Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,297 records · Page 72
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

In vitro enhancement of Zika virus infection by preexisting West Nile virus antibodies in human plasma-derived immunoglobulins revealed after P2 binding site-specific enrichment

ABSTRACT Human immunoglobulin preparations contain a diverse range of polyclonal antibodies that reflect past immune responses against pathogens encountered by the blood donor population. In this study, we examined a panel of intravenous immunoglobulins (IGIVs) manufactured over the past two decades (1998–2020) for their capacity to neutralize or enhance Zika virus (ZIKV) infectionin vitro. These IGIVs were selected specifically based on their production dates in relation to the occurrences of two flavivirus outbreaks in the U.S.: the West Nile virus (WNV) outbreak in 1999 and the ZIKV outbreak in 2015. As demonstrated by enzyme-linked immunosorbent assay (ELISA) experiments, IGIVs made before the ZIKV outbreak already harbored antibodies that bind to various peptides across the envelope protein of ZIKV because of the WNV outbreak. Using phage display, the most dominant binding site was mapped precisely to the P2 peptide between residues 211 and 230 within domain II, where BF1176-56, an anti-ZIKV monoclonal antibody, also binds. When tested in permissive Vero E6 cells for ZIKV neutralization, the IGIVs, even after undergoing rigorous enrichment for P2 binding specificity, failed, as did BF1176-56. Meanwhile, BF1176-56 enhanced ZIKV infection in both FcγRII-expressing K562 cells and human peripheral blood mononuclear cells. However, for enhancement by the IGIVs to be detected in these cells, a substantial increase in their P2 binding specificity was required, thus linking the P2 site with ZIKV enhancementin vitro. Our findings warrant further study of the significance of elevated levels of anti-WNV antibodies in IGIVs, considering that various mechanisms operatingin vivomay modulate ZIKV infection outcomes. IMPORTANCE We investigated the capacity of intravenous immunoglobulins manufactured previously over two decades (1998–2020) to neutralize or enhance Zika virus infectionin vitro. West Nile virus antibodies in IGIVs could not neutralize Zika virus initially; however, once the IGIVs were concentrated further, they enhanced its infection. These findings lay the groundwork for exploring how preexisting WNV antibodies in IGIVs could impact Zika infection, bothin vitroandin vivo. Our observations are historically significant, since we tested a panel of IGIV lots that were carefully selected based on their production dates which covered two major flavivirus outbreaks in the U.S.: the WNV outbreak in 1999 and the ZIKV outbreak in 2015. These findings will facilitate our understanding of the interplay among closely related viral pathogens, particularly from a historical perspective regarding large blood donor populations. They should remain relevant for future outbreaks of emerging flaviviruses that may potentially affect vulnerable populations.

Microbiology↗
DOE OSTI2023

Offshore-onshore record of Last Glacial Maximum–to–present grounding line retreat at Pine Island Glacier, Antarctica

Pine Island Glacier, West Antarctica, is the largest Antarctic contributor to global sea-level rise and is vulnerable to rapid retreat, yet our knowledge of its deglacial history since the Last Glacial Maximum is based largely on marine sediments that record a retreat history ending in the early Holocene. Using a suite of 10 Be exposure ages from onshore glacial deposits directly adjacent to Pine Island Glacier, we show that this major glacier thinned rapidly in the early to mid-Holocene. Our results indicate that Pine Island Glacier was at least 690 m thicker than present prior to ca. 8 ka. We infer that the rapid thinning detected at the site farthest downstream records the arrival and stabilization of the retreating grounding line at that site by 8–6 ka. By combining our exposure ages and the marine record, we extend knowledge of Pine Island Glacier retreat both spatially and temporally: to 50 km from the modern grounding line and to the mid-Holocene, providing a data set that is important for future numerical ice-sheet model validation.

58 GEOSCIENCES↗
DOE OSTI2020

Modeling epidemic spread with spike-based models

The Susceptible-Infected-Recovered/Removed model is a standard model for epidemiological spread of disease through vulnerable populations. In this paper we show how SIR network dynamics can be implemented using spiking neurons.

