Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “threat analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Ultrasound Interim cyber-physical research evaluation

Recent events have presented Medical Practitioners with concerns about safety and privacy implications associated with GE’s VScan MIot Ultrasound Device. Concerns relate to the devices potential risk to broadcast location data that can pose serious risks to device users and patients. This report was commission in collaboration with Augusta University to determine if device concerns pose real threat to operators and patients. In effort to ensure all potential threat vectors are targeted, the initial step was to analyze the supply chain. Here the devices are CT scanned to look for any hardware anomalies that could present threat vectors to users of these devices. (See SRNL-STI-2024-00225 for detailed analysis). No anomalies were found associated with the hardware utilized within the GE VScan Air.

42 ENGINEERING↗
NASA NTRS2009

Towards Designing an Integrated Architecture for NEO Characterization, Mitigation, Scientific Evaluation, and Resource Utilization

This poster reviews the planning and design for an integrated architecture for characterization, mitigation, scientific evaluation and resource utilization of near earth objects. This includes tracks to observe and characterize the nature of the threat posed by a NEO, and deflect if a significant threat is posed. The observation stack can also be used for a more complete scientific analysis of the NEO.

Adams, Robert B.↗
NASA NTRS2015

SSI-ARC Flight Test 3 Data Review

The "Unmanned Aircraft System (UAS) Integration into the National Airspace System (NAS)" Project conducted flight test program, referred to as Flight Test 3, at Armstrong Flight Research Center from June - August 2015. Four flight test days were dedicated to the NASA Ames-developed Detect and Avoid (DAA) System referred to as Autoresolver. The encounter scenarios, which involved NASA's Ikhana UAS and a manned intruder aircraft, were designed to collect data on DAA system performance in real-world conditions and uncertainties with four different surveillance sensor systems. Resulting flight test data and analysis results will be used to evaluate the DAA system performance (e.g., trajectory prediction accuracy, threat detection) and to add fidelity to simulation models used to inform Minimum Operating Performance Standards (MOPS) for integrating UAS into routine NAS operations.

detect and avoid↗
DOE OSTI2020

Deconstructing the Nuclear Supply Chain Cyber-Attack Surface

The nuclear supply chain cyber-attack surface is a large, complex network of interconnected stakeholders and activities. The global economy has widened and deepened the supply chain resulting in larger numbers of geographically dispersed locations and increased difficulty ensuring the authenticity and security of digital assets. Although the nuclear industry has made significant strides in securing facilities from cyber-attacks, the supply chain remains vulnerable. This paper provides further details on each of the elements in the Digital I&C System Supply Chain Cyber-Attack Surface, including supply chain lifecycle activities, key stakeholders, touchpoints, and attack types. Deconstructing this attack surface provides insights into supply chain threats, vulnerabilities, and consequences. These insights will lead to improvements in cybersecurity supply chain risk analysis, development of new cybersecurity supply chain processes and tools, and enhancement of overall supply chain resilience.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2020

Development of a Reference Design for a Cyber-Physical System

The purpose of this thesis is to develop a reference design to assist in the selection of security practices in power electronics design. A prototype will be developed from this reference design for evaluation. This evaluation will include a brief cost/benefit analysis to gauge the efficacy of implementing each layer of security throughout the power electronics design process. This thesis will also describe the obstacles and effectiveness of integrating a Trusted Platform Module (TPM) into a cyber-hardened grid-connected device. The TPM device is a secured crypto processor that assists in generating, storing, and restricting the use of cryptographic keys. The emphasis of this research is to establish integrity, authenticity, and confidentiality within a system by providing a baseline of security concerns for segments of the system. This research considers communication, control, and hardware level securities. The scope of this thesis will review the necessary security methods as well as consider the effects these methods have on the embedded system, to assess the desired security to responsiveness trade off. Applying this approach to a design process will alleviate various unknowns of appending security to a power electronics design. This thesis describes the specific vulnerabilities introduced within this grid-edge environment, and how the liabilities within the system can be mitigated. Initially, common security techniques will be considered to establish a guideline to benchmark performance and resource costs of the system. The foundation will be a non-hardened power electronic system platform with industry standard communication protocols. Several security techniques and attack vectors will then be evaluated to contribute to the base level platform. Other fail-safe features take place to gauge progress of the selected approach, non-inclusive to the TPM. Collectively, this investigation will determine a valid experiment by appraising and categorizing resource allocation, performance overhead, and monetary cost analysis results into a reference design. The prototype will then demonstrate methods to relieve common threats that are purposefully implemented into the design.

