SEARCH · Engineering Papers

Results for “threat”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 559 records · Page 31

All sources NASA NTRS DOE OSTI

DOE OSTI2024

Cy-Phy ADS: Cyber Physical Anomaly Detection Framework for EV Charging Systems

Today’s large-scale Electric Vehicle (EV) infrastructures are heavily dependent on information communication technologies to maintain their operation and to support communication within sub-system components as well as the outside world. These technologies are vulnerable to various cyber and physical threats. Timely identification and mitigation of these threats are critical for improving human safety, avoiding economic losses, and preventing catastrophic system failures. By addressing this, our work presents a ResNet Autoencoder (AE) based Cyber-Physical Anomaly Detection System (Cy-Phy ADS) for detecting anomalies in EV Controller Area Network (CAN) protocol communication. It consists of four main components: Cyber-Physical Feature Extractor, ResNet AE-based Anomaly Detection Framework, Cyber-Physical Health Metric (CPHM), and Visualization Dashboard. The presented framework was trained and tested using CAN data collected from the EV charging system testbed at the Idaho National Laboratory. The presented Cy-Phy ADS compared against six widely used unsupervised anomaly detection algorithms: One Class Support Vector Machine (OCSVM), Variational Autoencoder (VAE), LSTM Autoencoder (LSTM AE), Isolation Forest (IForest), Principle Component Analysis (PCA) and Local Outlier Factor (LOF). Here the presented approach showed the highest accuracy among the compared methods. Further, the proposed approach showed comparable performance in terms of precision, F1, and False positive rate. It also showed the lowest training and inference time compared to the neural network-based baseline algorithms compared against with. Additionally, the Cy-Phy ADS has advantages such as unsupervised training, the ability to provide a holistic metric for system health characterization, and non-linear feature extraction.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2020

Design and Implementation of Full-Scale Industrial Control System Test Bed for Assessing Cyber-Security Defenses

In response to the increasing awareness of the Ethernet-based threat surface of industrial control systems (ICS), both the research and commercial communities are responding with ICS-specific security solutions. Unfortunately, many of the properties of ICS environments that contribute to the extent of this threat surface (e.g. age of devices, inability or unwillingness to patch, criticality of the system) similarly prevent the proper testing and evaluation of these security solutions. Production environments are often too fragile to introduce unvetted technology and most organizations lack test environments that are sufficiently consistent with production to yield actionable results. Cost and space requirements prevent the creation of mirrored physical environments leading many to look towards simulation or virtualization. Examples in literature provide various approaches to building ICS test beds, though most of these suffer from a lack of realism due to contrived scenarios, synthetic data and other compromises. In this paper, we provide a design methodology for building highly realistic ICS test beds for validating cybersecurity defenses. We then apply that methodology to the design and building of a specific test bed and describe the results and experimental use cases.

Gillen, Rob↗

DOE OSTI2020

HAZARD ANALYSIS OF DIGITAL ENGINEERED SAFETY FEATURES ACTUATION SYSTEM IN ADVANCED NUCLEAR POWER PLANTS USING A REDUNDANCY-GUIDED APPROACH

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. This paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the triggers of potential single points of failure in the design of digital safety systems in advanced plant designs.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2020

Discovering the Molecular Determinants of Phaeobacter inhibens Susceptibility to Phaeobacter Phage MD18

Bacteriophages are useful nonantibiotic therapeutics for bacterial infections as well as threats to industries utilizing bacterial agents. This study identified Phaeobacter virus MD18 , a phage antagonist of Phaeobacter inhibens , a bacterium with promising use as a probiotic for aquatic farming industries. Genomic analysis suggested that Phaeobacter phage MD18 has evolved to enhance its replication in P. inhibens by adopting favorable tRNA genes as well as through genomic sequence adaptation to resemble host codon usage. Lastly, a high-throughput analysis of P. inhibens transposon insertion mutants identified genes that modulate host susceptibility to phage MD18 and implicated the type IV pilus as the likely receptor recognized for adsorption. This study marks the first characterization of the relationship between P. inhibens and an environmentally sampled phage, which informs our understanding of natural threats to the bacterium and may promote the development of novel phage technologies for genetic manipulation of this host.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2021

Security assessment and impact analysis of cyberattacks in integrated T&D power systems

In this paper, we examine the impact of cyberattacks in an integrated transmission and distribution (T&D) power grid model with distributed energy resource (DER) integration. We adopt the OCTAVE Allegro methodology to identify critical system assets, enumerate potential threats, analyze and prioritize risks for threat scenarios. Based on the analysis, attack strategies and exploitation scenarios are identified which could lead to system compromise. Specifically, we investigate the impact of data integrity attacks in inverted-based solar PV controllers, control signal blocking attacks in protective switches and breakers, and coordinated monitoring and switching time-delay attacks. Index Terms—Cyberattacks, security assessment, impact analysis, case studies, integrated power systems.

