well. With a compromised network, computers and devices can be penetrated through deployed exploits. This paper will illustrate the research done to test ability to penetrate a network without user interaction, in order to retrieve personal information from a targeted host.

Murphy, Brandon F.↗
NASA NTRS2000

Active Control Technology at NASA Langley Research Center

NASA Langley has a long history of attacking important technical opportunities from a broad base of supporting disciplines. The research and development at Langley in this subject area range from the test tube to the test flight. The information covered here will range from the development of innovative new materials, sensors and actuators, to the incorporation of smart sensors and actuators in practical devices, to the optimization of the location of these devices, to, finally, a wide variety of applications of these devices utilizing Langley's facilities and expertise. Advanced materials are being developed for sensors and actuators, as well as polymers for integrating smart devices into composite structures. Contributions reside in three key areas: computational materials; advanced piezoelectric materials; and integrated composite structures. The computational materials effort is focused on developing predictive tools for the efficient design of new materials with the appropriate combination of properties for next generation smart airframe systems. Research in the area of advanced piezoelectrics includes optimizing the efficiency, force output, use temperature, and energy transfer between the structure and device for both ceramic and polymeric materials. For structural health monitoring, advanced non-destructive techniques including fiber optics are being developed for detection of delaminations, cracks and environmental deterioration in aircraft structures. The computational materials effort is focused on developing predictive tools for the efficient design of new materials with the appropriate combination of properties for next generation smart airframe system. Innovative fabrication techniques processing structural composites with sensor and actuator integration are being developed.

Antcliff, Richard R.↗
DOE OSTI2024

Field test of continuous-variable quantum key distribution with a true local oscillator

A continuous-variable quantum key distribution (CV QKD) using a true local (located at the receiver) oscillator (LO) has been proposed to remove any possibility of side-channel attacks associated with transmission of the LO as well as reduce the cross-pulse contamination. Here we report an implementation of true LO-CV QKD using “off-the-shelf” components and conduct QKD experiments using the fiber optical network at Oak Ridge National Laboratory. A phase reference and quantum signal are time multiplexed and then wavelength division multiplexed with the classical communications that “coexist” with each other on a single optical network fiber. Importantly, this is the first demonstration of CV QKD with a receiver-based true LO over a deployed fiber network, a crucial step for its application in real-world situations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Transfer Learning using Denoising Auto-Encoders for Cellular-Level Annotation of Tumor in Pathology Slides

Adversarial examples can produce altered classifications using only seemingly innocuous, imperceptible perturbations to the original image. The imperceptibility of adversarial perturbations suggests that the corresponding classifiers use decision criteria different than those of a human. In a medical setting, inexplicable decision criteria confound a pathologist’s willingness to trust machine-generated annotations. Here, we analyze denoising tumor detection models to see if they are robust to imperceptible adversarial perturbations. Moreover, to be more fully trusted by pathologists, we require tumor detectors that generate interpretable annotations which segment pathology slides into tumorous and normal regions at the cellular level. We therefore compare transfer learning based on two different autoencoder architectures, one derived from a deep denoising bottleneck autoencoder and one from an over-complete sparse autoencoder. Both autoencoders were first trained in an unsupervised manner on a set of pathology slides drawn from the Camelyon16 dataset. The latent representations produced by each autoencoder were then passed to separate neural networks that were trained in a supervised manner on binary tumor-normal masks generated by pathologists at cellular resolution. Both tumor detectors supported better than 90% AUC PR as measured by the area under the precision/recall curve on a held-out pathology slide. To assess the underlying decision criteria used by both tumor detectors, we constructed imperceptible adversarial examples which reduced the AUC PR of both models to less than 70%. Random noise of the same amplitude had almost no effect on the AUC PR of either model. Additionally, each tumor detector was resistant to adversarial “transfer” attacks targeting the other. The adversarial perturbations showed strong characteristic differences: the deep denoising models perturbations were a very diffuse, seemingly unrecognizable pattern while the sparse coding models perturbations showed traces of tissue cells.