Blair, Nicholas Paul↗
DOE OSTI2026

Validating Protection System Behavior with Machine Learning in a Master State Overseer

As power system protection devices continue the widespread transition from analog to digital, they become increasingly intricate. The internal functions and communication between critical grid components must now be significantly more complex to keep up with the demands of the modern smart grid. This brings increased difficulty in maintenance and monitoring, making it harder to identify potential misoperation, power anomalies, and cyber threats. Such issues are often only pinpointed after an exhaustive and costly post-mortem analysis, when a major outage or damage has already occurred. A solution is needed for validating protection systems as they operate, independently evaluating grid state and confirming whether the protection system is behaving accordingly. As opposed to incident response, this acts as a constant verification mechanism that raises a flag when subtler issues are noticed, catching them earlier and preventing larger incidents. This work presents the implementation of such a system, expanding on the prototype developed by the authors in a previous paper. This is accomplished with a machine learning (ML) system capable of validating the performance of protection systems by classifying anomalous events and characterizing protection system responses based solely on available current and voltage measurements. Additionally, this system is contextualized within a larger, modular Master State awareness Overseer (MSO) framework, responsible for monitoring, analyzing, and managing an electric grid.

24 - POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Correlated Signal Analysis for Nuclear Emergency Response

In the context of nuclear emergency response (NER) scenarios, the critical task is to quickly identify a "black box" as a potential threat, as failing to do so could have catastrophic consequences. Techniques for passive assay of a “black box” typically include gamma-ray spectroscopy and neutron coincidence/multiplicity counting. However, there are significant challenges associated with these type of measurements. First, the presence of intervening materials can obstruct the detection of relevant signatures. Second, the presence of strong non-fission neutron sources, like (α, n) emitters, can add uncertainties to the neutron multiplicity analysis. In our LDRD-MFR Phase II work, a portable neutron spectrometer, called the Compact Fast Neutron Spectrometer (CFNS), was developed for NER applications. The CFNS system leverages information-rich neutron energy spectra to derive actionable information. This work investigates the use of correlated signals in the CFNS from special nuclear material (SNM) to characterize physical properties, such as intervening shielding material and fission to non-fission neutron contributions. In this report, the Phase II results from bulk SNM measurements at the National Criticality Experiments Research Center (NCERC) are briefly discussed along with the motivation for this work. Afterwards, simulations using the MCNPX-PoliMi transport code are discussed, which were used to expand our correlated signal study. Signal triggered analysis for neutron multiplicity extraction will also be discussed. Lastly, the use neutron-photon correlations for intervening material identification are shown, along with the use of correlated neutron energy spectra for α-ratio extraction.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2020

Geothermal Sector Cybersecurity Vulnerability Assessment

A review of geothermal sector-specific cybersecurity vulnerabilities and risks (consequences) was conducted at the request of the Geothermal Technologies Office (GTO). The vulnerabilities and risks reviewed in this study have relevance to achieving the 2019 GeoVision Report (DOE GTO 2019) technological advancements and expected sector growth. The study offers areas for consideration but does not quantify the likelihood (frequency) of the consequences. This cybersecurity analysis project represents a proactive effort to identify areas to enhance cybersecurity in geothermal development and operations. It was not initiated to address any immediate threat or specific known risk. Of the eight identified vulnerabilities analyzed, the review identified reservoir data system monitoring as one that is unique to geothermal systems and may warrant further investigation to better understand risk and mitigation. A detailed analysis of the other vulnerabilities may highlight additional uniqueness relative to other industries. Further research actions are recommended to better quantify risk and enhance cybersecurity preparedness of the sector. As the geothermal industry grows, the cybersecurity strategies to be deployed will be of increasing importance to ensure resilient, reliable, and secure clean energy for years to come.

