Search NASA⌕ Search

SEARCH · Search NASA

Results for “IPS”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Topological Charge Pumping in Excitonic Insulators

Here, we show that in excitonic insulators with s-wave electron-hole pairing, an applied electric field (either pulsed or static) can induce a p-wave component to the order parameter, and further drive it to rotate in the s + ip plane, realizing a Thouless charge pump. In one dimension, each cycle of rotation pumps exactly two electrons across the sample. Higher dimensional systems can be viewed as a stack of one-dimensional chains in momentum space in which each chain crossing the Fermi surface contributes a channel of charge pumping. Physics beyond the adiabatic limit, including in particular dissipative effects is discussed.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2023

Contact-Less Integrity Verification of Microelectronics Using Near-Field EM Analysis

Modern microelectronics life-cycle and supply chain ecosystem bring multiple untrusted entities, which can compromise their integrity. A major integrity issue of microelectronics stems from piracy of intellectual properties (IP) and counterfeiting, which causes significant revenue loss to the semiconductor manufacturers. Further, these components often lead to compromised functionality, reliability, security, and safety of an electronic system. This paper presents secure information transmission and probing methods for verifying the integrity of digital integrated circuit (ICs) based on their electromagnetic (EM) near-field emissions and thereby protecting systems against counterfeit components. The proposed method has been tested on both high-level instructions executed by microprocessors or Systems-on-Chip (serving as examples of software), and also logic circuits within FPGA fabrics and ASICs (serving as examples of hardware). The authentication information required by each digital system is generated using a pseudo-random number generator circuit and securely transmitted via near-field magnetic emissions. The authorized party can probe these emissions using a near-field probe, process the acquired signals to improve the signal-to-noise ratio (SNR), and then recover the secure information through matched filtering. Experimental results from commercial SoCs are used to demonstrate the proposed technique. Methods for reducing EM interference during integrity verification of both FPGAs and ASICs are also described.

47 OTHER INSTRUMENTATION↗
DOE OSTI2020

Containers for Massive Ensemble of I/O Bound Hierarchical Coupled Simulations

We present our experience using containers to scale up a massive ensemble of coupled I/O bound workloads on the NERSC Cori supercomputer. We describe the design of a hierarchical simulation structure using the Integrated Plasma Simulator (IPS) that enables the flexible execution of coupled simulations at the system, node, and core level using the same coupling abstraction and API. The hierarchical design allows for the node-level execution to be efficiently executed using containers while not impacting the structure of the simulation at the system level. We demonstrate the viability of the approach by presenting experimental results from applications in coupled fusion plasma simulations that illustrate the performance impact of using containers to deploy the node-level workloads, in conjunction with the user mountable XFS file systems to ameliorate the load on the Lustre parallel file system. We also present results from production runs showing the ability of the ensemble simulations to scale to hundreds of Cori Haswell nodes, with little or no overhead.

Elwasif, Wael↗
DOE OSTI2020

Invited: Software defined accelerators from learning tools environment

Next generation systems, such as edge devices, will need to provide efficient processing of machine learning (ML) algorithms along several metrics, including energy, performance, area, and latency. However, the quickly evolving field of ML makes it extremely difficult to generate accelerators able to support a wide variety of algorithms. At the same time, designing accelerators in hardware description languages (HDLs) by hand is hard and time consuming, and does not allow quick exploration of the design space. In this paper we present the Software Defined Accelerators From Learning Tools Environment (SODALITE), an automated open source high-level ML framework-to-verilog compiler targeting ML Application-Specific Integrated Circuits (ASICs) chiplets. The SODALITE approach will implement optimal designs by seamlessly combining custom components generated through high-level synthesis (HLS) with templated and fully tunable Intellectural Properties (IPs) and macros, integrated in an extendable resource library. Through a closed loop design space exploration engine, developers will be able to quickly explore their hardware designs along different dimensions.

High-Level Synthesis, Accelerators, Hardware-Softw↗
DOE OSTI2025

Real-World Cyber Security Demonstration for Networked Electric Drives

In this article, we present the design and implementation of a cyber-physical security testbed for networked electric drive systems, aimed at conducting real-world security demonstrations. To our knowledge, this is one of the first security testbeds for networked electric drives, seamlessly integrating the domains of power electronics and computer science, and cybersecurity. By doing so, the testbed offers a comprehensive platform to explore and understand the intricate and often complex interactions between cyber and physical systems. The core of our testbed consists of four electric machine drives, meticulously configured to emulate small-scale but realistic information technology (IT) and operational technology (OT) networks. This setup both provides a controlled environment for simulating a wide array of cyber-attacks, and mirrors potential real-world attack scenarios with a high degree of fidelity. The testbed serves as an invaluable resource for the study of cyber-physical security, offering a practical and dynamic platform for testing and validating cybersecurity measures in the context of networked electric drive systems. As a concrete example of the testbed's capabilities, we have developed and implemented a Python-based script designed to execute step-stone attacks over a wireless local area network (WLAN). This script leverages a sequence of target IP addresses, simulating a real-world attack vector that could be exploited by adversaries. To counteract such threats, we demonstrate the efficacy of our developed cyber-attack detection algorithms, which are integral to our testbed's security framework. Furthermore, the testbed incorporates a real-time visualization system using InfluxDB and Grafana, providing a dynamic and interactive representation of networked electric drives and their associated security monitoring mechanisms. This visualization component not only enhances the testbed's usability but also offers insightful, real-time data for researchers and practitioners, thereby facilitating a deeper understanding of cyber-physical security dynamics in networked electric drive systems.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

