Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “operating systems security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,693 records · Page 94

Design of Defensive Cybersecurity Architectures for Sodium-Cooled Fast Reactors

This report presents the design of defensive cybersecurity architectures (DCSAs) for Sodium-Cooled Fast Reactors (SFRs). A DCSA is a cybersecurity design feature that places systems into security zones in a graded approach according to the importance of the functions performed by the systems. DCSA design efforts for advanced reactors may commence as early as the system-level design phase. This design approach is consistent with the draft regulatory guide for advanced reactor cybersecurity programs (DG-5075) and enables advanced reactor designers to consider the effects of security-by design (SeBD) features on their DCSAs. Integration of DCSA design and other cybersecurity activities with the traditional design process as part of a SeBD framework may enable advanced reactor designers to improve the security posture of their plants while reducing implementation and operating costs. This report provides a DCSA template for an exemplar SFR and how the template may be optimized for a given SFR design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

(ODIN): An Open Source, Low-Latency Data Integration & Visualization Framework for the NASA System Wide Safety Project's Disaster Response Safety Demonstration Series

The Open Data Integration Framework (ODIN) is an open source, low latency data integration and visualization framework (https://github.com/NASARace/race-odin) developed under NASA’s System WideSafety Program to demonstrate new safety capabilities designed to improve US airspace operations. Safety demonstrations are a set of increasingly complex (from public safety perspective) disaster response scenarios under which air systems must operate with increased capacity and include: 1) Wildland fire response, 2) Hurricane relief and recovery, 4) Emergency medical delivery via UAS and 4) Urban disaster relief. To accommodate disaster response, ODIN is field deployable and can scale on one or more multi-core, commodity laptops operating with full to limited or intermittent internet connectivity, conditions likely encountered during operations. ODIN runs as webserver with local, persistent data storage to serve either public or a secured, ad hoc network (e.g., an incident command post). The current released ODIN, ODIN-Fire is tailored for wildland fire management incorporating information on satellite overpasses with links to the near real-time data and imagery from the respective agencies. Included are winds data, an important variable for emergency responders and airspace operations, and high-resolution wind forecasts generated by super-computing resources and ingested into ODIN. As an open-source project, ODIN has attracted interest from multiple entities. We will show how 1) a commercial field instrument and data provider uses ODIN to help users visualize, publish and integrate their in-situ sensor network data and 2) ODIN’s capabilities to ingest, integrate and display near-real time satellite data with air traffic and a USFS winds forecast model used in fire response and post-fire assessment. Within NASA ODIN demonstrated novel, near terminal airspace safety capabilities for a project close-out event and previously it monitored the national airspace in real-time to meet an agency milestone. ODIN is presently under development for the anticipated hurricane relief and response demonstration notionally scheduled for the 2025-27 time frame and is available from NASA's github at the above link.

Aeronautics↗

Hybrid Data-Driven Physics-Based Model Framework Implementation: Towards a Secure Cyber-Physical Operation of the Smart Grid

False data injection cyber-attack detection models on smart grid operation have been much explored recently, considering analytical physics-based and data-driven solutions. Recently, a hybrid data-driven physics-based model framework for monitoring the smart grid is developed. However, the framework has not been implemented in real-time environment yet. In this paper, the framework of the hybrid model is developed within a real-time simulation environment. OPAL-RT real-time simulator is used to enable Hardware-in-the-Loop testing of the framework. IEEE 9-bus system is considered as a testing grid for gaining insight. The process of building the framework and the challenges faced during development are presented. The performance of the framework is investigated under various false data injection attacks.

false data injection attack, machine learning, sta↗

Control System for RF OPM

SAND2025-01910O This software built in LabVIEW FPGA provides experimental control of the RF OPM prototype via a reconfigurable NI I/O card. It samples the analog input, processes it on the FPGA in real time, and generates control and feedback outputs to control and optimize the operation of the device. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Bainbridge, Jonathan↗

