Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “threat analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
NASA NTRS2010

Secondary Impacts on Structures on the Lunar Surface

The Altair Lunar Lander is being designed for the planned return to the Moon by 2020. Since it is hoped that lander components will be re-used by later missions, studies are underway to examine the exposure threat to the lander sitting on the Lunar surface for extended periods. These threats involve both direct strikes of meteoroids on the vehicle as well as strikes from Lunar regolith and rock thrown by nearby meteorite strikes. Currently, the lander design is comprised of up to 10 different types of pressure vessels. These vessels included the manned habitation module, fuel, cryogenic fuel and gas storage containers, and instrument bays. These pressure vessels have various wall designs, including various aluminum alloys, honeycomb, and carbon-fiber composite materials. For some of the vessels, shielding is being considered. This program involved the test and analysis of six pressure vessel designs, one of which included a Whipple bumper shield. In addition to the pressure vessel walls, all the pressure vessels are wrapped in multi-layer insulation (MLI). Two variants were tested without the MLI to better understand the role of the MLI in the impact performance. The tests of performed were to examine the secondary impacts on these structures as they rested on the Lunar surface. If a hypervelocity meteor were to strike the surface nearby, it would throw regolith and rock debris into the structure at a much lower velocity. Also, when the manned module departs for the return to Earth, its rocket engines throw up debris that can impact the remaining lander components and cause damage. Glass spheres were used as a stimulant for the regolith material. Impact tests were performed with a gas gun to find the V50 of various sized spheres striking the pressure vessels. The impacts were then modeled and a fast-running approximate model for the V50 data was developed. This model was for performing risk analysis to assist in the vessel design and in the identification of ideal long-term mission sites. This paper reviews the impact tests and analysis and modeling examining the impact threat to various components in the lander design.

Christiansen, Eric↗
NASA NTRS1995

Orbital Analysis for Near-Earth Objects

For recently discovered Near-Earth Objects (NEO) two body computations can be used to determine the minimum distance between the object's orbit and that of the Earth. Determinations can then be made for potential near-term threats to the Earth. This preliminary orbit analysis must be followed with planetary perturbation computations of the object's future motion to predict actual close Earth approaches.

Near-Earth Objects Comets Meteors Astronomy↗
DOE OSTI2023

Notional Chemical Facility PathTrace Modeling Study

This SAND report provides system effectiveness analysis results for notional chemical facilities. Two facilities were analyzed in total, evaluating the effectiveness of the unique security systems in place at each location. Each analysis looked at a range of threat and response capabilities, specific target configurations, and task times to acquire target material in both theft and release scenarios. This report details results for both facilities.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
NASA NTRS2014

NASA Space Rocket Logistics Challenges

The Space Launch System (SLS) is the new NASA heavy lift launch vehicle in development and is scheduled for its first mission in 2017. SLS has many of the same logistics challenges as any other large scale program. However, SLS also faces unique challenges. This presentation will address the SLS challenges, along with the analysis and decisions to mitigate the threats posed by each.

Bramon, Chris↗
DOE OSTI2022

Cyber Attack Sequences Generation for Electric Power Grid

Security assessment of cyber-physical energy systems (CPESs) such as the electric power grid is a critical operation to maintain availability, reliability, and quality of service in the presence of persistent threats from malicious cyber actors. Existing security assessment approaches such as penetration testing and red teaming rely on subject matter expert experience and forensic cyber analysis of historical events to perform realistic, threat-informed assessments of CPES defense. CPESs have a large attack surface because of the heterogeneity and complexity of underlying topology, devices, measurements, and vulnerabilities. The aforementioned approaches lead to partial coverage of the attack surface with a large set of unknown but possible exploits. There is a need to automate the CPES attack surface discovery and contextualize it for relevant, highly probable, real-world attack scenarios. We propose a methodology and framework to facilitate the discovery of the CPES attack surface. We present a multilayer attack graph with ranked attack sequences to describe CPES failure scenarios. We present a work-in-progress framework that lists key components to automate the attack modeling and sequence generation. We demonstrate the published National Electric Sector Cybersecurity Organization Resource CPES failure scenario to highlight the trustworthiness of generated attack sequences.

