Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “timing vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

Ransomware Security Threat Modeling for Photovoltaic Systems

Ransomware attacks are one of the most dangerous cyber-attacks which can disrupt the operation of photovoltaic (PV) systems and incur an enormous economic loss. This paper introduces a ransomware security threat modeling method that identifies potential vulnerabilities, threats, and impacts of ransomware attacks targeting a PV system. Here, the security threat modeling consists of three steps: 1) system identification, 2) threat modeling that finds existing vulnerabilities, 3) attack modeling that designs attack profiles to succeed ransomware attacks, and 4) penetration testing that performs authorized cyber-attacks and analyzes impacts of the ransomware attack profiles using a real-time hardware-in-the-loop (HIL) PV system security testbed.

attack modeling↗

Mapping heat vulnerability in cities: A tale of two california cities

Extreme heat is a major cause of weather-related deaths in the United States. To address this, a heat vulnerability index (HVI) is crucial for assessing heat risk and identifying vulnerable urban areas and populations, supporting city planning and emergency response. Current HVI studies often use Principal Component Analysis (PCA) on environmental, socioeconomic, and medical data to aggregate vulnerability indicators into a single index. However, these fixed aggregation weights struggle to adapt to different use cases, which may require varying focuses. Moreover, existing tools primarily consider outdoor heat exposure, providing an incomplete picture of actual exposure, as people spend most of their time indoors. Our research introduces an HVI web mapping tool that addresses these gaps in the literature by: (1) allowing flexible weights to adapt to different use cases, and (2) uniquely integrating both outdoor and indoor heat exposure by considering building characteristics for a more comprehensive risk assessment. We demonstrated this tool in two California cities with contrasting climates: Fresno (inland, arid, hot summers) and Oakland (temperate coastal). This HVI mapping tool provides essential decision support for policymakers and stakeholders in both short-term heat mitigation and long-term urban planning for building interventions and infrastructure development.

BES↗

Role of reinforcement learning for risk-based robust control of cyber-physical energy systems

Critical infrastructures such as cyber-physical energy systems (CPS-E) integrate information flow and physical operations that are vulnerable to natural and targeted failures. Safe, secure, and reliable operation and control of CPS-E is critical to ensure societal well-being and economic prosperity. Automated control is key for real-time operations and may be mathematically cast as a sequential decision-making problem under uncertainty. Emergence of data-driven techniques for decision making under uncertainty, such as reinforcement learning (RL), have led to promising advances for addressing sequential decision-making problems for risk-based robust CPS-E control. However, existing research challenges include understanding the applicability of RL methods across diverse CPS-E applications, addressing the effect of risk preferences across multiple RL methods, and development of open-source domain-aware simulation environments for RL experimentation within a CPS-E context. This article systematically analyzes the applicability of four types of RL methods (model-free, model-based, hybrid model-free and model-based, and hierarchical) for risk-based robust CPS-E control. Problem features and solution stability for the RL methods are also discussed. We demonstrate and compare the performance of multiple RL methods under different risk specifications (risk-averse, risk-neutral, and risk-seeking) through the development and application of an open-source simulation environment. Motivating numerical simulation examples include representative single-zone and multizone building control use cases. Finally, six key insights for future research and broader adoption of RL methods are identified, with specific emphasis on problem features, algorithmic explainability, and solution stability.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Statistical emulation of a perturbed basal melt ensemble of an ice sheet model to better quantify Antarctic sea level rise uncertainties

