Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “defense strategy”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Load altering attack-tolerant defense strategy for load frequency control system

Cyber attacks are emerging threats to every information-oriented energy management system. By violating the cyber systems, the hacker can disrupt the security and stability due to the strong coupling between the cyber and physical facilities. In this paper, one type of cyber attacks designated as the load altering attack is studied for the power system frequency control, and corresponding defense strategies are proposed to improve the frequency control performance. Considering the difficulty of the application of model-based controller into large-scale power systems, a novel model-free defense framework is for the first time presented. Under this framework, both active defense and passive defense strategies are designed. The former assumes that the defender has the initiative to learn different attack scenarios. Adaptive defense strategies are implemented using the online attack identification information and off-line trained strategy pool. The latter assumes that the defender passively tolerates various attack scenarios via the pre-trained off-line strategy. Both approaches prove to be effective through validation based on the IEEE benchmark systems. The proposed defense framework and defense strategies can be extended to other energy control systems to enhance their attack tolerance capability.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

The 2021 Defense Strategy Review and Modern Strategic Conflict (Workshop Summary)

On December 15-17, 2020, the Center for Global Security Research (CGSR) at Lawrence Livermore National Laboratory (LLNL) hosted a workshop titled “The 2021 Defense Strategy Review and Modern Strategic Conflict.” This session was the 7 th Annual Deterrence Workshop that CGSR organized, bringing together participants drawn across the policy, military, and technical communities of the United States and its allies. The workshop examined the challenges of regional wars and multi-domain competition and how a potential 2021 defense strategy review should address them. A special attention was paid to the question of escalation and how it can be controlled at various levels of conflict.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2023

The Cost and Benefit of Enhancing Cybersecurity for Hybrid AC/DC Grids

As critical interfaces of AC grids and DC grids inside a hybrid AC/DC grid, the voltage-sourced-converter (VSC) has been demonstrated to be vulnerable to false data injection (FDI) cyber-attacks. As a result, the cyber-attack-induced AC grid frequency deviations and DC grid voltage deviations threaten the secure operation. Here, to enhance cybersecurity in a not only feasible but also cost-effective manner, this paper proposes a cost-benefit-based cyber-defense strategy for a hybrid AC/DC grid. First, this paper establishes a spatial-temporal dual cyber-attack evaluation model, in which the cyber-attack-induced frequency and voltage deviations are modelled in both a spatially and temporally dual manner. Then, the proposed cost-benefit-based cyber-defense strategy is modelled as a VSC commitment problem to achieve the trade-off between maximizing the cyber-defense benefits and minimizing the cyber-defense costs. The VSC commitment problem is then mathematically convexified into a mixed-integer second-order cone programming (MISOCP) problem, which could be efficiently solved in an event-triggered manner against unfolding cyber-attack events. Simulation results on a test hybrid AC/DC grid verified the feasibility and the cost-effectiveness of the proposed cyber-defense strategy.

cost-benefit analysis↗
DOE OSTI2023

Challenges in cybersecurity: Lessons from biological defense systems

Defending against novel, repeated, or unpredictable attacks, while avoiding attacks on the ‘self’, are the central problems of both mammalian immune systems and computer systems. Both systems have been studied in great detail, but with little exchange of information across the different disciplines. Here, we present a conceptual framework for structured comparisons across the fields of biological immunity and cybersecurity, by framing the context of defense, considering different (combinations of) defensive strategies, and evaluating defensive performance. Throughout this paper, we pose open questions for further exploration. In this work we hope to spark the interdisciplinary discovery of general principles of optimal defense, which can be understood and applied in biological immunity, cybersecurity, and other defensive realms.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2024

Rapid Monitoring and Defense Approach for Resilience Improvement of Grid Cyber Security

