SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
This briefing provides a high-level overview of recent cyber threats to the energy sector, focusing on Russia’s coordinated 2025 attack on Poland’s energy infrastructure and ongoing Iranian targeting of industrial control systems (ICS).
Here, the integration of advanced cyber-physical systems in heavy vehicles introduces new vulnerabilities by expanding the possibility of cyberattacks. The objective of this study is to evaluate (1) how threat awareness influences driver response to an unexpected cyberattack, (2) how the provision of a basic cyberattack response protocol influences driver performance, and (3) how professionally trained versus standard drivers compare in their responses to a cyberattack. An on-road driving study (N = 50) was conducted using a medium heavy-duty vehicle. Participants were divided into three groups: Control, which remained unaware of any potential cyberattack; Aware, which was informed about the potential cyberattack; and Aware + Protocol, which received the same warning as the Aware group with the addition of a basic cyberattack response protocol. An instrument cluster cyberattack was executed at the same location for all participants. The findings highlight the essential role of awareness and response protocol in enhancing driver response to an unexpected vehicle cyberattack. The Aware + Protocol group had the highest stop rate (100%) and the shortest stopping distances (224 m for standard drivers and 254 m for professionals), compared to the Control group (828 and 520 m, respectively). Aware + Protocol also had the fastest reaction time, averaging 7.53 s, versus 16.12 s (Aware) and 30.29 s (Control). These results emphasize that awareness alone is insufficient. Providing drivers with clear, actionable protocols significantly improves their ability to react quickly and safely to cyberattacks, enhancing overall road safety.
Understanding how private landholders make deforestation decisions is of paramount importance for conservation. Behavioural frameworks from the social sciences have a lot to offer researchers and practitioners, yet these insights remain underutilised in describing what drives landholders' deforestation intentions under important political, social, and management contexts. Using survey data of private landholders in Queensland, Australia, we compare the ability of two popular behavioural models to predict future deforestation intentions, and propose a more integrated behavioural model of deforestation intentions. We found that the integrated model outperformed other models, revealing the importance of threat perceptions, attitudes, and social norms for predicting landholders' deforestation intentions. Social capital, policy uncertainty, and years of experience are important contextual moderators of these psychological factors. Here, we conclude with recommendations for promoting behaviour change in this deforestation hotspot and highlight how others can adopt similar approaches to illuminate more proximate drivers of environmental behaviours in other contexts.
The continued emergence of pathogens, whether novel, re-emerging, or engineered, poses a persistent global biosecurity and public health challenge. Recent outbreaks, including COVID-19, Lassa fever, Marburg virus, mpox, and avian influenza, underscore the urgent need for robust systems that enable rapid surveillance, early diagnosis, and timely countermeasures before widespread human transmission occurs. In this article, we focus on early detection technologies and systematically evaluate current diagnostic and sensing modalities. We highlight sequencing and spectroscopy as two complementary approaches capable of providing broad, agnostic detection and rich biological insight. Our analysis emphasizes that scientific innovation alone is insufficient: effective preparedness also requires improved data curation, integration, and sharing to build AI-ready resources that accelerate future responses. We argue for coordinated advances in both technological capabilities and supporting infrastructure to enable the rapid identification and characterization of emerging pathogens and to fully leverage modern science against evolving infectious threats.
In recent years, the need for Operational Technology (OT) defenses has been recognized, serving as an additional line of defense when Information Technology (IT) defenses are bypassed. This is no longer considered an uncommon possibility when dealing with advanced persistent threat (APT) actors expected to be state-sponsored and receiving insider assistance. In these extreme adversarial situations, OT defenses aim to provide another layer of defense for the system, introduced directly at the physical process level, as described by the sensors data, the system model, and control actions. Just like IT defenses, two schools of thought, i.e., passive and active defenses, have emerged to address this challenge. In active defenses, representing the focus of this paper, known signatures, synthesized based on the system's unique characteristics, are inserted into the system. In contradistinction, passive methods rely solely on observing system behavior in search of patterns of normal behavior with deviations thereof representing abnormal behavior. In their most sophisticated implementations, both passive and active defenses rely on the use of data analytics to identify the patterns and synthesize the observed and/or inserted signatures. Past research has shown that passive defenses may be bypassed by APT actors relying on data analytics and their intimate knowledge of the system to evade detection by respecting the patterns identified by the defenders. Here this manuscript explores the use of active defenses under the assumption that the attacker has privileged access to the system, including access to the system's model and sensors data. Specifically, this manuscript assesses the ability of active defenses to remain invisible to the attackers, and discusses the associated challenges that must be addressed to ensure their resiliency against APT actors.
