Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “integrity attacks”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 613 records · Page 34

Integrating security in a group oriented distributed system

A distributed security architecture is proposed for incorporation into group oriented distributed systems, and in particular, into the Isis distributed programming toolkit. The primary goal of the architecture is to make common group oriented abstractions robust in hostile settings, in order to facilitate the construction of high performance distributed applications that can tolerate both component failures and malicious attacks. These abstractions include process groups and causal group multicast. Moreover, a delegation and access control scheme is proposed for use in group oriented systems. The focus is the security architecture; particular cryptosystems and key exchange protocols are not emphasized.

Reiter, Michael↗

Integration effects of pylon geometry on a high-wing transport airplane

An investigation was conducted in the Langley 16-Foot Transonic Tunnel to determine the installation effects of a series of pylons that had differing cross-sectional shapes on the pressure distributions and aerodynamic characteristics of a 1/24-scale high wing transport. The tests were conducted at Mach numbers at 0.70 and 0.80 at angles of attack from -3 degrees to 4 degrees with the pylons tested at various toe angles between 5 degrees inboard and 5 degrees outboard. Results of this study indicate that the installed drag was lowest for the pylons with a compression pylon type design which kept the flow under the wing in the pylon/wing junction comparable to the clean wing velocities.

Carlson, John R.↗

An Euler analysis of leading-edge vortex flows on a forebody-strake at supersonic speeds

The flowfield, surface pressure, and integrated forces and moments for a fighter-type forebody with sharp leading-edge strakes have been obtained by numerical solution of the Euler equations. The method is found to correctly predict the leading-edge vortices and embedded shocks which arise at higher angles of attack. Results are presented for the effects of crossflow grid density, artificial viscosity, angle of attack, streamwise station, and camber on the flow characteristics.

Rose, O. J.↗

Predictor-Corrector Entry Guidance for Reusable Launch Vehicles

An online entry guidance algorithm has been developed using a predictor-corrector approach. The algorithm is designed for the Reusable Launch Vehicle (RLV) and is demonstrated by using, the X-33 model. The objective of the design is to handle widely dispersed entry conditions and deliver the vehicle at the Terminal Area Energy Management (TAEM) interface box within an acceptable tolerance and without violating any of the vehicle physical constraints. Combination of several control variables is used in testing the performance and computational requirement of the algorithm. The control variables are the bank angle, angle-of-attack and the time for roll reversal. The bank angle and angle-of-attack profiles are the nominal profiles plus the perturbations in each direction. The initial guess of the bank profile is a 45 degrees bank angle with reversal at 360 seconds from liftoff. A six-element state vector is propagated to the TAEM interface box through the integration of the equations of motion (EOM). Altitude, heading and range errors are computed between the desired and the achieved state at the TAEM interface. These errors are used to correct the initial guess of the control variables. This process is repeated until the errors meet an acceptable level at the TAEM interface. Several numerical optimization methods are used to evaluate the convergent property of the predictor-predictor methodology. Successful results are demonstrated using the X-33 model.

Youssef, Hussein↗

Assessment of Numerical and Modeling Errors of RANS based Transition Models for Low-Reynolds Numbers 2-D Flows

In this paper we report the outcome of selected workshops organized as part of the NATO Applied Vehicle Technology (AVT)-313 activity Incompressible Laminar-to-Turbulent Flow Transition Study that focused on assessing the numerical and modeling accuracy of the γ−Reθ and γ transition models coupled to the k−ω Shear-Stress Transport (SST) two-equation eddy-viscosity model. Three different test cases involving nominally 2D flow configurations were selected: flow over a flat plate with two different levels of turbulence intensity at the inlet; flow around the Eppler 387 foil at a Reynolds number of 3×10^5 and angles of attack of 1 deg. and 7 deg. flow around the NACA 0015 foil at a Reynolds number of 1.8×10^5 and angles of attack of 5 deg. and10 deg. The flat plate flow conditions correspond to natural and by-pass transition, whereas the other two test cases include laminar separation bubbles that lead to separation-induced transition. For each test case, the selected quantities of interest include both integral and local flow quantities. Geometrically similar grids with a wide range of grid refinement ratios were generated for each of the test cases to allow the estimation of numerical uncertainties for all quantities of interest selected for this study. Several RANS flow solvers were used, employing common grids with the same boundary conditions and mathematical models. Therefore, it is possible to analyze the consistency of the results, i.e., to check if the intervals defined by the different numerical solutions with their respective uncertainties overlap with each other. Modeling errors can also be addressed for the selected flow quantities that have experimental data available. However, the experimental information available in these cases is not sufficient to guarantee that experiments and simulations are performed with the same settings. Nonetheless, the available experimental data is sufficient to guarantee that modeling errors are significantly reduced with the use of the transition models when compared to simulations performed using only the k−ω SST model.

