SEARCH · Engineering Papers

Results for “timing vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

All sources NASA NTRS DOE OSTI

NASA NTRS2020

Satellite Gravimetry Improves Seasonal Streamflow Forecast Initialization in Africa

West Africa is one of the poorest regions in the world and highly vulnerable to extreme hydrological events due to the lack of reliable monitoring and forecast systems. For the first time, we demonstrate that initial hydrological conditions informed by satellite-based terrestrial water storage (TWS) estimates improve seasonal streamflow forecasts. TWS variability detected by the Gravity Recovery and Climate Experiment (GRACE) satellites is assimilated into a land surface model during 2003–2016 and used to initialize 6-month hindcasts (i.e., forecasts of past events) during West Africa's wet seasons. We find that GRACE data assimilation (DA) generally increases groundwater and soil moisture storage in the region, resulting in increased evapotranspiration and reduced total runoff. Total runoff is particularly lower at the headwaters of the Niger River, positively impacting streamflow simulations and hindcast initializations. Compared to simulations without GRACE-DA, hindcasts are notably improved at locations draining from large basin areas, in particular, over the Niger River basin, which is consistent with GRACE's coarse spatial resolution. The long memory of groundwater and deep soil moisture, two main TWS components updated by GRACE-DA, is reflected in prolonged improvements in the streamflow hindcasts. Model accuracy at Niamey, Niger, the most populated city where streamflow observations are available, improved up to 33% during the flood season. These new findings directly contribute to ongoing developments in food security, flood potential forecast, and water-related disaster warning systems for Africa.

Augusto Getirana↗

NASA NTRS2021

Interactions Between Two Existential Threats: COVID-19 and Climate Change

The COVID-19 pandemic and climate change are complex existential threats, unpredictable in many ways and unprecedented in modern times. There are parallels between the scale and scope of their impacts and responses. Understanding shared drivers, coupled vulnerabilities, and criteria for effective responses will help societies worldwide prepare for the simultaneous threats of climate change and future pandemics. We summarize some shared characteristics of COVID-19 and climate change impacts and interventions and discuss key policy implications and recommendations.

Climate change adaptation↗

DOE OSTI2024

A Real-Time Testbed for Smart Inverter Cyber Security Studies

Distributed energy resources (DER) have become a popular solution to modern-day issues surrounding the efficiency and reliability of power generation, as well as climate change concerns. Energy centers are shifting towards incorporating smart inverters with embedded functionalities such as high voltage ride through (HVRT), low voltage ride through (LVRT), active and reactive power compensation. However, the integration of smart inverters leave DER systems highly vulnerable to cybersecurity threats. The distributed network protocol 3 (DNP3) is a common method of communication between grid-tied hardware. Despite its popularity, the level of security leaves all hardware connected to the grid at risk of severe cyber-attacks. Thus, it is important to study any potential cybersecurity threats towards grid-tied smart inverters to mitigate cybersecurity vulnerabilities and refine existing cyber-security protections. This report describes the proposed testbed design to study cybersecurity threats to smart inverters. The testbed utilizes a real-time simulation case in RSCAD that includes a grid-tied wind turbine (WT) topology featuring two back-to-back two-level voltage source converters (BTB,2L-VSCs) and a permanent magnet synchronous machine (PMSM). The simulated case runs within the NovaCor real time digital simulator (RTDS). This report focuses on the design and implementation of a single module of the GTNETx2 card as a distributed network protocol and the configuration of an IEEE 1518 DNP database file that includes input and output variables mapped to different connection points in the grid that transmit and receive discrete, analog, and binary signals on command. This allows realistic emulation of the communication between the smart inverter and the grid for cybersecurity studies.