Hamilton, Kathleen↗
DOE OSTI2021

Challenges in Firmware Re-Hosting, Emulation, and Analysis

System emulation and firmware re-hosting have become popular techniques to answer various security and performance related questions, such as determining whether a firmware contain security vulnerabilities or meet timing requirements when run on a specific hardware platform. While this motivation for emulation and binary analysis has previously been explored and reported, starting to either work or research in the field is difficult. To this end, we provide a comprehensive guide for the practitioner or system emulation researcher. Here, we layout common challenges faced during firmware re-hosting, explaining successive steps and surveying common tools used to overcome these challenges. We provide classification techniques on five different axes, including emulator methods, system type, fidelity, emulator purpose, and control. These classifications and comparison criteria enable the practitioner to determine the appropriate tool for emulation. We use our classifications to categorize popular works in the field and present 28 common challenges faced when creating, emulating, and analyzing a system from obtaining firmwares to post emulation analysis.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Metagames and Hypergames for Deception-Robust Control

Cyber-physical systems (CPSs) consist of computing and communication devices integrated with physical components such as sensors and actuators. Increasing connectivity to the Internet for remote monitoring and control has made CPSs more vulnerable to deliberate attacks, which are distinctly different from random perturbations in the system. This provides a way for purely cyber attacks to have physical consequences. Stuxnet is a prominent example of such an attack, one in which the malware acted over an extended period of time while deliberately remaining undetected. Such attacks can be described as Advanced Persistent Threats (APTs) -- long-term, stealthy attacks. Here, we extend our previous work on hypergames to develop defender strategies that are robust to deception and do not rely on attack detection. We prove that the defender can bound the attacker payoff with these strategies even when the attacker can choose between different attack modes, and we numerically demonstrate our approach on a realistic building control system. Finally, we discuss next steps in extending this approach towards an operational capability.

hypergames, cyber-physical systems, robust control↗
DOE OSTI2021

Learning-based framework for sensor fault-tolerant building HVAC control with model-assisted learning

As people spend up to 87% of their time indoors, intelligent Heating, Ventilation, and Air Conditioning (HVAC) systems in buildings are essential for maintaining occupant comfort and reducing energy consumption. These HVAC systems in smart buildings rely 'on real-time sensor readings, which in practice often suffer from various faults and could also be vulnerable to malicious attacks. Such faulty sensor inputs may lead to the violation of indoor environment requirements (e.g., temperature, humidity, etc.) and the increase of energy consumption. While many model-based approaches have been proposed in the literature for building HVAC control, it is costly to develop accurate physical models for ensuring their performance and even more challenging to address the impact of sensor faults. In this work, we present a novel learning-based framework for sensor fault-tolerant HVAC control, which includes three deep learning based components for 1) generating temperature proposals with the consideration of possible sensor faults, 2) selecting one of the proposals based on the assessment of their accuracy, and 3) applying reinforcement learning with the selected temperature proposal. Moreover, to address the challenge of training data insufficiency in building-related tasks, we propose a model-assisted learning method leveraging an abstract model of building physical dynamics. Through extensive experiments, we demonstrate that the proposed fault-tolerant HVAC control framework can significantly reduce building temperature violations under a variety of sensor fault patterns while maintaining energy efficiency.

Xu, Shichao↗
DOE OSTI2022

Stealthy Cyber Anomaly Detection On Large Noisy Multi-material 3D Printer Datasets Using Probabilistic Models

As Additive Layer Manufacturing (ALM) becomes pervasive in industry, its applications in safety critical component manufacturing are being explored and adopted. However, ALM's reliance on embedded computing renders it vulnerable to tampering through cyber-attacks. Sensor instrumentation of ALM devices allows for rigorous process and security monitoring, but also results in a massive volume of noisy data for each run. As such, in-situ, near-real-time anomaly detection is very challenging. The ideal algorithm for this context is simple, computationally efficient, minimizes false positives, and is accurate enough to resolve small deviations. In this paper, we present a probabilistic-model-based approach to address this challenge. To test our approach, we analyze current measurements from a polymer composite 3D printer during emulated tampering attacks. Our results show that our approach can consistently and efficiently locate small changes in the presence of substantial operational noise.

