Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Incident response”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,063 records · Page 59

A Laboratory Study of the Effect of Frost Flowers on C Band Radar Backscatter from Sea Ice

C band images of Arctic sea ice taken by the ERS 1 synthetic aperture radar show transitory regions of enhanced radar backscatter from young sea ice. Published field observations associate this increase with frost flower growth and the capture of blowing snow by the flowers. To investigate the first part of this phenomenon, we carried out a laboratory experiment on the response of C band radar backscatter to frost flowers growing on the surface of newly formed saline ice. The experiment took place in a 5 m by 7 m by 1.2 m deep saline water pool located in a two-story indoor refrigerated facility at the Cold Regions Research and Engineering Laboratory. Sodium chloride ice was grown in this pool at an air temperature of -28 C. The frost flowers first appeared on the ice surface as dendrites and then changed to needles as the ice sheet grew thicker and the surface temperatures became colder. The frost flowers reached to a height of 10-15 mm, and beneath each cluster of frost flowers a slush layer formed to a thickness of approximately 4 mm. Far-field radar measurements of the backscatter from the ice were made at incident angles from 20 C to 40 C and at approximately 6-hour intervals throughout the 3-day period of the experiment. A backscatter minimum occurred early in the flower growth at the time coincident with an abrupt doubling in the ice surface salinity. Once the full flower coverage was achieved, we removed first the crystal flowers and then the slush layer from the ice surface. The results for these cases show that the crystals have little impact on the backscatter, while the underlying slush patches yield a backscatter increase of 3-5 dB over that o f bare ice. The laboratory results suggest that this relative backscatter increase of approximately 5 dB can be used as an index to mark the full areal coverage of frost flowers.

Nghiem, S. V.↗

Pre-Departure Clearance (PDC): An Analysis of Aviation Safety Reporting System Reports Concerning PDC Related Errors

Airlines operating in the United States are required to operate under instrument flight rules (EFR). Typically, a clearance is issued via voice transmission from clearance delivery at the departing airport. In 1990, the Federal Aviation Administration (FAA) began deployment of the Pre-Departure Clearance (PDC) system at 30 U.S. airports. The PDC system utilizes aeronautical datalink and Aircraft Communication and Reporting System (ACARS) to transmit departure clearances directly to the pilot. An objective of the PDC system is to provide an immediate reduction in voice congestion over the clearance delivery frequency. Participating airports report that this objective has been met. However, preliminary analysis of 42 Aviation Safety Reporting System (ASRS) reports has revealed problems in PDC procedures and formatting which have caused errors in the proper execution of the clearance. It must be acknowledged that this technology, along with other advancements on the flightdeck, is adding more responsibility to the crew and increasing the opportunity for error. The present study uses these findings as a basis for further coding and analysis of an additional 82 reports obtained from an ASRS database search. These reports indicate that clearances are often amended or exceptions are added in order to accommodate local ATC facilities. However, the onboard ACARS is limited in its ability to emphasize or highlight these changes which has resulted in altitude and heading deviations along with increases in ATC workload. Furthermore, few participating airports require any type of PDC receipt confirmation. In fact, 35% of all ASRS reports dealing with PDC's include failure to acquire the PDC at all. Consequently, this study examines pilots' suggestions contained in ASRS reports in order to develop recommendations to airlines and ATC facilities to help reduce the amount of incidents that occur.