Abstract. Antarctic ice shelves are vulnerable to warming ocean temperatures, and some have already begun thinning in response to increased basal melt rates. Sea level is therefore expected to rise due to Antarctic contributions, but uncertainties in its amount and timing remain largely unquantified. In particular, there is substantial uncertainty in future basal melt rates arising from multi-model differences in thermal forcing and how melt rates depend on that thermal forcing. To facilitate uncertainty quantification in sea level rise projections, we build, validate, and demonstrate projections from a computationally efficient statistical emulator of a high-resolution (4 km) Antarctic ice sheet model, the Community Ice Sheet Model version 2.1. The emulator is trained to a large (500-member) ensemble of 200-year-long 4 km resolution transient ice sheet simulations, whereby regional basal melt rates are perturbed by idealized (yet physically informed) trajectories. The main advantage of our emulation approach is that by sampling a wide range of possible basal melt trajectories, the emulator can be used to (1) produce probabilistic sea level rise projections over much larger Monte Carlo ensembles than are possible by direct numerical simulation alone, thereby providing better statistical characterization of uncertainties, and (2) predict the simulated ice sheet response under differing assumptions about basal melt characteristics as new oceanographic studies are published, without having to run additional numerical ice sheet simulations. As a proof of concept, we propagate uncertainties about future basal melt rate trajectories, derived from regional ocean models, to generate probabilistic sea level rise estimates for 100 and 200 years into the future.

97 MATHEMATICS AND COMPUTING↗

Design Guidelines for Deployable Wind Turbines for Defense and Disaster Response Missions

Access to on-site electrical energy is critical to ensuring a successful military or humanitarian response to conflicts and disasters. These missions typically rely on access to liquid fuel that could be vulnerable to disruption or attack during transport. Generating power on location with wind technology can reduce this risk and enhance mission reach by diversifying energy sources. Common characteristics of these missions are short planning and execution time horizons and a global scope of potential locations. Compared to conventional wind turbine applications, defense and disaster response applications place a premium on rapid shipping and installation, short-duration operation (days to months), and quick teardown upon mission completion. These design drivers depart from features found in conventional distributed wind turbines, thus necessitating unique design guidance. The supporting information for this guidance comes from available relevant references, technical analyses, and input from industry and military stakeholders. This poster serves as a summary of project publications which presents the best currently available design guidance for deployable wind turbines to facilitate the effective development and acquisition of technology solutions to support mission success. This Defense and Disaster Deployable Turbine Project (D3T) is a multi-laboratory effort led by Sandia National Laboratories and funded by the U.S. Department of Energy Office of Energy Efficiency and Renewable Energy Wind Energy Technologies Office.

deployable wind↗

Review of Radio Frequency Interference and Potential Impacts on the CMB-S4 Cosmic Microwave Background Survey

CMB-S4 will map the cosmic microwave background to unprecedented precision, while simultaneously surveying the millimeter-wave time-domain sky, in order to advance our understanding of cosmology and the universe. CMB-S4 will observe from two sites, the South Pole and the Atacama Desert of Chile. A combination of small- and large-aperture telescopes with hundreds of thousands of polarization-sensitive detectors will observe in several frequency bands from 20-300 GHz, surveying more than 50% of the sky to arcminute resolution with unprecedented sensitivity. CMB-54 seeks to make a dramatic leap in sensitivity while observing across a broad range of largely unprotected spectrum which is increasingly being utilized for terrestrial and satellite transmissions. Fundamental aspects of CMB instrument technology leave them vulnerable to radio frequency interference (RFI) across a wide range of frequencies, including frequencies outside of their observing bands. Ground-based CMB instruments achieve their extraordinary sensitivities by deploying large focal planes of superconducting bolometers to extremely dry, high-altitude sites, with large fractional bandwidths, wide fields of view, and years of integration time. Suitable observing sites have historically offered significant protection from RFI, both naturally through their extremely remote locations as well as through restrictions on local emissions. Since the coupling mechanisms are complex, "safe" levels or frequencies of emission that would not interfere with CMB measurements cannot always be determined through straightforward calculations. We discuss models of interference for various types of RFI relevant to CMB-54, mitigation strategies, and the potential impacts on survey sensitivity.