Yoginath, Srikanth↗
DOE OSTI2023

XploreNAS : Explore Adversarially Robust and Hardware-efficient Neural Architectures for Non-ideal Xbars

Compute In-Memory platforms such as memristive crossbars are gaining focus as they facilitate acceleration of Deep Neural Networks (DNNs) with high area and compute efficiencies. However, the intrinsic non-idealities associated with the analog nature of computing in crossbars limits the performance of the deployed DNNs. Furthermore, DNNs are shown to be vulnerable to adversarial attacks leading to severe security threats in their large-scale deployment. Thus, finding adversarially robust DNN architectures for non-ideal crossbars is critical to the safe and secure deployment of DNNs on the edge. This work proposes a two-phase algorithm-hardware co-optimization approach called XploreNAS that searches for hardware efficient and adversarially robust neural architectures for non-ideal crossbar platforms. We use the one-shot Neural Architecture Search approach to train a large Supernet with crossbar-awareness and sample adversarially robust Subnets therefrom, maintaining competitive hardware efficiency. Our experiments on crossbars with benchmark datasets (SVHN, CIFAR10, CIFAR100) show up to ~8–16% improvement in the adversarial robustness of the searched Subnets against a baseline ResNet-18 model subjected to crossbar-aware adversarial training. We benchmark our robust Subnets for Energy-Delay-Area-Products (EDAPs) using the Neurosim tool and find that with additional hardware efficiency–driven optimizations, the Subnets attain ~1.5–1.6× lower EDAPs than ResNet-18 baseline.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Automated Adversary-in-the-Loop Cyber-Physical Defense Planning

Security of cyber-physical systems (CPS) continues to pose new challenges due to the tight integration and operational complexity of the cyber and physical components. To address these challenges, this article presents a domain-aware, optimization-based approach to determine an effective defense strategy for CPS in an automated fashion—by emulating a strategic adversary in the loop that exploits system vulnerabilities, interconnection of the CPS, and the dynamics of the physical components. Our approach builds on an adversarial decision-making model based on a Markov Decision Process (MDP) that determines the optimal cyber (discrete) and physical (continuous) attack actions over a CPS attack graph. The defense planning problem is modeled as a non-zero-sum game between the adversary and defender. We use a model-free reinforcement learning method to solve the adversary’s problem as a function of the defense strategy. We then employ Bayesian optimization (BO) to find an approximate best-response for the defender to harden the network against the resulting adversary policy. This process is iterated multiple times to improve the strategy for both players. We demonstrate the effectiveness of our approach on a ransomware-inspired graph with a smart building system as the physical process. Numerical studies show that our method converges to a Nash equilibrium for various defender-specific costs of network hardening.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Interdisciplinary Approaches to Cybervulnerability Impact Assessment for Energy Critical Infrastructure

As energy infrastructure becomes more interconnected, understanding cybersecurity risks to production systems requires integrating operational and computer security knowledge. We interviewed 18 experts working in the field of energy critical infrastructure to compare what information they find necessary to assess the impact of computer vulnerabilities on energy operational technology. These experts came from two groups: 1) computer security experts and 2) energy sector operations experts. We find that both groups responded similarly for general categories of information and displayed knowledge about both domains, perhaps due to their interdisciplinary work at the same organization. Yet, their discussion of each group’s domain-specific training, motivations, and limitations, as well as their suggestions for collaboration across domains, highlighted how these two groups can work together to help each other secure the energy grid. Our findings inform the development of interdisciplinary security approaches in critical-infrastructure contexts.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Semantic Stealth: Crafting Covert Adversarial Patches for Sentiment Classifiers Using Large Language Models

