Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “attack modeling”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 631 records · Page 35
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Coordinated Thermal Safety Attack and Defense on EV Battery Management Systems

Battery temperature sensor and battery current sensor data which are key sensing inputs to the Battery Management Controllers in electric vehicles, are vulnerable to possible cyber/ physical manipulation due to known vulnerabilities inherited from CAN bus technology that is used for in-vehicle communications between electronic control units that transfer sensing and control data. In this paper, we first create a simulation that enables us to evaluate impact of cyber physical attacks on electric vehicle battery management system in a controlled environment that violates thermal safety. Specifically, we emulate a Level 3 - DC fast charging system with SAE J1772/CCS, integrated with standard charging controls and thermal safety controls on EVs, and various sensing data flows. Second, we propose a coordinated current and battery temperature attack that has crippling economic, and safety impacts. Third, we quantify the usability, economic and safety impacts of such attacks as a function of the extent of data manipulation. Finally, we propose a physics model driven detection technique to detect presence of such attacks.

25 ENERGY STORAGE↗
NASA NTRS1976

An evaluation of the method for determining the Whitham F-function using distributions of downwash and sidewash angles

The method of computing the Whitham F function using distributions of downwash and sidewash angles was evaluated with two different models. F functions which were calculated for a half angle cone cylinder at M infinites = 2.01, using theoretically and experimentally derived flow angles, show that the method is sensitive to small inaccuracies in the measured flow angles. An oblique wing transport model was tested at 0 deg angle of attack at M infinitely = 2.01. In this test, two different probes were used at two different distances from the model. The pressure signature derived from the F function was extrapolated and compared to the pressure signature measured at the distance of 0.87 body lengths with the static pressure probe. The agreement between the two pressure signatures was poor due to the many inaccuracies involved in using a probe designed to measure flow angularity.

Mendoza, J. P.↗
DOE OSTI2023

High-fidelity model-driven deception platform for cyber-physical systems

Methods are described for protecting a cyber-physical system against a potential attacker of the system. The methods include a method of generating a plurality of examples for a training data set and training a system model using the training data set to generate a decoy configured to generate a synthetic output that mimics historical outputs generated by the system for a given historical system context. Also described is a method including receiving a system context of a cyber-physical system; receiving an inquiry into the system by a potential attacker; applying a system model to the system context and the inquiry; obtaining from the system model a synthetic output that mimics how a component of the system would respond to the inquiry given the system context; and providing the synthetic output to the potential attacker.

Edgar, Thomas W.↗
NASA NTRS1989

Experimental investigation of the high angle of attack characteristics of a high performance general aviation aircraft

Scale model wind tunnel tests and full scale flight tests have been conducted for the Questair Venture general aviation aircraft configuration in order to investigate its high angle-of-attack aerodynamics. Attention is given to the formulation of a wing leading-edge modification capable of enhancing stall departure characteristics. This modification, which involved both outboard wing leading-edge droop and two chordwise leading-edge slots, is found to produce almost no wing-rock tendency when tested on a wind tunnel free-to-roll apparatus; in the full-scale aircraft, the modification yielded gentle, controllable stall characteristics with little cruise and climb performance penalty.

Meyer, H. F.↗
NASA NTRS2012

Review of the Aerodynamic Acceptance Test and Application to Anti-Icing Fluids Testing in the NRC Propulsion and Icing Wind Tunnel