An Overview of NASA's Asteroid Redirect Mission (ARM) Concept

The National Aeronautics and Space Administration (NASA) is developing the Asteroid Redirect Mission (ARM) as a capability demonstration for future human exploration, including use of high-power solar electric propulsion, which allows for the efficient movement of large masses through deep space. The ARM will also demonstrate the capability to conduct proximity operations with natural space objects and crewed operations beyond the security of quick Earth return. The Asteroid Redirect Robotic Mission (ARRM), currently in formulation, will visit a large near-Earth asteroid (NEA), collect a multi-ton boulder from its surface, conduct a demonstration of a slow push planetary defense technique, and redirect the multi-ton boulder into a stable orbit around the Moon. Once returned to cislunar space in the mid-2020s, astronauts aboard an Orion spacecraft will dock with the robotic vehicle to explore the boulder and return samples to Earth. The ARM is part of NASA's plan to advance technologies, capabilities, and spaceflight experience needed for a human mission to the Martian system in the 2030s. The ARM and subsequent availability of the asteroidal material in cis-lunar space, provide significant opportunities to advance our knowledge of small bodies in the synergistic areas of science, planetary defense, and in-situ resource utilization (ISRU). NASA established the Formulation Assessment and Support Team (FAST), comprised of scientists, engineers, and technologists, which supported ARRM mission requirements formulation, answered specific questions concerning potential target asteroid physical properties, and produced a publically available report. The ARM Investigation Team is being organized to support ARM implementation and execution. NASA is also open to collaboration with its international partners and welcomes further discussions. An overview of the ARM robotic and crewed segments, including mission requirements, NEA targets, and mission operations, and a discussion of potential opportunities for participation with the ARM will be provided.

Abell, P. A.↗

Optoelectronic polymer memristors with dynamic control for power-efficient in-sensor edge computing

Abstract As the demand for edge platforms in artificial intelligence increases, including mobile devices and security applications, the surge in data influx into edge devices often triggers interference and suboptimal decision-making. There is a pressing need for solutions emphasizing low power consumption and cost-effectiveness. In-sensor computing systems employing memristors face challenges in optimizing energy efficiency and streamlining manufacturing due to the necessity for multiple physical processing components. Here, we introduce low-power organic optoelectronic memristors with synergistic optical and mV-level electrical tunable operation for a dynamic “control-on-demand” architecture. Integrating signal sensing, featuring, and processing within the same memristors enables the realization of each in-sensor analogue reservoir computing module, and minimizes circuit integration complexity. The system achieves 97.15% fingerprint recognition accuracy while maintaining a minimal reservoir size and ultra-low energy consumption. Furthermore, we leverage wafer-scale solution techniques and flexible substrates for optimal memristor fabrication. By centralizing core functionalities on the same in-sensor platform, we propose a resilient and adaptable framework for energy-efficient and economical edge computing.

Optics↗

Approximating Trajectory Constraints With Machine Learning – Microgrid Islanding With Frequency Constraints

Here, we introduce deep earning aided constraint encoding to tackle the frequency-constraint microgrid scheduling problem. The nonlinear function between system operating condition and frequency nadir is approximated by using a neural network, which admits an exact mixed-integer formulation (MIP). This formulation is then integrated with the scheduling problem to encode the frequency constraint. With the stronger representation power of the neural network, the resulting commands can ensure adequate frequency response in a realistic setting in addition to islanding success. The proposed method is validated on a modified 33-node system. Successful islanding with a secure response is simulated under the scheduled commands using a detailed three-phase model in Simulink. The advantages of our model are particularly remarkable when the inertia emulation functions from wind turbine generators are considered.

