Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “detection network”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

Experimental Validation of a Command and Control Traffic Detection Model

Network intrusion detection systems (NIDS) are commonly used to detect malware communications, including command-and-control (C2) traffic from botnets. NIDS performance assessments have been studied for decades, but mathematical modeling has rarely been used to explore NIDS performance. This paper details a mathematical model that describes a NIDS performing packet inspection and its detection of malware's C2 traffic. Here, the paper further describes an emulation testbed and a set of cyber experiments that used the testbed to validate the model. These experiments included a commonly used NIDS (Snort) and traffic with contents from a pervasive malware (Emotet). Results are presented for two scenarios: a nominal scenario and a “stressed” scenario in which the NIDS cannot process all incoming packets. Model and experiment results match well, with model estimates mostly falling within 95 % confidence intervals on the experiment means. Model results were produced 70-3000 times faster than the experimental results. Consequently, the model's predictive capability could potentially be used to support decisions about NIDS configuration and effectiveness that require high confidence results, quantification of uncertainty, and exploration of large parameter spaces. Furthermore, the experiments provide an example for how emulation testbeds can be used to validate cyber models that include stochastic variability.

mathematical model↗

Cloud-to-Ground Lightning Estimates Derived from SSMI Microwave Remote Sensing and NLDN

Lightning observations are collected using ground-based and satellite-based sensors. The National Lightning Detection Network (NLDN) in the United States uses multiple ground sensors to triangulate the electromagnetic signals created when lightning strikes the Earth's surface. Satellite-based lightning observations have been made from 1998 to present using the Lightning Imaging Sensor (LIS) on the NASA Tropical Rainfall Measuring Mission (TRMM) satellite, and from 1995 to 2000 using the Optical Transient Detector (OTD) on the Microlab-1 satellite. Both LIS and OTD are staring imagers that detect lightning as momentary changes in an optical scene. Passive microwave remote sensing (85 and 37 GHz brightness temperatures) from the TRMM Microwave Imager (TMI) has also been used to quantify characteristics of thunderstorms related to lightning. Each lightning detection system has fundamental limitations. TRMM satellite coverage is limited to the tropics and subtropics between 38 deg N and 38 deg S, so lightning at the higher latitudes of the northern and southern hemispheres is not observed. The detection efficiency of NLDN sensors exceeds 95%, but the sensors are only located in the USA. Even if data from other ground-based lightning sensors (World Wide Lightning Location Network, the European Cooperation for Lightning Detection, and Canadian Lightning Detection Network) were combined with TRMM and NLDN, there would be enormous spatial gaps in present-day coverage of lightning. In addition, a globally-complete time history of observed lightning activity is currently not available either, with network coverage and detection efficiencies varying through the years. Previous research using the TRMM LIS and Microwave Imager (TMI) showed that there is a statistically significant correlation between lightning flash rates and passive microwave brightness temperatures. The physical basis for this correlation emerges because lightning in a thunderstorm occurs where ice is first present in the cloud and electric charge separation occurs. These ice particles efficiently scatter the microwave radiation at the 85 and 37 GHz frequencies, thus leading to large brightness temperature depressions. Lightning flash rate is related to the total amount of ice passing through the convective updraft regions of thunderstorms. Confirmation of this relationship using TRMM LIS and TMI data, however, remains constrained to TRMM observational limits of the tropics and subtropics. Satellites from the Defense Meteorology Satellite Program (DMSP) have global coverage and are equipped with passive microwave imagers that, like TMI, observe brightness temperatures at 85 and 37 GHz. Unlike the TRMM satellite, however, DMSP satellites do not have a lightning sensor, and the DMSP microwave data has never been used to derive global lightning. In this presentation, a relationship between DMSP Special Sensor Microwave Imager (SSMI) data and ground-based cloud-to-ground (CG) lightning data from NLDN is investigated to derive a spatially complete time history of CG lightning for the USA study area. This relationship is analogous to the established using TRMM LIS and TMI data. NLDN has the most spatially and temporally complete CG lightning data for the USA, and therefore provides the best opportunity to find geospatially coincident observations with SSMI sensors. The strongest thunderstorms generally have minimum 85 GHz Polarized Corrected brightness Temperatures (PCT) less than 150 K. Archived radar data was used to resolve the spatial extent of the individual storms. NLDN data for that storm spatial extent defined by radar data was used to calculate the CG flash rate for the storm. Similar to results using TRMM sensors, a linear model best explained the relationship between storm-specific CG flash rates and minimum 85 GHz PCT. However, the results in this study apply only to CG lightning. To extend the results to weaker storms, the probability of CG lightning (instead of the flash rate) was calculated for storms having 85 GHz PCT greater than 150 K. NLDN data was used to determine if a CG strike occurred for a storm. This probability of CG lightning was plotted as a function of minimum 85 GHz PCT and minimum 37 GHz PCT. These probabilities were used in conjunction with the linear model to estimate the CG flash rate for weaker storms with minimum 85 GHz PCTs greater than 150 K. Results from the investigation of CG lightning and passive microwave radiation signals agree with the previous research investigating total lightning and brightness temperature. Future work will take the established relationships and apply them to the decades of available DMSP data for the USA to derive a map of CG lightning flash rates. Validation of this method and uncertainty analysis will be done by comparing the derived maps of CG lightning flash rates against existing NLDN maps of CG lightning flash rates.