cyber-physical security↗
DOE OSTI2021

Microscopic ejecta measurements from hypervelocity impacts on aluminum and powdered regolith targets

Meteoroids and space debris pose a two-fold threat to spacecraft due to the risk of both mechanical damage from the impact and electrical damage from the impact-generated plasma, which produces electromagnetic emissions. Analysis of impact products, however, has the potential to provide useful information about planetary rings and small solar system bodies, such as asteroids and comets. Understanding the plasma dynamics and radiation mechanism is essential to addressing the impact threat and extracting science data from impacts. Charge attachment to condensed-phase debris may lead to a dusty plasma under certain conditions, so interpreting hypervelocity impacts requires knowledge of both the nature of the plasma and of the ejecta. We address the latter with measurements of the microscopic ejecta distribution produced by light gas gun impacts on solid aluminum and powdered regolith simulant targets. We examine both the size and shape of the ejecta using thin-film witness plates and find that the size distributions of microscopic ejecta follow power laws. Observations from the powdered regolith simulant match well with disruption experiments of solid basalt, while measurements from the aluminum impacts diverge from extrapolations based on studies of macroscopic debris. Analysis of the ejecta shape shows a transition from smooth to irregularly shaped ejecta at the material grain size, and the shape of debris may provide insight on the phase of the ejected material. Finally, based on our results, we predict a significant number of secondary impacts on plasma sensors due to ejecta, even at considerable distance from the target, supporting the hypothesis that charged dust affects plasma measurements in the ejecta curtain.

42 ENGINEERING↗
DOE OSTI2020

Multiple social platforms reveal actionable signals for software vulnerability awareness: A study of GitHub, Twitter and Reddit

Software vulnerabilities are flaws in computer systems that leave users open to attack. In many cases, these vulnerabilities go unnoticed and remain unresolved in codebases. Thus, awareness of software vulnerabilities among the public is crucial to ensure effective cybersecurity practices, the development of high quality software, and ultimately national security. This awareness can be better understood by studying the spread and evolution of software vulnerability discussions in online communities. This work is the first to evaluate and contrast how discussions about software vulnerabilities spread on three social platforms -- Twitter, GitHub, and Reddit. To lay the groundwork, we showcase a novel fundamental framework for measuring information spread that identifies the spread mechanisms and observables across platforms, the units of information, and the groups of measurements that can be applied to focus on a specific phenomena e.g., information cascades. We then analyze and contrast social network topologies for three example social networks and measure the scale and speed of the spread of discussion of specific vulnerabilities to understand how far and how widely they spread, how many users participate in discussions, and the duration of their spread. To demonstrate the awareness of more impactful software vulnerabilities, a subset of our analysis focuses on vulnerabilities targeted during recent major cyber attacks as well as vulnerabilities exploited by advanced persistent threat groups. We discover that usually, vulnerability discussions start on GitHub, before occurring on Twitter and Reddit. While studying how some user-level and content-level characteristics influence vulnerability spread, we observe that Twitter discussions started by users predicted to be humans have larger size, breadth, depth, adoption rate, lifetime, and structural virality compared to those started by users predicted to be bots. On Reddit, we contrast the differences in thread structure that originate from posts with positive, negative and neutral polarity. We find that posts that are positive have larger, deeper and wider discussions compared to negative and neutral posts. We anticipate the results of our analysis to not only increase the understanding of software vulnerability awareness but also inform models for simulating information spread across multiple social environments online.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS2003

Air Monitoring for Hazardous Gas Detection

The Hazardous Gas Detection Lab is involved in the design and development of instrumentation that can detect and quantify various hazardous gases. Traditionally these systems are designed for leak detection of the cryogenic gases used for the propulsion of the Shuttle and other vehicles. Mass spectrometers are the basis of these systems, which provide excellent quantitation, sensitivity, selectivity, response and limits of detection. Unfortunately, these systems are large, heavy and expensive. This feature limits the ability to perform gas analysis in certain applications. Smaller and lighter mass spectrometer systems could be used in many more applications primarily due to the portability of the system. Such applications would include air analysis in confined spaces, in-situ environmental analysis and emergency response. In general, system cost is lowered as size is reduced. With a low cost air analysis system, several systems could be utilized for monitoring large areas. These networked systems could be deployed at job-sites for worker safety, throughout a community for pollution warnings, or dispersed in a battlefield for early warning of chemical or biological threats. Presented will be information on the first prototype of this type of system. Included will be field trial data, with this prototype performing air analysis autonomously from an aircraft.