24 POWER TRANSMISSION AND DISTRIBUTION↗

INTEGRATED RISK ASSESSMENT OF DIGITAL I&C SAFETY SYSTEMS FOR NUCLEAR POWER PLANTS

Upgrading the existing analog instrumentation and control (I&C) systems to state-of-the-art digital I&C (DI&C) systems provides the foremost means to improve performance and reduce costs for existing light-water reactors (LWRs). However, qualification of digital technologies remains a challenge?especially the issue of software common cause failure (CCF), which has been difficult to address. Existing analyses of CCFs in I&C systems mainly focus on hardware failures. With the application and upgrading of new DI&C systems, software CCFs due to design flaws might become a potential threat to plant safety, considering that most redundancy designs use similar digital platforms or software in their operating and application systems. With complex multi-layer redundancy designs to meet the single failure criterion, these I&C safety systems are of particular concern in U.S. Nuclear Regulatory Commission (NRC) licensing procedures. In 2019, the Risk-Informed Systems Analysis (RISA) Pathway of the U.S. Department of Energy?s (DOE?s) Light Water Reactor Sustainability (LWRS) Program initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, secure DI&C technologies for digital upgrades/designs. An integrated risk assessment for the DI&C (RADIC) process was proposed for this strategy to identify potential key digital-induced failures, implement reliability analyses of related digital safety I&C systems, and evaluate the unanalyzed sequences introduced by these failures (particularly software CCFs) at the plant level. This paper summarizes these RISA efforts in the risk analysis of safety-related DI& systems at Idaho National Laboratory.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Quantifying the Value of Hydropower in the Electric Grid: Final Report

The report summarizes research to Quantify the Value of Hydropower in the Electric Grid. This 3-year DOE study focused on defining value of hydropower assets in a changing electric grid. Methods are described for valuation and planning of pumped storage and conventional hydropower. The project team conducted plant case studies, electric system modeling, market analysis, cost data gathering, and evaluations of operating strategies and constraints. Five other reports detailing these research results are available a project website, www.epri.com/hydrogrid. With increasing deployment of wind and solar renewable generation, many owners, operators, and developers of hydropower have recognized the opportunity to provide more flexibility and ancillary services to the electric grid. To quantify value of services, this study focused on the Western Electric Coordinating Council region. A security-constrained, unit commitment and economic dispatch model was used to quantify the role of hydropower for several future energy scenarios up to 2020. This hourly production simulation considered transmission requirements to deliver energy, including future expansion plans. Both energy and ancillary service values were considered. Addressing specifically the quantification of pumped storage value, no single value stream dominated predicted plant contributions in various energy futures. Modeling confirmed that service value depends greatly on location and on competition with other available grid support resources. In this summary, ten different value streams related to hydropower are described. These fell into three categories; operational improvements, new technologies, and electricity market opportunities. Of these ten, the study was able to quantify a monetary value in six by applying both present day and future scenarios for operating the electric grid. This study confirmed that hydropower resources across the United States contribute significantly to operation of the grid in terms of energy, capacity, and ancillary services. Many potential improvements to existing hydropower plants were found to be cost-effective. Pumped storage is the most likely form of large new hydro asset expansions in the U.S. however, justifying investments in new pumped storage plants remains very challenging with current electricity market economics. Even over a wide range of possible energy futures, up to 2020, no energy future was found to bring quantifiable revenues sufficient to cover estimated costs of plant construction. Value streams not quantified in this study may provide a different cost-benefit balance and an economic tipping point for hydro. Future studies are essential in the quest to quantify the full potential value. Additional research should consider the value of services provided by advanced storage hydropower and pumped storage at smaller time steps for integration of variable renewable resources, and should include all possible value streams such as capacity value and portfolio benefits i.e.; reducing cycling on traditional generation.

13 HYDRO ENERGY↗

Catalytic and Transport Behaviors of Model and Porous and Composite Nanostructures