14 SOLAR ENERGY↗

DOE OSTI2023

Machine Learning-based Intrusion Detection for Smart Grid Computing: A Survey

Machine learning (ML)-based intrusion detection system (IDS) approaches have been significantly applied and advanced the state-of-the-art system security and defense mechanisms. In smart grid computing environments, security threats have been significantly increased as shared networks are commonly used, along with the associated vulnerabilities. However, compared to other network environments, ML-based IDS research in a smart grid is relatively unexplored, although the smart grid environment is facing serious security threats due to its unique environmental vulnerabilities. In this article, we conducted an extensive survey on ML-based IDS in smart grids based on the following key aspects: (1) The applications of the ML-based IDS in transmission and distribution side power components of a smart power grid by addressing its security vulnerabilities; (2) dataset generation process and its usage in applying ML-based IDSs in the smart grid; (3) a wide range of ML-based IDSs used by the surveyed papers in the smart grid environment; (4) metrics, complexity analysis, and evaluation testbeds of the IDSs applied in the smart grid; and (5) lessons learned, insights, and future research directions.

SCADA↗

DOE OSTI2020

STAR

Structured Threat Automated Response (STAR) is a script that creates a python run-time for automated response action included in the Structure Threat Information Expression (STIX) Course of Action object. This script can parse a valid STIX json file and execute the included Course of Action.

McClurg, BryceL↗

DOE OSTI2021

Artificial Diversity and Defense Security (ADDSec)

Artificial Diversity and Defense Security (ADDSec) machine learning algorithms are used to classify and cluster threats so that an appropriate response can be initiated as a mitigation strategy. The package includes an ensemble of machine learning algorithms such as Support Vector Machines, naïve bayes, logistic regression, and random forest that evolve with the data to recognize anomalous behavior at the host and network levels. Inputs into the machine learning algorithms include end host system calls, system utilization, packet captures, and syslog messages. The machine learning algorithms can be retrained based on user defined intervals or on the number of packets received. ADDSEC's threat responses include Internet Protocol (IP) Address randomization, application port number randomization, and application library randomization. The IP randomization implementation is built on top of a Software Defined Networking (SDN) framework. The SDN controller installs flows on each of the SDN switches with randomized source and destination IP addresses. The application port numbers are randomized using iptables. The application library randomization is created with a LLVM compiler. All randomization schemes are transparent to the endpoints on the network. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2021-3379 O

Cox, RebeccaE.↗

DOE OSTI2022

ATIS

Any Threat Intelligence to STIX (ATIS) autogenerates and enriches STIX bundles with data from open source threat intelligence sources.

McCampbell, Taylor↗

DOE OSTI2023

idaholab/cape2stix

This software allows for the conversion, extraction, and transformation of malware behavior data from "Malware Configuration And Payload Extraction" (CAPEv2) sandbox reports, to Structured Threat Information eXpression (STIX). This allows for further analysis to be performed, sharing of threat data, and transit to a graph database.

Cutshaw, Michael [Idaho National Laboratory (INL),↗

DOE OSTI2024

RESCue Model (RESCue Experiment and Model) [SWR-24-84]