Montalyo, Michael L.↗

Precursor Analysis Report: JBS Foods Ransomware Attack 2021

The JBS Foods 2021 Ransomware Attack Precursor Analysis Report leverages publicly available information about the JBS ransomware cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. In late May 2021, one of the world’s largest meat producers, JBS Foods, announced they had fallen victim to a worldwide ransomware attack, later found to be REvil ransomware. In the United States alone, JBS Foods accounts for nearly 25% of beef and roughly 20% of pork production. Adversaries initially launched a Distributed Denial of Service (DDoS) attack on the company’s Information Technology (IT) networks in Australia, but the attack impacted operations in Brazil, Canada, and the United States, as well. The attack caused plant operations in all four countries to shut down for at least one day. All nine of the U.S. meatpacking plants temporarily shut down because of the attack. The adversaries initially demanded a $\$$22 million ransom for the company’s data, but later negotiated the ransom down to $\$$11 million even after JBS Foods restored most of their systems. JBS Foods eventually paid the $\$$11 Million for reassurance from the adversaries that none of their customers’ data would be compromised in the future. Despite its short duration, the attack still caused large stocks of meat to spoil. The incident also underscored how adversaries can simultaneously compromise and move laterally through global subsidiaries of an organization. Researchers and analysts identified 22 unique techniques (in a sequence of 21 steps) utilized during the attack with a total of 361 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Sixteen of the identified techniques used during the JBS Foods cyber attack were precursors to the triggering event. Analysis identified 308 observables associated with these precursor techniques, 163 of which were assessed to have an increased likelihood of being perceived in the 75 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Investigation of the cesium activation of Ga⁢N photocathodes by low-energy electron microscopy

Low-energy electron microscopy (LEEM) was performed on p-Ga⁢N samples during in situ cesium deposition. LEEM images of electron reflectivity recorded as a function of the incident electron energy at different Cs coverages allowed to spatially resolve the evolution of the local work function (WF) during the activation process. While the average WF drops by more than 3 eV, the local WF remains quite uniform across the surface throughout the activation process. Maximum fluctuations of less than 0.2 eV were observed in the WF maps for Cs coverage of a fraction of a monolayer. These fluctuations are mainly related to the surface topography, in particular, to the atomic steps’ structure, which replicates the substrate miscut. Apart from these weak spatial fluctuations, no Cs clusters that would induce strong local WF contrast were observed at the scale of the 20-nm resolution of the measurements. These observations agree with the simple model of semiconductor activation to negative electron affinity that describes the formation of a dipole layer as responsible for the lowering of the WF. Additionally, at complete Cs coverage, the WF becomes fully homogeneous over the surface, smoothing out features originating from defects and topography.

75 CONDENSED MATTER PHYSICS, SUPERCONDUCTIVITY AND↗

The influence of ATC message length and timing on pilot communication

Pilot-controller communication is critical to safe and efficient flight. It is often a challenging component of piloting, which is reflected in the number of incidents and accidents involving miscommunication. Our previous field study identified communication problems that disrupt routine communication between pilots and controllers. The present part-task simulation study followed up the field results with a more controlled investigation of communication problems. Pilots flew a simulation in which they were frequently vectored by Air Traffic Control (ATC), requiring intensive communication with the controller. While flying, pilots also performed a secondary visual monitoring task. We examined the influence of message length (one message with four commands vs. two messages with two commands each) and noncommunication workload on communication accuracy and length. Longer ATC messages appeared to overload pilot working memory, resulting in more incorrect or partial readbacks, as well as more requests to repeat the message. The timing between the two short messages also influenced communication. The second message interfered with memory for or response to the first short message when it was delivered too soon after the first message. Performing the secondary monitoring task did not influence communication. Instead, communication reduced monitoring accuracy.

Morrow, Daniel↗

Precursor Analysis Report: SQL Slammer Worm Infection of Davis-Besse Nuclear Power Plant 2003