Dutta, Ashutosh↗
DOE OSTI2021

Health Analysis and Research for Public Events (HARPE) Tool (Final CRADA Report)

Based on its experience in building assessment tools, Argonne National Laboratory (Argonne) has demonstrated expertise in developing comparative methodologies and question sets that provide both a physical and cyber-based risk assessment for the commercial facilities sector. A high-level risk assessment tool can be beneficial for venues and organizations that fall under a wide array of facility characterizations, ultimately accommodating the evolving landscape of threats specific to these facilities. The Health Analysis and Research for Public Events (HARPE) Tool is an assessment that seeks to help facility managers assess and mitigate aspects of safety, security, and emergency management within their venues. With the pandemic featuring prominently in today’s landscape, we have adapted and extended the scope of the HARPE tool so that it offers users the ability to integrate assessments of their preparation for, response to, and recovery from threats faced at the venue arising from the COVID-19 pandemic. Traditional threats and hazards remain prevalent in today’s landscape, and the best defense is a proactive approach to preventing and mitigating these threats. At the very core of prevention and mitigation is the first step of conducting a risk assessment—this is the gap that HARPE fills. While it is obvious that the response to COVID-19 is health and sanitation driven, leaders within the commercial facilities sector must also know where to best extend their efforts in mitigating future threats arising from the pandemic. Public events and mass gatherings are directly impacted by COVID-19; however, with the help of HARPE, leaders can focus their attention on core impact areas related to the safety and security of returning to a new normal, as they assess their risks using the Argonne-developed tool. HARPE provides an important solution to the COVID-19 situation by assisting venue managers and health officials in identifying their risks.

59 BASIC BIOLOGICAL SCIENCES↗
NASA NTRS2023

Developing a Hail and Wind Damage Swath Event Database from Daily MODIS True Color Imagery and Storm Reports for Impact Analysis and Applications

Hail and damaging winds are two threats associated with intense and severe thunderstorms that traverse the Midwest and Great Plains during the primary growing season. In certain severe thunderstorm events, large swaths of agricultural crops are impacted, allowing the damage to be viewed from multiple satellite remote sensing platforms. Previous studies have focused on analyzing individual hail and wind damage swaths (HWDSs) using satellite remote sensing, but these swaths have never been officially archived or documented. This lack of documentation has made it difficult to analyze the spatial extent and temporal frequency of HWDSs from year to year. This study utilizes daily true color imagery from MODIS aboard NASA’s Terra and Aqua satellites and daily local storm reports from the Storm Prediction Center to build a database of HWDSs occurring in the months of May through August, for years 2000 through 2020. This database identified 1,646 HWDSs in 12 states throughout the Midwest and Great Plains, confirmed through a combination of archived severe weather warnings, radar information, and official storm reports. For each entry in the HWDS database, a geospatial outline is provided along with the most likely date of first visible damage from MODIS imagery as well as the physical characteristics and time of occurrence estimated from available warnings. This study also provides a summary of the radar characteristics for a portion of the database. This database will further the understanding of severe weather damage by hail and wind to agriculture to help understand the frequency of these events and assist in mapping the impacted areas.

Climatology↗
DOE OSTI2022

A Cybersecurity Threat Profile for a Connected Lighting System

In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
NASA NTRS2003

Portable Wireless LAN Device and Two-way Radio Threat Assessment for Aircraft Navigation Radios

Measurement processes, data and analysis are provided to address the concern for Wireless Local Area Network devices and two-way radios to cause electromagnetic interference to aircraft navigation radio systems. A radiated emission measurement process is developed and spurious radiated emissions from various devices are characterized using reverberation chambers. Spurious radiated emissions in aircraft radio frequency bands from several wireless network devices are compared with baseline emissions from standard computer laptops and personal digital assistants. In addition, spurious radiated emission data in aircraft radio frequency bands from seven pairs of two-way radios are provided, A description of the measurement process, device modes of operation and the measurement results are reported. Aircraft interference path loss measurements were conducted on four Boeing 747 and Boeing 737 aircraft for several aircraft radio systems. The measurement approach is described and the path loss results are compared with existing data from reference documents, standards, and NASA partnerships. In-band on-channel interference thresholds are compiled from an existing reference document. Using these data, a risk assessment is provided for interference from wireless network devices and two-way radios to aircraft systems, including Localizer, Glideslope, Very High Frequency Omnidirectional Range, Microwave Landing System and Global Positioning System. The report compares the interference risks associated with emissions from wireless network devices and two-way radios against standard laptops and personal digital assistants. Existing receiver interference threshold references are identified as to require more data for better interference risk assessments.