97 MATHEMATICS AND COMPUTING↗

NASA NTRS2016

Quantifying Surface Water Dynamics at 30 Meter Spatial Resolution in the North American High Northern Latitudes 1991-2011

The availability of a dense time series of satellite observations at moderate (30 m) spatial resolution is enabling unprecedented opportunities for understanding ecosystems around the world. A time series of data from Landsat was used to generate a series of three maps at decadal time step to show how surface water has changed from 1991 to 2011 in the high northern latitudes of North America. Previous attempts to characterize the change in surface water in this region have been limited in either spatial or temporal resolution, or both. This series of maps was generated for the NASA Arctic and Boreal Vulnerability Experiment (ABoVE), which began in fall 2015. These maps show a nominal extent of surface water by using multiple observations to make a single map for each time step. This increases the confidence that any detected changes are related to climate or ecosystem changes not simply caused by short duration weather events such as flood or drought. The methods and comparison to other contemporary maps of the region are presented here. Initial verification results indicate 96% producer accuracy and 54% user accuracy when compared to 2-m resolution World View-2 data. All water bodies that were omitted were one Landsat pixel or smaller, hence below detection limits of the instrument.

Carroll, Mark↗

DOE OSTI2023

The Impacts of Developing a Port Network for Floating Offshore Wind Energy on the West Coast of the United States

Floating offshore wind is a pre-commercial industry with the potential for significant market growth on the U.S. West Coast in the near future; however, significant investment in port infrastructure will be required to enable the industry to progress from demonstration projects to efficient and cost effective commercial deployment. Developing a system of ports that can enable commercial-scale floating wind development on the West Coast of the United States will require significant levels of funding and coordination between governments, industry, ports, and local communities. A critical first step to strategically planning these resources is understanding the number of ports (and associated investment) that would be required to support different phases of offshore wind projects, including manufacturing, installation, and operation. But simply tallying up these costs is not sufficient to understand how a robust network of ports could impact local communities, the environment, workforce development, the offshore wind industry, and the West Coast region as a whole. In this report, the authors present analyses and perspectives related to port development in California, Oregon, and Washington. We describe the requirements for floating offshore wind ports that conduct manufacturing, installation, and/or service activities, and estimate the investment and time frames required to construct these ports at suitable locations in West Coast states. We develop indicators for the vulnerability and workforce accessibility of coastal communities and consider the potential risks and benefits associated with port development in these locations. We model how the proximity of an offshore wind project to installation and operations ports can impact the levelized cost of energy of the project, and then consider how these costs could be affected by local or foreign supply chains. We build upon these analyses to develop scenarios with increasing levels of offshore wind deployment and port assets on the West Coast and show how these ports could enable deployment goals to be achieved. Finally, we draw upon outreach with key floating wind stakeholders to summarize five key challenges that will need to be overcome to develop a comprehensive port network, and present potential approaches that could help to address these obstacles.

17 WIND ENERGY↗

DOE OSTI2025

How Quantum Sensing Will Help Solve GPS Denial in Warfare

The U.S. military’s ability to posture, deter, and prevail in future conflicts may rest on the quantum sensing position, navigation, and timing (PNT) capabilities that are currently being developed. Heavy reliance on GPS signals for PNT has become a critical vulnerability for the U.S. military. Meanwhile, the conflict in Ukraine has demonstrated that GPS denial and electronic warfare (EW) is now a key component of modern combat and satellite-guided munitions are reportedly being rendered ineffective. The Department of Defense (DOD) is focusing on upgrading GPS to use stronger, military-specific signals, which will still be vulnerable to EW and anti-satellite capabilities. A more diverse and resilient alternate-PNT strategy is needed to ensure mission success.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2021

Aprendizaje vertical

In the teaching and learning events of our life, there are characters who play key roles. Teachers, mentors, relatives, novels, songs, newspaper columns, often help us understand the questions in our heads. However, we often reject them because they are messages or attitudes from older people and the generation gap does not allow us to understand them well. The times of covid-19 have us locked up at home. They alert us that precisely “elderly people” are a vulnerable group. Also, we have been asked to take care of grandparents. If we are lucky enough to have an internet connection, it seems that we can learn anything we want with just one click. This could lead us to explore only what we find attractive, easy and comfortable. With this testimony, I invite you to acknowledge on the role of the elderly in the learning of entire generations. I call for openness towards diverse voices and for the understanding that we all play a role in moving towards a more mature society.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2020