In recent years, the FAA has worked with Transport Canada, National Research Council of Canada (NRC) and APS Aviation, Inc. to develop allowance times for aircraft operations in ice-pellet precipitation. These allowance times are critical to ensure safety and efficient operation of commercial and cargo flights. Wind-tunnel testing with uncontaminated anti-icing fluids and fluids contaminated with simulated ice-pellets had been carried out at the NRC Propulsion and Icing Wind Tunnel (PIWT) to better understand the flowoff characteristics and resulting aerodynamic effects. The percent lift loss on the thin, high-performance wing model tested in the PIWT was determined at 8 angle of attack and used as one of the evaluation criteria in determining the allowance times. Because it was unclear as to how performance degradations measured on this model were relevant to an actual airplane configuration, some means of interpreting the wing model lift loss was deemed necessary. In this report, the lift loss was related to the loss in maximum lift of a Boeing 737-200ADV airplane through the Aerodynamic Acceptance Test (AAT) performed for fluids qualification. This report provides a review of the research basis of the AAT in order to understand how this correlation was applied. A loss in maximum lift coefficient of 5.24 percent on the B737-200ADV airplane (which was adopted as the threshold in the AAT) corresponds to a lift loss of 7.3 percent on the PIWT model at 8 degrees angle of attack. There is significant scatter in the data used to develop the correlation related to varying effects of the various antiicing fluids that were tested and other factors. A statistical analysis indicated the upper limit of lift loss on the PIWT model was 9.2 percent. Therefore, for cases resulting in PIWT model lift loss from 7.3 to 9.2 percent, extra scrutiny of the visual observations is required in evaluating fluid performance with contamination. Additional research may result in future changes to this correlation.

Broeren, Andy P.↗
NASA NTRS1991

Numerical study of the X-31 high angle-of-attack flow characteristics

The application of CFD methods to high-angle-of-attack flight regimes is studied. The X-31 configuration was chosen as the model due to its inherent designed high-angle-of-attack characteristics and capabilities, the existence of a wind tunnel database, and the ongoing flight test program. The flow characteristics of the X-31 at high angle-of-attack are presented and the CFD capability for studying the effects of canard deflection on aerodynamic control during poststall is revealed.

Yeh, David T.↗
NASA NTRS1984

A study of environmental characterization of conventional and advanced aluminum alloys for selection and design. Phase 2: The breaking load test method

A technique is demonstrated for accelerated stress corrosion testing of high strength aluminum alloys. The method offers better precision and shorter exposure times than traditional pass fail procedures. The approach uses data from tension tests performed on replicate groups of smooth specimens after various lengths of exposure to static stress. The breaking strength measures degradation in the test specimen load carrying ability due to the environmental attack. Analysis of breaking load data by extreme value statistics enables the calculation of survival probabilities and a statistically defined threshold stress applicable to the specific test conditions. A fracture mechanics model is given which quantifies depth of attack in the stress corroded specimen by an effective flaw size calculated from the breaking stress and the material strength and fracture toughness properties. Comparisons are made with experimental results from three tempers of 7075 alloy plate tested by the breaking load method and by traditional tests of statistically loaded smooth tension bars and conventional precracked specimens.

Sprowls, D. O.↗
NASA NTRS1986

STEP and STEPSPL: Computer programs for aerodynamic model structure determination and parameter estimation

The successful parametric modeling of the aerodynamics for an airplane operating at high angles of attack or sideslip is performed in two phases. First the aerodynamic model structure must be determined and second the associated aerodynamic parameters (stability and control derivatives) must be estimated for that model. The purpose of this paper is to document two versions of a stepwise regression computer program which were developed for the determination of airplane aerodynamic model structure and to provide two examples of their use on computer generated data. References are provided for the application of the programs to real flight data. The two computer programs that are the subject of this report, STEP and STEPSPL, are written in FORTRAN IV (ANSI l966) compatible with a CDC FTN4 compiler. Both programs are adaptations of a standard forward stepwise regression algorithm. The purpose of the adaptation is to facilitate the selection of a adequate mathematical model of the aerodynamic force and moment coefficients of an airplane from flight test data. The major difference between STEP and STEPSPL is in the basis for the model. The basis for the model in STEP is the standard polynomial Taylor's series expansion of the aerodynamic function about some steady-state trim condition. Program STEPSPL utilizes a set of spline basis functions.