Cosmic Microwave Background↗

FIND: A Synthetic weather generator to control drought Frequency, Intensity, and Duration

Water systems worldwide are experiencing climate change-induced shifts in drought properties like frequency, intensity, and duration, affecting water security and reliability. To develop and test effective drought preparedness plans, researchers often use synthetic weather generators to create hydrological scenarios that explore drought variability beyond historical records. Existing weather generators typically allow users to adjust streamflow statistics like percentiles or temporal correlation but do not directly control drought properties of frequency, intensity, and duration. To fill this gap, we propose FIND (Frequency, INtensity, and Duration) synthetic weather generator. FIND incorporates a standardized drought index to directly and in dependently control drought frequency, intensity, and duration in generated streamflow time series while preserving observed hydrological variability. Use cases for FIND include i) water systems analysis applications that seek to train and test drought strategies under historical and plausible future drought conditions, and ii) bottom-up vulnerability studies relating system vulnerability outcomes to specific changes in drought properties of frequency, intensity, and duration. Here, we demonstrate FIND’s versatility through three experiments: replicating historically observed drought properties, generating streamflow scenarios for multiple sites preserving correlation between their drought conditions, and generating a set of scenarios with direct and independent changes in drought properties. FIND source code is openly available for applications beyond the scope of this paper.

42 ENGINEERING↗

Emulation automation and model checking

A method of automating emulations is provided. The method comprising collecting publicly available network data over a predefined time interval, wherein the collected network data might comprise structured and unstructured data. Any unstructured data is converted into structured data. The original and converted structured data is stored in a database and compared to known network vulnerabilities. An emulated network is created according to the collected network data and the comparison of the structured data with known vulnerabilities. Virtual machines are created to run on the emulated network. Director programs and guest actor programs are run on the virtual machines, wherein the actor programs imitate real user behavior on the emulated network. The director programs deliver task commands to the guest actor programs to imitate real user behavior. The imitated behavior is presented to a user via an interface.

Urias, Vincent↗

A Machine Learning Method for the Forensics Attribution of Separated Plutonium

Plutonium (Pu) source attribution would be a powerful tool to support nuclear nonproliferation efforts. This capability to find the source of a Pu sample would act as a deterrent to smuggling efforts, and also help regulatory agencies verify declared nuclear activities. Work at Texas A&M University yielded a nuclear forensics methodology, which is capable of determining separated Pu’s reactor of origin, fuel burnup, and the time since irradiation (TSI)—three parameters of interest. The methodology used a set of ten intra-element isotopic ratios found in separated Pu, which was compared to a library of isotopic ratio values produced using neutronics simulations for reactors of interest. By calculating the probability that unknown Pu sample’s isotopic ratio set matched a set in the library, the methodology could predict the three parameters of interest of the sample. One shortcoming of this methodology was an inability to correctly attribute spoofed Pu, where Pu sourced from two different reactors or two different fuel burnup levels are mixed. A new methodology to rectify this vulnerability using machine learning (ML) technique is developed, instead of the maximum likelihood calculation previously used and the results are satisfactory. The ML approach leverages the existing simulated data for training the algorithm, but use them efficiently by only using intra-element isotope ratios that contribute to the attribution one of the three parameters at a time. Previously, all isotope ratios were used to attribute all three parameters together. The new methodology attributes the Pu parameters in three steps, one for each parameter, rather than resolving all of the three parameters simultaneously like the previous maximum likelihood approach. First, a support vector machine classifier with a set of seven isotopic ratios finds the reactor of origin and a set of regression models trained using gaussian process predicts the burnup with a different set of seven isotopes. Finally, TSI is calculated analytically using decay equations. Thus far, the new methodology is capable of attributing pure Pu samples and has been validated using experimental data. The next step will to be augment the classifier training data set with spoofed Pu data.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Assessment of operational availability for the PIP-II Superconducting Radio Frequency linear accelerator facility