Remote Sensing-Informed Zonation for Understanding Snow, Plant and Soil Moisture Dynamics within a Mountain Ecosystem

In the headwater catchments of the Rocky Mountains, plant productivity and its dynamics are largely dependent upon water availability, which is influenced by changing snowmelt dynamics associated with climate change. Understanding and quantifying the interactions between snow, plants and soil moisture is challenging, since these interactions are highly heterogeneous in mountainous terrain, particularly as they are influenced by microtopography within a hillslope. Recent advances in satellite remote sensing have created an opportunity for monitoring snow and plant dynamics at high spatiotemporal resolutions that can capture microtopographic effects. In this study, we investigate the relationships among topography, snowmelt, soil moisture and plant dynamics in the East River watershed, Crested Butte, Colorado, based on a time series of 3-meter resolution PlanetScope normalized difference vegetation index (NDVI) images. To make use of a large volume of high-resolution time-lapse images (17 images total), we use unsupervised machine learning methods to reduce the dimensionality of the time lapse images by identifying spatial zones that have characteristic NDVI time series. We hypothesize that each zone represents a set of similar snowmelt and plant dynamics that differ from other identified zones and that these zones are associated with key topographic features, plant species and soil moisture. We compare different distance measures (Ward and complete linkage) to understand the effects of their influence on the zonation map. Results show that the identified zones are associated with particular microtopographic features; highly productive zones are associated with low slopes and high topographic wetness index, in contrast with zones of low productivity, which are associated with high slopes and low topographic wetness index. The zones also correspond to particular plant species distributions; higher forb coverage is associated with zones characterized by higher peak productivity combined with rapid senescence in low moisture conditions, while higher sagebrush coverage is associated with low productivity and similar senescence patterns between high and low moisture conditions. In addition, soil moisture probe and sensor data confirm that each zone has a unique soil moisture distribution. This cluster-based analysis can tractably analyze high-resolution time-lapse images to examine plant-soil-snow interactions, guide sampling and sensor placements and identify areas likely vulnerable to ecological change in the future.

54 ENVIRONMENTAL SCIENCES↗

NASA NTRS2015

Assessing the Evolving Fragility of the Global Food System

The world food crisis in 2008 highlighted the susceptibility of the global food system to price shocks. Here we use annual staple food production and trade data from 1992-2009 to analyse the changing properties of the global food system. Over the 18-year study period, we show that the global food system is relatively homogeneous (85 of countries have low or marginal food self-sufficiency) and increases in complexity, with the number of global wheat and rice trade connections doubling and trade flows increasing by 42 and 90, respectively. The increased connectivity and flows within these global trade networks suggest that the global food system is vulnerable to systemic disruptions, especially considering the tendency for exporting countries to switch to non-exporting states during times of food scarcity in the global markets. To test this hypothesis, we superimpose continental-scale disruptions on the wheat and rice trade networks. We find greater absolute reductions in global wheat and rice exports along with larger losses in network connectivity as the networks evolve due to disruptions in European wheat and Asian rice production. Importantly, our findings indicate that least developed countries suffer greater import losses in more connected networks through their increased dependence on imports for staple foods (due to these large-scale disturbances): mean (median) wheat losses as percentages of staple food supply are 8.9 (3.8) for 1992-1996, increasing to 11 (5.7) for 20052009. Over the same intervals, rice losses increase from 8.2 (2.2) to 14 (5.2). Our work indicates that policy efforts should focus on balancing the efficiency of international trade (and its associated specialization) with increased resilience of domestic production and global demand diversity.

complex networks↗

DOE OSTI2025

A distributed voltage inference framework for cyber-physical attacks detection and localization in active distribution grids