Arkin, C. Richard↗
NASA NTRS2011

Common Cause Failure Modes

High technology industries with high failure costs commonly use redundancy as a means to reduce risk. Redundant systems, whether similar or dissimilar, are susceptible to Common Cause Failures (CCF). CCF is not always considered in the design effort and, therefore, can be a major threat to success. There are several aspects to CCF which must be understood to perform an analysis which will find hidden issues that may negate redundancy. This paper will provide definition, types, a list of possible causes and some examples of CCF. Requirements and designs from NASA projects will be used in the paper as examples.

Wetherholt, Jon↗
DOE OSTI2025

SEAFORML (Smart Exploration and Analysis For Optimal and Robust Machine Learning)

The poster discusses data analysis of the WAVgraph database and applied machine learning methods for it. The database is a long-term project that seeks to be a comprehensive repository of information on cyber threats and is updated regularly. It was previously unanalyzed and unexplored. The goal was to learn more about it and its contents in order to have a better understanding and enable better use. The data analysis and discovery enabled further exploration through natural language processing, similarity, and clustering methods. The poster shows some of the insights from the analysis and explains the methods used for the machine learning applications.

24 - POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Contextually aware roadside radiation measurement testbed

Here we demonstrate a contextually aware multimodal roadside radiation measurement detection testbed for traffic monitoring applications in nuclear nonproliferation. Many variables in traffic such as vehicle or cargo size, mass, speed, shape, and distance of closest approach can have significant impacts on the radiation measured from a vehicle-transported radiation source. These factors can lead to uncertainties in the analysis of the radiation source, especially for lower-strength radiation sources of interest. Our testbed, known as the Multimodal Measurement System (MMS) uses non-radiation sensors including magnetometers, geophones, radiofrequency receivers, cameras, and LiDAR to extract contextual information about vehicles passing by the system. These contextual data can then be fused with data from radiation measurements to increase the system’s sensitivity and accuracy in nuclear threat detection applications. This work describes the instrumentation of the MMS and its data acquisition pipeline. Furthermore, we describe the pre-analysis performed on the raw multimodal data streams for data fusion, and the high-level machine learning analyses for detection and characterization. The variety of sensors within the MMS provides a valuable testbed that can be used to identify the combinations of contextual sensors that provide the greatest improvements to radiation source detection and characterization within the restrictions for various proliferation detection applications. The MMS is also modular so that additional combinations of sensors can be explored in the future.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2021

Critical Roles of Information, Analysis, Research, and Operations in the Cyber Realm

PNNL has developed an adaptive cyber integration framework (ACIF) to facilitate the timely sharing of cyber threat information along with the advancement of situational awareness tools to enhance protection against and respond to critical infrastructure cybersecurity threats. The ACIF comprises components implemented iteratively to achieve research and mission goals. The ACIF components include data generation technologies, analytic tools development and maturation, data enrichment and fusion, trust building with stakeholders, investigative research, analytic rigor, production, and dissemination. Each component, its importance to the ACIF, and how they can be adopted and applied across other information-sharing sectors and domains are discussed in this paper.