Batterson, J. G.↗
NASA NTRS1974

Low-speed test of translating lip axisymmetric inlets for subsonic transports

Translating lip, axisymmetric inlets have been tested at freestream Mach numbers between 0.0 and 0.30 and at angles of attack between 0 and 90 degrees. Three isolated inlet models were tested. One model represented the inlet geometry at cruise, that is, with no lip translation. The other two models had forward translating lips with different contours. The low forward speed inlet angle-of-attack capability with the translating lip was increased more than twenty degrees over the basic untranslated lip configuration at the higher inlet airflows. The static inlet performance with the translating lip was also greatly improved. The design translation distance, defined by potential flow analysis, was near optimum.

Henne, P. A.↗
NASA NTRS1998

Evaluation of Gritting Strategies for High Angle of Attack Using Wind Tunnel and Flight Test Data for the F/A-18

A subsonic study of high-angle-of-attack gritting strategies was undertaken with a 0.06-scale model of the F/A-18, which was assumed to be typical of airplanes with smooth-sided forebodies. This study was conducted in the Langley 7- by 10-Foot High-Speed Tunnel and was intended to more accurately simulate flight boundary layer characteristics on the model in the wind tunnel than would be possible by using classical, low-angle-of-attack gritting on the fuselage. Six-component force and moment data were taken with an internally mounted strain-gauge balance, while pressure data were acquired by using electronically scanned pressure transducers. Data were taken at zero sideslip over an angle-of-attack range from 0 deg to 40 deg and, at selected angles of attack, over sideslip angles from -10 deg to 10 deg. Free-stream Mach number was fixed at 0.30, which resulted in a Reynolds number, based on mean aerodynamic chord, of 1.4 x 10(exp 6). Pressure data measured over the forebody and leading-edge extensions are compared to similar pressure data taken by a related NASA flight research program by using a specially instrumented F/A-18, the High-Alpha Research Vehicle (HARV). Preliminary guidelines for high-angle-of-attack gritting strategies are given.

Hall, Robert M.↗
NASA NTRS1961

Investigation of the Low-Subsonic Stability and Control Characteristics of a Free-Flying Model of a Thick 70 deg Delta Reentry Configuration

An investigation of the low-subsonic flight characteristics of a thick 70 deg delta reentry configuration having a diamond cross section has been made in the Langley full-scale tunnel over an angle-of-attack range from 20 to 45 deg. Flight tests were also made at angles of attack near maximum lift (alpha = 40 deg) with a radio-controlled model dropped from a helicopter. Static and dynamic force tests were made over an angle-of-attack range from 0 to 90 deg. The longitudinal stability and control characteristics were considered satisfactory when the model had positive static longitudinal stability. It was possible to fly the model with a small amount of static instability, but the longitudinal characteristics were considered unsatisfactory in this condition. At angles of attack above the stall the model developed a large, constant-amplitude pitching oscillation. The lateral stability characteristics were considered to be only fair at angles of attack from about 20 to 35 deg because of a lightly damped Dutch roll oscillation. At higher angles of attack the oscillation was well damped and the lateral stability was generally satisfactory. The Dutch roll damping at the lower angles of attack was increased to satisfactory values by means of a simple rate-type roll damper. The lateral control characteristics were generally satisfactory throughout the angle- of-attack range, but there was some deterioration in aileron effectiveness in the high angle-of-attack range due mainly to a large increase in damping in roll.