Cyber-physical systems and electric utilities significantly depend on the reliability and efficiency of information and operational technology. However, false data injection attacks based on synchrophasor measurement data pose a serious threat to the safe and reliable operation of modern power systems. Here, to mitigate this problem, a rapid monitoring and defense approach is proposed to defend against cyber attacks. Initially, the Time and Frequency based Convolutional neural Network (TFCN) is proposed to detect different types of attacks. Within the TFCN, the advances are that both time and frequency domain information can be fused without extra spectrum analysis methods, and can save detection time to speed the calculation efficiency using the developed time-frequency block. Next, a comprehensive defense strategy is developed for multiple cyber attacks to ensure the stability and resilience of the power system according to the feedback detection results. The advances of this strategy are that different control strategies can be automatically selected to recover the stability to the greatest extent according to the detected attacks. To verify the effectiveness of the proposed approach, the high-speed frequency measurements collected from the wide-area monitoring system are used. The results demonstrate that the cyber attack detection performance can reach 95.57% accuracy, outperforming both traditional and some advanced neural networks. Importantly, the defense strategy is conducted and verified in a modified IEEE 39 bus system as well, which illustrates profound performance in faster stability restoration.

Comprehensive defense strategy↗
DOE OSTI2023

Plant physical defenses contribute to a latitudinal gradient in resistance to insect herbivory within a widespread perennial grass

Premise: Herbivore pressure can vary across the range of a species, resulting in different defensive strategies. If herbivory is greater at lower latitudes, plants may be better defended there, potentially driving a latitudinal gradient in defense. However, relationships that manifest across the entire range of a species may be confounded by differences within genetic subpopulations, which may obscure the drivers of these latitudinal gradients. Methods: We grew plants of the widespread perennial grass Panicum virgatum in a common garden that included genotypes from three genetic subpopulations spanning an 18.5° latitudinal gradient. We then assessed defensive strategies of these plants by measuring two physical resistance traits—leaf mass per area (LMA) and leaf ash, a proxy for silica—and multiple measures of herbivory by caterpillars of the generalist herbivore fall armyworm (Spodoptera frugiperda). Results: Across all genetic subpopulations, low-latitude plants experienced less herbivory than high-latitude plants. Within genetic subpopulations, however, this relationship was inconsistent—the most widely distributed and phenotypically variable subpopulation (Atlantic) exhibited more consistent latitudinal trends than either of the other two subpopulations. The two physical resistance traits, LMA and leaf ash, were both highly heritable and positively associated with resistance to different measures of herbivory across all subpopulations, indicating their importance in defense against herbivores. Again, however, these relationships were inconsistent within subpopulations. Conclusions: Defensive gradients that occur across the entire species range may not arise within localized subpopulations. Thus, identifying the drivers of latitudinal gradients in herbivory defense may depend on adequately sampling the diversity within a species.

09 BIOMASS FUELS↗
DOE OSTI2022

Cybersecurity Enhancement for Multi-Infeed High-Voltage DC Systems

Composed of multiple two-terminal high-voltage DC (HVDC) transmission systems, a multi-infeed HVDC (MIDC) system exchanges massive power among multiple asynchronous AC systems. However, as an intrinsically cyber-physical system, an MIDC system could suffer from cyber-attacks, leading to massive power mismatches in multiple AC systems, and resulting in catastrophic consequences. Since the sequential responses of an MIDC system and interconnected AC systems are in different timescales, this paper first establishes a two-timescale model to evaluate the sequential impacts caused by cyber-attacks. Then, an event-triggered cyber-defense strategy is proposed to enhance the cybersecurity of an MIDC system by mitigating multiple non-simultaneous cyber-attacks. Whenever new cyber-attack events occur, the proposed cyber-defense strategy, which is mathematically modeled as a mixed-integer quadratic programming problem, is executed on-line and updated in an event-triggered manner. Here, simulation results on an MIDC system demonstrate that the low-cost and almost blind cyber-attacks can cause severe frequency deviations, and the proposed strategy can mitigate multi-cyber-attacks effectively.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Machine Learning Based Resilience Testing of an Address Randomization Cyber Defense