47 OTHER INSTRUMENTATION↗
DOE OSTI2023

White-tailed deer responses to acoustic predator cues are contingent upon past land use and contemporary fire regime

Prey can assess the immediate risk of predation by detecting cues of predator presence, and it is expected that prey should invest in costly antipredator behaviors when a cue of predator presence is detected. Features of the habitat in which the cue is detected, such as vegetative concealment, serve as indirect cues of risk and can mediate how prey respond to direct cues of predator presence. Past agricultural land use and contemporary fire regimes are common disturbances that may modify prey perceptions of risk and could, therefore, alter prey responses to direct cues of predator presence. Here we examined whether the overlap of these two disturbances affected white-tailed deer (Odocoileus virginianus) responses to cues of predator presence by measuring deer vigilance and foraging bout duration in response to coyote (Canis latrans) vocalizations across 20 woodlands that varied in past land use and contemporary fire regime. Frequent fire regimes consistently increased deer visibility to predators across both land-use history contexts. Deer exhibited no behavioral response to the predator cue in habitats containing infrequent fire regimes or agricultural legacies. Deer responded to the cue in frequently burned woodlands without agricultural legacies through increased vigilance and time spent at a foraging location. These findings reveal that land-use legacies and contemporary fire regimes can mediate how prey respond to direct cues of risk. They also suggest that prey may balance the uncertainty associated with cues of predation risk with the urgency of responding to a potential attack by being vigilant and remaining in place.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2024

PRISTINE: An Emulation Platform for PCB-Level Hardware Trojans

Printed circuit Boards (PCBs) are becoming increasingly vulnerable to malicious design alteration, also known as Trojan attacks, due to a distributed business model that often involves various untrusted parties. Such attacks can be mounted at various stages in the PCB life cycle. The relative ease of alteration of PCB hardware even after fabrication (due to physical access to surface-mounted critical components and traces) makes them attractive for an adversary to manipulate their functional/physical behavior for malicious intent. There is a growing need to explore viable Trojan attacks in a PCB, analyze their functional and physical characteristics (e.g., impact on power or delay), and study the effectiveness of countermeasures against these attacks. While simulation-based approaches for PCB Trojan insertion are effective at creating a large population of possible Trojans, they fail to provide functional feasibility analysis with a realistic workload for a trigger circuit. Also, they cannot estimate a Trojan’s side-channel footprint due to the unavailability of physical models of diverse PCB components. To address these deficiencies, in this paper, we present PRISTINE, a PCB-level emulation system for any integrity or physical tampering issues, specifically, hardware Trojan insertion. The need for building such an emulation platform to resolve PCB trust issues in the supply chain is also surveyed and discussed. Both custom Hardware Hacking (HaHa) boards and multiple commercial PCBs are then used to test the ability of the proposed system to emulate various hardware Trojans specially designed to exploit board-specific hardware characteristics. Experimental results on emulated board-level Trojans show that a wide range of Trojans can be successfully activated, thus enabling the expected payload effects on both types of boards to be studied and quantified. The resulting data are further analyzed to create PCB-level Trojan benchmarks. In particular, a comparative evaluation of the experimental results is used to propose a risk level metric that quantifies the probability of detection and degree of payload impact of each Trojan on a given commercial PCB.

47 OTHER INSTRUMENTATION↗
DOE OSTI2024

Enhancing grid reliability and resilience through novel DER control, total situational awareness and integrated distribution-transmission representation

High penetration of distributed energy resources (DERs) can lead to overvoltage and thermal violations, miscoordination of protection devices and potential adverse control interactions. The challenges are exacerbated by a lack of operator situational awareness of behind-the-meter DERs, and T&D interactions. Furthermore, the large attack surface of a DER environment creates significant cyber security challenges. The motivation is to address these barriers. The main goal is to enable extreme levels of DERs in distribution systems while simultaneously enhancing their reliability and resiliency. This is achieved by a data-driven approach for operation, planning and control of distribution systems with total situational awareness and real-time DER control enabled by a network of edge intelligent devices, a cloud-based analytical platform, and secure communications.