Paulson, John W.↗
DOE OSTI2024

Universal Fourier Attack for Time Series

A wide variety of adversarial attacks have been proposed and explored using image and audio data. These attacks are notoriously easy to generate digitally when the attacker can directly manipulate the input to a model, but are much more difficult to implement in the real world. In this paper we present a universal, time invariant attack for general time series data such that the attack has a frequency spectrum primarily composed of the frequencies present in the original data. The universality of the attack makes it fast and easy to implement as no computation is required to add it to an input, while time invariance is useful for real world deployment. Additionally, the frequency constraint ensures the attack can withstand filtering defenses. We demonstrate the effectiveness of the attack on two different classification tasks through both digital and real world experiments, and show that the attack is robust against common transform-and-compare defense pipelines.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS1998

Euler Technology Assessment - SPLITFLOW Code Applications for Stability and Control Analysis on an Advanced Fighter Model Employing Innovative Control Concepts

This report documents results from the NASA-Langley sponsored Euler Technology Assessment Study conducted by Lockheed-Martin Tactical Aircraft Systems (LMTAS). The purpose of the study was to evaluate the ability of the SPLITFLOW code using viscous and inviscid flow models to predict aerodynamic stability and control of an advanced fighter model. The inviscid flow model was found to perform well at incidence angles below approximately 15 deg, but not as well at higher angles of attack. The results using a turbulent, viscous flow model matched the trends of the wind tunnel data, but did not show significant improvement over the Euler solutions. Overall, the predictions were found to be useful for stability and control design purposes.

Jordan, Keith J.↗
NASA NTRSDate not supplied

NNREPAIR: Constraint-based Repair of Neural Network Classifiers

We present NNREPAIR, a constraint-based technique for repairing neural network classifiers by i) fixing the logic of the network at an intermediate layer, and ii) fixing the decision conditions of the network at the last layer. NNREPAIR first uses fault localization to find potentially faulty network parameters (specifically weights) and then performs repair using constraint solving to apply small modifications to remedy the defects. We present novel strategies to enable precise yet efficient repair such as inferring correctness specifications to act as oracles for intermediate layer repair, and generation of experts wrt each class. We demonstrate the technique in the context of three different scenarios: (1) Improving the over all accuracy of a model, (2) Fixing security vulnerabilities caused by poisoning of training data and (3) Improving the robustness of the network against adversarial attacks. Our evaluation on MNIST and CIFAR-10 models shows that NNREPAIR can improve the accuracy by 45.56% on poisoned data and 11.11% on adversarial data. NNREPAIR also provides improvement, albeit modest, in the overall accuracy of models, without requiring new data or re-training.

Repair↗
DOE OSTI2021

Transfer Learning using Denoising Auto-Encoders for Cellular-Level Annotation of Tumor in Pathology Slides

Adversarial examples can produce altered classifications using only seemingly innocuous, imperceptible perturbations to the original image. The imperceptibility of adversarial perturbations suggests that the corresponding classifiers use decision criteria different than those of a human. In a medical setting, inexplicable decision criteria confound a pathologist’s willingness to trust machine-generated annotations. Here, we analyze denoising tumor detection models to see if they are robust to imperceptible adversarial perturbations. Moreover, to be more fully trusted by pathologists, we require tumor detectors that generate interpretable annotations which segment pathology slides into tumorous and normal regions at the cellular level. We therefore compare transfer learning based on two different autoencoder architectures, one derived from a deep denoising bottleneck autoencoder and one from an over-complete sparse autoencoder. Both autoencoders were first trained in an unsupervised manner on a set of pathology slides drawn from the Camelyon16 dataset. The latent representations produced by each autoencoder were then passed to separate neural networks that were trained in a supervised manner on binary tumor-normal masks generated by pathologists at cellular resolution. Both tumor detectors supported better than 90% AUC PR as measured by the area under the precision/recall curve on a held-out pathology slide. To assess the underlying decision criteria used by both tumor detectors, we constructed imperceptible adversarial examples which reduced the AUC PR of both models to less than 70%. Random noise of the same amplitude had almost no effect on the AUC PR of either model. Additionally, each tumor detector was resistant to adversarial “transfer” attacks targeting the other. The adversarial perturbations showed strong characteristic differences: the deep denoising models perturbations were a very diffuse, seemingly unrecognizable pattern while the sparse coding models perturbations showed traces of tissue cells.