The transition to active distribution grids with real-time monitoring and control depends on the proliferation of advanced communication networks and devices. This paradigm shift towards a cyber-physical architecture also introduces new vulnerabilities for adversaries to exploit and launch sophisticated cyber-physical attacks targeting grid observability. Current research highlights the challenges in distinguishing attacks on voltage phasor or nodal injection measurements and isolating multi-source attack locations in a multiphase distribution grid. The attack detection and localization methods in literature face accuracy issues, applications across diverse attack scenarios, or scalability limits. Here, to bridge these gaps, this paper proposes a distributed Voltage Inference framework for real-time detection and localization of cyber-physical attacks, addressing scalability, adaptability, and accuracy challenges in state-of-the-art methods. The proposed methodology leverages the distributed nature of the Voltage Inference framework through a two-step process of prediction and correction, together with a tractable graph partitioning approach, providing a reliable solution to identify compromised measurement sources and facilitate isolation. Extensive testing on IEEE 13 and 123-node distribution feeders underscores the algorithm’s efficacy, enhancing the security and resilience of active distribution grids against evolving cyber threats. Additionally, Hardware-in-the-Loop (HIL) implementation validates the proposed strategy’s practical applicability in real-world scenarios.

active distribution grids↗

DOE OSTI2024

Modeling nuclear waste disposal in crystalline rocks at the Forsmark and Olkiluoto repository sites – Evaluation of potential thermal–mechanical damage to repository excavations

We conduct coupled thermo-hydro-mechanical modeling of a KBS-3V repository design in crystalline rocks, using data and conditions from the Forsmark in Olkiluoto repository sites in Sweden and Finland. The study focuses on repository performance related to the impact of thermal and hydraulic evolution on the potential for thermal–mechanical damage to underground repository excavations. For the designs and conditions considered at the Forsmark and Olkiluoto repository sites, the simulations show a peak temperature well under the adopted performance target of a 100°C maximum temperature, whereas there is still a high potential for thermal–mechanical damage to the KBS-3V waste deposition holes. The thermal–mechanical damage is much more likely if rock permeability is so low that it delays saturation and swelling of bentonite-clay-based backfill beyond the time for the thermal–mechanical peak, which occurs 50 to 100 years after nuclear waste deposition. We also found that sidewalls of the KBS-3V emplacement tunnels are vulnerable to tensile fracturing due to the combined effect of thermal stressing and backfill swelling. The study highlights a strong interaction between bentonite-based backfill and host rock through capillary suction along with induced rock desaturation. A careful design and selection of the bentonite-clay-based backfill materials for KBS-3V tunnels and deposition holes can facilitate a timely saturation and backfill swelling that in turn can minimize thermal–mechanical damage.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2022

Oak Ridge National Laboratory Pilot Demonstration of an Attestation and Anomaly Detection Framework using Distributed Ledger Technology for Power Grid Infrastructure