CFD Modeling↗

Towards Secure Autonomous Vehicles: An Integrated Edge and Multi-Modal Machine Learning Framework for Intrusion Detection

Autonomous vehicles (AVs) are vulnerable to cyberattacks targeting both internal communication networks and external perception sensors. While edge-based intrusion de- tection for Controller Area Network (CAN) buses offers real-time protection, it cannot detect cross-modal threats. Conversely, multi-modal fusion approaches improve coverage but often lack efficiency for in-vehicle deployment. This thesis integrates two complemen- tary solutions: (1) a lightweight, edge-deployable machine learning framework for CAN bus intrusion detection, and (2) a late-fusion system combining CAN FD and LiDAR data. Together, they form a hierarchical defense capable of handling single-modality and coordi- nated attacks. Simulations show that CAN-only models reach 93% accuracy on simulated DoS, spoofing, replay, and fuzzy attacks, while the fusion system achieves 0.87 AUC and 0.82 F1-score at 2 ms latency. This unified framework establishes a scalable, explainable, and field-ready strategy for AV cybersecurity.

97 MATHEMATICS AND COMPUTING↗

Cyber-Informed Engineering Implementation Guide

This Implementation Guide describes the principles of Cyber-Informed Engineering (CIE) and outlines questions that engineering teams should consider during each phase of a system’s lifecycle to effectively employ these principles. It describes what it means to engineer systems in a cyber-informed way, rather than offering a comprehensive, step-by-step process or procedure for CIE implementation. This guide complements—but does not replace—the application of cybersecurity standards or practices currently in place within an organization. Engineers and technicians that design critical energy infrastructure installations can use this Implementation Guide to integrate the 12 principles of CIE into each phase of the engineering lifecycle, from concept to retirement. The guide is aimed at system or design engineers, rather than software engineers or operational cybersecurity practitioners. The engineers who design, build, operate, and maintain the physical infrastructure are best positioned to leverage a system’s engineering design to diminish the severity of cyber attacks or digital technology failures. CIE expands cybersecurity decisions into the engineering space, not by asking engineers to become cyber experts, but by calling on engineers to apply engineering tools and make engineering decisions that improve cybersecurity outcomes. CIE examines the engineering consequences that a sophisticated cyber attacker could achieve and drives engineering changes that may provide deterministic mitigations to limit or eliminate those consequences.

42 ENGINEERING↗

Creating an Interprocedural Analyst-Oriented Data Flow Representation for Binary Analysts (CIAO)

National security missions require understanding third-party software binaries, a key element of which is reasoning about how data flows through a program. However, vulnerability analysts protecting software lack adequate tools for understanding data flow in binaries. To reduce the human time burden for these analysts, we used human factors methods in a rolling discovery process to derive user-centric visual representation requirements. We encountered three main challenges: analysis projects span weeks, analysis goals significantly affect approaches and required knowledge, and analyst tools, techniques, conventions, and prioritization are based on personal preference. To address these challenges, we initially focused our human factors methods on an attack surface characterization task. We generalized our results using a two-stage modified sorting task, creating requirements for a data flow visualization. We implemented these requirements partially in manual static visualizations, which we informally evaluated, and partially in automatically generated interactive visualizations, which have yet to be integrated into workflows for evaluation. Our observations and results indicate that 1) this data flow visualization has the potential to enable novel code navigation, information presentation, and information sharing, and 2) it is an excellent time to pursue research applying human factors methods to binary analysis workflows.