Operational availability is a critical performance measure for an accelerator facility in modern time. A high availability enables the facility to serve a wide range of users simultaneously. Consequently, besides pure accelerator physics considerations, newly proposed accelerator facilities account for the availability and reliability aspects in the design phases. It allows incorporation of appropriate mitigation strategies for the most vulnerable systems in the machine and therefore, minimizes unscheduled interruptions during the operation. This report lays out a methodology for the availability assessment of the complete particle accelerator facility and presents an initial assessment of the availability of the newly proposed Proton Improvement Plan-II (PIP-II) accelerator facility at Fermilab. The paper describes a comprehensive reliability model of the PIP-II facility that comprises not only 800 MeV linear accelerator (linac) system but also essential utility systems in the form of cryogenic, water, power and air systems. The paper details estimations of the availability of the PIP-II facility for two operational modes i.e. the nominal operational mode featuring 800 MeV beam and critical operational mode involving operation with the lowest objective beam energy of 600 MeV.

43 PARTICLE ACCELERATORS↗

Reinforcement Learning for feedback-enabled cyber resilience

The rapid growth in the number of devices and their connectivity has enlarged the attack surface and made cyber systems more vulnerable. As attackers become increasingly sophisticated and resourceful, mere reliance on traditional cyber protection, such as intrusion detection, firewalls, and encryption, is insufficient to secure the cyber systems. Cyber resilience provides a new security paradigm that complements inadequate protection with resilience mechanisms. A Cyber-Resilient Mechanism (CRM) adapts to the known or zero-day threats and uncertainties in real-time and strategically responds to them to maintain the critical functions of the cyber systems in the event of successful attacks. Feedback architectures play a pivotal role in enabling the online sensing, reasoning, and actuation process of the CRM. Reinforcement Learning (RL) is an important gathering of algorithms that epitomize the feedback architectures for cyber resilience. It allows the CRM to provide dynamic and sequential responses to attacks with limited or without prior knowledge of the environment and the attacker. In this work, we review the literature on RL for cyber resilience and discuss the cyber-resilient defenses against three major types of vulnerabilities, i.e., posture-related, information-related, and human-related vulnerabilities. Here we introduce moving target defense, defensive cyber deception, and assistive human security technologies as three application domains of CRMs to elaborate on their designs. The RL algorithms also have vulnerabilities themselves. We explain the major vulnerabilities of RL and present develop several attack models where the attacker target the information exchanged between the environment and the agent: the rewards, the state observations, and the action commands. We show that the attacker can trick the RL agent into learning a nefarious policy with minimum attacking effort. The paper introduces several defense methods to secure the RL-enabled systems from these attacks. However, there is still a lack of works that focuses on the defensive mechanisms for RL-enabled systems. Last but not least, we discuss the future challenges of RL for cyber security and resilience and emerging applications of RL-based CRMs.

97 MATHEMATICS AND COMPUTING↗

Protection and restoration of coastal habitats yield multiple benefits for urban residents as sea levels rise

Globally, rising seas threaten massive numbers of people and significant infrastructure. Adaptation strategies increasingly incorporate nature-based solutions. New science can illuminate where these solutions are appropriate in urban environments and what benefits they provide to people. Together with stakeholders in San Mateo County, California, USA, we co-developed nature-based solutions to support adaptation planning. We created six guiding principles to shape planning, summarized vulnerability to sea-level rise and opportunities for nature-based solutions, created three adaptation scenarios, and compared multiple benefits provided by each scenario. Adaptation scenarios that included investments in nature-based solutions deliver up to eight times the benefits of a traditionally engineered baseline as well as additional habitat for key species. The magnitude and distribution of benefits varied at subregional scales along the coastline. Our results demonstrate practical tools and engagement approaches to assessing the multiple benefits of nature-based solutions in an urban estuary that can be replicated in other regions.