14 SOLAR ENERGY↗
NASA NTRS2003

The Meteoritic Component in Impact Deposits

This proposal requested support for a broad-based research program designed to understand the chemical and mineralogical record of accretion of extraterrestrial matter to the Earth. The primary goal of this research is to study the accretion history of the Earth, to understand how this accretion history reflects the long-term flux of comets, asteroids, and dust in the inner solar system and how this flux is related to the geological and biological history of the Earth. This goal is approached by seeking out the most significant projects that can be attacked utilizing the expertise of the PI and potential collaborators. The greatest expertise of the PI is the analysis of meteoritic components in terrestrial sediments. This proposal identifies three primary areas of research, involving impact events in the early Archean (3.2 Ga), the late Eocene (35 Ma) and the late Pliocene (2 Ma). In the early Archean we investigate sediments that contain the oldest recorded impacts on Earth. These are thick spherule beds, three of which were deposited within 20 m.y. If these are impact deposits the flux of objects to Earth at this time was much greater than predicted by current models. Earlier work used Cr isotopes to prove that one of these contain extraterrestrial matter, from a projectile with Cr isotopes similar to CV chondrites. We planned to expand this work to other spherule beds and to search for additional evidence of other impact events. With samples from D. Lowe (Stanford Univ.) the PI proposed to screen samples for high Ir and Cr so that appropriate samples can be provided to A. Shukolyukov for Cr-isotopic analyses. This work was expected to provide evidence that at least one interval in the early Archean was a period of intense bombardment and to characterize the composition of objects accreted. The late Eocene is also a period of intense bombardment with multiple spherule deposits and two large craters. Farley et al. (1998) demonstrated an increased (3)He flux to marine sediments that was attributed to an increase in interplanetary dust due to a shower of comets invading the inner solar system. We planned to detect a change in the Cr-isotopic composition in the flux of fine-grained extraterrestrial matter to ocean sediments. This would provide evidence for the comet shower hypothesis. We planned attempt to locate late Eocene impact deposits in a new high resolution, hi-latitude site that had the potential for excellent preservation and new information of the sources and effects of these impacts. Although most impacts on Earth occur in deep-ocean basins, only one such event is known - the late Pliocene impact of the Eltanin asteroid. The ejecta from this impact includes Ir- rich impact melt, spherules, and actual meteorites from the km-sized mesosiderite asteroid. Through a study of the ejecta, we can learn about the formation, distribution, alteration and preservation of Ir-rich deposits. We can also learn about meteorite survival during hypervelocity impacts and we can study pieces of a km-sized object to learn more about the mesosiderite parent body. Analyses of sediment cores and geophysical exploration of the impact site can further our understanding of the processes involved in deep-ocean impacts and potential effects on the terrestrial climate and biosphere. We planned analyses of this ejecta, a search for ejecta 5000 km distant from the impact area, and a new oceanographic expedition to study and sample the impact site. In addition to these three specific areas of research, the PI planned to remain flexible and available to exploit new opportunities presented by new discoveries, and to engage in new collaborations if other researchers require his expertise to develop new projects that fit within the objectives of the overall research program.

Kyte, Frank T.↗
NASA NTRS1994

High-lift flow-physics flight experiments on a subsonic civil transport aircraft (B737-100)

As part of the subsonic transport high-lift program, flight experiments are being conducted using NASA Langley's B737-100 to measure the flow characteristics of the multi-element high-lift system at full-scale high-Reynolds-number conditions. The instrumentation consists of hot-film anemometers to measure boundary-layer states, an infra-red camera to detect transition from laminar to turbulent flow, Preston tubes to measure wall shear stress, boundary-layer rakes to measure off-surface velocity profiles, and pressure orifices to measure surface pressure distributions. The initial phase of this research project was recently concluded with two flights on July 14. This phase consisted of a total of twenty flights over a period of about ten weeks. In the coming months the data obtained in this initial set of flight experiments will be analyzed and the results will be used to finalize the instrumentation layout for the next set of flight experiments scheduled for Winter and Spring of 1995. The main goal of these upcoming flights will be: (1) to measure more detailed surface pressure distributions across the wing for a range of flight conditions and flap settings; (2) to visualize the surface flows across the multi-element wing at high-lift conditions using fluorescent mini tufts; and (3) to measure in more detail the changes in boundary-layer state on the various flap elements as a result of changes in flight condition and flap deflection. These flight measured results are being correlated with experimental data measured in ground-based facilities as well as with computational data calculated with methods based on the Navier-Stokes equations or a reduced set of these equations. Also these results provide insight into the extent of laminar flow that exists on actual multi-element lifting surfaces at full-scale high-life conditions. Preliminary results indicate that depending on the deflection angle, the slat and flap elements have significant regions of laminar flow over a wide range of angles of attack. Boundary-layer transition mechanisms that were observed include attachment-line contamination on the slat and inflectional instability on the slat and fore flap. Also, the results agree fairly well with the predictions reported in a paper presented at last year's AIAA Fluid Dynamics Conference. The fact that extended regions of laminar flow are shown to exist on the various elements of the high-lift system raises the question what the effect is of loss of laminar flow as a result of insect contamiantion, rain or ice accumulation on high-life performance.

Vandam, Cornelis P.↗
DOE OSTI2022

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