SEARCH · Engineering Papers

Results for “THREAT”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

All sources NASA NTRS DOE OSTI

NASA NTRSDate not supplied

Cyber Threats and Security Controls Analysis for Urban Air Mobility Environments

Since the cyber threat landscape changes daily, cybersecurity needs to be an ongoing activity for every organization within the UAM environments. This paper will provide information on identified cyber threats and controls associated with an instance of the Urban Air Mobility (UAM) environment. The MITRE ATT&CK model and framework and the selection of cyber threats and the National Institute of Standards and Technology publications for security control identification and cybersecurity risk identification will be leveraged for analysis.

Urban Air Mobility↗

NASA NTRS2023

Risk Assessment for Asteroid Impact Threat Scenarios

Asteroid impacts can cause a wide range of damage through multiple potential hazards, from localized blast waves or thermal radiation, to tsunami inundation, to global climatic effects. The level of risk posed by these hazards depends not only upon their extent and severity, but also upon the likelihood of the various damage ranges. Some consequences may be more moderate but very likely, while others may be unlikely but catastrophic. Evaluating the risk from these hazards involves substantial uncertainties across all aspects of the problem, including the properties of the asteroid itself, the specifics of its entry, and the complex high-energy damage physics involved. NASA’s Asteroid Threat Assessment Project performs Probabilistic Asteroid Impact Risk (PAIR) assessments that use fast-running entry and hazard models to evaluate millions of impact cases representing the distributions of these many uncertain parameters. This paper presents current probabilistic asteroid impact risk assessment modeling tools and approaches used for evaluating specific asteroid impact threat cases. We give an overview of the current PAIR model used to support impact threat scenarios and discuss some of the key applications of these assessment in supporting response decisions and planetary defense preparedness. We then present the results and key findings from the recent 2023 PDC hypothetical impact exercise as an example of the primary types of risk results and metrics being developed to inform and support those mitigation and response decisions.

SMD↗

DOE OSTI2010

A threat-based definition of IA- and IA-enabled products.

This paper proposes a definition of 'IA and IA-enabled products' based on threat, as opposed to 'security services' (i.e., 'confidentiality, authentication, integrity, access control or non-repudiation of data'), as provided by Department of Defense (DoD) Instruction 8500.2, 'Information Assurance (IA) Implementation.' The DoDI 8500.2 definition is too broad, making it difficult to distinguish products that need higher protection from those that do not. As a consequence the products that need higher protection do not receive it, increasing risk. The threat-based definition proposed in this paper solves those problems by focusing attention on threats, thereby moving beyond compliance to risk management. (DoDI 8500.2 provides the definitions and controls that form the basis for IA across the DoD.) Familiarity with 8500.2 is assumed.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2010

A threat-based definition of IA and IA-enabled products.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2012

Sensor-guided threat countermeasure system

A countermeasure system for use by a target to protect against an incoming sensor-guided threat. The system includes a laser system for producing a broadband beam and means for directing the broadband beam from the target to the threat. The countermeasure system comprises the steps of producing a broadband beam and directing the broad band beam from the target to blind or confuse the incoming sensor-guided threat.

47 OTHER INSTRUMENTATION↗

DOE OSTI2017

Deep Learning for Unsupervised Insider Threat Detection in Structured Cybersecurity Data Streams

Situational awareness data is a prototypical example of structured heterogeneous streaming data with asynchronous timing that can quickly scale beyond the cognitive power of a human analyst. We present deep learning methods that can train in real time from unlabeled streams and provide probabilistic anomaly scores. We compare our novel deep and recurrent neural network models to three baseline systems using threat detection recall on the CERT Insider Threat Dataset v6.2. In our experiments, our deep neural network and our recurrent neural network systems outperformed all baselines, and we found that using aggregated activity count features yielded the best performance. Our best model produces on average an anomaly score of 95.53 percentile for the day, suggesting it can facilitate a great reduction in analyst workload. Our models are also interpretable, in that they break down the anomaly score into individual features of user behavior, which could further aid analysts in reviewing potential cases of insider threat.