The SARS-CoV-2 pandemic outbreak and the unfortunate misuse of toxic chemical warfare agents (CWAs) highlight the importance of developing functional materials to protect against these chemical and pathogen threats. Metal–organic frameworks (MOFs), which comprise a tunable class of crystalline porous materials built from inorganic nodes and organic linkers, have emerged as a class of heterogeneous catalysts capable of rapid detoxification of multiple classes of these harmful chemical or biological hazards. In particular, zirconium-based MOFs (Zr-MOFs) feature Lewis acidic nodes that serve as active sites for a wide range of catalytic reactions, including the hydrolysis of organophosphorus nerve agents within seconds in basic aqueous solutions. In addition, postsynthetic modification of Zr-MOFs enables the release of active species capable of reacting with and deactivating harmful pathogens. Despite this impressive performance, utilizing Zr- MOFs in powder form is not practical for application in masks or protective uniforms. To address this challenge, our team sought to develop MOF/fiber composite systems that could be adapted for use under realistic operating conditions to protect civilians, military personnel, and first responders from harmful pathogens and chemical warfare agents. Over the last several years, our group has designed and fabricated reactive and biocidal MOF/fiber composites that effectively capture and deactivate these toxic species. In this Account, we describe the evolution of these porous and reactive MOF/fiber composites and focus on key design challenges and considerations. First, we devised a scalable method for the integration of Zr-MOFs onto textile substrates using aqueous precursor solutions and without using pretreated textiles, highlighting the potential scalability of this method. Moving beyond standard textiles, we also developed a microbial synthesis strategy to prepare hierarchically porous MOF/bacterial cellulose nanofiber composite sponges that can both capture and detoxify nerve agents when exposed to contaminated gas flows. The mass loading of the MOF in the nanofibrous composite sponge is up to 90%, affording higher work capacities compared to those of textile-fiber-based composites with relatively lower MOF loadings. Next, we demonstrated that heterogeneous polymeric bases are suitable replacements for volatile liquid bases typically used in solution-phase reactions, and we showed that these composite systems are capable of effectively hydrolyzing nerve agents in the solid state by using only water that is present as humidity. Moreover, incorporating a reactive dye precursor into the composite affords a dual function sensing and detoxifying material that changes color from white to orange upon reaction with the byproduct following nerve agent hydrolysis, demonstrating the versatility of this platform for use in decontamination applications. We then created chlorine-loaded MOF/fiber composites that act as biocidal and reactive textiles that are capable of not only detoxifying sulfur-mustard-based chemical warfare agents and simulants but also deactivating both bacteria and the SARS-CoV-2 virus within minutes of exposure. Lastly, we synthesized a mixed-metal Ti/Zr-MOF coating on cotton fibers to afford a photoactive biocidal cloth that shows fast and broad-spectrum biocidal performance against viruses and Gram-positive and Gram-negative bacteria under visible light irradiation. Given the tunable, multifunctional nature of these MOF/fiber composites, we believe that this Account will offer new insights for the rational design and preparation of functional MOF/fiber composites and pave the way toward the development of next-generation reactive and protective textiles.
Marine heatwaves (MHWs), episodic periods of abnormally high sea surface temperature, severely affect marine ecosystems. Large marine ecosystems (LMEs) cover ~22% of the global ocean but account for 95% of global fisheries catches. Yet how climate change affects MHWs over LMEs remains unknown because such LMEs are confined to the coast where low-resolution climate models are known to have biases. Here, using a high-resolution Earth system model and applying a ‘future threshold’ that considers MHWs as anomalous warming above the long-term mean warming of sea surface temperatures, we find that future intensity and annual days of MHWs over the majority of the LMEs remain higher than in the present-day climate. Better resolution of ocean mesoscale eddies enables simulation of more realistic MHWs than low-resolution models. These increases in MHWs under global warming pose a serious threat to LMEs, even if resident organisms could adapt fully to the long-term mean warming.