As stressed in the Basic Energy Sciences Advisory Committee (BESAC) Report “New Science for a Secure and Sustainable Energy Future” (December 2008), solving our Nation’s energy challenges will entail more than incremental changes in present materials-related technologies; new, advanced routes to nanostructured materials with transformational properties will be required. Herein we describe the design and fabrication of a hybrid biotic/abiotic membrane reactor that, mimicking natural systems, employs the metalloenzyme, carbonic anhydrase, to separate CO 2 from N 2 with unprecedented purity and rate. The membrane design, synthesis, and operation are based on multiple biomimetic and nanoscale fabrication strategies, nanoscale dimensional features, and nanoscale physical phenomena, for example: 1) Bottom-up self-assembly of a membrane comprising a periodic, aligned, cylindrical nanopore array with 8 nm diameter pores designed to accommodate carbonic anhydrase (CA) enzymes 2) Top-down Atomic Layer Deposition (ALD) and plasma processing of the nanopore array to create 18nm deep (by 8nm in diameter) superhydrophilic pores bounded by hydrophobic/superhydrophobic interfaces 3) Formation of a continuous, defect free, ultra-thin (~18-nm thick) but strong water membrane by capillary condensation within the uniformly-sized, superhydrophilic nanopore array 4) Accommodation of CA within the water filled nanopore array (~2 CAs per hydrophilic pore channel) to achieve an effective CA concentration within the 18-nm thick water membrane over 10X greater than achievable in solution Exposed to a mixture of CO 2 and N 2 this biomimetic membrane rapidly and selectively dissolves CO 2 within the CA filled water nano-channels on the ‘upstream side’ and regenerates CO 2 at the superhydrophobic interface on the ‘downstream’ side. In combination, the high CA concentration and exceptionally short diffusion distances enable rapid and highly selective CO 2 separation from N 2 and H 2 . Our membrane has a combined CO 2 flux and selectivity that exceed by orders of magnitude all existing CO 2 membranes and for the first time meet the US Department of Energy guidelines for CO 2 sequestration technologies. (The performance of our membrane was recognized by an R&D100 Award and the first R&D100 Green Technology Award in 2015 and an issued US Patent in 2017). We believe this membrane could be employed in combination with sequestration to help reduce greenhouse gas emissions and provide a viable, economically feasible pathway to achieve the goals of the 2016 Paris Accord, which aims to maintain a global temperature rise this century less than 2°C above pre-industrial levels. Further this membrane concept could be adapted to other enzymes to accomplish other separations of interest, e.g. H 2 . We also have established processing-structure-property relationships of ultrathin membrane-like monolayer materials that are intrinsically catalytic. Establishing processing-structure-property relationships for monolayer materials is crucial for a vast range of applications spanning optics, catalysis, electronics, and energy. Presently, for MoS 2 , a promising catalyst for artificial photosynthesis, considerable debate surrounds the structure/property relationships of its various allotropes. Using high-resolution transmission electron microscopy supported by density functional theory, we unambiguously solved the structure of MoS 2 monolayers and showed lithium intercalation to direct a preferential transformation of the basal plane from 2H (trigonal prismatic) to 1T’ (clustered Mo). These changes alter the energetics of MoS 2 interactions with hydrogen ((GH), and, with respect to catalysis, the 1T’ transformation renders the normally inert basal plane amenable towards hydrogen adsorption and H 2 evolution achieving Hydrogen Evolution Reaction (HER) catalytic activity comparable to 2H MoS 2 edges on Au(111), one of the most active HER catalysts known.

77 NANOSCIENCE AND NANOTECHNOLOGY↗

MSGP Stormwater Pollution Prevention Plan TA-60 Roads and Grounds Facility, Sigma Mesa Staging Areas, and Asphalt Batch Plant

This Stormwater Pollution Prevention Plan (SWPPP) was developed in accordance with the provisions of the Clean Water Act (33 U.S.C. §§1251 et seq., as amended), and the United States Environmental Protection Agency (EPA) National Pollutant Discharge Elimination System (NPDES) Multi-Sector General Permit for Stormwater Discharges Associated with Industrial Activity (MSGP) (U.S. EPA, June 2015) issued by EPA, and using the industry specific permit requirements for Sector P: Land Transportation and Warehousing and Sector D: Asphalt Paving and Roofing Material and Lubricant Manufacturing as a guides. The applicable stormwater discharge permit is EPA General Permit Tracing Number NMR050013 [Triad National Security, LLC (Triad)]. This SWPPP applies to discharges of stormwater from the operational areas of the TA-60 Roads and Grounds Facility, Sigma Mesa Staging Areas, and Asphalt Batch Plant at Los Alamos National Laboratory. Los Alamos National Laboratory (also referred to as LANL or the “Laboratory”) is owned by the Department of Energy (DOE), and is operated by Triad. Throughout this document, the term “facilities” refers to the TA-60 Roads and Grounds Facility, Sigma Mesa Staging Areas, and Asphalt Batch Plant. The current MSGP expires at midnight on June 4, 2020.