The SQL Slammer Worm Infection of Davis-Besse Nuclear Power Plant 2003 Precursor Analysis Report leverages publicly available information about Davis-Besse’s 2003 cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. On 25 January 2003, the SQL Slammer worm infected more than 90% of vulnerable hosts and crashed the internet in 10 to 15 minutes, making it one of the fastest spreading worms in history. SQL Slammer is a fileless, memory-resident worm that remotely exploits a stack-based buffer overflow vulnerability on local hosts to intensively scan and rapidly self-propagate across the internet. The worm infected approximately 300,000 unpatched hosts running Microsoft Structured Query Language (SQL) Server 2000 or Microsoft Desktop Engine (MSDE) 2000 with SQL Server Resolution Service. The SQL Slammer worm indirectly infected FirstEnergy’s Davis-Besse nuclear power plant by first infecting a consultant’s company network server and then propagating through an external misconfigured connection into Davis-Besse’s site network. The infection caused major network congestion, slow performance, data overloads, and the inability of local hosts to communicate with each other, which eventually caused a loss of availability and a loss of view when the Safety Parameter Display System (SPDS) and Plant Process Computer (PPC) crashed. At the time of the infection, the plant was already offline, the digital monitoring systems had redundant analog backups, and the plant control and safety functions were not affected, so there were no concerns of a safety breach. However, this incident resulted in many lessons learned and spawned important discussions about cybersecurity’s role in nuclear safety and electric power reliability regulation, policy, and guidance. Researchers and analysts identified 10 unique techniques utilized during the attack with a total of 640 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Eight of the identified techniques used during Davis-Besse cyber attack were precursors to the triggering event. Analysis identified 596 observables associated with these precursor techniques, 428 of which were assessed to have an increased likelihood of being perceived in the 331 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Broadband Achromatic Telecentric Lens

A new type of lens design features broadband achromatic performance as well as telecentricity, using a minimum number of spherical elements. With appropriate modifications, the lens design form can be tailored to cover the range of response of the focal-plane array, from Si (400-1,000 nm) to InGaAs (400-1,700 or 2,100 nm) or InSb/HgCdTe reaching to 2,500 nm. For reference, lenses typically are achromatized over the visible wavelength range of 480-650 nm. In remote sensing applications, there is a need for broadband achromatic telescopes, normally satisfied with mirror-based systems. However, mirror systems are not always feasible due to size or geometry restrictions. They also require expensive aspheric surfaces. Non-obscured mirror systems can be difficult to align and have a limited (essentially one-dimensional) field of view. Centrally obscured types have a two-dimensional but very limited field in addition to the obscuration. Telecentricity is a highly desirable property for matching typical spectrometer types, as well as for reducing the variation of the angle of incidence and cross-talk on the detector for simple camera types. This rotationally symmetric telescope with no obscuration and using spherical surfaces and selected glass types fills a need in the range of short focal lengths. It can be used as a compact front unit for a matched spectrometer, as an ultra-broadband camera objective lens, or as the optics of an integrated camera/spectrometer in which the wavelength information is obtained by the use of strip or linear variable filters on the focal plane array. This kind of camera and spectrometer system can find applications in remote sensing, as well as in-situ applications for geological mapping and characterization of minerals, ecological studies, and target detection and identification through spectral signatures. Commercially, the lens can be used in quality-control applications via spectral analysis. The lens design is based on the rear landscape lens with the aperture stop in front of all elements. This allows sufficient room for telecentricity in addition to making the stop easily accessible. The crucial design features are the use of a doublet with an ultra-low dispersion glass (fluorite or S-FPL53), and the use of a strong negative element, which enables flat field and telecentricity in conjunction with the last (field lens) element. The field lens also can be designed to be in contact with the array, a feature that is desirable in some applications. The lens has a 20deg field of view, for a 50-mm focal length, and is corrected over the range of wavelengths of 450-2,300 nm. Transverse color, which is the most pernicious aberration for spectroscopic work, is controlled at the level of 1 m or below at 0.7 m field and 5 m at full field. The maximum chief ray angle is less than 1.7 , providing good telecentricity. An additional feature of this lens is that it is made exclusively with glasses that provide good transmission up to 2,300 nm and even some transmission to 2,500 nm; thus, the lens can be used in applications that cover the entire solar-reflected spectrum. Alternative realizations are possible that provide enhanced resolution and even less transverse color over a narrower wavelength range.