42 ENGINEERING↗

Cybersecurity Considerations and Research Pathways for Grid-Interactive Efficient Buildings

Federal facilities serve critical missions and functions that require safe, reliable, and efficient operations. Digitization of several facility operations has increased the cost-effectiveness of energy usage and optimization of energy system performance. As the building controls landscape shifts to become more connected and smarter, building operators now face unique opportunities and challenges to adopt smart enabled devices that can lower energy usage while also optimizing building system performance. The grid-interactive efficient buildings (GEB) initiative aims to make buildings cleaner and more flexible through these smart devices. Smart enabled devices allow greater connectivity and control through remote operations and provide crucial data for analytics and increased efficiency. GEBs enable demand flexibility that has the potential to reduce electrical costs and transform the grid edge where buildings connect to power grids. This operation of interconnected systems, if not designed with cybersecurity practices, causes security gaps and introduces potential attack paths by adversarial and non-adversarial entities leading to disruption of operations.

building controls↗

DEReliction: A Cybersecurity Vulnerability Assessment Methodology for Distributed Energy Resources

With the increasing integration of Distributed Energy Resources (DER) into the electric grid, maintaining grid reliability and resilience requires that these devices remain secure. This paper discusses a cybersecurity vulnerability assessment methodology that incorporates best practices from Sandia National Laboratories, SANS Institute, OWASP Foundation, and other web and Internet of Things (IoT) penetration testing (“pen testing”) programs, courses, and frameworks for assessing the security posture of devices. The methodology involves five sequential steps: (1) Collect Public Information, (2) Extract Hardware Details, (3) Inventory Software Components, (4) Identify Vulnerabilities, and (5) Test Vulnerabilities. Each step uncovers potential weaknesses in both hardware and software components of DER devices, considering adversary tactics, techniques, and procedures (TTPs), and potential attack vectors along the way. The results from the execution of this method on multiple residential- and small commercial-scale photovoltaic (PV) inverters reveled hardware and software vulnerabilities, which highlight the benefit of taking a methodical approach to discover vulnerabilities. While the specific vulnerability details are not shared here, a generalized overview of findings underscore the importance of robust security assessments for DER devices. Adoption of an assessment framework of this kind will identify and mitigate cybersecurity threats and bolster the resilience of DER-integrated electric grids.

24 POWER TRANSMISSION AND DISTRIBUTION↗

A Real-Time Testbed for Smart Inverter Cyber Security Studies

Distributed energy resources (DER) have become a popular solution to modern-day issues surrounding the efficiency and reliability of power generation, as well as climate change concerns. Energy centers are shifting towards incorporating smart inverters with embedded functionalities such as high voltage ride through (HVRT), low voltage ride through (LVRT), active and reactive power compensation. However, the integration of smart inverters leave DER systems highly vulnerable to cybersecurity threats. The distributed network protocol 3 (DNP3) is a common method of communication between grid-tied hardware. Despite its popularity, the level of security leaves all hardware connected to the grid at risk of severe cyber-attacks. Thus, it is important to study any potential cybersecurity threats towards grid-tied smart inverters to mitigate cybersecurity vulnerabilities and refine existing cyber-security protections. This report describes the proposed testbed design to study cybersecurity threats to smart inverters. The testbed utilizes a real-time simulation case in RSCAD that includes a grid-tied wind turbine (WT) topology featuring two back-to-back two-level voltage source converters (BTB,2L-VSCs) and a permanent magnet synchronous machine (PMSM). The simulated case runs within the NovaCor real time digital simulator (RTDS). This report focuses on the design and implementation of a single module of the GTNETx2 card as a distributed network protocol and the configuration of an IEEE 1518 DNP database file that includes input and output variables mapped to different connection points in the grid that transmit and receive discrete, analog, and binary signals on command. This allows realistic emulation of the communication between the smart inverter and the grid for cybersecurity studies.