54 ENVIRONMENTAL SCIENCES↗

Integrating Cyber-Informed Engineering into Enterprise Risk Management

This document supports the application of Cyber-Informed Engineering (CIE) within the context of Enterprise Risk Management (ERM) to enhance cyber-resilience. It highlights that many critical infrastructure organizations use ERM to manage business risks and emphasizes the importance of evaluating critical systems and assets. The proposed approach can be adopted independently of formal ERM processes and offers a starting point for integrating CIE alongside existing or new ERM practices. Both CIE and ERM are iterative, and their alignment fosters continuous improvement and supports the engineering and operations cultures of an organization.

42 ENGINEERING↗

Reassessment of PHDS Fulcrum40h High Purity Germanium (HPGe) Detector System Performance

This report presents a comprehensive evaluation of the updated PHDS Fulcrum40h High Purity Germanium (HPGe) detector system, benchmarking its performance, usability, and software capabilities against the current National Nuclear Security Administration (NNSA) Nuclear Emergency Support Team (NEST) HPGe Detector System Requirements Document. Systematic measurements were conducted using a single Fulcrum40h detector to assess key parameters including gamma efficiency and resolution, neutron detection efficiency, gamma pulse-pileup response, and gamma-to-neutron crosstalk. The Fulcrum40h system, acquired in August 2022, has undergone recent updates by PHDS to address deficiencies identified following the initial NEST requirements release. The results provide critical insights into the detector’s operational capabilities and compliance with NNSA NEST standards.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Human Grasp Assist Device Soft Goods

A grasp assist system includes a glove and a flexible sleeve. The glove includes a digit such as a finger or thumb, a force sensor configured to measure a grasping force applied to an object by an operator wearing the glove, and adjustable phalange rings positioned with respect to the digit. A saddle is positioned with respect to the finger. A flexible tendon is looped at one end around the saddle. A conduit contains the tendon. A conduit anchor secured within a palm of the glove receives the conduit. The sleeve has pockets containing an actuator assembly connected to another end of the tendon and a controller. The controller is in communication with the force sensor, and calculates a tensile force in response to the measured grasping force. The controller commands the tensile force from the actuator assembly to tension the tendon and thereby move the finger.

Ihrke, Chris A.↗

Investigation of INL Site Implementation of ARG-US

The Packaging Certification and Life Cycle Management department at Argonne National Laboratory (ANL) developed a suite of monitoring systems collectively referred to here as ARG-US. ARG-US is used to provide necessary data for nuclear facility and system operation and maintenance. ARG-US has been previously demonstrated in hot cells, radioactive material (RAM) storage areas, and RAM shipment trucks. It has also been installed directly on RAM storage and shipment containers. ARG-US offers some unique advantages over other commercially available systems by using wireless data connections, battery power supplies, and customizable monitoring methods. Idaho National Laboratory (INL) has been tasked with investigating applications for ARG-US at INL site facilities, which are operated by several different contractors. The initial investigation scope centered on CPP-603 Wet & Dry Fuel Storage Facility in relation to the upcoming DOE Spent (SNF) Packaging Demonstration. The investigation has been led by the Used Fuel Management Department in the Nuclear Science and Technology Directorate. This investigation is expected to recommend processes or facilities at the INL site at which to implement ARG-US systems. INL has engaged local site technical and oversite representatives, security, nuclear safeguards, and program management to identify good candidates for ARG-US test implementations. INL has identified high-level goals for any INL site implementation of ARG-US: provide unique testing environments, prompt development of new monitoring methods/techniques for the ARG-US suite, and acquire useful monitoring for the user facility. To these ends, INL suggests 3 program areas for further investigation: CPP-603 Fuel Handling Cave (FHC), legacy mixed waste storage systems at Idaho Nuclear Technology & Engineering Center (INTEC) known as the “tank farm”, and periodic and emergency environmental monitoring. This progress report relates activities undertaken in this investigation, describes the preliminary areas of interest for limited scope ARG-US testing or implementation, and relays expected actions needed to complete the task scope. This report offers an opportunity to the program sponsor, technical leads at ANL, and INL site representatives to give feedback on the initial assessment and make recommendations on the forthcoming activities.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Host Event Based Network Monitoring