This report summarizes the design and pilot demonstration of a framework called Grid Guard that was created to provide increased data and device trustworthiness to electric grid devices by leveraging distributed ledger technology (DLT), specifically blockchain. Grid Guard contains a combination of core cryptographic methods such as the secure hash algorithm (SHA), and asymmetric cryptography, private permissioned blockchain, baselining configuration data, consensus algorithm (Raft) and the Hyperledger Fabric (HLF) framework. The system implements a low energy, fast, and robust enhancement to system trustworthiness within and across electric grid systems such as substations, control centers and metering infrastructures. Blockchain is a distributed database structured that provides a practically unalterable (immutable) timeline of stored transactions. By relying on hashing and the Raft consensus algorithm, if an entity tries to illegitimately alter a record at one instance of the database the other ledger nodes are not altered. They work to cross-reference each other and easily locate any incorrectly added data and remove it. The bulk raw data is stored in an off-chain storage (outside of the blockchain ledger) and a hash of this baseline data is stored in the Blockchain ledger via hashing windows of time-series and configuration data, after aggregation and filtering. The bulk off-chain data repository is then considered to be trust-anchored using the hashes stored in the blockchain. To secure the electric grid testbed devices and data, device configuration baselines were compared to those baselines that had been previously stored in the ledger. Statistical baselines for device configurations, network communication patterns, and high-speed sensor data are calculated and then stored off-chain and hashes stored in the ledger. Measurements such as three-phase voltage and current, frequency, breaker status, protection scheme settings, network configuration settings (and other device configuration artifacts) and network traffic features (packet interarrival times) are compared every minute or other selected time windows. During phase 1 of the Grid Guard DLT project different DLT technologies were studies, and an assessment was performed on DLT technology vulnerabilities, uses, and key characteristics. DLT consensus protocols were studies (e.g., RAFT, named after Reliable, Replicated, Redundant, And Fault-Tolerant). Also, cryptography, public, private and permissioned or permissionless systems were assessed. Grid Guard implements a permissioned private DLT. Consensus algorithm selection and choice of DLT implementation depended heavily on the use-case. For this use-case, parameters were selected to measure performance and existing tools for assessment. Benchmarking was performed theoretically and practically. During phase 2 hashed transactions/blocks were inserted into the ledger every second. During phase 2 of the Grid Guard DLT project, a prototype framework was developed and demonstrated for attestation of critical substation devices and data using precision timing systems that use PTP and IRIG-B protocols) on a testbed of operational devices that emulated a distribution substation, control center, and power metering infrastructure using real Operational Technology (OT). The testbed includes OT devices such as protective relays, human machine interfaces (HMI), and power meters. To determine when to collect and compare system and network baselines, an initial examination of an anomaly detection capability to identify malicious manipulation of data streams was conducted. The resulting anomaly detection was demonstrated in a set of experiments and leveraged to trigger device artifact attestation checks. Attestation checks occur against device configuration baselines when compared with the immutable blockchain-stored baselines, which provided a cryptographically supported means by which to store baselines. The electrical substation-grid testbed was created to test the Grid Guard framework. The testbed emulates the operations of a portion of a power grid and SCADA systems as closely as possible. The testbed integrates real protocols, mainly IEC 61850 standard protocols, such as the Sampled Value (SV) and the GOOSE protocols. The testbed also supports DNP3 and other layer 2 and layer 3 protocols such as Telnet, SSH, SFTP/FTP and other proprietary protocols needed to connect to industrial control system equipment. The testbed emulates real power conditions using the OpalRT hardware-in-the-loop (HIL) device which can create fault situations that cannot be easily tested on real systems. The electrical substation-grid testbed was created using real measurement, communication, and protection devices that electrical utilities commonly use.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

Using the Principals of Electrochemistry to Understand and Overcome the Complicated Degradation Mechanisms of Silicon Anodes in Lithium-Ion Batteries [Slides]

Battery technology is the most significant problem facing widespread market adoption of battery electric vehicles (BEVs). The low energy density of state-of-the-art lithium-ion electrode materials leaves BEV owners and prospective buyers with lower ranges than a comparable internal combustion engine (ICE) vehicle, and vulnerable to a nascent fast charging network. Silicon has the potential to increase the anode energy density by nearly ten times compared to the incumbent material (graphite) and make BEVs a more competitive transportation option. However, lithiated silicon is extremely reactive towards components of the electrolyte and forms a heterogeneous, complicated, and dynamic solid at its surface known as the solid electrolyte interphase (SEI). Ideally, the SEI would passivate the silicon surface, but continuous chemical degradation persists even when the battery is not operating. This reactivity reduces silicon anode lifetimes well below the necessary standards for BEVs. The NREL-led Silicon Consortium Project is dedicated to understanding and solving these mechanisms of degradation. Here, I will discuss an electrochemical method that provides deep insights into the silicon interface during battery operation. I will link these observations to fundamental electrochemical principals and how they translate into actionable strategies that extend the lifetime of silicon anodes.