Winesett, Thomas↗

Structural Health Monitoring and Impact Detection Using Neural Networks for Damage Characterization

Detection of damage due to foreign object impact is an important factor in the development of new aerospace vehicles. Acoustic waves generated on impact can be detected using a set of piezoelectric transducers, and the location of impact can be determined by triangulation based on the differences in the arrival time of the waves at each of the sensors. These sensors generate electrical signals in response to mechanical motion resulting from the impact as well as from natural vibrations. Due to electrical noise and mechanical vibration, accurately determining these time differentials can be challenging, and even small measurement inaccuracies can lead to significant errors in the computed damage location. Wavelet transforms are used to analyze the signals at multiple levels of detail, allowing the signals resulting from the impact to be isolated from ambient electromechanical noise. Data extracted from these transformed signals are input to an artificial neural network to aid in identifying the moment of impact from the transformed signals. By distinguishing which of the signal components are resultant from the impact and which are characteristic of noise and normal aerodynamic loads, the time differentials as well as the location of damage can be accurately assessed. The combination of wavelet transformations and neural network processing results in an efficient and accurate approach for passive in-flight detection of foreign object damage.

Ross, Richard W.↗

Designing Size Consistent Statistics for Accurate Anomaly Detection in Dynamic Networks

An important task in network analysis is the detection of anomalous events in a network time series. These events could merely be times of interest in the network timeline or they could be examples of malicious activity or network malfunction. Hypothesis testing using network statistics to summarize the behavior of the network provides a robust framework for the anomaly detection decision process. Unfortunately, choosing network statistics that are dependent on confounding factors like the total number of nodes or edges can lead to incorrect conclusions (e.g., false positives and false negatives). In this article, we describe the challenges that face anomaly detection in dynamic network streams regarding confounding factors. We also provide two solutions to avoiding error due to confounding factors: the first is a randomization testing method that controls for confounding factors, and the second is a set of size-consistent network statistics that avoid confounding due to the most common factors, edge count and node count.

97 MATHEMATICS AND COMPUTING↗

Results from Two Years of Global Lightning Observation with the Optical Transient Detector

The Optical Transient Detector (OTD) is an instrument designed specifically to detect and locate lightning during either daytime or nighttime. A predecessor of the Lightning Imaging Sensor (LIS), it has been in orbit for over two and half years. During this time global lightning activity has been observed on a quasi continuous basis. During this time an extensive effort has been under way to quantify and verify the OTD performance. OTD data has been compared with both the National Lightning Detection Network (NLDN) and the Lightning Detection and Ranging (LDAR) system at KSC. Results of these intercomparisons will be presented as well as estimates of OTD overall performance parameters. In addition, one year of OTD results will be presented showing the strong influence of the sun on global lightning activity. A month by month collage of global lightning maps will be used to demonstrate both the first order forcing and more subtle influences. Finally, initial results form the Lightning Imaging Sensor, an instrument on the Tropical Rainfall Measuring Mission (TRMM) will be presented.

Christian, H. J.↗

Hidden Markov models and neural networks for fault detection in dynamic systems

Neural networks plus hidden Markov models (HMM) can provide excellent detection and false alarm rate performance in fault detection applications, as shown in this viewgraph presentation. Modified models allow for novelty detection. Key contributions of neural network models are: (1) excellent nonparametric discrimination capability; (2) a good estimator of posterior state probabilities, even in high dimensions, and thus can be embedded within overall probabilistic model (HMM); and (3) simple to implement compared to other nonparametric models. Neural network/HMM monitoring model is currently being integrated with the new Deep Space Network (DSN) antenna controller software and will be on-line monitoring a new DSN 34-m antenna (DSS-24) by July, 1994.