Tuor, Aaron R.↗

DOE OSTI2023

Evaluating and Countering the Insider Threat to the Radioactive Source Supply Chain

The modern supply chain is a global enterprise and little drove this home more than the global COVID-19 pandemic which sent economic shockwaves throughout the world. Many goods became scarce, as products were delayed, in limited supply, or simply not available. The suddenly diminished supply collided with still high demand and led to greatly increased costs. This was particularly true for the radioactive source supply chain. The pandemic introduced extensive delays for construction projects, slowed the transport of radiological materials to facilities, interrupted treatment deliveries, and impaired the mobility of contractors across the industry. All of these concerns not only adversely affected the economy, but also impacted the safety and security of radiological material, potentially raising national security concerns. The vulnerability of the supply chain, a critical element in an increasingly interconnected world, was exposed. One example that challenged the adaptive capacity of the overall supply chain is the Ever Given container ship, which became stuck in the Suez Canal in 2020. This accident immediately shut down shipments that accounted for 12% of global trade, with long-term impacts estimated to be much larger. Developing the ability to anticipate and react in real-time to sudden changes has quickly become a necessity, particularly in industries that deal with the transport of hazardous material. The reaction to these dramatic incidents was to largely focus attention and resources on protecting the supply chain from external threats. However, the threat to the radioactive material supply chain from insiders intimately involved in the process may be even greater and remains a blind spot that requires increased attention. Recent events revealed the blueprint for targeting and disrupting that supply chain, so the potential for a malicious insider—or a manipulated, unwitting insider—to take advantage of this vulnerability is elevated, creating security concerns for radiological industries. This paper examines and analyzes the potential insider threat to the radioactive source supply chain and recommends steps to take to counter this possibility.

Kinney, Justin↗

DOE OSTI2023

Community threat intelligence and visibility for operational technology networks

Techniques are provided for community threat intelligence for operational technology networks. For a plurality of OT networks, at least one monitoring device processes OT network traffic and collects telemetry data, and a telemetry sanitization system applies a sanitization process to the telemetry data to generate sanitized telemetry data that does not include sensitive data. A computer system receives sanitized telemetry data from the telemetry sanitization systems provided for the plurality of OT networks, maintains threat intelligence data generated based on the sanitized telemetry data, and provides access to at least one of the threat intelligence data and the sanitized telemetry data to a plurality of users.

Bladow, Garrett↗

DOE OSTI2025

Threat Hunt Guide for BESS Environments

The rapid digitalization of the electric grid - driven by the integration of inverter-based resources (IBRs), battery energy storage systems (BESS), and advanced grid control platforms - has significantly enhanced grid efficiency, visibility, and flexibility. However, this evolution also introduces new cybersecurity risks, particularly through supply chain dependencies and operational blind spots at the grid edge. To address these challenges, Idaho National Laboratory (INL), through the Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) Rapid Risk initiative, conducted a series of rapid risk assessment engagements with energy organizations across the United States. Drawing on lessons learned from these engagements, INL developed the following threat hunting guide for asset owners and operators (AOOs) to enhance their cybersecurity visibility within BESS and IBR systems. The guide demonstrates how to use passive network monitoring to baseline device behavior, detect adversarial activity, and investigate anomalies without disrupting operations. By implementing these practices, energy sector stakeholders can improve coordination between cybersecurity and operations teams and strengthen the resilience of distributed energy resources (DERs) within the modern power grid. Prior to implementing any network monitoring, packet capture, or threat hunting activity described in this guide, AOOs are strongly advised to review applicable governance frameworks, legal requirements, and organizational policies. This guide is intended for informational and educational purposes only. It does not replace compliance with any federal, state, or local cybersecurity mandates or industry standards. Implementation of described configurations, technologies, or analytic workflows is performed at the discretion and responsibility of the asset owner and operator.

25 - ENERGY STORAGE↗

DOE OSTI2012

Anomaly Detection in Multiple Scale for Insider Threat Analysis

We propose a method to quantify malicious insider activity with statistical and graph-based analysis aided with semantic scoring rules. Different types of personal activities or interactions are monitored to form a set of directed weighted graphs. The semantic scoring rules assign higher scores for the events more significant and suspicious. Then we build personal activity profiles in the form of score tables. Profiles are created in multiple scales where the low level profiles are aggregated toward more stable higherlevel profiles within the subject or object hierarchy. Further, the profiles are created in different time scales such as day, week, or month. During operation, the insider s current activity profile is compared to the historical profiles to produce an anomaly score. For each subject with a high anomaly score, a subgraph of connected subjects is extracted to look for any related score movement. Finally the subjects are ranked by their anomaly scores to help the analysts focus on high-scored subjects. The threat-ranking component supports the interaction between the User Dashboard and the Insider Threat Knowledge Base portal. The portal includes a repository for historical results, i.e., adjudicated cases containing all of the information first presented to the user and including any additional insights to help the analysts. In this paper we show the framework of the proposed system and the operational algorithms.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2021

