Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “timing vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

CAST Technical Bulletin #004: Network Time Protocol Introduction

Network Time Protocol (NTP), as it traditionally generated and widely consumed, is a legacy system with known security vulnerabilities. The vulnerabilities can be mitigated by modern implementations of NTP that use internal and external redundancy for better accuracy and fault tolerance. Precision Time Protocol (PTP) is an alternative that uses master clocks inside secure networks to eliminate the known vulnerabilities of NTP.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

EMP Testing of UL489 Circuit Breakers

Sandia National Laboratories (SNL) is performing a test campaign for the Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) to address high-altitude electromagnetic pulse (HEMP) vulnerability of critical components of generation stations, with focus on early-time (E1) HEMP. The campaign seeks to establish response and damage thresholds for these critical elements in response to reasonable HEMP threat levels as a means for determining where vulnerabilities may exist or where mitigations may be needed. This report provides component vulnerability test results that will help to inform site vulnerability assessments and HEMP mitigation planning.

42 ENGINEERING↗
DOE OSTI2026

OpenSAMPL: An Open Source Library for Timing and Synchronization Measurements and Analytics

Today's power grid operators are implementing timing and synchronization solutions that provide resilience to Global Navigation Satellite System (GNSS) vulnerabilities. These vendor-specific solutions often come with additional software applications that are designed to monitor that vendor's synchronization performance data. However, resilient timing architectures often resulting in multi-vendor solutions, including approaches that blend terrestrial clocks with space-based subscription services. In such an environment, collecting, analyzing, and visualizing data from a variety of sources within a single platform was heretofore not possible. To address this need, the US Department of Energy's Center for Alternative Synchronization and Timing (CAST) developed OpenSAMPL, the Open Synchronized Analytics and Monitoring Platform, an open-source Python framework for processing, loading, and observing clock measurement data from distributed devices. OpenSAMPL enables the ingestion of diverse clock-probe sources into a scalable time-series database and applies robust analytics. OpenSAMPL currently supports two vendor data pipelines, and will be extended to more in the near future, enabling seamless monitoring of a variety of timing and synchronization devices in a common environment.

Grant, Josh [ORNL] (ORCID:0000000163475060)↗
DOE OSTI2023

GPS Spoofing Mitigation and Timing Risk Analysis in Networked Phasor Measurement Units via Stochastic Reachability

To address phasor measurement unit (PMU) vulnerability to spoofing, we propose the use of a set-valued state estimation technique known as stochastic reachability (SR)-based distributed Kalman filter (DKF) that computes secure global positioning system (GPS) timing across a network of receivers. Utilizing SR, we estimate not only GPS time but also its stochastic reachable set, which is parameterized by probabilistic zonotope (p-Zonotope). While requiring known measurement error bounds in only non-spoofed conditions, we designed a two-tiered approach. We first performed measurement-level spoofing mitigation via deviation of a measurement innovation from its expected p-Zonotope. We then performed state-level timing risk analysis via a determination of the intersection probability of the estimated p-Zonotope with an unsafe set that violates IEEE C37.118.1a-2014 standards. Finally, we validated our SR-DKF algorithm by subjecting it to a simulated receiver network to coordinate signal-level spoofing. We demonstrate improved timing accuracy and successful spoofing mitigation via the use of our SR-DKF algorithm. We also validated the robustness of the estimated timing risk as the number of receivers were varied.

47 OTHER INSTRUMENTATION↗
NASA NTRS2013

Toward Global Drought Early Warning Capability - Expanding International Cooperation for the Development of a Framework for Monitoring and Forecasting

Drought has had a significant impact on civilization throughout history in terms of reductions in agricultural productivity, potable water supply, and economic activity, and in extreme cases this has led to famine. Every continent has semiarid areas, which are especially vulnerable to drought. The Intergovernmental Panel on Climate Change has noted that average annual river runoff and water availability are projected to decrease by 10 percent-13 percent over some dry and semiarid regions in mid and low latitudes, increasing the frequency, intensity, and duration of drought, along with its associated impacts. The sheer magnitude of the problem demands efforts to reduce vulnerability to drought by moving away from the reactive, crisis management approach of the past toward a more proactive, risk management approach that is centered on reducing vulnerability to drought as much as possible while providing early warning of evolving drought conditions and possible impacts. Many countries, unfortunately, do not have adequate resources to provide early warning, but require outside support to provide the necessary early warning information for risk management. Furthermore, in an interconnected world, the need for information on a global scale is crucial for understanding the prospect of declines in agricultural productivity and associated impacts on food prices, food security, and potential for civil conflict. This paper highlights the recent progress made toward a Global Drought Early Warning Monitoring Framework (GDEWF), an underlying partnership and framework, along with its Global Drought Early Warning System (GDEWS), which is its interoperable information system, and the organizations that have begun working together to make it a reality. The GDEWF aims to improve existing regional and national drought monitoring and forecasting capabilities by adding a global component, facilitating continental monitoring and forecasting (where lacking), and improving these tools at various scales, thereby increasing the capacity of national and regional institutions that lack drought early warning systems or complementing existing ones. A further goal is to improve coordination of information delivery for drought-related activities and relief efforts across the world. This is especially relevant for regions and nations with low capacity for drought early warning. To do this requires a global partnership that leverages the resources necessary and develops capabilities at the global level, such as global drought forecasting combined with early warning tools, global real-time monitoring, and harmonized methods to identify critical areas vulnerable to drought. Although the path to a fully functional GDEWS is challenging, multiple partners and organizations within the drought, forecasting, agricultural, and water-cycle communities are committed to working toward its success.