Mouroulis, Pantazis↗

Doppler indices of gas phase formation in hypobaric environments: Time-intensity analysis

A semi-quantitative method to analyze decompression data is described. It possesses the advantage that it allows a graded response to decompression rather than the dichotomous response generally employed. A generalized critical volume (C-V), or stoichiometric time-dependent equilibrium model is examined that relates the constant of the equation P sub i equals m P sub f plus b to variable tissue supersaturation and gas washout terms. The effects of the tissue ratio on gas phase formation indicate that a decreased ratio yields fewer individuals with Doppler detectable gas bubbles, but those individuals still present with Spencer Grade 3 or 4. This might indicate a local collapse of tissue saturation. The individuals with Grade 3 or 4 could be at risk for type 2 decompression sickness by transpulmonic arterialization. The primary regulator of the problems of decompression sickness is the reduction of local supersaturation, presumably governed by the presence and number of gas micronuclei. It is postulated that a reduction in these nuclei will favor a low incidence of decompression sickness in microgravity secondary to hypokinesia and adynamia.

Powell, Michael R.↗

Neuroendocrine abnormalities in patients with traumatic brain injury

This article provides an overview of hypothalamic and pituitary alterations in brain trauma, including the incidence of hypothalamic-pituitary damage, injury mechanisms, features of the hypothalamic-pituitary defects, and major hypothalamic-pituitary disturbances in brain trauma. While hypothalamic-pituitary lesions have been commonly described at postmortem examination, only a limited number of clinical cases of traumatic hypothalamic-pituitary dysfunction have been reported, probably because head injury of sufficient severity to cause hypothalamic and pituitary damage usually leads to early death. With the improvement in rescue measures, an increasing number of severely head-injured patients with hypothalamic-pituitary dysfunction will survive to be seen by clinicians. Patterns of endocrine abnormalities following brain trauma vary depending on whether the injury site is in the hypothalamus, the anterior or posterior pituitary, or the upper or lower portion of the pituitary stalk. Injury predominantly to the hypothalamus can produce dissociated ACTH-cortisol levels with no response to insulin-induced hypoglycemia and a limited or failed metopirone test, hypothyroxinemia with a preserved thyroid-stimulating hormone response to thyrotropin-releasing hormone, low gonadotropin levels with a normal response to gonadotropin-releasing hormone, a variable growth hormone (GH) level with a paradoxical rise in GH after glucose loading, hyperprolactinemia, the syndrome of inappropriate ADH secretion (SIADH), temporary or permanent diabetes insipidus (DI), disturbed glucose metabolism, and loss of body temperature control. Severe damage to the lower pituitary stalk or anterior lobe can cause low basal levels of all anterior pituitary hormones and eliminate responses to their releasing factors. Only a few cases showed typical features of hypothalamic or pituitary dysfunction. Most severe injuries are sufficient to damage both structures and produce a mixed endocrine picture. Increased intracranial pressure, which releases vasopressin by altering normal hypothalamic anatomy, may represent a unique type of stress to neuroendocrine systems and may contribute to adrenal secretion by a mechanism that requires intact brainstem function. Endocrine function should be monitored in brain-injured patients with basilar skull fractures and protracted posttraumatic amnesia, and patients with SIADH or DI should be closely monitored for other endocrine abnormalities.

NASA Program Space Physiology and Countermeasures↗

Flexible Models for Solar Sail Control

Solar sails employ a unique form of propulsion, gaining momentum from incident and reflected photons. However, the momentum transferred by an individual photon is extremely small. Consequently, a solar sail must have an extremely large surface area and also be extremely light. The flexibility of the sail then must be considered when designing or evaluating control laws. In this paper, solar sail flexibility and its influence on control effectiveness is considered using idealized two-dimensional models to represent physical phenomena rather than a specific design. Differential equations of motion are derived for a distributed parameter model of a flexible solar sail idealized as a rotating central hub with two opposing flexible booms. This idealization is appropriate for solar sail designs in which the vibrational modes of the sail and supporting booms move together allowing the sail mass to be distributed along the booms in the idealized model. A reduced analytical model of the flexible response is considered. Linear feedback torque control is applied at the central hub. Two translational disturbances and a torque disturbance also act at the central hub representing the equivalent effect of deflecting sail shape about a reference line. Transient simulations explore different control designs and their effectiveness for controlling orientation, for reducing flexible motion and for disturbance rejection. A second model also is developed as a two-dimensional "pathfinder" model to calculate the effect of solar sail shape on the resultant thrust, in-plane force and torque at the hub. The analysis is then extended to larger models using the finite element method. The finite element modeling approach is verified by comparing results from a two-dimensional finite element model with those from the analytical model. The utility of the finite element modeling approach for this application is then illustrated through examples based on a full finite element model.