97 MATHEMATICS AND COMPUTING↗

Cybersecurity Risk Profiles for Distributed Energy Resource Management Systems

Managing the digitalization of increasingly diversity energy resources is a complex challenge for energy systems planners and managers. As the penetration of solar photovoltaics (PV) and other distributed renewable energy resources (DERs) expands, distributed energy resource management systems (DERMS) will play an increasingly important role in managing, monitoring, and controlling DERs as electric systems before more distributed, interconnected, and networked. However, the cybersecurity implications of DERMS deployments are not well understood today. A lack of understanding around the cybersecurity implications of DERMS deployments and variability in the security posture of DERMS vendors, owners, and operators could introduce new security risks to evolving electric power systems. This paper describes cybersecurity attack scenarios on DERMS, identifies related cybersecurity standards and guidelines, reviews the security features of state-of-the-art DERMS solutions, and offers cybersecurity guidance for DERMS vendors, owners, and operators to protect DERMS' unique capabilities. Standardizing cybersecurity requirements for DERMS could help improve the security of DERMS integrations and improve innovations that are more secure by design. The cybersecurity guidance found in this paper is intended to offer a unified approach and lay the foundation for future standardization of DERMS cybersecurity to reduce risk to the solar industry and other renewable energy stakeholders when integrating these technologies with electric power systems.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Wind tunnel investigation of an oblique wing transport model at mach numbers between 0.6 and 1.4

Models of three practical oblique-wing transport configurations were tested in the NASA Ames 11 foot wind tunnel. The three configurations used a common forward fuselage, wing, and support system but employed different aft fuselage sections simulating alternate propulsion system installations. These included an integrated propulsion system, pylon-mounted nacelles, and clean (no propulsion system) configuration. The tests were conducted over a Mach number range from 0.6 to 1.4 and at sweep angles from 0 to 60 degrees. The nominal unit Reynolds number was 1.83 million per meter and the angle of attack range was -3 to +6 degrees. The models were mounted in the tunnel by means of a lower blade support system. The interference effects of this lower blade and the flow inclination were determined by using an image blade system and testing the configuration in both the upright and inverted positions.

Black, R. L.↗

Characteristics of Pressure Sensitive Paint Intrusiveness Effects on Aerodynamic Data

One effect of using pressure sensitive paint (PSP) is the potential intrusiveness to the aerodynamic characteristics of the model. The paint thickness and roughness may affect the pressure distribution, and therefore, the forces and moments on the wind tunnel model. A study of these potential intrusive effects was carried out at NASA Langley Research Center where a series of wind tunnel tests were conducted using the Modem Design of Experiments (MDOE) test approach. The PSP effects on the integrated forces were measured on two different models at different test conditions in both the Low Turbulence Pressure Tunnel (LTPT) and the Unitary Plan Wind Tunnel (UPWT) at Langley. The paint effect was found to be very small over a range of Reynolds numbers, Mach numbers and angles of attack. This is due to the very low surface roughness of the painted surface. The surface roughness, after applying the NASA Langley developed PSP, was lower than that of the clean wing. However, the PSP coating had a localized effects on the pressure taps, which leads to an appreciable decrease in the pressure tap reading.

Amer, Tahani R.↗

Characterization of Pressure Sensitive Paint Intrusiveness Effects on Aerodynamic Data

One effect of using pressure sensitive paint (PSP) is the potential intrusiveness to the aerodynamic characteristics of the model. The paint thickness and roughness may affect the pressure distribution. and therefore, the forces and moments on the wind tunnel model. A study of these potential intrusive effects was carried out at NASA Langley Research Center where a series of wind tunnel tests were conducted using the Modem Design of Experiments (MDOE) test approach. The PSP effects on the integrated forces were measured on two different models at different test conditions in both the Low Turbulence Pressure Tunnel (LTPT) and the Unitary Plan Wind Tunnel (UPWT) at Langley. The paint effect was found to be very small over a range of Reynolds numbers, Mach numbers and angles of attack. This is due to the very low surface roughness of the painted surface. The surface roughness, after applying the NASA Langley developed PSP, was lower than that of the clean wing. However, the PSP coating had a localized effects on the pressure taps, which leads to an appreciable decrease in the pressure tap reading.