Moving target defenses (MTDs) are widely used as an active defense strategy for thwarting cyberattacks on cyber-physical systems by increasing diversity of software and network paths. Recently, machine Learning (ML) and deep Learning (DL) models have been demonstrated to defeat some of the cyber defenses by learning attack detection patterns and defense strategies. It raises concerns about the susceptibility of MTD to ML and DL methods. Here, in this article, we analyze the effectiveness of ML and DL models when it comes to deciphering MTD methods and ultimately evade MTD-based protections in real-time systems. Specifically, we consider a MTD algorithm that periodically randomizes address assignments within the MIL-STD-1553 protocol—a military standard serial data bus. Two ML and DL-based tasks are performed on MIL-STD-1553 protocol to measure the effectiveness of the learning models in deciphering the MTD algorithm: 1) determining whether there is an address assignments change i.e., whether the given system employs a MTD protocol and if it does 2) predicting the future address assignments. The supervised learning models (random forest and k-nearest neighbors) effectively detected the address assignment changes and classified whether the given system is equipped with a specified MTD protocol. On the other hand, the unsupervised learning model (K-means) was significantly less effective. The DL model (long short-term memory) was able to predict the future addresses with varied effectiveness based on MTD algorithm's settings.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2023

Automated Adversary-in-the-Loop Cyber-Physical Defense Planning

Security of cyber-physical systems (CPS) continues to pose new challenges due to the tight integration and operational complexity of the cyber and physical components. To address these challenges, this article presents a domain-aware, optimization-based approach to determine an effective defense strategy for CPS in an automated fashion—by emulating a strategic adversary in the loop that exploits system vulnerabilities, interconnection of the CPS, and the dynamics of the physical components. Our approach builds on an adversarial decision-making model based on a Markov Decision Process (MDP) that determines the optimal cyber (discrete) and physical (continuous) attack actions over a CPS attack graph. The defense planning problem is modeled as a non-zero-sum game between the adversary and defender. We use a model-free reinforcement learning method to solve the adversary’s problem as a function of the defense strategy. We then employ Bayesian optimization (BO) to find an approximate best-response for the defender to harden the network against the resulting adversary policy. This process is iterated multiple times to improve the strategy for both players. We demonstrate the effectiveness of our approach on a ransomware-inspired graph with a smart building system as the physical process. Numerical studies show that our method converges to a Nash equilibrium for various defender-specific costs of network hardening.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Retrieval Augmented Generation for Robust Cyber Defense

In cybersecurity, the ability to efficiently analyze and respond to vulnerabilities, weaknesses, attack patterns, and threat tactics is critical for effective defense strategies. With the increasing complexity and volume of cybersecurity data, traditional methods of querying and retrieving information are often inadequate. To address this challenge, we implemented Retrieval-Augmented Generation (RAG) systems—CyRAG and GraphCyRAG—that integrate large language models (LLMs) with both structured data from relational databases and knowledge graphs such as Neo4j. CyRAG is designed to handle structured data, focusing on CVE (Common Vulnerabilities and Exposures) and CWE (Common Weakness Enumeration) entities to generate accurate and context-rich responses. In contrast, GraphCyRAG leverages Neo4j knowledge graphs to retrieve interconnected information from CVE, CWE, CAPEC (Common Attack Pattern Enumeration and Classification), and ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) datasets. By utilizing Neo4j’s graph-based framework, GraphCyRAG enables deeper traversal of relationships between vulnerabilities and attack patterns, providing cybersecurity analysts with more comprehensive insights into potential attack vectors and mitigation strategies. Our preliminary results demonstrate that integrating knowledge graphs with RAG significantly enhances both the accuracy and depth of threat analysis, allowing for the retrieval of dynamic, real-time data and the generation of contextually aware responses. This approach helps analysts uncover hidden relationships between cyber entities, predict exploit paths, and prioritize mitigation efforts effectively. The integration of RAG with cybersecurity knowledge graphs represents a significant advancement in cybersecurity threat intelligence, enabling more informed decision-making and stronger defense strategies.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Relative reproductive phenology and synchrony affect neonate survival in a nonprecocial ungulate