Deep learning models have been shown to be vulnerable to adversarial attacks, in which perturbations to their inputs cause the model to produce incorrect predictions. As opposed to adversarial attacks in computer vision, where small changes introduced to pixel values can drastically alter a model's output while remaining imperceptible to humans, text-based attacks are difficult to conceal due to the discrete nature of tokens. Consequently, unconstrained gradient-based attacks often produce adversarial examples that lack semantic meaning, rendering them detectable through visual inspection or perplexity filters. In contrast to methods that rely on gradient-based optimization in the embedding space, we propose an approach that leverages a Large Language Model's ability to generate grammatically correct and semantically meaningful text to craft adversarial patches that seamlessly blend in with the original input text. These patches can be used to alter the behavior of a target model, such as a text classifier. Since our approach does not rely on gradient backpropagation, it only requires access to the target model's confidence scores, making it a grey-box attack. We demonstrate the feasibility of our approach using open-source LLMs, including Intel's Neural Chat, Llama2, and Mistral-Instruct, to generate adversarial patches capable of altering the predictions of a distilBERT model fine-tuned on the IMDB reviews dataset for sentiment classification.

Roa Carvajal, Maria↗
DOE OSTI2024

A Compound Data Poisoning Technique with Significant Adversarial Effects on Transformer-based Sentiment Classification Tasks

Transformer-based models have demonstrated much success in various natural language processing tasks. However, they are often vulnerable to adversarial attacks, such as data poisoning, which can intentionally fool the model into generating incorrect results. In this article, we present a novel, compound variant of a data poisoning attack on a transformer-based model that maximizes the poisoning effect while minimizing the scope of poisoning. Here we do so by combining the established data poisoning technique (label flipping) with a novel adversarial artifact selection and insertion technique aimed at minimizing detectability and the scope of the poisoning footprint. We find that by using a combination of these two techniques, we achieve a state-of-the-art attack success rate of approximately 90% while poisoning only 0.5% of the original training set, thus minimizing the scope and detectability of the poisoning action. These findings have the potential to advance the development of better data poisoning detection methods.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

ATTNChecker: Highly-Optimized Fault Tolerant Attention for Large Language Model Training

Large Language Models (LLMs) have demonstrated remarkable performance in various natural language processing tasks. However, the training of these models is computationally intensive and susceptible to faults, particularly in the attention mechanism, which is a critical component of transformer-based LLMs. In this paper, we investigate the impact of faults on LLM training, focusing on INF, NaN, and near-INF values in the computation results with systematic fault injection experiments. We observe the propagation patterns of these errors, which can trigger non-trainable states in the model and disrupt training, forcing the procedure to load from checkpoints. To mitigate the impact of these faults, we propose ATTNChecker, the first Algorithm-Based Fault Tolerance (ABFT) technique tailored for the attention mechanism in LLMs. ATTNChecker is designed based on fault propagation patterns of LLM and incorporates performance optimization to adapt to both system reliability and model vulnerability while providing lightweight protection for fast LLM training. Evaluations on four LLMs show that ATTNChecker on average incurs on average 7% overhead on training while detecting and correcting all extreme errors. Compared with the state-of-the-art checkpoint/restore approach, ATTNChecker reduces recovery overhead by up to 49×.

Liang, Yuhang [University of Alabama - Birmingham]↗
DOE OSTI2025

Position-Enhanced Gradient Attack (PEGA) on Medical Language Models

Federated Learning (FL) enables collaborative training of language models on sensitive clinical notes without sharing the data. However, this paradigm is vulnerable to gradient inversion attacks that can reconstruct private data from shared gradients. We find that state-of-the-art attacks are less effective in the medical domain, failing to overcome the unique challenges posed by its specialized vocabulary and unstructured format. To address this, we introduce the Position-Enhanced Gradient Attack (PEGA), a novel attack that makes gradients position-aware by optimizing token and position embeddings simultaneously. PEGA employs two key innovations: a periodic sorting of positional embeddings to resolve token order ambiguity and a late-stage embedding replacement strategy to correct hard-to-recover critical tokens. To evaluate the leakage of sensitive data more directly, we also propose the Unified PHI-Recall (UPHI), a new metric measuring the recovery of Protected Health Information. Experiments on the MIMIC-III dataset show that PEGA significantly outperforms leading attacks like TAG and LAMP, particularly in its ability to reconstruct identifiable patient information, exposing a more severe and nuanced privacy risk in federated medical NLP.