Weaver Smith, Suzanne↗

Instrumentation for Sensitive Gas Measurements

An improved instrument for optical absorption spectroscopy utilizes off-axis paths in an optical cavity in order to increase detection sensitivity while suppressing resonance effects. The instrument is well suited for use in either cavity ring-down spectroscopy (CRDS) [in which one pulses an incident light beam and measures the rate of decay of light in the cavity] or integrated cavity output spectroscopy (ICOS) [in which one uses a continuous-wave incident light beam and measures the power of light in the cavity as a function of wavelength]. Typically, in optical absorption spectroscopy, one seeks to measure absorption of a beam of light in a substance (usually a gas or liquid) in a sample cell. In CRDS or ICOS, the sample cell is placed in (or consists of) an optical cavity, so that one can utilize multiple reflections of the beam to increase the effective optical path length through the absorbing substance and thereby increase the sensitivity for measuring absorption. If an absorbing substance is not present in the optical cavity, one can utilize the multiple passes of the light beam to increase the sensitivity for measuring absorption and scattering by components of the optical cavity itself. It is desirable to suppress the effects of resonances in the cavity in order to make the spectral response of the cavity itself as nearly constant as possible over the entire wavelength range of interest. In the present instrument, the desired flattening of the spectral response is accomplished by utilizing an off-axis beam geometry to effectively decrease the frequency interval between longitudinal electromagnetic modes of the cavity, such that the resulting transmission spectrum of the cavity is nearly continuous: in other words, the cavity becomes a broad-band optical device.

OKeefe, Anthony↗

Numerical simulation of the nonlinear response of composite plates under combined thermal and acoustic loading

A time-domain study of the random response of a laminated plate subjected to combined acoustic and thermal loads is carried out. The features of this problem also include given uniform static inplane forces. The formulation takes into consideration a possible initial imperfection in the flatness of the plate. High decibel sound pressure levels along with high thermal gradients across thickness drive the plate response into nonlinear regimes. This calls for the analysis to use von Karman large deflection strain-displacement relationships. A finite element model that combines the von Karman strains with the first-order shear deformation plate theory is developed. The development of the analytical model can accommodate an anisotropic composite laminate built up of uniformly thick layers of orthotropic, linearly elastic laminae. The global system of finite element equations is then reduced to a modal system of equations. Numerical simulation using a single-step algorithm in the time-domain is then carried out to solve for the modal coordinates. Nonlinear algebraic equations within each time-step are solved by the Newton-Raphson method. The random gaussian filtered white noise load is generated using Monte Carlo simulation. The acoustic pressure distribution over the plate is capable of accounting for a grazing incidence wavefront. Numerical results are presented to study a variety of cases.

Mei, Chuh↗

Independent Review of the Proof-of-Concept Cyber100 Compass Cybersecurity Risk Tool

The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER), and Office of Electricity (OE) commissioned the National Renewable Energy Laboratory (NREL) to develop a method and tool to enable electric utilities to understand and manage the risk of cybersecurity events that can lead to physical effects like blackouts. This tool, called Cyber100 Compass, uses cybersecurity data elicited from cybersecurity experts, then incorporates that data into a tool designed to be usable by cybersecurity non-experts who understand the system itself. The tool estimates dollar-valued risks for a current or postulated future electric power digital control configuration, in order to enable utility risk planners to prioritize among proposed cybersecurity risk mitigation options. With the development of the Cyber100 Compass tool for quantification of future cyber-physical security risks, NREL has taken an initial bold step in the direction of enabling and indeed encouraging electric utilities to address the potential for cybersecurity incidents to produce detrimental physical effects related to electric power delivery. As part of the Cyber100 Compass development process, DOE funded NREL to seek out an independent technical review of the risk methodology embodied in the tool. NREL requested this review from Sandia National Laboratories, and made available to Sandia a very late version of the project report, as well as NREL personnel to provide clarification and to respond to questions. This paper provides the result of the independent review activity.