Smyth, Padhraic↗

Further Research on the Electrification of Pyrocumulus Clouds

Past research on pyrocumulus electrification has demonstrated that a variety of lightning types can occur, including cloud‐to‐ground (CG) flashes, sometimes of dominant positive polarity, as well as small intra‐cloud (IC) discharges in the upper levels of the pyro‐cloud. In Colorado during summer 2012, the first combined polarimetric radar, multi‐Doppler radar, and three‐dimensional lightning mapping array (LMA) observations of lightning‐producing pyrocumulus were obtained. These observations suggested that the National Lightning Detection Network (NLDN) was not sensitive enough to detect the small IC flashes that appear to be the dominant mode of lightning in these clouds. However, after an upgrade to the network in late 2012, the NLDN began detecting some of this pyrocumulus lightning. Multiple pyrocumulus clouds documented by the University of Wisconsin for various fires in 2013 and 2014 (including over the Rim, West Fork Complex, Yarnell Hill, Hardluck, and several other incidents) are examined and reported on here. This study exploits the increased‐sensitivity NLDN as well as the new nationwide U.S. network of polarimetric Next‐generation Radars (NEXRADs). These observations document the common occurrence of a polarimetric "dirty ice" signature ‐ modest reflectivities (20‐40+ dBZ), near‐zero differential reflectivity, and reduced correlation coefficient (less than 0.9) ‐ prior to the production of lightning. This signature is indicative of a mixture of ash and ice particles in the upper levels of the pyro‐cloud (less than ‐20 C), with the ice interpreted as being necessary for pyro‐cloud electrification. Pseudo‐Geostationary Lightning Mapper (GLM) data will be produced from the 2012 LMA observations, and the ability of GLM to detect small pyrocumulus ICs will be assessed. The utility of lightning and polarimetric radar for documenting rapid wildfire growth, as well as for documenting pyrocumulus impacts on the composition of the upper troposphere/lower stratosphere (UTLS), will be discussed.

Lang, Timothy J.↗

Networked Gamma Radiation Detection System for Rapid Tactical Response

A networked gamma radiation detection system with directional sensitivity and energy spectral data acquisition capability is being developed by the National Security Technologies, LLC, to support the close and intense tactical engagement of law enforcement who carry out counterterrorism missions. In the proposed design, three clusters of 2' × 4' × 16' sodium iodide crystals (4 each) with digiBASE-E (for list mode data collection) would be placed on the passenger side of a minivan. To enhance localization and facilitate rapid identification of isotopes, advanced smart realtime localization and radioisotope identification algorithms like WAVRAD (wavelet-assisted variance reduction for anomaly detection) and NSCRAD (nuisance-rejection spectral comparison ratio anomaly detection) will be incorporated. We are testing a collection of algorithms and analysis on the problem of radiation detection with a distributed sensor network, examining such a network’s associated characteristics, and also the trade-offs between false positive alarm rates, true positive alarm rates, and time to detect multiple radiation sources in a large area. Empirical and simulation analyses of critical system parameters, such as number of sensors, sensor placement, and sensor response functions, are being examined. This networked system will provide an integrated radiation detection architecture and framework with (i) a large nationally recognized search database equivalent that would help generate a common operational picture in a major radiological crisis; (ii) a robust reach back connectivity for search data to be evaluated by home teams; and, finally, (iii) a possibility of integrating search data from multi-agency responders.

false alarm rate↗

Distributed Detection of Malicious Attacks on Consensus Algorithms with Applications in Power Networks

Consensus-based distributed algorithms are well suited for coordination among agents in a cyber-physical system. These distributed schemes, however, suffer from their vulnerability to cyber attacks that are aimed at manipulating data and control ow. In this article, we present a novel distributed method for detecting the presence of such intrusions for a distributed multi-agent system following ratio consensus. We employ a Max-Min protocol to develop low cost, easy to implement detection strategies where each participating node detects the intrusion independently, eliminating the need for a trusted certifying agent in the network. The effectiveness of the detection method is demonstrated by numerical simulations on a 1000 node network to demonstrate the efficacy and simplicity of implementation.