The Renewable Energy and Storage Cybersecurity Research (RESCue) project is a collaborative effort aimed at securing the rapidly growing deployment of transmission-connected hybrid renewable energy systems, consisting of a combination of wind, solar, and/or energy storage equipment, against escalating cyber threats. This project brings together major original equipment manufacturers (OEMs) of wind, solar, and energy storage, along with major asset owners and DOE National Laboratories, to collectively identify cyber threats, assess risks, and develop robust cybersecurity strategies and solutions. The development of hybrid reference architectures has provided comprehensive blueprints for the secure design and integration of hybrid renewable energy systems, accounting for their unique characteristics and interdependencies. Additionally, NREL has created a cyber-resilient design framework that integrates cybersecurity considerations from the start of the system lifecycle, ensuring security is "baked in" from the initial design phase. The research thrusts for the project included (i) development of hybrid reference architectures and (ii) a cyber-resilient design framework for hybrid energy systems. The reference architectures has provided comprehensive blueprints for the secure design and integration of hybrid renewable energy systems, accounting for their unique characteristics and interdependencies. Additionally, NREL has created a cyber-resilient design framework that integrates cybersecurity considerations from the start of the system lifecycle, ensuring security is "baked in" from the initial design phase. A demonstration experiment was developed for one of the architectures using NREL's Cyber Range resources. This experiment configuration, deployable using open-source tools, is provided here in this repository. Additional models were developed for the wind and solar architectures as well, however the configurations for only the Energy Storage scenario are provided here: https://www.nrel.gov/docs/fy24osti/89921.pdf

Hasandka, Adarsh↗

DOE OSTI2024

Collection And Analysis Of Telemetry For The Cyote Heuristic

CATCH CLI focuses on gathering telemetry data, storing it in the Neo4j database, querying for Mitre ATT&CK patterns, and creating STIX 2.1 reports. Key Components: Analysis Modules: Analyze data to detect attack patterns. GoSTOTS Collection Engines: Collect telemetry data. These tools can be used together or individually. Analysis modules rely on data from specific engines to identify attack patterns. Source Code Organization: Engines: CATCH/catch/cmd/collection Modules: CATCH/catch/cmd/analysis CGUI Overview CATCH Graphical User Interface (CGUI) offers a graphical shell to execute CATCH CLI, allowing easy editing of: Analysis Modules Database configurations Profiles (collection and device settings) Neo4j Overview Neo4j is a graph database using the Cypher query language, storing data in JSON. It seamlessly integrates with STIX 2.1 data for: Data Submission: CATCH Collection Engines Data Querying: Analysis Modules CATCH modifies STIX 2.1 data for Neo4j submission and reverts it back during querying. STIG Overview Structured Threat Intelligence Graph (STIG) is a tool for creating, editing, querying, analyzing, and visualizing threat intelligence using STIX 2.1 and storing data in Neo4j. Usage Tools can be run: Manually (CLI): Refer to CATCH documentation User Interface: Run ./cgui/CGUI or go run ./cgui/ Additional Information Logging System: Detailed in the config documentation Further Documentation: Available for CATCH and CGUI

Madsen, MichaelJ. [Idaho National Laboratory (INL)↗

DOE OSTI2020

Data for Training and Testing Radiation Detection Algorithms in an Urban Environment

The US government routinely performs radiological response deployments to search for the presence of illicit nuclear materials (e.g., highly enriched uranium and weapons-grade plutonium) in a specified area. The deployments can be intelligence driven, in support of law enforcement, and for planned events such as WrestleMania, presidential inaugurations, or political conventions. In a typical deployment, radiation detection systems carried by human operators or mounted on vehicles move in a clearing pattern through the search area. Search teams rely on radiation detection algorithms running on these systems in real time to alert them to the presence of an illicit threat source. The detection and identification of sources is complicated by large variation of natural radiation background throughout a search area and the potential presence of localized non-threat sources such as patients undergoing treatment with medical isotopes. As a result, detection algorithms must be carefully balanced between missing real sources (false negatives) and reporting too many false alarms (false positives).The purpose of this data set is to spur innovations in detecting, identifying, and localizing nuclear materials inurban search missions.

07 ISOTOPE AND RADIATION SOURCES↗

DOE OSTI2021

Modulation of sensory perception by hydrogen peroxide enables Caenorhabditis elegans to find a niche that provides both food and protection from hydrogen peroxide

Hydrogen peroxide (H 2 O 2 ) is the most common chemical threat that organisms face. Here, we show that H 2 O 2 alters the bacterial food preference of Caenorhabditis elegans , enabling the nematodes to find a safe environment with food. H 2 O 2 induces the nematodes to leave food patches of laboratory and microbiome bacteria when those bacterial communities have insufficient H 2 O 2 -degrading capacity. The nematode’s behavior is directed by H 2 O 2 -sensing neurons that promote escape from H 2 O 2 and by bacteria-sensing neurons that promote attraction to bacteria. However, the input for H 2 O 2 -sensing neurons is removed by bacterial H 2 O 2 -degrading enzymes and the bacteria-sensing neurons’ perception of bacteria is prevented by H 2 O 2 . The resulting cross-attenuation provides a general mechanism that ensures the nematode’s behavior is faithful to the lethal threat of hydrogen peroxide, increasing the nematode’s chances of finding a niche that provides both food and protection from hydrogen peroxide.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2023