Xu, Nuo [University of Minnesota]↗
DOE OSTI2026

Detect the Unobservable: Abnormality Detection in mixed Autonomy for Lane Change Maneuver with Following Vehicles’ Trajectories Only

Highly Automated Vehicles (HAVs) and Advanced Driver-Assistance Systems (ADAS) are transforming modern transportation with enhanced mobility, safety, and efficiency. Despite their advantages, cybersecurity vulnerabilities in these systems can lead to abnormal behavior, posing significant risks to surrounding human-driven vehicles (HDVs) in mixed traffic environments. Here, this article addresses the challenge of detecting abnormal lateral movements of HAVs/ADAS vehicles using only trajectory profiles of following HDVs. Specifically, we propose a novel modeling approach that captures both normal and abnormal lateral behaviors through vehicle kinematics, integrated decision-making processes, vehicle control using symbolic regression for lane change vehicles. Additionally, we introduce an abnormality detection framework that relies on observable HDV data, even in occlusion scenarios. The framework evaluates the sensitivity of various car-following models to detect abnormal behaviors, providing insights into the interaction between HAVs/ADAS and HDVs in mixed autonomy systems.

Connected and Automated vehicles↗
DOE OSTI2023

Metrics for Decision-Making in Energy Justice

Energy equity and justice have become priority considerations for policymakers, practitioners, and scholars alike. To ensure that energy equity is incorporated into actual decisions and analysis, it is necessary to design, use, and continually improve energy equity metrics. In this article, we review the literature and practices surrounding such metrics. We present a working definition for energy justice and equity, and connect them to both criteria for and frameworks of metrics. We then present a large sampling of energy equity metrics, including those focused on vulnerability, wealth creation, energy poverty, life cycle, and comparative country-level dynamics. We conclude with a discussion of the limitations, gaps, and trade-offs associated with these various metrics and their interactions thereof.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2023

Implications of Large- N c QCD for the NN Interaction

We present a method for ordering two-nucleon interactions based upon their scaling with the number of QCD colors, N c , in the limit that N c becomes large. Available data in the two-nucleon sector show general agreement with this ordering, indicating that the method may be useful in other contexts where data are less readily available. However, several caveats and potential pitfalls can make the large-N c ordering fragile and/or vulnerable to misinterpretation. We discuss the application of the large-N c analysis to two- and three-nucleon interactions, including those originating from weak and BSM (beyond the Standard Model) interactions, as well as two-nucleon external currents. Finally, we discuss some open questions in the field.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2026

The Impact of Operational Strategies and Load Fluctuations on Anion Exchange Membrane Water Electrolyzer Degradation

This study reports on the durability of anion exchange membrane water electrolyzers (AEMWEs) at the cell level in a supporting electrolyte (1 M) and the impact of operational profiles on cell degradation. While constant load shows significant voltage loss, including a current hold at 1 A cm −2 and a potential hold at 2 V, it generally occurs in the first 70 h of testing. These losses are likely due to passivation altering site reactivity and cell kinetics, and are largely recoverable upon load cycling and diagnostics at the end of test. Furthermore, square and triangular-wave cycling do not show cell degradation and indicate that AEMWEs are not vulnerable to load cycling. When operating outside of this potential window (1.45–2 V), cell voltage decay rates markedly increase and the losses are not recoverable. This includes a current density hold at 4.0 A cm −2 with high cell voltages (>2.4 V for test duration) and cycling between 0 and 2 V to simulate start–stop, where more than a 50% loss in current density occurs over 50 h. The findings presented here demonstrate the high durability of AEMWEs, particularly when operating with load fluctuations, and may allow for durability advantages compared to iridium and proton exchange membrane systems.

08 HYDROGEN↗