25 ENERGY STORAGE↗

NASA NTRS1999

Effective Forces Between Colloidal Particles

Colloidal suspensions have proven to be excellent model systems for the study of condensed matter and its phase behavior. Many of the properties of colloidal suspensions can be investigated with a systematic variation of the characteristics of the systems and, in addition, the energy, length and time scales associated with them allow for experimental probing of otherwise inaccessible regimes. The latter property also makes colloidal systems vulnerable to external influences such as gravity. Experiments performed in micro-ravity by Chaikin and Russell have been invaluable in extracting the true behavior of the systems without an external field. Weitz and Pusey intend to use mixtures of colloidal particles with additives such as polymers to induce aggregation and form weak, tenuous, highly disordered fractal structures that would be stable in the absence of gravitational forces. When dispersed in a polarizable medium, colloidal particles can ionize, emitting counterions into the solution. The standard interaction potential in these charged colloidal suspensions was first obtained by Derjaguin, Landau, Verwey and Overbeek. The DLVO potential is obtained in the mean-field linearized Poisson-Boltzmann approximation and thus has limited applicability. For more precise calculations, we have used ab initio density functional theory. In our model, colloidal particles are charged hard spheres, the counterions are described by a continuum density field and the solvent is treated as a homogeneous medium with a specified dielectric constant. We calculate the effective forces between charged colloidal particles by integrating over the solvent and counterion degrees of freedom, taking into account the direct interactions between the particles as well as particle-counterion, counterion-counterion Coulomb, counterion entropic and correlation contributions. We obtain the effective interaction potential between charged colloidal particles in different configurations. We evaluate two- and three-body forces in the bulk as well as study the influence of soft walls. We qualitatively explain the effects of the walls on the forces and demonstrate that many-body effects are negligible in our system. With adjustments in the parameters, the DLVO pair-potential can describe the results quantitatively. Besides electrostatic interactions, entropic depletion effects that arise from (hard-core) exclusion play an important role in determining the behavior of multi-component colloidal suspensions. A standard theory for depletion forces is due to Asakura and Oosawa and is based on the ideal gas approximation. To go beyond this approximation, we have studied entropic forces in molecular dynamics simulations of systems of hard spheres (the effects of the solvent have been ignored). The effective depletion forces for these systems can be found either from equilibrium distribution functions or from direct momentum transfer calculations. Our results obtained by either method show qualitative differences from the Asakura-Oosawa forces, indicating a longer range, higher value at contact and most importantly a more complicated structure, comprising of several maxima and minima. Our calculations include the determination of effective forces between two spheres, a hard sphere and a wall, and the behavior of a hard sphere near a step-edge and a corner. We also demonstrate that such entropic forces do not necessarily satisfy pairwise additivity.

Tehver, Riina↗

NASA NTRS2019

Changes in Vegetation Cover of the Arctic National Wildlife Refuge Estimated from MODIS Greenness Trends, 2000 to 2018

The Arctic National Wildlife Refuge (ANWR) was established in 1980 and covers 19 million acres (77,000 km2) in northeast Alaska. Wildlife habitats in the ANWR are vulnerable to long-lasting effects from any disturbance, in part because short growing seasons in the arctic provide limited time for species to recover. Trends and transitions in the growing season MODerate resolution Imaging Spectroradiometer (MODIS) Normalized Difference Vegetation Index (NDVI) time-series at 250-m resolution were analyzed for the period from 2000 to 2018 to understand recent patterns of vegetation change in all ecoregions of the ANWR. Statistical analysis of changes in each MODIS pixel NDVI time series was conducted using the "Breaks for Additive Seasonal and Trend" method (BFAST) to map regional change rates. Results suggested that most negative NDVI anomalies in the tundra-covered river drainages of the Brooks Range Mountains and coastal plain have been associated with early spring thawing and elevated levels of surface moisture in low elevation drainages of the northern ANWR ecoregions.