Amer, Tahani R.↗

Evaluation of Mars Entry Reconstructured Trajectories Based on Hypothetical 'Quick-Look' Entry Navigation Data

A first order simulation analysis of the navigation accuracy expected from various Navigation Quick-Look data sets is performed. Here quick-look navigation data are observations obtained by hypothetical telemetried data transmitted on the fly during a Mars probe's atmospheric entry. In this simulation study, navigation data consists of 3-axis accelerometer sensor and attitude information data. Three entry vehicle guidance types are studied: I. a Maneuvering entry vehicle (as with Mars 01 guidance where angle of attack and bank angle are controlled); II. Zero angle-of-attack controlled entry vehicle (as with Mars 98); and III. Ballistic, or spin stabilized entry vehicle (as with Mars Pathfinder);. For each type, sensitivity to progressively under sampled navigation data and inclusion of sensor errors are characterized. Attempts to mitigate the reconstructed trajectory errors, including smoothing, interpolation and changing integrator characteristics are also studied.

Pastor, P. Rick↗

Transonic Correction Method for Flight Dynamic Stability Analysis of Mach 0.745 Transonic Truss-Braced Wing

This paper presents a transonic correction method for obtaining dynamic stability derivatives for flight dynamic stability analysis. The method provides a transonic correction to the Theodorsen's theory of unsteady aerodynamics using FUN3D CFD solver of unsteady Reynolds-averaged Navier-Stokes equations (RANS) for a series of wing sections of the Mach 0.745 Transonic Truss-Braced Wing in pitch and plunge oscillations. Unsteady lift and pitching moment coefficients are obtained and used to develop the correction terms in the Theodorsen's theory to account for transonic aerodynamics. The unsteady lift and pitching moment derivatives with respect to the unsteady angle of attack are obtained as frequency response functions of the reduced frequency. These frequency response functions are used to compute the dynamic stability derivatives of lift and pitching moment due to the angle of attack and pitch rate and the dynamic stability derivatives for the rolling moment and yawing moment with respect to the roll rate and yaw rate. A transonic correction is applied to steady-state stability derivatives computed by VSPAERO solver using transonic small disturbance code TSFOIL coupled to an integral boundary method. A dynamic stability analysis is conducted for longitudinal and lateral-directional motions. Without transonic corrections and dynamic stability derivatives, the analysis indicates an unstable phugoid mode. The transonic correction applied to the steady-state stability derivatives computed by VSPAERO shows a stable phugoid mode. This is due to the increase of the drag stability derivatives as a result of the additional wave drag contribution in transonic flow. The effect of the transonic dynamic stability derivatives is observed to be a significant contributor to the increase in the damping values of all the flight dynamic modes of the Mach 0.745 Transonic-Truss Braced Wing.

Transonic↗

Security Analysis of Smart Grid Cyber Physical Infrastructures Using Modeling and Game Theoretic Simulation

Cyber physical computing infrastructures typically consist of a number of sites are interconnected. Its operation critically depends both on cyber components and physical components. Both types of components are subject to attacks of different kinds and frequencies, which must be accounted for the initial provisioning and subsequent operation of the infrastructure via information security analysis. Information security analysis can be performed using game theory implemented in dynamic Agent Based Game Theoretic (ABGT) simulations. Such simulations can be verified with the results from game theory analysis and further used to explore larger scale, real world scenarios involving multiple attackers, defenders, and information assets. We concentrated our analysis on the electric sector failure scenarios and impact analyses by the NESCOR Working Group Study, From the Section 5 electric sector representative failure scenarios; we extracted the four generic failure scenarios and grouped them into three specific threat categories (confidentiality, integrity, and availability) to the system. These specific failure scenarios serve as a demonstration of our simulation. The analysis using our ABGT simulation demonstrates how to model the electric sector functional domain using a set of rationalized game theoretic rules decomposed from the failure scenarios in terms of how those scenarios might impact the cyber physical infrastructure network with respect to CIA.

Availability↗