SEARCH · Engineering Papers
Results for “Cyber”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Classification of Malicious Cyber Activity Via Machine Learning Against Event Logs.
Abstract not provided.
Indirect Measurement of Underground Facility Expansion/Extent through the Multi-Modal Use of Cyber Metadata (Traceroutes) and Physics-Informed Models Applied to Pre-Post Digital Surface Mapping Project #: NLV-012-21 Year 2 of 3
Explore the source record for details and available documents.
Impact of Open Communication Networks on Load Frequency Control with Plug-in Electric Vehicles by Cyber-Physical Dynamic Co-Simulation: Preprint
With the increasing electrification of the transportation sector, vehicle to grid (V2G) control technologies are promising to improving system frequency stability. However, these control technologies might require non-traditional communication supports. This paper investigates the impacts of electric vehicles (EVs) V2G on power system frequency regulation considering communication variations through transmission-distribution-communication (TDC) dynamic simulation. The simulation model is built based on our previously developed open-source transmission-and-distribution (T&D) dynamic co-simulation framework. Here, we add the communication variation functions (i.e. delay and packet loss) to complete the TDC simulation framework. In the case studies, practical communication variation scenarios are considered when the system experiencing an N-1 generation trip contingency. The considered scenarios include communication delay and packet loss using both homogeneous and heterogeneous assumptions. The delay and packet loss rate are the same in all communication channels in the homogeneous case but varies in the heterogeneous case. The results show the communication delay has an obvious impact on the frequency recovery compared to the communication packet drop. The impacts of the standard deviations of communication delay time and packet drop rate are not significant. The outcomes of this work can help improve the EV frequency regulation services and provide robust and effect supports to the grid.
Distributed Renewables Cyber Resilience
The following article is for Power Magazine, which has initial acceptance by the editor and focuses on presentation of a cybersecurity survey.
Systems and methods for detecting and mitigating cyber attacks on power systems comprising distributed energy resources
Extensive deployment of interoperable distributed energy resources (DER) on power systems is increasing the power system cybersecurity attack surface. National and jurisdictional interconnection standards require DER to include a range of autonomous and commanded grid-support functions which can drastically influence power quality, voltage, and the generation-load balance. Investigations of the impact to the power system in scenarios where communications and operations of DER are controlled by an adversary show that each grid-support function exposes the power system to distinct types and magnitudes of risk. The invention provides methods for minimizing the risks to distribution and transmission systems using an engineered control system which detects and mitigates unsafe control commands.
Dynamic, resilient sensing system for automatic cyber-attack neutralization
An industrial asset may have monitoring nodes that generate current monitoring node values. An abnormality detection computer may determine that an abnormal monitoring node is currently being attacked or experiencing fault. A dynamic, resilient estimator constructs, using normal monitoring node values, a latent feature space (of lower dimensionality as compared to a temporal space) associated with latent features. The system also constructs, using normal monitoring node values, functions to project values into the latent feature space. Responsive to an indication that a node is currently being attacked or experiencing fault, the system may compute optimal values of the latent features to minimize a reconstruction error of the nodes not currently being attacked or experiencing a fault. The optimal values may then be projected back into the temporal space to provide estimated values and the current monitoring node values from the abnormal monitoring node are replaced with the estimated values.
Indirect Measurement of Underground Facility Expansion/Extent through the Multi-Modal Use of Cyber Metadata (Traceroutes) and Physics-Informed Models Applied to Pre-Post Digital Surface Mapping
Explore the source record for details and available documents.
Dynamic, resilient virtual sensing system and shadow controller for cyber-attack neutralization
An industrial asset may have monitoring nodes (e.g., sensor or actuator nodes) that generate current monitoring node values. An abnormality detection and localization computer may receive the series of current monitoring node values and output an indication of at least one abnormal monitoring node that is currently being attacked or experiencing a fault. An actor-critic platform may tune a dynamic, resilient state estimator for a sensor node and output tuning parameters for a controller that improve operation of the industrial asset during the current attack or fault. The actor-critic platform may include, for example, a dynamic, resilient state estimator, an actor model, and a critic model. According to some embodiments, a value function of the critic model is updated for each action of the actor model and each action of the actor model is evaluated by the critic model to update a policy of the actor-critic platform.
Adaptive, self-tuning virtual sensing system for cyber-attack neutralization
An industrial asset may have a plurality of monitoring nodes, each monitoring node generating a series of monitoring node values over time representing current operation of the industrial asset. An abnormality detection computer may determine that an abnormal monitoring node is currently being attacked or experiencing a fault. An autonomous, resilient estimator may continuously execute an adaptive learning process to create or update virtual sensor models for that monitoring node. Responsive to an indication that a monitoring node is currently being attacked or experiencing a fault, a level of neutralization may be automatically determined. The autonomous, resilient estimator may then be dynamically reconfigured to estimate a series of virtual node values based on information from normal monitoring nodes, appropriate virtual sensor models, and the determined level of neutralization. The series of monitoring node values from the abnormal monitoring node or nodes may then be replaced with the virtual node values.
Fuzzy cyber detection pattern matching
Mechanisms for identifying a pattern of computing resource activity of interest, in activity data characterizing activities of computer system elements, are provided. A temporal graph of the activity data is generated and a filter is applied to the temporal graph to generate one or more first vector representations, each characterizing nodes and edges within a moving window defined by the filter. The filter is applied to a pattern graph representing a pattern of entities and events indicative of the pattern of interest, to generate a second vector representation. The second vector representation is compared to the one or more first vector representations to identify one or more nearby vectors, and one or more corresponding subgraph instances are output to an intelligence console computing system as inexact matches of the temporal graph.
WiP: Verification of Cyber Emulation Experiments Through Virtual Machine and Host Metrics.
Abstract not provided.