GDEWS↗
DOE OSTI2024

Cyber-Secure and Safe Operation of Solar Photovoltaic Power Distribution Systems

Solar photovoltaic (PV)-rich power distribution systems are networked Cyber-Physical Systems (CPS). These are control systems where multiple computing nodes and diverse intelligent agents interact with the physical world in real-time. However, the presence of networked components renders them vulnerable to potential cyber-attacks, cyber-intrusions, and other malicious events. This is because these systems depend on the measurements reported from their heterogeneous sensors. This makes them vulnerable to potential cyber-attacks where malicious agents can compromise the sensors or the communication networks carrying the sensor measurements. This paper proposes a novel methodology for enhancing the cyber-security and cyber-resilient post-attack safe operation of solar PV-rich power distribution systems against potential cyber-attacks through the Dynamic Watermarking (DW), using online system identification. The resiliency of the proposed technique is tested and validated with several attack scenarios on both a lab-scale 3kW grid-connected PV inverter and a Hardware-in-the-Loop (HiL) system. The proposed approach can be applied to other types of power distribution systems to enhance their cyber-secure and cyber-resilient safe operation. This paper thereby contributes to the field of cyber-security of Cyber-Physical Energy Systems (CPES).

Kim, Jaewon↗
NASA NTRS1990

Radiation response issues for infrared detectors

Researchers describe the most important radiation response issues for infrared detectors. In general, the two key degradation mechanisms in infrared detectors are the noise produced by exposure to a flux of ionizing particles (e.g.; trapped electronics and protons, debris gammas and electrons, radioactive decay of neutron-activated materials) and permanent damage produced by exposure to total dose. Total-dose-induced damage is most often the result of charge trapping in insulators or at interfaces. Exposure to short pulses of ionization (e.g.; prompt x rays or gammas, delayed gammas) will cause detector upset. However, this upset is not important to a sensor unless the recovery time is too long. A few detector technologies are vulnerable to neutron-induced displacement damage, but fortunately most are not. Researchers compare the responses of the new technologies with those of the mainstream technologies of PV HgCdTe and IBC Si:As. One important reason for this comparison is to note where some of the newer technologies have the potential to provide significantly improved radiation hardness compared with that of the mainstream technologies, and thus to provide greater motivation for the pursuit of these technologies.

Kalma, Arne H.↗
DOE OSTI2026

The Impact of Time-Aware Design Choices in ICS Anomaly Detection

Industrial control systems (ICS) remain vulnerable to increasingly sophisticated cyberattacks, yet evaluating anomaly detection models in these environments is challenging due to temporal dependencies, missing-not-at-random patterns, and extremely imbalanced datasets. These factors make common practices—especially random data splits and na¨ıve imputation— prone to severe temporal leakage, which can inflate reported performance and obscure real-world limitations. In this work, we systematically examine classical machine learning models, temporal deep learning architecture, and tensordecomposition– based methods on a gas-pipeline dataset using a fully temporally separated evaluation pipeline designed to mimic realistic deployment conditions. Our findings show that proper temporal handling and MNAR-aware preprocessing significantly alter the relative performance of popular anomaly-detection methods, providing practical guidance for designing reliable, leakage-resistant ICS intrusion-detection systems.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS2002

Parametric Time-Dependent Navier-Stokes Computations for a YAV-8B Harrier in Ground Effect

