Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Event precursors”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Semiquantitative Estimates of Rainfall Variability During the 8.2 kyr Event in California Using Speleothem Calcium Isotope Ratios

A multiproxy record from a fast-growing stalagmite reveals variable hydroclimate on the California coast across the 8.2 kyr event and a precursor event likely caused by initial drainage of proglacial Lake Agassiz. Using speleothem δ 44 Ca, we develop the first semiquantitative estimates of paleorainfall variability for California through calibration with measurements of the modern climate and cave environment. We find that the magnitude of rainfall variability during the 8.2 kyr event approached the multiyear variability observable in the recent past (1950–2019) and the magnitude of variability during the precursor event likely exceeded this range. Additionally, we observe other instances of multidecadal variability comparable in magnitude to the precursor event during the record. Finally, our work suggests that speleothem calcium isotope ratios are a powerful semiquantitative means to reconstruct paleorainfall, although numerous factors must be assessed in each cave system before applying this approach.

58 GEOSCIENCES↗
DOE OSTI2021

Understanding Lead Times of Warm Water Volumes to ENSO Sea Surface Temperature Anomalies

The equatorial Pacific warm water volume (WWV) and western equatorial Pacific WWV (WWV w ) are two important long-lead time El Niño-Southern Oscillation (ENSO) event precursors. Here, for this work, we utilize the recharge-discharge oscillator framework to obtain the analytical solution of WWV and WWV w lead times to ENSO sea surface temperatures (SSTs). Both WWV and WWVw lead times show a strong dependence on the inherent ENSO periodicity, whereas WWV lead time is further modulated by the air-sea coupling strength and ENSO SST spatial pattern. The derived solution is able to explain observed decadal variations in lead times of WWV to SST in terms of variations in ENSO periodicity and air-sea coupling strength.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2020

Progenitor, precursor, and evolution of the dusty remnant of the stellar merger M31-LRN-2015

ABSTRACT M31-LRN-2015 is a likely stellar merger discovered in the Andromeda Galaxy in 2015. We present new optical to mid-infrared photometry and optical spectroscopy for this event. Archival data show that the source started to brighten ∼2 yr before the nova event. During this precursor phase, the source brightened by ∼3 mag. The light curve at 6 and 1.5 months before the main outburst may show periodicity, with periods of 16 ± 0.3 and 28.1 ± 1.4 d, respectively. This complex emission may be explained by runaway mass-loss from the system after the binary undergoes Roche lobe overflow, leading the system to coalesce in tens of orbital periods. While the progenitor spectral energy distribution shows no evidence of pre-existing warm dust in the system, the remnant forms an optically thick dust shell at approximately four months after the outburst peak. The optical depth of the shell increases dramatically after 1.5 yr, suggesting the existence of shocks that enhance the dust formation process. We propose that the merger remnant is likely an inflated giant obscured by a cooling shell of gas with mass ∼0.2 M⊙ ejected at the onset of the common envelope phase.

(ISM:) dust, extinction↗
DOE OSTI2024

Role of atmospheric resonance and land–atmosphere feedbacks as a precursor to the June 2021 Pacific Northwest Heat Dome event

We demonstrate an indirect, rather than direct, role of quasi-resonant amplification of planetary waves in a summer weather extreme. We find that there was an interplay between a persistent, amplified large-scale atmospheric circulation state and soil moisture feedbacks as a precursor for the June 2021 Pacific Northwest “Heat Dome” event. An extended resonant planetary wave configuration prior to the event created an antecedent soil moisture deficit that amplified lower atmospheric warming through strong nonlinear soil moisture feedbacks, favoring this unprecedented heat event.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2020

New Opportunities to Study Earthquake Precursors

The topic of earthquake prediction has a long history, littered with failed attempts. Part of the challenge is that possible precursory signals are usually reported after the event, and the systematic relationships between potential precursors and main events, should they exist, are unclear. Furthermore, several recent studies have shown the potential of new approaches to simultaneously detect earthquake foreshocks and slow-slip phenomena through ground deformation, seismic, and gravitational transients—weeks to months before large subduction zone earthquakes. The entire international community of earthquake researchers should be engaged in deploying instrumentation, sharing data in real time, and improving physical models to resolve the extent to which slow slip events and earthquake swarms enhance the likelihood (or not) for later, larger earthquakes.