The purpose of INL’s research on this project is to demonstrate the feasibility of a host event based network monitoring tool and the effects on host performance. Current host based network monitoring tools work on polling which can miss activity if it occurs between polls. Instead of polling, a tool could be developed that makes use of event APIs in the operating system to receive asynchronous notifications of network activity. Analysis and logging of these events will allow the tool to construct the complete real-time and historical network configuration of the host while the tool is running. This research focused on three major operating systems commonly used by SCADA systems: Linux, WindowsXP, and Windows7. Windows 7 offers two paths that have minimal impact on the system and should be seriously considered. First is the new Windows Event Logging API, and, second, Windows 7 offers the ALE API within WFP. Any future work should focus on these methods.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Effects of Gain Changes on RPM Performance

The mission of the U.S. Department of Energy/National Nuclear Security Administration's (DOE/NNSA's) Office of the Second Line of Defense (SLD) is to strengthen the capability of foreign governments to deter, detect, and interdict the illicit trafficking of special nuclear and other radioactive materials across international borders and through the global maritime shipping system. The goal of this mission is to reduce the probability of these materials being fashioned into a weapon of mass destruction or radiological dispersal device that could be used against the United States or its international partners. This goal is achieved primarily through the installation and operation of radiation detection equipment at border crossings, airports, seaports, and other strategic locations around the world. In order to effectively detect the movement of radioactive material, the response of these radiation detectors to various materials in various configurations must be well characterized. Oak Ridge National Laboratory (ORNL) investigated two aspects of Radiation Portal Monitor (RPM) settings, based on a preliminary investigation done by the Los Alamos National Laboratory (LANL): source-to-detector distance effect on amplifier gain and optimized discriminator settings. This report discusses this investigation. A number of conclusions can be drawn from the ORNL testing. First, for increased distance between the source and the detector, thus illuminating the entire detector rather than just the center of the detector (as is done during detector alignments), an increase in gain may provide a 5-15% increase in sensitivity (Fig. 4). However, increasing the gain without adjusting the discriminator settings is not recommended as this makes the monitor more sensitive to electronic noise and temperature-induced fluctuations. Furthermore, if the discriminators are adjusted in relation to the increase in gain, thus appropriately discriminating against electronic noise, the sensitivity gains are less than 5% (Fig. 6). ORNL does not consider this slight increase in sensitivity to be a worthwhile pursuit. Second, increasing the ULD will increase sensitivity a few percent (Fig. 7); however, it is not clear that the slight increase in sensitivity is worth the effort required to make the change (e.g., reliability, cost, etc.). Additionally, while the monitor would be more sensitive to HEU, it would also be more sensitive to NORM. Third, the sensitivity of the system remains approximately the same whether it is calibrated to a small source on contact or a large source far away (Fig. 6). This affirms that no changes to the existing calibration procedure are necessary.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Defining a Metric Space of Host Logs and Operational Use Cases

Host logs, in particular, Windows Event Logs, are a valuable source of information often collected by security operation centers (SOCs). The semi-structured nature of host logs inhibits automated analytics, and while manual analysis is common, the sheer volume makes manual inspection of all logs impossible. Although many powerful algorithms for analyzing time-series and sequential data exist, utilization of such algorithms for most cyber security applications is either infeasible or requires tailored, research-intensive preparations. In particular, basic mathematic and algorithmic developments for providing a generalized, meaningful similarity metric on system logs is needed to bridge the gap between many existing sequential data mining methods and this currently available but under-utilized data source. In this paper, we provide a rigorous definition of a metric product space on Windows Event Logs, providing an embedding that allows for the application of established machine learning and time-series analysis methods. We then demonstrate the utility and flexibility of this embedding with multiple use-cases on real data: (1) comparing known infected to new host log streams for attack detection and forensics, (2) collapsing similar streams of logs into semantically-meaningful groups (by user, by role), thereby reducing the quantity of data but not the content, (3) clustering logs as well as short sequences of logs to identify and visualize user behaviors and background processes over time. Overall, we provide a metric space framework for general host logs and log sequences that respects semantic similarity and facilitates a wide variety of data science analytics to these logs without data-specific preparations for each.

Verma, Miki↗