Arctic National Wildlife Refuge↗

NASA NTRS2003

Three-Dimensional Venturi Sensor for Measuring Extreme Winds

A three-dimensional (3D) Venturi sensor is being developed as a compact, rugged means of measuring wind vectors having magnitudes of as much as 300 mph (134 m/s). This sensor also incorporates auxiliary sensors for measuring temperature from -40 to +120 F (-40 to +49 C), relative humidity from 0 to 100 percent, and atmospheric pressure from 846 to 1,084 millibar (85 to 108 kPa). Conventional cup-and-vane anemometers are highly susceptible to damage by both high wind forces and debris, due to their moving parts and large profiles. In addition, they exhibit slow recovery times contributing to an inaccurately high average-speed reading. Ultrasonic and hot-wire anemometers overcome some of the disadvantages of the cup and-vane anemometers, but they have other disadvantageous features, including limited dynamic range and susceptibility to errors caused by external acoustic noise and rain. In contrast, the novel 3D Venturi sensor is less vulnerable to wind damage because of its smaller profile and ruggedness. Since the sensor has no moving parts, it provides increased reliability and lower maintenance costs. It has faster response and recovery times to changing wind conditions than traditional systems. In addition, it offers wide dynamic range and is expected to be relatively insensitive to rain and acoustic energy. The Venturi effect in this sensor is achieved by the mirrored double-inflection curve, which is then rotated 360 to create the desired detection surfaces. The curve is optimized to provide a good balance of pressure difference between sensor ports and overall maximum fluid velocity while in the shape. Four posts are used to separate the two shapes, and their size and location were chosen to minimize effects on the pressure measurements. The 3D Venturi sensor has smart software algorithms to map the wind pressure exerted on the surfaces of the design. Using Bernoulli's equation, the speed of the wind is calculated from the differences among the pressure readings at the various ports. The direction of the wind is calculated from the spatial distribution and magnitude of the pressure readings. All of the pressure port sizes and locations have been optimized to minimize measurement errors and to reside in areas demonstrating a stable pressure reading proportional to the velocity range.

Zysko, Jan A.↗

DOE OSTI2023

Towards generic memory forensic framework for programmable logic controllers

A Programmable Logic Controller (PLC) is a microprocessor-based controller that is used to automate physical processes in critical infrastructure and various other industries and manufacturing sectors. Initially, PLCs were completely isolated from the Internet, and cyber security was not incorporated at the time of development. The introduction of industry 4.0 and the evolution of ICS systems to communicate over public IP addresses from the Internet enhanced productivity and efficiency, but Internet connectivity exposed the systems and their vulnerabilities, which led to an increase in cyber attacks. When a system is sabotaged/compromised, security analysts need to get to the root cause of the attack as quickly as possible to recover the system. To do so, memory forensic analysis is critical to provide a unique insight into the run-time memory activities and extract a reliable source of evidence. In this paper, we analyze the memory structure of the Schneider Electric Modicon M221 PLC. To build a memory profile, we reverse engineer the communication protocol and conduct differential analysis to gain knowledge about the structure of the memory and the low-level representation of control logic instructions. We then identify dynamic and static memory regions by modifying different project fields and conducting differential analysis, which allows us to identify boundaries of critical memory structures and extract important forensic artifacts that can be found in the memory. The Python implementation of the memory profile can help reduce the time and effort required for manual analysis in case of cyber incident or system failure.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2023

Alerga: Alert Aggregation and Reasoning in GOOSE Simulation Pipeline

IEC 61850 specifies the Generic Object Oriented Substation Event (GOOSE) protocol as one option for low latency communication of substation-related events. Due to its strict timing requirements, GOOSE lacks any form of encryption or authentication and has only minimal integrity guarantees. These absences render the protocol vulnerable to a variety of communication anomalies, including adversarial action. In particular, an adversary with access to the substation network can launch man in the middle (MITM) attacks. We propose Alerga, a set of tools to allow operators to mitigate some of the risks of the protocol while retaining its strengths. To that end, we have developed first a GOOSE simulation pipeline including data generation, anomaly detection, alert handling, causal reasoning and data visualization components. The simulator is designed to be modular, allowing operators to swap components to better fit their network capabilities. The volume of alert traffic on a substation network threatens operators with alert fatigue. In order to combat this, we secondly present a novel form of alert aggregation and processing, offering operators a condensed view of any threats to the system. Thirdly, to facilitate the handling of these threats, our causal reasoning system traces the alerts back to their most likely cause, generating an initial hypothesis for operators to investigate.

alert aggregation↗