A Cyber Threat Mitigation Approach For Wide Area Control of SVCs using Stability Monitoring

We propose a stability monitoring approach for the mitigation of cyber threats directed at the wide area control (WAC) system used for coordinated control of Flexible AC Transmission Systems (FACTS) used for power oscillation damping (POD) of active power flow on inter-area tie lines. The approach involves monitoring the modes of the active power oscillation on an inter-area tie line using the Matrix Pencil (MP) method. We use the stability characteristics of the observed modes as a proxy for the presence of destabilizing cyber threats. We monitor the system modes to determine whether any destabilizing modes appear after the WAC system engages to control the POD. If the WAC signal exacerbates the POD performance, the FACTS falls back to POD using local measurements. The proposed approach does not require an expansive system-wide view of the network. We simulate replay, control integrity, and timing attacks for a test system and present results that demonstrate the performance of the SM approach for mitigation.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2021

Transcranial Direct Current Stimulation (tDCS) Improves Empathy and Recognition of Facial Emotions Conveying Threat in Adults with Autism Spectrum Disorder (ASD): A Randomized Controlled Pilot Study

Introduction: Empathy is critical for human interactions to become shared and meaningful, and it is facilitated by the expression and processing of facial emotions. Deficits in empathy and facial emotion recognition are associated with individuals with autism spectrum disorder (ASD), with specific concerns over inaccurate recognition of facial emotion expressions conveying a threat. Yet, the number of evidenced interventions for facial emotion recognition and processing (FERP), emotion, and empathy remains limited, particularly for adults with ASD. Transcranial direct current stimulation (tDCS), a noninvasive brain stimulation, may be a promising treatment modality to safely accelerate and/or enhance treatment interventions to increase their efficacy. Methods: This study investigates the effectiveness of FERP, emotion, and empathy treatment interventions paired with tDCS for adults with ASD. Differences in scores on the Empathy Quotient (EQ) and on a FERP test were predicted for verum tDCS when compared to sham. Verum/sham tDCS was randomly assigned in a within-subjects, double-blinded design in adults with ASD without intellectual disability. Results: Verum tDCS significantly improved EQ scores and FERP scores for emotions that conveyed threat. Conclusions: These results suggest the potential for increasing the efficacy of treatment interventions by pairing them with tDCS for individuals with ASD.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2013

Review of July 2013 Nuclear Security Insider Threat Exercise November 2013

This document is a review of the Nuclear Security Insider Threat Exercise which was hosted at ORNL in July 2013. Nuclear security culture and the insider threat are best learned through experience. Culture is inherently difficult to teach, and as such is best learned through modeled behaviors and learning exercise. This TTX, NSITE, is a tool that strives to aid students in learning what an effective (and ineffective) nuclear security culture might look like by simulating dynamic events that strengthen or weaken the nuclear security regime. The goals of NSITE are to stimulate complex thought and discussion and assist decision makers and management in determining the most effective policies and procedures for their country or facility.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2013

Exposure Levels for Chemical Threat Compounds; Information to Facilitate Chemical Incident Response

Exposure Standards, Limits and Guidelines for Chemical Threat Compunds ABSTRACT Exposure criteria for chemical warfare (CW) agents and certain toxic industrial chemicals (TICs) used as CW agents (such as chlorine fill in an improvised explosive device) have been developed for protection of the civilian general public, civilian employees in chemical agent processing facilities and deployed military populations. In addition, compound-specific concentrations have been developed to serve as how clean is clean enough clearance criteria guiding facility recovery following chemical terrorist or other hazardous release events. Such criteria are also useful to verify compound absence, identify containment boundaries and expedite facility recovery following chemical threat release. There is no single right value or concentration appropriate for all chemical hazard control applications. It is acknowledged that locating and comparing the many sources of CW agent and TIC exposure criteria has not been previously well-defined. This paper summarizes many of these estimates and assembles critical documentation regarding their derivation and use.

chemical terrorist↗

DOE OSTI2024

Enhancing Nuclear and Radiological Security in Polarized Times: Safeguarding Against Extremist Insider Threats