97 MATHEMATICS AND COMPUTING↗

One-Carbon Metabolism and SANS 2022 Update

Spaceflight Associated Neuro-ocular Syndrome, or SANS, affects a subset of astronauts (1, 2), and biochemical evidence has documented differences in those astronauts (3). Specifically, they had higher circulating concentrations of metabolites of the one-carbon metabolic pathway (1C), including homocysteine, and these concentrations were higher before flight (3). After ruling out many potential confounding factors in these otherwise healthy individuals (e.g., sex, kidney function, vitamin status, coffee consumption), a study of genetics was warranted. In an initial pilot effort, we documented a genetic predisposition to develop ophthalmic changes after long-duration space flight (4). That is, from a limited study of 5 single-nucleotide polymorphisms (SNPs), we found that the G allele for the MTRR A66G SNP was associated with a greater risk of choroidal folds and cotton-wool spots after flight, and the C allele for SHMT1 C1420T was protective against optic disc edema (4). These data provide a potential pathway for understanding why some individuals develop SANS, while others do not. The initial pilot study of 5 SNPs yielded striking findings, but the 1C pathway is far more complex. An effort was undertaken to examine more than 500 1C SNPs to see if a broader examination could help illuminate this association. That work is ongoing. The astronaut findings led us to advocate for the inclusion of 1C pathway genetic and biochemistry testing on other SANS-related projects, noting that genetics might help identify responders, non-responders, or outliers. The first such effort yielded evidence of an association of specific forms of the MTRR and SHMT-1 SNPs and vitamin B12 status with end-tidal CO2 after acute carbon dioxide exposure (5). The second such effort led to the identification that individuals exposed to strict head-down tilt and CO2 for 30-d who developed optic disc edema also had risk alleles for the two SNPs described above (6). Additionally, we identified a clinical population with many characteristics either attributed or purported to be involved in the ocular changes seen in affected astronauts: women with polycystic ovary syndrome (PCOS). PCOS is a condition of androgen excess and anovulatory menstrual cycles. The shared characteristics and clinical findings between SANS and PCOS generally include higher circulating homocysteine concentrations, increased retinal nerve fiber layer thickness, increased androgen concentrations (or responses), and altered carbohydrate metabolism. To our knowledge, no study has examined whether women with PCOS have asymptomatic ophthalmic anomalies observed in astronauts with SANS. While researchers have evaluated the one-carbon metabolism pathway polymorphisms of PCOS patients, and initial studies show an association with certain one-carbon polymorphisms, none have looked at the set of SNPs identified in our studies that are associated with ophthalmic changes in astronauts. Accordingly, we designed a study to evaluate the association of one-carbon pathway SNPs and ophthalmic findings in patients with PCOS and/or IIH compared to controls. Subjects provided blood samples for vitamin and one carbon biochemistry analyses, an extensive analysis of >500 SNPs associated with one carbon metabolism and had eye examinations and ocular imaging. Data analysis are underway. The data collected to date have shown associations between one carbon pathway biochemistry and genetics and incidence of SANS. The mechanisms for SANS has yet to be identified, although many hypotheses exist. Based on our data, we have developed (8, 9) and expanded (6) a multi-hit hypothesis for how these seemingly disparate findings could be linked. While intriguing, the hypothesis represents the starting point for further research. We aim to clarify the relationship between B-vitamin status and genetics with regard to the risk of SANS. Ultimately, understanding the mechanism(s) behind this will provide a means to predict, prevent, or treat these ophthalmologic pathologies in astronauts, and terrestrial populations.