58 GEOSCIENCES↗
DOE OSTI2024

A prediction model of failure threshold for shear deformation in a Zr-based bulk metallic glass

The failure of bulk metallic glasses (BMGs) during plastic deformation at room temperature is abrupt and instantaneous, while the analysis of precursor information based on avalanche events helps predict catastrophic failure. An acoustic emission (AE) signal can provide accurate precursor information for material failure, due to its sensitive and high fast calculation ability. In the current study, AE monitoring tests are carried out during uniaxial compression tests of BMGs at different strain rates. The AE experimental failure threshold, E max , is proposed on the basis of AE cumulative energy, which reflects the intensity of damage evolution at different loading conditions. Compared with the critical shear band velocity (CSBV) associated with stick-slip dynamics of serrated flow, E max is a more sensitive failure parameter since it is connected with the local microscopic changes that occur during the material response process. Here, the E max is obtained prior to reaching the CSBV since the calculation of these two avalanches analysis focuses on the different stages of shear band growth. In particular, AE events are related to the “dry” friction process in the first stage, however, the CSBV is responsible for the “viscous” glide in the second stage. Therefore, Emax is not affected by the complex interactions between the shear bands during the stick-slip process. The maximum avalanche of serrated flow, S max , is proposed as the experimental failure threshold, which depends on the applied strain rate as S max ~ $\dot{ε}$ –λ . According to the relationship of E max and S max , the theoretical failure threshold, E max , follows a criterion E max = 2545$\dot{ε}$ –λ - 4468, where λ is equivalent to 0.15 for this work. Finally, combining the different calculations and AE measurements, this model gives new insights to predict the deformation failure behavior of Zr-based BMGs.

36 MATERIALS SCIENCE↗
DOE OSTI2024

Advancing the Limits of InSAR to Detect Crustal Displacement from Low-Magnitude Earthquakes through Deep Learning

Detecting surface deformation associated with low-magnitude (M w ≤ 5) seismicity using interferometric synthetic aperture radar (InSAR) is challenging due to the subtlety of the signal and the often challenging imaging environments. However, low-magnitude earthquakes are potential precursors to larger seismic events, and thus characterizing the crustal displacement associated with them is crucial for regional seismic hazard assessment. We combine InSAR time-series techniques with a Deep Learning (DL) autoencoder denoiser to detect the magnitude and extent of crustal deformation from the M w = 3.4 Gallina, New Mexico earthquake that occurred on 30 July 2020. Although InSAR alone cannot detect event-related deformation from such a low-magnitude seismic event, application of the DL method reveals maximum displacements as small as (±2.5 mm) in the vicinity of both the fault and earthquake epicenter without prior knowledge of the fault system. This finding improves small-scale displacement discernment with InSAR by an order of magnitude relative to previous studies. We additionally estimate best-fitting fault parameters associated with the observed deformation. The application of the DL technique unlocks the potential for low-magnitude earthquake studies, providing new insights into local fault geometries and potential risks from higher-magnitude earthquakes. This technique also permits low-magnitude event monitoring in areas where seismic networks are sparse, allowing for the possibility of global fault deformation monitoring.

58 GEOSCIENCES↗
DOE OSTI2020

EFCOG Human Performance Improvement Task Group: Task 20-2, Asking Better Error Precursor Questions for Effective Job Planning, Pre-Job Briefs, and Event Investigations

The second principle of human performance states: “error-likely situations are predictable, manageable, and preventable.” An error-likely situation comes into play when task-related factors exceed the capabilities of the individual, creating a mismatch at the point when the individual is “touching” either the physical or the paper plant. The simple presence of adverse conditions cannot be error-likely unless a specific action is to occur within that set of adverse conditions.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2025

A Weakly Supervised Machine Learning Procedure for Magnet Quench Diagnostics

Voltage taps remain the standard and reliable diagnostic tool for detecting quenches in superconducting magnets. However, they identify a quench only at the time of voltage rise and do not provide information on earlier physical precursors. In this work, we investigate whether acoustic emission data can reveal precursor activity that occurs before conventional voltage detection using machine learning techniques. We introduce an event selection method and a weakly supervised machine learning procedure to learn data-driven criteria for identifying potential acoustic precursors to quenches. Two Convolutional Neural Network (CNN) architectures are trained: one on acoustic sensor events from our selection procedure and one on the Fast Fourier Transforms (FFTs) of these events. Both networks are trained iteratively using confidence-weighted loss functions to associate certain subsets of training data with a precursor label. We evaluate the performance of these models by examining the time distribution of events classified as potential precursors relative to the quench onset. Results indicate that the proposed approach can possibly distinguish acoustic emission events occurring closer to the quench from earlier acoustic activity during ramping, suggesting the potential for flagging quench precursors in acoustic data.