Nguyen, Truong X.↗
NASA NTRS2010

Anatomy of a Security Operations Center

Many agencies and corporations are either contemplating or in the process of building a cyber Security Operations Center (SOC). Those Agencies that have established SOCs are most likely working on major revisions or enhancements to existing capabilities. As principle developers of the NASA SOC; this Presenters' goals are to provide the GFIRST community with examples of some of the key building blocks of an Agency scale cyber Security Operations Center. This presentation viII include the inputs and outputs, the facilities or shell, as well as the internal components and the processes necessary to maintain the SOC's subsistence - in other words, the anatomy of a SOC. Details to be presented include the SOC architecture and its key components: Tier 1 Call Center, data entry, and incident triage; Tier 2 monitoring, incident handling and tracking; Tier 3 computer forensics, malware analysis, and reverse engineering; Incident Management System; Threat Management System; SOC Portal; Log Aggregation and Security Incident Management (SIM) systems; flow monitoring; IDS; etc. Specific processes and methodologies discussed include Incident States and associated Work Elements; the Incident Management Workflow Process; Cyber Threat Risk Assessment methodology; and Incident Taxonomy. The Evolution of the Cyber Security Operations Center viII be discussed; starting from reactive, to proactive, and finally to proactive. Finally, the resources necessary to establish an Agency scale SOC as well as the lessons learned in the process of standing up a SOC viII be presented.

Wang, John↗
DOE OSTI2024

Analysis and Mitigation of Cascading Outages Using an Interaction Graph Addressing Transient Stability

Cascading outages of power systems pose great threats to system security and reliability, potentially leading to large-scale blackouts. For analysis and mitigation of cascading outages, this paper proposes a transient stability-incorporated interaction graph. This graph statistically quantifies the interactions among line outages and instabilities of generators, which can model propagation paths and patterns of cascading outages. Compared with an interaction graph that only models line outages, this new interaction graph provides important insights on how transient instability occurs along with cascading outages. It also offers more effective strategies for mitigating outage propagation. The proposed interaction graph can be constructed from datasets of historical or simulated cascading events. It is demonstrated on an NPCC 140-bus system with mitigation strategies.

Guo, Zhenping↗
DOE OSTI2023

The effect of ambient ozone exposure on three types of diabetes: a meta-analysis

Background: Ozone as an air pollutant is gradually becoming a threat to people's health. However, the effect of ozone exposure on risk of developing diabetes, a fast-growing global metabolic disease, remains controversial. Objective: To evaluate the impact of ambient ozone exposure on the incidence rate of type 1, type 2 and gestational diabetes mellitus. Method: We systematically searched PubMed, Web of Science, and Cochrane Library databases before July 9, 2022, to determine relevant literature. Data were extracted after quality evaluation according to the Newcastle Ottawa Scale (NOS) and the agency for healthcare research and quality (AHRQ) standards, and a meta-analysis was used to evaluate the correlation between ozone exposure and type 1 diabetes mellitus (T1D), type 2 diabetes mellitus (T2D), and gestational diabetes mellitus (GDM). The heterogeneity test, sensitivity analysis, and publication bias were performed using Stata 16.0. Results: Our search identified 667 studies from three databases, 19 of which were included in our analysis after removing duplicate and ineligible studies. Among the remaining studies, three were on T1D, five were on T2D, and eleven were on GDM. The result showed that ozone exposure was positively correlated with T2D [effect size (ES) = 1.06, 95% CI: 1.02, 1.11] and GDM [pooled odds ratio (OR) = 1.01, 95% CI: 1.00, 1.03]. Subgroup analysis demonstrated that ozone exposure in the first trimester of pregnancy might raise the risk of GDM. However, no significant association was observed between ozone exposure and T1D. Conclusion: Long-term exposure to ozone may increase the risk of T2D, and daily ozone exposure during pregnancy was a hazard factor for developing GDM. Decreasing ambient ozone pollution may reduce the burden of both diseases.

60 APPLIED LIFE SCIENCES↗
NASA NTRS2010

Structural Health Monitoring Analysis for the Orbiter Wing Leading Edge

This viewgraph presentation reviews Structural Health Monitoring Analysis for the Orbiter Wing Leading Edge. The Wing Leading Edge Impact Detection System (WLE IDS) and the Impact Analysis Process are also described to monitor WLE debris threats. The contents include: 1) Risk Management via SHM; 2) Hardware Overview; 3) Instrumentation; 4) Sensor Configuration; 5) Debris Hazard Monitoring; 6) Ascent Response Summary; 7) Response Signal; 8) Distribution of Flight Indications; 9) Probabilistic Risk Analysis (PRA); 10) Model Correlation; 11) Impact Tests; 12) Wing Leading Edge Modeling; 13) Ascent Debris PRA Results; and 14) MM/OD PRA Results.