The Harrier Jump Jet has the distinction of being the only powered-lift aircraft in the free world to achieve operational status and to have flown in combat. This V/STOL aircraft can take-off and land vertically or utilize very short runways by directing its four exhaust nozzles towards the ground. Transition to forward flight is achieved by rotating these nozzles into a horizontal position. Powered-lift vehicles have certain advantages over conventional strike fighters. Their V/STOL capabilities allow for safer carrier operations, smaller carrier size, and quick reaction time for troop support. Moreover, they are not dependent on vulnerable land-based runways. The AV-8A Harrier first entered service in the British Royal Air Force (RAF) during 1969, and the U.S. Marine Corps (USMC) in 1971. The AV-8B was a redesign to achieve improved payload capacity, range, and accuracy. This modified design first entered service with the USMC and RAF in 1985. The success and unique capabilities of the Harrier has prompted the design of a powered-lift version of the Joint Strike Fighter (JSF). The flowfield for the Harrier near the ground during low-speed or hover flight operations is very complex and time-dependent. A sketch of this flowfield is shown. Warm air from the fan is exhausted from the front nozzles, while a hot air/fuel mixture from the engine is exhausted from the rear nozzles. These jets strike the ground and move out radially forming a ground jet-flow. The ambient freestream, due to low-speed forward flight or - headwind during hover, opposes the jet-flow. This interaction causes the flow to separate and form a ground vortex. The multiple jets also interact with each other near the ground and form an upwash or jet fountain, which strikes the underside of the fuselage. If the aircraft is sufficiently close to the ground, the inlet can ingest ground debris and hot gases from the fountain and ground vortex. This Hot Gas Ingestion (HGI) can cause a sudden loss of thrust (powered lift), and the vehicle may crash. The high-speed jet flow along the ground can also entrain the ambient flow, resulting in a low pressure region underneath the vehicle. The accompanied loss of lift is referred to as the suckdown effect. The ground vortex may also be highly unsteady, dramatically changing its size and position with time at low frequencies, e.g., 1 Hz.

Chaderjian, Neal M.↗
NASA NTRS2012

Performance Data Errors in Air Carrier Operations: Causes and Countermeasures

Several airline accidents have occurred in recent years as the result of erroneous weight or performance data used to calculate V-speeds, flap/trim settings, required runway lengths, and/or required climb gradients. In this report we consider 4 recent studies of performance data error, report our own study of ASRS-reported incidents, and provide countermeasures that can reduce vulnerability to accidents caused by performance data errors. Performance data are generated through a lengthy process involving several employee groups and computer and/or paper-based systems. Although much of the airline indUStry 's concern has focused on errors pilots make in entering FMS data, we determined that errors occur at every stage of the process and that errors by ground personnel are probably at least as frequent and certainly as consequential as errors by pilots. Most of the errors we examined could in principle have been trapped by effective use of existing procedures or technology; however, the fact that they were not trapped anywhere indicates the need for better countermeasures. Existing procedures are often inadequately designed to mesh with the ways humans process information. Because procedures often do not take into account the ways in which information flows in actual flight ops and time pressures and interruptions experienced by pilots and ground personnel, vulnerability to error is greater. Some aspects of NextGen operations may exacerbate this vulnerability. We identify measures to reduce the number of errors and to help catch the errors that occur.

countermeasures↗
DOE OSTI2022

Consistent Timing of Arctic Permafrost Loss Across the CESM1 Large Ensemble

Abstract The Arctic is especially vulnerable to climate change and is warming faster than the global average. Changes in this region pose a heightened threat due to the immense amount of carbon frozen as organic material in the soil. When permafrost thaws, organic material decays and releases as greenhouse gases into the atmosphere, contributing to further warming. A better understanding of the processes that influence permafrost degradation is needed to inform climate adaptation and mitigation planning. This study assesses changes to Arctic permafrost across 35 ensemble member simulations from the Community Earth System Model 1 Large Ensemble Project, under the Representative Concentration Pathway 8.5 21st century scenario. Most Arctic near‐surface permafrost is lost by 2100, but timing varies across regions and with soil depth. Internal climate variability, represented by differences between ensemble members, has a constrained influence on degradation timing due to relative consistency of summer temperature increases and insulation by winter snow cover.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Assessing the vulnerability of solar inverters to EMPs: Port testing, PCI modeling, and protection strategies

Renewable energy sources are becoming an ever-larger contributor to the power grid. These renewable energy sources depend upon the power electronic devices, specifically inverters, being essential for connecting Photovoltaic (PV) generation to the grid. However, the Electromagnetic Pulses (EMPs) caused by the high-altitude nuclear explosions can generate fast broad-band pulses with nanosecond rise time, potentially causing damage or destruction to electronic components. To assess the vulnerability of PV inverters to high-altitude EMPs, the port testing and Pulsed Current Injection (PCI) modeling schemes are proposed based on the port impedance analysis. Wide-band frequency measurements are achieved by fusing impedance results from three vector network analyzers. Then, a PCI model is used to simulate the induced response to EMP, with two typical immunity levels of EC5 and EC8 tested. Here, the experiment successfully excites the induced voltage and current under EMP, where the voltage and current can reach 1500V/40A and 8000V/150Aunder EC5 andEC8, respectively. The port vulnerability analysis results demonstrate that only some ports can survive under EC5. To defend against the impact of EMP, three protection strategies are discussed.