Abstract Degree of reproductive synchronization in prey is hypothesized as a predator defense strategy reducing prey risk via predator satiation or predator avoidance. Species with precocial young, especially those exposed to specialist predators, should be highly synchronous to satiate predators (predator satiation hypothesis), while prey with nonprecocial (i.e. altricial) young, especially those exposed to generalist predators, should become relatively asynchronous to avoid predator detection (predator avoidance hypothesis). The white‐tailed deer Odocoileus virginianus in North America is an example of a nonprecocial ungulate that uses the hider strategy early in life; its primary predator (coyote; Canis latrans ) is a generalist, making white‐tailed deer a good model species to test the predator avoidance hypothesis. We used birth dates and known fates of white‐tailed deer neonates ( n = 1,032) across nine study sites varying in relative synchrony and predator assemblages to test the predator avoidance hypothesis. We predicted that relative birthing asynchrony of the population would increase relative survival at the population level; therefore, at the individual scale, neonate birth date nearer to mean birthing date in a respective population would not influence individual survival. Coyotes were responsible for the majority of predation events, and survival of those neonates increased the closer the individual was born to peak birthing season in each respective population. Also, at the population level, reproductive asynchronization negatively affected survival. Contrary to the predator avoidance hypothesis, our data indicate patterns in neonate survival for white‐tailed deer better support the predator satiation hypothesis at the individual and population level. Additionally, coyotes may present a selective force great enough to shift reproductive synchrony such that predator satiation may become a feasible defense strategy for neonates at local spatial scales. Our results indicate that synchronizing reproduction may still be the most effective strategy to reduce individual predation risk from generalist predators, particularly when the window of heightened resource availability to the prey is narrow. A free Plain Language Summary can be found within the Supporting Information of this article.

Michel, Eric S.↗
DOE OSTI2021

Pith–specific lignification in Nicotiana attenuata as a defense against a stem–boring herbivore

Plants have developed tissue-specific defense strategies in response to various herbivores with different feeding habits. Although defense responses to leaf-chewing insects have been well studied, little is known about stem-specific responses, particularly in the pith, to stem-boring herbivores. To understand the stem-specific defense, we first conducted a comparative transcriptomic analysis of the wild tobacco Nicotiana attenuata before and after attack by the leaf-chewing herbivore Manduca sexta and the stem borer Trichobaris mucorea. When the stem-boring herbivore attacked, lignin-associated genes were upregulated specifically in the inner parenchymal cells of the stem, the pith; lignin also accumulated highly in the attacked pith. Silencing the lignin biosynthetic gene cinnamyl alcohol dehydrogenase enhanced the performance of the stem-boring herbivore but had no effect on the growth of the leaf-chewing herbivore. Two-dimensional nuclear magnetic resonance results revealed that lignified pith contains feruloyltyramine as an unusual lignin component in the cell wall, as a response against stem-boring herbivore attack. Pith-specific lignification induced by the stem-boring herbivore was modulated by both jasmonate and ethylene signaling. Furthermore, these results suggest that lignin provides a stem-specific inducible barrier, protecting plants against stem-boring insects.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2026

The Complexation Properties of Self-Defensive Microgel-Modified Antimicrobial Surfaces

The complexation of cationic antimicrobials with polyanionic microgels on a biomaterial surface can render that surface self-defensive against bacteria by killing those bacteria which physically contact the antimicrobial-loaded microgels. This killing has been attributed to the contact-driven transfer of antimicrobial from a microgel to a challenging bacterium, though much remains unknown about this process. Here, in this study, we use a combination of experiments and computational modeling to identify key aspects of the complexation phenomena which influence the self-defensive properties. We synthesize poly(acrylic acid) (PAA) microgels (∼2–5 μm diameter) via membrane emulsification and electrostatically deposit them onto polycaprolactone (PCL) coupons or onto glass to form a discontinuous submonolayer. Subsequent microgel loading with colistin or with Sub5 antimicrobial peptide (AMP) causes microgel deswelling. Under physiological conditions Sub5 remains stably sequestered whereas colistin is quickly released. Coarse-grained molecular dynamics (CGMD) simulations confirm stronger Sub5/PAA complexation. CGMD calculations also indicate that Sub5 forms dimers and higher-order structures, a prediction confirmed experimentally by Small-Angle X-ray Scattering (SAXS). Supramolecular structure entropically enhances the complexation strength because of enhanced counterion release per complexation event, and this finding can help identify other antimicrobials well suited for such a nonelutive yet self-defensive strategy. CGMD simulations also show that Sub5 has a higher complexation strength with the Staphylococcus aureus membrane than it does with PAA, confirming that there is a thermodynamic driving force for antimicrobial transfer. Such self-defensive surfaces significantly reduce S. aureus colonization (over 90% reduction relative to unmodified controls) in an in vitro hematogenous contamination model and remain cyto-compatible as evidenced by mesenchymal stem cell spreading and proliferation.

36 MATERIALS SCIENCE↗