54 ENVIRONMENTAL SCIENCES↗

Cybersecurity Assessment in DER-rich Distribution Operations: Criticality Levels and Impact Analysis

The integration of distributed energy resources (DERs) in distribution networks has become a pivotal strategy for achieving decarbonization, enhancing grid resilience, and optimizing grid efficiency. Remote monitoring and control op- erations of such resources rely on a network of sensors and communication infrastructure, exposing the system to potential cyber threats. Therefore, as the deployment of DERs increases, ensuring secure monitoring and control becomes an imperative challenge. This paper utilizes real-time feeder models, which are instrumental in developing cybersecurity testbeds tailored for hardware-in-loop (HIL) systems. These models enable users to simulate cyber attacks in a real-world environment and analyze the power distribution operations during vulnerabilities. Furthermore, we discuss several practical sets of grid parameters to identify critical levels of DERs and evaluate various scenarios that simulate cyber threats on sensitive DERs. The modified IEEE 123-bus model is used as the test case for demonstrating the proposed scenarios. The findings from this study provide valuable insights into the vulnerabilities and potential consequences of cyber attacks on DERs, allowing for better mitigation strategies and improved cyber resilience in future distribution networks.

Maharjan, Manisha↗

Resilience of the Electric Grid Through Trustable IoT-Coordinated Assets

The electricity grid has evolved from a physical system to a cyberphysical system with digital devices that perform measurement, control, communication, computation, and actuation. The increased penetration of distributed energy resources (DERs) including renewable generation, flexible loads, and storage provides extraordinary opportunities for improvements in efficiency and sustainability. However, they can introduce new vulnerabilities in the form of cyberattacks, which can cause significant challenges in ensuring grid resilience. We propose a framework in this paper for achieving grid resilience through suitably coordinated assets including a network of Internet of Things devices. A local electricity market is proposed to identify trustable assets and carry out this coordination. Situational Awareness (SA) of locally available DERs with the ability to inject power or reduce consumption is enabled by the market, together with a monitoring procedure for their trustability and commitment. With this SA, we show that a variety of cyberattacks can be mitigated using local trustable resources without stressing the bulk grid. Multiple demonstrations are carried out using a high-fidelity cosimulation platform, real-time hardware-in-the-loop validation, and a utility-friendly simulator.

distributed energy resources↗

Stealthy Cyber Anomaly Detection On Large Noisy Multi-material 3D Printer Datasets Using Probabilistic Models

As Additive Layer Manufacturing (ALM) becomes pervasive in industry, its applications in safety critical component manufacturing are being explored and adopted. However, ALM's reliance on embedded computing renders it vulnerable to tampering through cyber-attacks. Sensor instrumentation of ALM devices allows for rigorous process and security monitoring, but also results in a massive volume of noisy data for each run. As such, in-situ, near-real-time anomaly detection is very challenging. The ideal algorithm for this context is simple, computationally efficient, minimizes false positives, and is accurate enough to resolve small deviations. In this paper, we present a probabilistic-model-based approach to address this challenge. To test our approach, we analyze current measurements from a polymer composite 3D printer during emulated tampering attacks. Our results show that our approach can consistently and efficiently locate small changes in the presence of substantial operational noise.

Yoginath, Srikanth↗

Infrastructure-Based Cooperative Perception at a Traffic Intersection: Overview and Challenges

Traffic intersections are crucial and challenging nodes in transportation networks where multiple lanes of vehicles and pedestrians converge. About one-quarter of traffic fatalities and about one-half of all traffic injuries in the United States happen at traffic intersections . Effective management of these intersections is important to ensure safety and efficiency of all users - vehicles, pedestrians, cyclists, and vulnerable road users (VRUs). With advancements in sensor perception technologies such as radar, light detection and ranging (lidar), and cameras, traffic intersections are developing into dynamic and data-rich environments. By using these data to create a real-time digital twin, we can enable real-time data-driven decision making and a range of applications such as sharing perception information to connected vehicles (CVs) and connected autonomous vehicles (CAVs), safety affirmative signaling, and curb optimizing to improve efficiency and enhance safety.This paper presents an overview of the concept and examines the challenges involved in implementing an infrastructure-based cooperative perception engine at a traffic intersection. In addition to outlining the physical components, this study also addresses important challenges involved in a multi-sensor system. We present results from deploying the National Renewable Energy Laboratory's (NREL's) Infrastructure Perception and Control (IPC) mobile trailer at a traffic intersection in the city of Colorado Springs, Colorado, USA that employed multiple radars and lidars to capture the data. This study provides necessary practical learning for the Cooperative Driving Automation (CDA) and traffic engineering communities for next-generation infrastructure-based cooperative perception that promises improvements in signal control for optimized traffic flow, among other applications, and documents findings for ongoing research and development efforts in other areas.