42 ENGINEERING↗
DOE OSTI2021

Hybrid Data-Driven Based HVdc Ancillary Control for Multiple Frequency Data Attacks

The high voltage direct current (HVdc) intertie has been applied to provide ancillary-services for ac grids, utilizing the real-time feedback from phasor measurement units (PMUs). However, PMU data communication is vulnerable to false data injection attacks (FDIA) due to protocol defects, thus the HVdc ancillary control and system stability will be threatened. To address this issue, this article proposes a novel HVdc control strategy based on a hybrid data-driven (HDD) methodology. In this work, the HDD methodology is first proposed to detect the types and duration time of multiple frequency attacks. Specifically, the Hilbert Huang transform (HHT) is used to decompose the frequency data, using variational mode decomposition instead of the traditional empirical mode decomposition, to extract data features. Second, a multikernel support vector machine is proposed to classify the attacked data based on the designed distinctive features from HHT. Meanwhile, the attacking duration time is decided using an unsupervised technique. Third, an HDD-based HVdc ancillary control strategy is established to eliminate the effect of FDIAs on the HVdc frequency response. Comprehensive experiments of HDD-based HVdc ancillary controls under different FDIAs suggest that the proposed HDD could fast and accurately classify the FDIAs, and the HDD-based HVdc ancillary control strategy could significantly suppress the impact of the FDIAs.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Satellite Enveloped with STITCHED Engineering Sensors for Detection of Approaching Objects

Today as well as tomorrows spaceborne assets impact almost all areas of national and nuclear security. Spaceborne assets can not only collect and disseminate valuable data, well beyond just the visual, but also track terrestrial-based mobile assets in real-time, and active spaceborne platforms potentially pose serious risk to vulnerable earth-based systems and infrastructures. The capability to defend national spaceborne assets from attack/interference is critical for security interests. This effort supports this mission through the cost-effective preeminent detection of approaching threats to our nation’s vital resources, in order to help secure and trust these high-value assets against the threats of tomorrow. This project develops novel fabrication techniques for conformal, low-profile and lightweight leakywave antenna (LWA) detection/imaging systems, which fuses technical embroidery (TE) and laser ablation (LA) processes with LWA design. Technical embroidery is an emerging field in additive textile manufacturing where flexible materials and functionalized fabrics are created for a wide variety of uses and purposes, while laser ablation is the process of removing material from a solid surface by irradiating it with a laser beam. Here, thin, conformal antenna designs are designed, modeled and fabricated using both TE and LA, to create lightweight, flexible and conformal object detection and imaging radars. This novel development ensures our nation’s ability to field advanced lightweight and conformal technologies to protect spaceborne assets.

42 ENGINEERING↗
NASA NTRS2023

Climate and Human Impacts on Hydrological Processes and Flood Risk in Southern Louisiana

Satellite observations of coastal Louisiana indicate an overall land loss over recent decades, which could be attributed to climate and human-induced factors, including sea level rise (SLR). Climate induced hydrological change (CHC) has impacted the way flood control structures are used, altering the spatiotemporal water distribution. Based on “what-if” scenarios, we determine relative impacts of SLR and CHC on increased flood risk over southern Louisiana and examine the role of water management, via flood control structures, in mitigating flood risk over the region. Our findings show that CHC has increased flood risk over the past 28 years. The number of affected people increases as extreme hydrological events become more exceptional. Water management reduces flood risk to urban areas and croplands, especially during exceptional hydrological events. For example, currently (i.e., 2016-2020 period), CHC-induced flooding puts an additional 73km2 of cropland under flood risk at least half of the time (median flood event) and 65km2 once a year (annual flood event), when compared to a past period (1993-1997). A ten- to twenty-fold increase relative to SLR-induced flooding. CHC also increases population vulnerability in southern Louisiana to flooding; additional 9900 residents currently live under flood risk at least half of the time, and that number increases to 27,400 for annual flood events. Residents vulnerable to SLR induced flooding is lower (6000 and 3300 residents, respectively). Conclusions are that CHC is a major factor that should be accounted for flood resilience and that water management interventions can mitigate risks to human life and activities.