S M Smith↗

Precursor Analysis Report: Doppelpaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019

The DoppelPaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019 Precursor Analysis Report leverages publicly available information about the PEMEX cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. The 2019 DoppelPaymer ransomware attack on PEMEX, Mexico’s nationalized petroleum corporation, highlights a unique threat that ransomware and cybercriminal extortion poses to Operational Technology (OT) environments in critical infrastructure. The incident began with an employee downloading commodity malware that allowed adversaries to gain initial access to PEMEX’s enterprise environment. After conducting privilege escalation, tool ingress, and data exfiltration, the adversaries deployed DoppelPaymer ransomware throughout the PEMEX enterprise environment, resulting in the company having to take dozens of systems offline for at least several days. Although PEMEX stated that their operations were not affected, the data exfiltrated from PEMEX was made available for download on DoppelPaymer’s leak site, as well as on other illicit criminal forums. This stolen data included not only company information, but also sensitive OT-specific configuration data. This incident showcases how cybercriminal exfiltration and posting of sensitive OT architecture documentation can pose security concerns for the targeted organization for years due to the long lifespan of OT assets and architectures. Researchers and analysts identified 18 unique techniques utilized during the attack with a total of 190 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the DoppelPaymer ransomware attack were precursors to the triggering event. Analysis identified 163 observables associated with these precursor techniques, 34 of which were assessed to have an increased likelihood of being perceived in the 60 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Safety Ellipse Motion with Coarse Sun Angle Optimization

The Hubble Space Telescope Robotic Servicing and De-orbit Mission (HRSDM) was t o be performed by the unmanned Hubble Robotic Vehicle (HRV) consisting of a Deorbit Module (DM), responsible for the ultimate disposal of Hubble Space Telescope (HST) at the end of science operations, and an Ejection Module (EM), responsible for robotically servicing the HST to extend its useful operational lifetime. HRSDM consisted of eight distinct phases, including: launch, pursuit, proximity operations, capture, servicing, EM jettison and disposal, science operations, and deorbit. The scope of this paper is limited to the Proximity Operations phase of HRSDM. It introduces a relative motion strategy useful for Autonomous Rendezvous and Docking (AR&D) or Formation Flying missions where safe circumnavigation trajectories, or close proximity operations (tens or hundreds of meters) are required for extended periods of time. Parameters and algorithms used to model the relative motion of HRV with respect to HST during the Proximity Operations phase of the HRSDM are described. Specifically, the Safety Ellipse (SE) concept, convenient parameters for describing SE motion, and a concept for initializing SE motion around a target vehicle to coarsely optimize sun and relative navigation sensor angles are presented. The effects of solar incidence angle variations on sun angle optimization, and the effects of orbital perturbations and navigation uncertainty on long term SE motion are discussed.

Naasz, Bo↗

Sensitivity Analysis of the Change of Renal Stone Occurrence Rates in Astronauts Using Urine Chemistries

Changes in urine chemistry, during and post-flight, potentially alter the likelihood of renal stones in astronauts. Although much is known about the effects of space flight on urine chemistry, no inflight incidences of renal stones in US astronauts exist and the question How much does this risk change with space flight? remains difficult to accurately quantify. Previous work by our group has illustrated the application of multi-factor deterministic and probabilistic modeling to assess the change in predicted likelihood of renal stone. Utilizing 1517 astronaut urine chemistries to inform the renal stone occurrence rate forecasting model, we performed a sensitivity analysis on urine chemistry components for their influence on predictions of renal stone size and rate of renal stone occurrence.

physiological response↗

Ultrafast light-induced shear strain probed by time-resolved x-ray diffraction: Multiferroic BiFeO 3 as a case study

Enabling the light control of complex systems on ultrashort timescales gives rise to rich physics with promising applications. Although crucial, the quantitative determination of both the longitudinal and the shear photoinduced strains still remains challenging. Here, by scrutinizing asymmetric Bragg peaks pairs (±h01) in BiFeO 3 using picosecond time-resolved x-ray diffraction experiments, we simultaneously determine the longitudinal and shear strains. Importantly, we reveal a difference in the dynamical response of the longitudinal strain with respect to the shear one due to an interplay of quasilongitudinal and quasitransverse acoustic modes, well reproduced by our model. Lastly, we show that the relative amplitude of those strains can be explained only if both thermal and nonthermal processes contribute to the acoustic phonon photogeneration process.

75 CONDENSED MATTER PHYSICS, SUPERCONDUCTIVITY AND↗