Domestic violent extremism has been on the rise in recent years, fueled by growing political polarization, the COVID-19 pandemic, and the spread of misinformation online. This concerning trend raises an important question: has this increase in extremist violence manifested in more incidents involving radioactive or nuclear (RN) materials and a corresponding security concern? To explore this question, we analyzed existing data on events involving chemical, biological, radiological, or nuclear materials over time. Specifically, we examined the rate of RN-related incidents, the targets of these events, and the ideologies motivating the perpetrators by using the Violent Non-State Actor Chemical, Biological, Radiological, and Nuclear Event Database from the National Consortium for the Study of Terrorism and Responses to Terrorism. Our analysis aimed to determine whether the broader rise of violent extremism has translated to an elevated risk of attacks involving RN materials. Results of the analysis revealed that there was no clear increase in events involving RN material in the dataset. However, given the rarity of these events, this conclusion does not indicate that such a trend might not appear in coming years if violent extremism continues to rise. To address the potential risk presented by violent extremism, in addition to quantifying the frequency of RN events, we also reviewed traits that could make organizations more susceptible to insider threats from radicalized employees. Focusing on the literature around counterproductive workplace behavior, we identified organizational characteristics that might increase the risk of malicious acts committed by radicalized insiders. These risk factors include abusive leadership, situational constraints, and organizational injustice. Finally, using these organizational risk characteristics, we discuss interventions that organizations with RN material can take to reduce their risk of attacks stemming from violent extremism while still protecting individual rights to privacy and civil liberties. Overall, this article provides an overview of the intersections between rising domestic extremism, insider threats, and risks posed by RN materials. We present current data on trends and patterns in this space as well as practical guidance for organizational resilience.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

NASA NTRS2015

An Innovative Solution to NASA's NEO Impact Threat Mitigation Grand Challenge and Flight Validation Mission Architecture Development

This paper presents the results of a NASA Innovative Advanced Concept (NIAC) Phase 2 study entitled "An Innovative Solution to NASA's Near-Earth Object (NEO) Impact Threat Mitigation Grand Challenge and Flight Validation Mission Architecture Development." This NIAC Phase 2 study was conducted at the Asteroid Deflection Research Center (ADRC) of Iowa State University in 2012-2014. The study objective was to develop an innovative yet practically implementable mitigation strategy for the most probable impact threat of an asteroid or comet with short warning time (< 5 years). The mitigation strategy described in this paper is intended to optimally reduce the severity and catastrophic damage of the NEO impact event, especially when we don't have sufficient warning times for non-disruptive deflection of a hazardous NEO. This paper provides an executive summary of the NIAC Phase 2 study results. Detailed technical descriptions of the study results are provided in a separate final technical report, which can be downloaded from the ADRC website (www.adrc.iastate.edu).

NEO Impact Threat Mitigation↗

NASA NTRS2015

An Optimal Mitigation Strategy Against the Asteroid Impact Threat with Short Warning Time

This paper presents the results of a NASA Innovative Advanced Concept (NIAC) Phase 2 study entitled "An Innovative Solution to NASA's Near-Earth Object (NEO) Impact Threat Mitigation Grand Challenge and Flight Validation Mission Architecture Development." This NIAC Phase 2 study was conducted at the Asteroid Deflection Research Center (ADRC) of Iowa State University in 2012-2014. The study objective was to develop an innovative yet practically implementable mitigation strategy for the most probable impact threat of an asteroid or comet with short warning time (less than 5 years). The mitigation strategy described in this paper is intended to optimally reduce the severity and catastrophic damage of the NEO impact event, especially when we don't have sufficient warning times for non-disruptive deflection of a hazardous NEO. This paper provides an executive summary of the NIAC Phase 2 study results.

NEO Impact threat↗

NASA NTRS2014

An Innovative Solution to NASA's NEO Impact Threat Mitigation Grand Challenge and Flight Validation Mission Architecture Development

This final technical report describes the results of a NASA Innovative Advanced Concept (NIAC) Phase 2 study entitled "An Innovative Solution to NASA's NEO Impact Threat Mitigation Grand Challenge and Flight Validation Mission Architecture Development." This NIAC Phase 2 study was conducted at the Asteroid Deflection Research Center (ADRC) of Iowa State University in 2012-2014. The study objective was to develop an innovative yet practically implementable solution to the most probable impact threat of an asteroid or comet with short warning time (less than 5 years). The technical materials contained in this final report are based on numerous technical papers, which have been previously published by the project team of the NIAC Phase 1 and 2 studies during the past three years. Those technical papers as well as a NIAC Phase 2 Executive Summary report can be downloaded from the ADRC website (www.adrc.iastate.edu).

NEO↗