Abstract Identification and extraction of Tactics, Techniques and Procedures (TTPs) for Cyber Threat Intelligence (CTI) restore the full picture of cyber attacks and guide the analysts to assess the system risk. Existing frameworks can hardly provide uniform and complete processing mechanisms for TTPs information extraction without adequate knowledge background. A multi-instance learning approach named SeqMask is proposed in this paper as a solution. SeqMask extracts behavior keywords from CTI evaluated by the semantic impact, and predicts TTPs labels by conditional probabilities. Still, the framework has two mechanisms to determine the validity of keywords. One using expert experience verification. The other verifies the distortion of the classification effect by blocking existing keywords. In the experiments, SeqMask reached 86.07% and 73.99% in F1 scores for TTPs classifications. For the top 20% of keywords, the expert approval rating is 92.20%, where the average repetition of keywords whose scores between 100% and 90% is 60.02%. Particularly, when the top 65% of the keywords were blocked, the F1 decreased to about 50%; when removing the top 50%, the F1 was under 31%. Further, we also validate the possibility of extracting TTPs from full-size CTI and malware whose F1 are improved by 2.16% and 0.81%.
Rift Valley fever virus (RVFV) (Bunyavirales: Phlebovirus) is a prominent vector-borne zoonotic disease threat to global agriculture and public health. Risks of introduction into nonendemic regions are tied to changing climate regimes and other dynamic environmental factors that are becoming more prevalent, as well as virus evolutionary factors and human/animal movement. Endemic to the African continent, RVFV has caused large epizootics at the decadal scale since the early 20th century but has spread to the Arabian Peninsula and shows increasing patterns of interepizootic transmission on the annual scale. This virus can be transmitted by mosquitoes as well as through direct contact with infected tissues and can cause sporadic to widespread morbidity and mortality in domestic ungulate livestock as well as humans. High viremias in infected livestock moved for legal and illegal trade as well as in infected mosquitoes or human travelers can spread this virus worldwide. With increasing global commerce, it is likely RVFV will be introduced to new areas with suitable hosts, mosquito vector species, and environments. However, the strong mosquito component of RVFV epidemiology combined with advancements in vaccines, diagnostics, and virus evolutionary factors create opportunities for strategies to leverage models of connectivity among potential source and emerging regions to target surveillance and mitigation activities to reduce the risk of RVFV introduction, or contain the virus should it be introduced, into new regions.
Spectroscopic identification of aerosolized chemical threats is challenging due to the complex nature of the photon/particle interaction, as well as the diversity of possible particle sizes, morphologies, and compositions. Constructing a database of laboratory - measured transmittance spectra that covers each permutation is not practical. However, calculation of the spectra using the measured optical constants as a function of wavenumber, n(?) and k(?), for each of the liquids and/or solids composing the aerosol particles provides a viable alternative. These synthetic spectra (vis-à-vis laboratory-measured spectra) can be used to identify chemicals of interest and subtract out background interferents in field measurements. Using a well-established multiple pathlength approach, we measure the optical constants n/k for liquids that may be found as chemical species of interest or common background interferents aerosolized in plumes. These measurements are also used to generate several test case aerosol synthetic spectra.
STOTS (Structured Threat Observation Tool Set) is a collection of tools that allow users in a test environment to create STIX v2 observable objects.
Researchers from Sandia National Laboratories (Sandia) and the University of Texas at Austin (UT) conducted this study to explore the effectiveness of commercial artificial neural network (ANN) software to improve insider threat detection and mitigation (ITDM). This study hypothesized that ANNs could be "trainee to learn patterns of organizational behaviors, detect off-normal (or anomalous) deviations from these patterns, and alert when certain types, frequencies, or quantities of deviations emerge. The ReconaSense ANN system was installed at UT's Nuclear Engineering Teaching Laboratory (NETL) and collected 13,653 access control data points and 694 intrusion sensor data points over a three-month period. Preliminary analysis of this baseline data demonstrated regularized patterns of life in the facility, and that off-normal behaviors are detectable under certain situations -- even for a facility with anticipated highly non-routine, operational behaviors. Completion of this pilot study demonstrated how the ReconaSense ANN could be used to identify expected operational patterns and detect unexpected anomalous behaviors in support of a data-analytic approach to ITDM. While additional studies are needed to fully understand and characterize this system, the results of this initial study are overall very promising for demonstrating a new framework for ITDM utilizing ANNs and data analysis techniques.