Yap, Keng C.↗
DOE OSTI2025

Evidence-based Graph Adversary Mapping (EGRAM) [Poster]

Cybersecurity companies such as CrowdStrike, Dragos, Microsoft and Unit 42 categorize Advanced Persistent Threats (APTs) using their own naming schemes. As a result, these APTs are mapped to different malware sources and campaigns, all from differing sources, leading to inconsistent mapping. Inconsistent mapping causes confusion and adds further obscurity around these groups, making it difficult to track and mitigate APT cyberattacks. The Evidence-based Graph Adversary Mapping (EGRAM) tool remediates the mapping challenge by collecting, updating and converting adversary data and their sources into a valid, codified STIX v2.1 bundle which is then stored in a Neo4j graph database. It utilizes graph traversal methods and centrality analysis to generate actionable information as a Structured Threat Intelligence Graph (STIG), based on user queries. EGRAM exists as Python code and a Jupyter Notebook that acts as a searchable, evidence-based, source of intelligence for APT groups’ artifacts and cyber campaigns.

24 - POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

ARCADE Analysis Methods & Validation Pathway

The Advanced Reactor Cyber Analysis and Development Environment (ARCADE) provides an automated analysis system which supports risk-informed performance based (RIPB) evaluations of nuclear control systems. Every possible cyber threat which could lead to consequence is identified by simulating the unsafe control action sequences which transform digital harm into physical harm. Eliminating the simulation of complex digital cyber attack chains cuts out unnecessary computational overhead and focuses directly on the physics of cyber-physical attacks. This focus enables designers to make informed decisions which can entirely eliminate categories of cyber threats against advanced reactors through the physical nature of the plant design. This narrowing of cyber threat against nuclear power plants through the physics of the system is intended to make any remaining threat management and cost efficient. This is the goal of the Tiered Cyber Analysis (TCA) outlined in NRC Draft Regulation Guide (RG) 5.96, which provides a RIPB cybersecurity approach for new reactors. ARCADE has been custom developed to meet the demands of the rigorous analysis required in Tier 1 of the TCA, which forms the foundation of the TCA process. Currently, ARCADE is still under development, but has made significant leaps in capability. A pilot analysis on the opensource Asherah simulator was performed which demonstrated key functionality goals. The next stage of ARCADE development involves improvements to the applications which support the analysis system, and enabling the analysis system to utilize the full suite of unsafe control action simulations. Since the analysis method’s core functions are complete, validation of the analysis method will be started concurrent to the next development stages. The automated analysis ARCADE will provide can radically change the cybersecurity design process for advanced reactors, reducing the cost of security implementation while enhancing cyber resilience. The pathway for ARCADE’s development to this goal has become much clearer. The majority of technical hurdles have been cleared, and the remaining development needs have been solidified. ARCADE is now capable of assisting the advanced reactor design process and directly support advanced reactor industry RIPB practices.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

Consequence Based Framework for Deployment of Cloud Solutions in the Digital Energy Transition

This study proposes a framework for evaluating cloud computing deployment in the electric sector, focusing on the digital transition of energy systems. It assesses the implications of cloud technology adoption, particularly in terms of security, operational resilience, and efficiency. The paper introduces a method for consequence-driven risk analysis, enabling utilities to prioritize and mitigate potential threats effectively. It also discusses the shared responsibility model in cloud computing, highlighting the need for collaborative security efforts. The research aims to provide utilities with a strategic assessment tool for cloud adoption, emphasizing the importance of security culture in enhancing cloud computing's role in critical infrastructure.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2021

Cyber Security Summer School 2021 [Slides]

LANL is committed to training the next generation of cyber security professionals and researchers for the US Department of Energy. Alumni are prepared to mitigate rapidly-evolving threats to national security by applying best-practice analysis and developing novel tools. The 2021 summer school ended with another recruiting success, recruiting 5 students into A-4,T, and NIE-- as staff or students. The research track students further strengthened LANL’s cyber mission by applying their skills to develop innovative solutions to help address national cyber threats. The investigation track students learned the necessary concepts and skills for responding effectively to cyber security incidents

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