27 ARPA - Advanced Research Projects Agency-Energy↗

Diagnostic Analyzer for Gearboxes (DAG): User's Guide

This documentation describes the Diagnostic Analyzer for Gearboxes (DAG) software for performing fault diagnosis of gearboxes. First, the user would construct a graphical representation of the gearbox using the gear, bearing, shaft, and sensor tools contained in the DAG software. Next, a set of vibration features obtained by processing the vibration signals recorded from the gearbox using a signal analyzer is required. Given this information, the DAG software uses an unsupervised neural network referred to as the Fault Detection Network (FDN) to identify the occurrence of faults, and a pattern classifier called Single Category-Based Classifier (SCBC) for abnormality scaling of individual vibration features. The abnormality-scaled vibration features are then used as inputs to a Structure-Based Connectionist Network (SBCN) for identifying faults in gearbox subsystems and components. The weights of the SBCN represent its diagnostic knowledge and are derived from the structure of the gearbox graphically presented in DAG. The outputs of SBCN are fault possibility values between 0 and 1 for individual subsystems and components in the gearbox with a 1 representing a definite fault and a 0 representing normality. This manual describes the steps involved in creating the diagnostic gearbox model, along with the options and analysis tools of the DAG software.

Jammu, Vinay B.↗

Large Charge Moment Change Lightning in an Oklahoma Mesoscale Convective System

On 31 May 2013, a line of severe thunderstorms developed during the local afternoon in central Oklahoma, USA. One of the supercells produced the El Reno tornado, which caused significant damage and killed several people. During the 2300 UTC hour (during the mature supercell stage and just after the tornado began), the storm produced several positive cloud-to-ground (+CG) lightning strokes that featured large (> 75 C km) impulse charge moment changes (iCMCs - charge moment during the first 2 ms after the return stroke). These discharges occurred mainly in convection, in contrast to the typical pattern of large-CMC and sprite-parent +CGs occurring mainly in stratiform precipitation regions. After this time, the line of thunderstorms evolved over several hours into a large mesoscale convective system (MCS). By the 0700 UTC hour on 1 June 2013, the large- CMC pattern had changed markedly. Large-CMC negative CGs, which were absent early in the storm's lifetime, occurred frequently within convection. Meanwhile, large- CMC +CGs had switched to occurring mainly within the broad stratiform region that had developed during the intervening period. The evolution of the large-CMC lightning in this case will be examined using a mix of polarimetric data from individual radars, national mosaics of radar reflectivity, the Oklahoma Lightning Mapping Array (OKLMA), the Charge Moment Change Network (CMCN), and the National Lightning Detection Network (NLDN). A major goal of this study is understanding how storm structure and evolution affected the production of large-CMC lightning. It is anticipated that this will lead to further insight into how and why storms produce the powerful lightning that commonly causes sprites in the upper atmosphere.

Lang, Timothy J.↗

Large Charge Moment Change Lightning in an Oklahoma Mesoscale Convective System

On 31 May 2013, a line of severe thunderstorms developed during the local afternoon in central Oklahoma, USA. One of the supercells produced the El Reno tornado, which caused significant damage and killed several people. During the 2300 UTC hour (during the mature supercell stage and just after the tornado began), the storm produced several positive cloud-to-ground (+CG) lightning strokes that featured large (> 100 C km) impulse charge moment changes (iCMCs; charge moment during the first 2 ms after the return stroke). These discharges occurred mainly in convection, in contrast to the typical pattern of large-CMC and sprite-parent +CGs occurring mainly in stratiform precipitation regions. After this time, the line of thunderstorms evolved over several hours into a large mesoscale convective system (MCS). By the 0700 UTC hour on 1 June 2013, the large-CMC pattern had changed markedly. Large-CMC negative CGs, which were absent early in the storm's lifetime, occurred frequently within convection. Meanwhile, large-CMC +CGs had switched to occurring mainly within the broad stratiform region that had developed during the intervening period. The evolution of the large-CMC lightning in this case will be examined using a mix of national mosaics of radar reflectivity, the Oklahoma Lightning Mapping Array (OKLMA), the Charge Moment Change Network (CMCN), and the National Lightning Detection Network (NLDN). A major goal of this study is understanding how storm structure and evolution affected the production of large-CMC lightning. It is anticipated that this will lead to further insight into how and why storms produce the powerful lightning that commonly causes sprites in the upper atmosphere.

Lang, Timothy J.↗

Detectability-Based Resilience of Water Distribution System Using Failure Finger Print

This study introduces a detectability-based sensor localizing framework to enhance the resilience of water distribution systems. The framework includes leakage detection and resilience assessment. A feasibility test and a sensitivity analysis prove the framework successfully can detect correct leakage location. The resilience measure was found to increase for higher detectability and shorter identification time. The sensor location is constrained by minimizing the number of sensors and maximizing the detectability and resilience. Results show that two sensors will efficiently detect burst leakage in the studied network. Detectability varies from 71.3% to 99.4% depending on the location of two sensors, while resilience value was reduced by 7.5%. Estimated water loss due to detection time lag are almost 111 ML, which may lead to significant direct and indirect economic loss.