Khan, Maira [Fermilab] (ORCID:0009000891602387)↗
DOE OSTI2022

Micro Baselines for Operational Technology Environments

Critical infrastructure stakeholders need to baseline their networks to understand expected communications. Top-down approaches to baselining rely on observables that are generally available but lack properties upon which traditional statistical tools depend. We propose to construct micro-baselines: signatures within operational networks based on observables associated with specific events. Such observables are informed by precursor analysis reports of historical cyber attacks on operational environments developed by Cybersecurity for Operational Technology Environments (CyOTE). Baseline measurements depend upon context beyond the cyber domain. An energy plant's baseline running in the summer may statistically differ from a similar facility in a colder region. Domain knowledge must be integrated to apply general micro-baselining algorithms to a facility-specific context. Therefore, we propose to explore the feasibility of transferring micro baselining algorithms across different facilities. Facilities that implement the same processes in different geographic locations will be compared relative to observable measurements used in micro-baselining for comparable events. One evaluation approach would condition or augment dynamic observables measured within a facility network testbed with additional observables derived from geographic context or infrastructure dependencies such as those provided by the All-Hazards Analysis tool.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Forming a database to study reversed magnetic shear from the National Spherical Torus eXperiment using machine learning

Achieving a long-lived reversed magnetic shear (RMS) target plasma in the National Spherical Torus eXperiment Upgrade will require developing various sustainment scenarios. To help with the ongoing plasma control efforts, the development of a new analysis for the motional Stark effect (MSE) diagnostic using a machine learning algorithm, namely, MSE-ML, is described. MSE-ML will be used to identify patterns during RMS discharges, some of which suffer magnetohydrodynamic (MHD) events resulting in current redistribution and monotonic q-profiles. A database consisting of q and magnetic shear profiles is being constructed primarily based on the existing National Spherical Torus eXperiment data with equilibrium reconstructions constrained by the magnetic field pitch angle profile measured using the multi-channel MSE diagnostic. An unsupervised k-means clustering of the data is developed to study the RMS formation as a function of time. The initial clustering from the q-profiles shows significant differences in both amplitude and the duration of the RMS period. As a goal, the clustering results that detect and distinguish shots with substantial and sustained RMS are to be used as a preprocessing step in a supervised algorithm to identify the underlying conditions that lead to long-lasting improved confinement with RMS. Another aim of the MSE-ML study is to identify precursors of RMS-destroying MHD events in either derived data such as the q-profile or directly measured data such as the magnetic field pitch angle profile.

Uzun-Kaymak, I. U. (ORCID:0000000276251493)↗
DOE OSTI2021

Equatorial waves triggering extreme rainfall and floods in southwest Sulawesi, Indonesia

On the basis of detailed analysis of a case study and long-term climatology, it is shown that equatorial waves and their interactions serve as precursors for extreme rain and flood events in the central Maritime Continent region of southwest Sulawesi, Indonesia. Meteorological conditions on January 22, 2019, leading to heavy rainfall and devastating flooding in this area were studied. It is shown that a convectively coupled Kelvin wave (CCKW) and a convectively coupled Rossby wave (CCERW) embedded within the larger-scale envelope of the Madden-Julian Oscillation (MJO) enhanced convective phase, contributed to the onset of a mesoscale convective system which developed over the Java Sea. Low-Level convergence from the CCKW forced mesoscale convective organization and orographic ascent of moist air over the slopes of southwest Sulawesi. Climatological analysis shows that 92 % of December-January-February floods and 76% of extreme rain events in this region were immediately preceded by positive low-level westerly wind anomalies. It is estimated that both CCKWs and CCERWs propagating over Sulawesi double the chance of floods and extreme rain event development, which the probability of such hazardous events occurring during their combined activity is eight times greater than on a random day. While the MJO is a key component shaping tropical atmospheric variability, it is shown that its usefulness as a single factor for extreme weather-driven hazard prediction is limited.

Latos, Beata↗
DOE OSTI2022

Precursor Analysis Report: Remote Access Attack on Oldsmar Water Treatment Facility 2021

The Remote Access Attack on Oldsmar Water Treatment Facility 2021 Precursor Analysis Report leverages publicly available information about the Oldsmar cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. On 5 February 2021, an adversary gained unauthorized remote access to Bruce T. Haddock Water Treatment Plant in Oldsmar, Florida, which provides treated water to 15,000 customers. The adversary accessed the facility’s Supervisory Control and Data Acquisition (SCADA) workstation and human machine interface (HMI) to change the chemical concentration of sodium hydroxide, commonly referred to as lye and used to regulate acidity levels, from 100 parts per million (PPM) to 11,100 PPM. The chemical was raised to lethal levels that if ingested could lead to serious soft tissue damage, burns, or even death. The facility, however, had redundancies and alarms in place to alert personnel of dangerous chemical levels, and facility officials stated it would have taken 24 to 36 hours for the chemical changes to affect the water supply. Researchers and analysts identified six unique techniques utilized during the attack with a total of 23 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Four of the identified techniques used during the Oldsmar cyber attack were precursors to the triggering event. Analysis identified 21 observables associated with these precursor techniques, 20 of which were assessed to have an increased likelihood of being perceived in the minutes preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2022

Precursor Analysis Report: Doppelpaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019

The DoppelPaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019 Precursor Analysis Report leverages publicly available information about the PEMEX cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. The 2019 DoppelPaymer ransomware attack on PEMEX, Mexico’s nationalized petroleum corporation, highlights a unique threat that ransomware and cybercriminal extortion poses to Operational Technology (OT) environments in critical infrastructure. The incident began with an employee downloading commodity malware that allowed adversaries to gain initial access to PEMEX’s enterprise environment. After conducting privilege escalation, tool ingress, and data exfiltration, the adversaries deployed DoppelPaymer ransomware throughout the PEMEX enterprise environment, resulting in the company having to take dozens of systems offline for at least several days. Although PEMEX stated that their operations were not affected, the data exfiltrated from PEMEX was made available for download on DoppelPaymer’s leak site, as well as on other illicit criminal forums. This stolen data included not only company information, but also sensitive OT-specific configuration data. This incident showcases how cybercriminal exfiltration and posting of sensitive OT architecture documentation can pose security concerns for the targeted organization for years due to the long lifespan of OT assets and architectures. Researchers and analysts identified 18 unique techniques utilized during the attack with a total of 190 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the DoppelPaymer ransomware attack were precursors to the triggering event. Analysis identified 163 observables associated with these precursor techniques, 34 of which were assessed to have an increased likelihood of being perceived in the 60 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2023

Precursor Analysis Report: Ryuk Ransomware Attack on Universal Health Services 2020

The Ryuk Ransomware Attack on Universal Health Services (UHS) 2020 Precursor Analysis Report leverages publicly available information about the 2020 UHS cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. UHS manages over 400 hospitals and is one of the largest healthcare providers in the United States with 3.5 million patients each year. On 27 September 2020, UHS suffered a widespread ransomware attack that resulted in a denial of service to critical internet-dependent healthcare systems including workstations, phones, and data centers. Employees resorted to filing patient details with pen and paper, while other facilities had to redirect ambulances and urgent patients to other facilities for adequate care. Adversaries carried out the attack with Ryuk, a ransomware that encrypts data and generates a RyukReadMe.txt ransom note with the ransom fee to decrypt the data, varying from 15 Bitcoin (BTC) to 50 BTC, equivalent to roughly $\$$353,892 to $\$$964,617. UHS did not pay the ransom and was able to recover data through backups, but still reported an impact of $\$$67 million dollars in recovery costs. On 29 October, one month after the attack, UHS made an official statement that their systems had been restored and they were resuming normal operations. Researchers and analysts identified 18 unique techniques (used in a sequence of 19 steps) utilized during the attack with a total of 185 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fourteen of the identified techniques used during the UHS cyber attack were precursors to the triggering event. Analysis identified 106 observables associated with these precursor techniques, 82 of which were assessed to have an increased likelihood of being perceived in the 30 days to two hours preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2022

Precursor Analysis Report: Cyber Attack on Thyssenkrupp Blast Furnace 2014

The Cyber Attack on Thyssenkrupp Blast Furnace 2014 Precursor Analysis Report leverages publicly available information about the Thyssenkrupp Steel Mill cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. In December 2014, the German Government’s Federal Office for Information Security (BSI) released a report detailing a cyber attack on a German steel mill that occurred earlier that year, though exact dates and details of the attack were not revealed. While the report did not specify the name of the company, multiple sources identified the victim as one of Europe’s largest steel manufacturers, Thyssenkrupp AG. Further, Thyssenkrupp announced on 16 May of that year that Europe’s largest blast furnace, “Schwelgern 2,” located at its facility in Duisburg, Germany, would be offline for several weeks for repairs and upgrades, suggesting Schwelgern 2 was likely the target of the attack. The attack began in early 2014, when adversaries infiltrated the victim steel mill’s Information Technology (IT) network via a spearphishing campaign, then worked their way into the Operational Technology (OT) environment, where they executed software that caused denial of service, denial of control, and eventually a loss of control. This led to the blast furnace shutting down without proper safety procedures, resulting in catastrophic physical damage. No lives were lost in the incident, but ThyssenKrupp suffered $4 million in damage to the blast furnace and an additional $6 million in lost revenue. The adversaries required specialized knowledge and expertise in steel production, which enabled them to compromise a variety of internal systems and components across both IT and OT networks. The attack also demonstrated detailed knowledge of the industrial control systems (ICS) and production processes being used. This combination resulted in one of the earliest known publicly reported cybersecurity incidents resulting in physical damage to ICS equipment. Researchers and analysts identified 19 unique techniques (used in a sequence of 20 steps) utilized during the attack with a total of 454 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the Thyssenkrupp cyber attack were precursors to the triggering event. Analysis identified 369 observables associated with these precursor techniques, 316 of which were assessed to have an increased likelihood of being perceived in the 120 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