Cyber Threat Intelligence, Cyber Security, Data En↗
NASA NTRS2020

Global Declines in Human-Driven Mangrove Loss

Global mangrove loss has been attributed primarily to human activity. Anthropogenic loss hotspots across Southeast Asia and around the world have characterized the ecosystem as highly threatened, though natural processes such as erosion can also play a significant role in forest vulnerability. However, the extent of human and natural threats has not been fully quantified at the global scale. Here, using a Random Forest-based analysis of over one million Landsat images, we present the first 30-meter resolution global maps of the drivers of mangrove loss from 2000-2016, capturing both human-driven and natural stressors. We estimate that 62% of global losses between 2000-2016 resulted from land-use change, primarily through conversion to aquaculture and agriculture. Up to 80% of these human-driven losses occurred within six Southeast Asian nations, reflecting the regional emphasis on enhancing aquaculture for export to support economic development. Both anthropogenic and natural losses declined between 2000-2016, though slower declines in natural loss caused an increase in their relative contribution to total global loss area. We attribute the decline in anthropogenic losses to the regionally-dependent combination of increased emphasis on conservation efforts and a lack of remaining mangroves viable for conversion. While efforts to restore and protect mangroves appear to be effective over decadal time scales, the emergence of natural drivers of loss presents an immediate challenge for coastal adaptation. We anticipate that our results will inform decision making within conservation and restoration initiatives by providing a locally-relevant understanding of the causes of mangrove loss.

Coastal wetlands↗
DOE OSTI2024

Multisectoral analysis of drought impacts and management responses to the 2008–2015 record drought in the Colorado Basin, Texas

Abstract. Drought has long posed an existential threat to society. Engineering and technological advancements have enabled the development of complex, interconnected water supply systems that buffer societies from the impacts of drought, enabling growth and prosperity. However, increasing water demand from population growth and economic development, combined with more extreme and prolonged droughts due to climate change, poses significant challenges for governments in the 21st century. Improved understanding of the cascading multisectoral impacts and adaptive responses resulting from extreme drought can aid in adaptive planning and highlight key processes in modeling drought impacts. The record drought spanning 2008 to 2015 in the Colorado Basin in the state of Texas, United States, serves as an outstanding illustration to assess multisectoral impacts and responses to severe, multi-year drought. The basin faces similar water security challenges to those across the western US, such as groundwater depletion and sustainability, resource competition between agriculture and growing urban populations, limited options for additional reservoir expansion, and the heightened risk of more severe and frequent droughts due to climate change. By analyzing rich, high-quality data sourced from nine different local, state, and federal sources, we demonstrate that characterizing regional multisector dynamics is crucial to predicting and understanding future vulnerability and possible approaches to reduce impacts to human and natural systems in the face of extreme drought conditions. This review reveals that, despite the severe hydrometeorological conditions of the drought, the region's advanced economy and existing water infrastructure effectively mitigated economic and societal impacts.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS2022

Estimating Tropical Cyclone Threats to Floating Rigs in the Gulf of Mexico

Offshore drilling operations in the Gulf of Mexico are particularly vulnerable during hurricane season. When a weather threat arises, a decision to evacuate the rig and/or move to a safe location may need to be made. Securing the well, evacuating, and/or moving to a safe location can take a considerable amount of time. This transition time is called T-time. T-time is not only rig dependent, but also depends on the activity being performed at the time of the threat. For these reasons, it is important to assess tropical cyclone threats and the estimated time it will take the storm to reach the rig location from the time it is first detected. The objective of this study is to use 50 years of cyclone history from a National Oceanic and Atmospheric Administration’s (NOAA) database, the International Best Track Archive for Climate Stewardship (IBTrACS) to estimate cyclone threats at any location in the Gulf of Mexico. The cyclone threat is estimated based on the rig location as well as the start date and duration of the offshore activity. By threat, it is meant the likelihood that a specific location with an associated offshore activity lies within the forecasted track cone and storm size of the upcoming cyclone. Three representative rig locations in the Gulf of Mexico were selected as assessment sites to evaluate the threat of incoming cyclones for different T-times. To conduct this tropical cyclone study, an Excel spreadsheet tool was developed to automate the analysis of the tropical cyclone data. The spreadsheet tool allows the user to input any location (i.e., longitude and latitude) in the Gulf of Mexico and displays a list of historical cyclones that have passed within 150 nautical miles of that location during the activity period selected by the user. In addition, the tool allows the user to input any T-time to assess the threat of cyclones that would not provide adequate time to secure the well, evacuate, and/or move to a safe location.

Offshore Oil Drilling↗