ADVANCED PROPULSION SYSTEMS,MATHEMATICS AND COMPUT↗

Multi-Level Impacts of Extreme Climate-Related Events on Food Supply Chain: Idaho Potato's Case Study

Background: The world is experiencing frequent extreme weather events like droughts, floods, snowstorms, and shifting of seasons due to climate change. Increasing frequencies and severity of these extreme weather events threaten food security because agriculture is extremely vulnerable to climate change. Higher temperature reduces overall yields of the desirable crops but proliferates weeds and harmful pests. Current data shows that every year U.S. farmers spend more than 11 billion USD to fight weeds and this number is expected to rise in the coming years due to climate change. Due to droughts, the water required for irrigation is becoming scarcer. Since many areas are becoming climatically unusable for crop production, the amount of farmland area is shrinking rapidly. In addition, changes in precipitation patterns are causing crop failures and negatively impacting expected yields. In this study, we investigated how different extreme climate events impact different stages of a food supply chain. Approach: As a case study, we chose Idaho’s potato supply chain (SC). Idaho is the top potato producing state in the U.S. and contributes around 30% of the nation’s potato production. Using the agent-based modeling (ABM) approach, we developed a multi-echelon potato supply chain computer simulation model with six types of agents – seed producers, farmers, shippers, processors, retailers, and logistics companies. In addition to the baseline scenario, we developed two additional climate-related disruption events – drought and snowstorm. We investigated how each of these disruption events impacts different stakeholders across the supply chain in terms of revenue and some other key performance metrics such as lead time, food waste, number of delayed orders, and order fulfillment rate. Results: Extreme climate events not only impact the growers but there is also cascading ripple effects downstream of the supply chain. The methodology developed in this study could be applied to other food and agricultural SC to understand the vulnerabilities of the different links. The findings would potentially help to adopt new policies for the well-being of the overall SC.

54 ENVIRONMENTAL SCIENCES↗

Comment on Comment on “Anomalous structural recovery in the near glass transition range in a polymer glass: Data revisited in light of temperature variability in vacuum oven‐based experiments”*

Abstract Cangialosi, Alegría, and Colmenero have made a comment on a paper of ours [Polym. Eng. Sci. 2022:1–13], in which we discussed the concern that the enthalpy recovery data reported by Cangialosi and co‐workers [Phys. Rev. Lett. 2013;111(9):095701] for polystyrene aged up to 15 K below glass transition temperature was anomalous and contradicted existing experimental results from the literature over a similar range of aging conditions. Their response shifts the focus away from the raised questions about their experimental results and attempts to invalidate the data that we cited in support of our argument. Here we respond to the comment and add additional analysis that suggests the structural recovery response of glassy materials exhibits smooth behavior over the full range of measurements, up to 7 or 8 logarithmic decades. We do this by referring to the work on the intrinsic isotherm down‐jump and memory responses of poly(vinyl acetate) between 40°C and 15°C over six logarithmic decades by Kovacs [Fortsch. Hochpolym. Fo. 1963;3(1/2):394–508], the small‐strain tensile creep of poly(vinyl chloride) quenched from 90°C to 40°C (approximately 40°C below T g ) over seven logarithmic decades from Struik [Polym Eng. Sci., 1977;17:165–173], and the volume recovery behavior for aging times up to 3 months in a temperature range between 95°C and −50°C by Greiner and Schwarzl [Rheol. Acta. 1984;23(4):378–395]. We also add discussion that an isothermal aging procedure using a vacuum oven is highly vulnerable to temperature errors due to the problem of good temperature control when the heat transfer mechanism is primarily radiative.

Jin, Shuang↗