The International Radiological/Nuclear Training for Emergency Response - Major Public Event (IRAD-MPE) Virtual Workshop is an advanced training course designed to provide international partners with specialized training on best practices for conducting nuclear security planning and operations at a Major Public Event. This presentation will provide an overview of the following: (1) Historical perspective on past MPE events, (2) National strategy and integrated security operations, (3) Best practices for nuclear security operations, (4) Radiological/nuclear threats and common alarms, (5) Lessons Learned and Challenges, and (5) IAEA NSS-18 publication: Nuclear Security Systems and Measures for Major Public Events.
This report presents a deployable solution to improve the cybersecurity situational awareness of the legacy SCADA system infrastructure in power grids. The main goal of this project is to provide system owners and operators a highly trusted, intelligent alarm system and comprehensive situational awareness of ongoing or potential cybersecurity threats on the grid network. The key contributions of this project include: (1) the development of software, the Intrusion Detection Visualizer for the Operational Technology Network (IViz-OT), to visualize and locate intrusions on the grid network; (2) testing the signature-based Hybrid Intrusion Detection for Energy Systems (HIDES) for different types of intrusions; (3) the integration of HIDES and IViz-OT into the visualization dashboard; and (4) real-time testing using a hardware-in-the-loop test bed.
This document contains a summary list of definitions for distribution to sites working with and working within the Department of Homeland Security’s Explosives Threat Assessment working group. The purpose of this list is to provide a unified framework for discussion between the various collaborating teams.
Equivalent point source energy emission distributions were computed for various threat sources for use in simulating the detector responses for urban search scenarios. The sources include standard isotopic sources used in detector testing, medical and industrial sources occasionally encountered in urban searches, and several types of special nuclear materials. Most of the equivalent point source distributions represent small sources inside some amount of shielding, but the special nuclear material sources represent volumetrically distributed sources in spheres of metal. Text-based inputs for emission distributions are available for the Monte Carlo transport codes Monte Carlo N-Particle, SCALE/MAVRIC, and Omnibus/Shift, any of which can easily be converted to other formats. These sources were developed for use in the Radiological Anomaly Detection and Identification (RADAI) project and the follow-on project, the RADAI-Extended project, sponsored by the National Nuclear Security Administration Office of Defense Nuclear Nonproliferation Research and Development.
In this project we aim to contribute to the understanding of the type and severity of potential cybersecurity attacks to the grid-support functionalities of DER systems interconnected to the AC distribution grid via inverters. Our preliminary work focused on developing a small-scale testbed allowing to study cybersecurity threats to an isolated photovoltaic-battery system using a real-time simulator (Typhoon HIL602+) with a real DNP3 communication connection over TCP/IP, allowing for safe and efficient monitoring and manipulation of data traffic between the simulated hardware and supervisory control and data acquisition (SCADA) system. In this project we propose to expand upon this development by utilizing a) a recently acquired NovaCor RTDS (Real Rime digital Simulator) to emulate the DER-inverter-grid topology including main grid-support functions as defined by IEEE Std. 1547-2018, and b) an industrial control and automation device to enable realistic evaluation of control functions and utilization of communication protocols for real-time data transmission.
This presentation was presented at the Aggregation and Grid Security Workshop - held on June 17-18, 2025, at NREL in Golden, Colorado. The goal of the two-day workshop was to address the critical cybersecurity challenges for the future electric grid. The threat-to-consequence demonstration showcases NREL's capability to model, simulate, test, and evaluate cyberattacks targeting energy systems that coincide with natural hazards, as well as the ramifications for the energy grid as a whole.