47 OTHER INSTRUMENTATION↗
DOE OSTI2021

Data trustworthiness signatures for nuclear reactor dynamics simulation

With the increased reliance on digitization in industrial control systems, the need for effective monitoring techniques has risen dramatically. Specifically, there is now a growing concern about the so-called false data injection (FDI) attacks. These attacks aim to alter the raw sensors’ data to cause malicious outcomes. Any serious FDI algorithm is based on an intimate knowledge of the system and its associated physics models, which renders conventional outlier/anomaly detection techniques almost obsolete in the face of such attacks. Thus, a critical need has emerged to develop a new class of defense methods that are capable of detecting FDI attacks under the assumption that the attacker has a strong familiarity with the system and its physics modeling. This class of defense methods are denoted by model-based defenses which are premised on the assumption that the attacker, while having a good understanding of the system, does not have full privileged access to all proprietary data and historical records of operation. However, (s)he is assumed to be capable of learning system behavior using self-learning techniques during an initial lie-in-wait period. To defend against this scenario, we propose a new model-based randomized window algorithm that searches time-series data for signatures that can serve as classifiers between normal and FDI scenarios. The classifiers are based on the correlations between the dominant degrees of freedom (DOFs) and the less-dominant DOFs (expected to be very sensitive to the system details that are unknown to the attacker). For demonstration, RELAP5 models are employed to calculate representative nuclear reactor behavior during a number of transient scenarios. Finally, falsified data are injected into the RELAP5-simulated behavior, and the proposed signature-identification algorithm is employed to detect the injected data.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2023

Universal Fourier Attack for Time Series

A wide variety of adversarial attacks have been proposed and explored using image and audio data. These attacks are notoriously easy to generate digitally when the attacker can directly manipulate the input to a model, but are much more difficult to implement in the real-world. In this paper we present a universal, time invariant attack for general time series data such that the attack has a frequency spectrum primarily composed of the frequencies present in the original data. The universality of the attack makes it fast and easy to implement as no computation is required to add it to an input, while time invariance is useful for real-world deployment. Additionally, the frequency constraint ensures the attack can withstand filtering. We demonstrate the effectiveness of the attack in two different domains, speech recognition and unintended radiated emission, and show that the attack is robust against common transform-and-compare defense pipelines.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS2012

Scaling of Lift Degradation Due to Anti-Icing Fluids Based Upon the Aerodynamic Acceptance Test

In recent years, the FAA has worked with Transport Canada, National Research Council Canada (NRC) and APS Aviation, Inc. to develop allowance times for aircraft operations in ice-pellet precipitation. These allowance times are critical to ensure safety and efficient operation of commercial and cargo flights. Wind-tunnel testing with uncontaminated anti-icing fluids and fluids contaminated with simulated ice pellets had been carried out at the NRC Propulsion and Icing Wind Tunnel (PIWT) to better understand the flow-off characteristics and resulting aerodynamic effects. The percent lift loss on the thin, high-performance wing model tested in the PIWT was determined at 8 deg. angle of attack and used as one of the evaluation criteria in determining the allowance times. Because it was unclear as to how performance degradations measured on this model were relevant to an actual airplane configuration, some means of interpreting the wing model lift loss was deemed necessary. This paper describes how the lift loss was related to the loss in maximum lift of a Boeing 737-200ADV airplane through the Aerodynamic Acceptance Test (AAT) performed for fluids qualification. A loss in maximum lift coefficient of 5.24% on the B737-200ADV airplane (which was adopted as the threshold in the AAT) corresponds to a lift loss of 7.3% on the PIWT model at 8 deg. angle of attack. There is significant scatter in the data used to develop the correlation related to varying effects of the anti-icing fluids that were tested and other factors. A statistical analysis indicated the upper limit of lift loss on the PIWT model was 9.2%. Therefore, for cases resulting in PIWT model lift loss from 7.3% to 9.2%, extra scrutiny of the visual observations is required in evaluating fluid performance with contamination.

Broeren, Andy↗