Augusto Getirana↗
NASA NTRS2012

A Geometric Analysis to Protect Manned Assets from Newly Launched Objects - COLA Gap Analysis

A safety risk was identified for the International Space Station (ISS) by The Aerospace Corporation following the launch of GPS IIR-20 (March 24, 2009), when the spent upper stage of the launch vehicle unexpectedly crossed inside the ISS notification box shortly after launch. This event highlighted a 56-hour vulnerability period following the end of the launch Collision Avoidance (COLA) process where the ISS would be unable to react to a conjunction with a newly launched object. Current launch COLA processes screen each launched object across the launch window to determine if an object's nominal trajectory is predicted to pass within 200 km of the ISS (or any other manned/mannable object), resulting in a launch time closure. These launch COLA screens are performed from launch through separation plus I 00 minutes. Once the objects are in orbit, they are cataloged and evaluated as part of routine on-orbit conjunction assessment processes. However, as the GPS IIR-20 scenario illustrated, there is a vulnerability period in the time line between the end of launch COLA coverage and the beginning of standard on-orbit COLA assessment activities. The gap between existing launch and on-orbit COLA processes is driven by the time it takes to track and catalog a launched object, identify a conjunction, and plan and execute a collision avoidance maneuver. For the ISS, the total time required to accomplish an of these steps is 56 hours. To protect human lives, NASA/JSC has requested that an US launches take additional steps to protect the ISS during this "COLA gap" period. The uncertainty in the state of a spent upper stage can be quite large after all bums are complete and all remaining propellants are expelled to safe the stage. Simply extending the launch COLA process an additional 56 hours is not a viable option as the 3-sigma position uncertainty will far exceed the 200 km miss-distance criterion. Additionally, performing a probability of collision (Pc) analysis over this period is also not practical due to the limiting effects of these large orbit state uncertainties. An estimated upper bound for Pc for a typical spent upper stage if nominally aligned for a direct broadside collision with the ISS is only on the order of 10-6. For a smaller manned object such as a Soyuz capsule, the risk level decreases to an order of 10'8 . In comparison, the Air Force Range policy (AFI 91-217) for launch COLAs would only eliminate launch opportunities when conjunctions with objects exceed a Pc of 10'5 This paper demonstrates a conservative geometry-based methodology that may be used to determine if launch opportunities pose a threat to the ISS during the COLA gap period. The NASA Launch Services Program at Kennedy Space Center has developed this COLA gap analysis method and employed it fQr three NASA missions to identify potential ISS conjunctions and corresponding launch window closures during the 56-hour at-risk period. In the analysis, for each launch opportunity, the nominal trajectory of the spent upper stage and the orbit state of the ISS are propagated over the 56 hour period. Each time the upper stage crosses the orbit plane of the ISS, the relative radial and argument of latitude separations are calculated. A window cutout is identified if these separation differences fall within a mission-specific violation box, which is determined from the evaluation of a Monte Carlo dispersions analysis that quantifies the potential variation in the upper stage radial and argument of latitude differences. This paper details the results of these analyses and their impacts to each mission.

Hametz, Mark E.↗
DOE OSTI2025

Time Synchronization Techniques in the Modern Smart Grid: A Comprehensive Survey

In modern smart grids, accurate and synchronized time signals are essential for effective monitoring, protection, and control. Various time synchronization methods exist, each tailored to specific application needs. Widely adopted solutions, such as GPS, however, are vulnerable to challenges such as signal loss and cyber-attacks, underscoring the need for reliable backup or supplementary solutions. This paper examines the timing requirements across different power grid applications and provides a comprehensive review of available time synchronization mechanisms. Through a comparative analysis of timing methods based on accuracy, flexibility, reliability, and security, this study offers insights to guide the selection of optimal solutions for seamless grid integration.

comparison↗
DOE OSTI2025

Precision Time Protocol Performance Testing Over Optical Transport Network

The US Department of Energy Office of Electricity has partnered with Oak Ridge National Laboratory (ORNL) to find alternative precision timing solutions for the nation’s power grid. This effort is in response to the vulnerabilities identified in the Global Navigation Satellite System (GNSS), of which the US Global Positioning System (GPS) platform is a part. Additionally, Executive Order 139055 has highlighted the need for alternative or backup timing solutions. ORNL has established a Timing Lab and has been testing various technologies and timing devices as part of this effort. Precision Time Protocol (PTP), and the off-the-shelf timing devices and network connections that support it, are among the alternatives being tested. This work reports the accuracy of PTP over an Optical Transport Network (OTN) and is part of a series published by the Center for Alternative Synchronization and Timing (CAST).

24 POWER TRANSMISSION AND DISTRIBUTION↗