Lee, Seungyub↗

The Network for the Detection of Atmospheric Composition Change (NDACC): History, Status and Perspectives

The Network for the Detection of Atmospheric Composition Change (NDACC) is an international global network of more than 90 stations making high-quality measurements of atmospheric composition that began official operations in 1991 after 5 years of planning. Apart from sonde measurements, all measurements in the network are performed by ground-based remote-sensing techniques. Originally named the Network for the Detection of Stratospheric Change (NDSC), the name of the network was changed to NDACC in 2005 to better reflect the expanded scope of its measurements. The primary goal of NDACC is to establish long-term databases for detecting changes and trends in the chemical and physical state of the atmosphere (mesosphere, stratosphere, and troposphere) and to assess the coupling of such changes with climate and air quality. NDACC's origins, station locations, organizational structure, and data archiving are described. NDACC is structured around categories of ground-based observational techniques (sonde, lidar, microwave radiometers, Fourier-transform infrared, UV-visible DOAS (differential optical absorption spectroscopy)-type, and Dobson-Brewer spectrometers, as well as spectral UV radiometers), timely cross-cutting themes (ozone, water vapour, measurement strategies, cross-network data integration), satellite measurement systems, and theory and analyses. Participation in NDACC requires compliance with strict measurement and data protocols to ensure that the network data are of high and consistent quality. To widen its scope, NDACC has established formal collaborative agreements with eight other cooperating networks and Global Atmosphere Watch (GAW). A brief history is provided, major accomplishments of NDACC during its first 25 years of operation are reviewed, and a forward-looking perspective is presented.

lidar↗

Automating the detection of hydrological barriers and fragmentation in wetlands using deep learning and InSAR

The loss of hydrological connectivity and fragmentation of natural wetlands is a widespread driver of wetland degradation. Understanding where and how natural connectivity is impaired is essential for managing, protecting and remediating these ecosystems. Wetland Interferometric Synthetic Aperture Radar (Wetland InSAR) can provide information on surface flow orientation in wetlands at a high spatial resolution, which can be used for barrier detection. However, the broad application of this approach is constrained by the labour-intensive manual delineation of barriers based on mapped water levels. This study presents the first deep learning-based methodology for the automated detection of hydrological barriers. We trained a deep convolutional network to segment edge features of hydrological barriers in 25 image pairs captured by ALOS PALSAR-1 L-Band InSAR between 2006 and 2011. The training dataset consists of manually labelled and delineated barriers showing abrupt changes in water surface elevation and wrapped interferograms with high coherence. We tested this method across three wetland sites: the Everglades and southern Louisiana wetlands (United States) and the Cienaga de Zapata (Cuba). Across these sites, the convolutional network detected hydrological barriers with up to 84% accuracy. The model performed particularly well for linear hydrological barriers such as roads, dikes, and channels. Notably, some barriers impede flow only seasonally, appearing during low water levels and disappearing when water levels rise. Our automated approach to detecting and assessing wetland hydrologic connectivity can be applied more broadly to support the effective management of fragmented wetland ecosystems.

54 ENVIRONMENTAL SCIENCES↗

Comparisons Between Total Lightning Data, Mesocyclone Strength, and Storm Damage Associated with the Florida Tornado Outbreak of February 23, 1998

During the early morning hours of February 23 1998, the worst tornado outbreak ever recorded occurred over the central Florida peninsula. At least 7 confirmed tornadoes, associated with 4 supercells, developed, with 3 of the tornadoes reaching F3 intensity. Many of the tornadoes where on the ground for tens of miles, uncommon for the state of Florida. A total of 42 people were killed, with over 250 people injured. During the outbreak, National Weather Service Melbourne, in collaboration with the National Aeronautics and Space Administration and the Massachusetts Institute of Technology was collecting data from a unique lightning observing system called Lightning Imaging Sensor Data Applications Display (LISDAD, Boldi et.al., this conference). This system marries radar data collected from the KMLB WSR-88D, cloud to ground data collected from the National Lightning Detection Network, and total lightning data collected from NASKs Lightning Detection And Ranging system. This poster will display, concurrently, total lightning data (displayed in 1 minute increments), time/height storm relative velocity products from the KMLB WSR-88D, and damage information (tornado/hail/wind) from each of the supercell thunderstorms. The primary objective of this poster presentation is to observe how total lightning activity changes as the convective storm intensifies, and how the lightning activity changes with respect to mesocyclone strength (vortex stretching) and damaging weather on the ground.

Hodanish, S↗