Reverse-zoonoses of 2009 H1N1 pandemic influenza A viruses and evolution in United States swine results in viruses with zoonotic potential

The 2009 H1N1 pandemic (pdm09) lineage of influenza A virus (IAV) crosses interspecies barriers with frequent human-to-swine spillovers each year. These spillovers reassort and drift within swine populations, leading to genetically and antigenically novel IAV that represent a zoonotic threat. We quantified interspecies transmission of the pdm09 lineage, persistence in swine, and identified how evolution in swine impacted zoonotic risk. Human and swine pdm09 case counts between 2010 and 2020 were correlated and human pdm09 burden and circulation directly impacted the detection of pdm09 in pigs. However, there was a relative absence of pdm09 circulation in humans during the 2020–21 season that was not reflected in swine. During the 2020–21 season, most swine pdm09 detections originated from human-to-swine spillovers from the 2018–19 and 2019–20 seasons that persisted in swine. We identified contemporary swine pdm09 representatives of each persistent spillover and quantified cross-reactivity between human seasonal H1 vaccine strains and the swine strains using a panel of monovalent ferret antisera in hemagglutination inhibition (HI) assays. The swine pdm09s had variable antigenic reactivity to vaccine antisera, but each swine pdm09 clade exhibited significant reduction in cross-reactivity to one or more of the human seasonal vaccine strains. Further supporting zoonotic risk, we showed phylogenetic evidence for 17 swine-to-human transmission events of pdm09 from 2010 to 2021, 11 of which were not previously classified as variants, with each of the zoonotic cases associated with persistent circulation of pdm09 in pigs. These data demonstrate that reverse-zoonoses and evolution of pdm09 in swine results in viruses that are capable of zoonotic transmission and represent a potential pandemic threat.

60 APPLIED LIFE SCIENCES↗

DOE OSTI2023

Demonstrating the Transient System Impact of Cyber-Physical Events Through Scalable Transmission and Distribution (T&D) Co-Simulation

Modern power systems become more vulnerable to cyber threats due to their growing interconnectivity, interdependence, and complexity. Widespread deployment of distributed energy resources (DERs) further expands the threat landscape to the grid edge, where fewer cybersecurity protections exist. In this article, a systematic cyber-physical events demonstration, enabled by an integrated transmission, distribution, and communication co-simulation framework, is performed. It analyzes cyber risks to power grid under DER-enabled automatic generation control from different angles. Unlike existing works, the simulation captures millisecond-to-minutes frequency and voltage transient dynamics at a cross-region system scale.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2020

Power Plant Water Risk and Adaptive Measures Database

Project objective was to understand water-related constraints affecting conventional powerplant operations, specifically coal-fired power plants. Of concern were threats related to drought and flood affecting both water supply and ability of plant to discharge wastewater. Also of interest were adaptive measures taken to mitigate identified threats. This spreadsheet contains the responses provided by the power plant operators and owners. Data have been "sanitized" (e.g., random plant ID, binned location and generation capacity information) to ensure anonymity of individual power plants.

Adaptive Measures↗

DOE OSTI2020

Climate Change Science Review 2018 and Associated Social and Economic Impacts

Climate change and its impacts on average temperature, water supply, agriculture, coastal flooding, biodiversity, social and economic stability, human migration, and overall global stability is one of the leading threats emerging for humanity, and is likely to increase as a threat for decades to come. This report represents a snapshot of climate change data, information, and understanding, as of 2018, and can serve as a kind of benchmark for changes going forward in time. This report covers temperature change and heat effects, atmospheric and ocean circulation, freshwater supply changes, sea level rise and flooding, extreme climate events, oceanic deoxygenation, land degredation, social and economic changes, migration, and food. Data and information on all these issues represent a compelling body of knowledge supporting the scientific hypothesis describing climate change, and an important mile marker in our effort to track the unfolding nature of the problem. A slide presentation that summarizes the content of this report is in Appendix A and can serve as an executive summary for the report.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