Network Anomaly Detection Using Federated Learning

The internet is turning out to be an integral part of every-one's lives as more and more devices are being connected to serve societal needs. Our work is motivated by two ma-jor observations. Firstly, one drawback of connecting to the network is the threat of network attacks that can compromise users' private information, leading to data loss and adversely affecting productivity. There are several traditional security mechanisms to defend against these attacks, such as firewalls, virtual private networks (VPNs), demilitarized zones (DMZs), and vulnerability scanners. One way to prevent these attacks is early detection and prevention. However, these kinds of architecture do not scale very well because of their centralized nature. Secondly, we observe from heuristics and data set distributions that the majority of the requests made to a server are innocuous. Therefore, almost all server request data sets are highly imbalanced, weighted highly towards the harmless requests.

Marfo, William↗
DOE OSTI2024

Improving transition to IPv6-only via RFC8925 and IPv4 DNS Interventions

Nine years have passed since the American Registry for Internet Numbers exhausted its allocation of Internet Protocol version 4 (IPv4) addresses, and four years have passed since the United States Government mandated federal agencies to complete the transition to Internet Protocol version 6 (IPv6). Despite the IPv4 address shortage and IPv6 mandate, Federally Funded Research and Development Centers (FFRDCs) are still struggling to sunset IPv4. As demonstrated on SC23’s SC23v6 wireless network, newer tooling such as RFC8925 allows clients to disable their IPv4 protocol stack while retaining legacy IP connectivity via the RFC6145 translation algorithm. However, SC23v6 wireless clients without RFC8925 support or a disabled IPv6 stack would continue to receive internet access via legacy IPv4. This paper introduces a method of using poisoned IPv4 Domain Name System (DNS) records to gracefully inform IPv4-only clients at SC24’s SC24v6 wireless network about their inability to use the current version of internet protocol, with a goal of minimal impact to RFC8925 and dual-stack clients. When implemented as designed, this method may improve supportability and user experience of IPv6-only deployments at FFRDCs.

Costello, Thomas M↗
DOE OSTI2024

The Design of B1APF Dipole for the EIC

Brookhaven National Laboratory has been chosen to host the Electron-Ion Collider (EIC). Part of this is to install an additional electron ring to the existing RHIC tunnel. The electron hadron Interaction Region (IR) will host nine superconducting magnets on the forward side and six superconducting magnets on the rear side of the Interaction Point (IP). B1APF dipole is the last magnet of the near IR in the outgoing hadron direction. Further, the magnet has a physical aperture of 370 mm diameter and is 1.5 m long. This large aspect ratio makes this magnet particularly challenging. It is a collared magnet and uses a NbTi Rutherford cable with 15.1 mm X 1.9 mm. It is expected to operate at a maximum current of 13400 A at 2 K. The required integrated dipole field is 4.05 Tm. This paper discusses the current design status of the B1ApF dipole and presents the electromagnetic analysis and thermal quench propagation analysis.

43 PARTICLE ACCELERATORS↗
DOE OSTI2025

Structural Analysis of Multilayer Tapered Canted-Cosine-Theta Superconducting Magnet for the Interaction Region of Electron Ion Collider

The electron ion collider (EIC) will collide high energy and highly polarized hadron and electron beams with luminosities up to 10 34 cm -2 s -1 . The magnet designs at the interaction region (IR) are challenging due to the close proximity of the hadron and electron beams. A canted cosine theta (CCT) quadrupole magnet was designed due to the space restrictions at the IR. The CCT magnet has a tapered aperture, which allows higher gradients at the interaction point (IP) side of the magnet. The tapered geometry makes the magnet not symmetrical along the axial direction. In conclusion, to validate the design in terms of the mechanical strength and the allowed deformations, a detailed structural mechanical analysis for the tapered CCT quadrupole magnet has been carried out using the finite element method (FEM) considering both the shrinking due to cool down and the electromagnetic force on the conductors.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2024

A Privacy-Preserving Cyber Threat Intelligence Sharing System

Cyber Threat Intelligence (CTI) is a key resource for developing defensive strategies against potential cyber adversaries. Entities typically access CTI through open-source platforms, national agencies, or specialized commercial services. However, the bi-directional exchange of CTI is hindered by organizational trust boundaries, which complicate the sharing processes between entities and CTI providers. Centralized CTI services benefit from receiving suspicious cyber observables such as IP addresses, domain names, and email addresses from various entities. The aggregation allows for the correlation of widespread adversarial activities to enhance the alert and response mechanisms across the network of involved parties. Despite these benefits, openly sharing such observables incurs potential legal, regulatory, and reputational risks for the disclosing entities.This paper introduces a system designed to facilitate the secure exchange of cyber observables across trust boundaries without compromising the anonymity of the sharing entities. Here, we propose an architecture that leverages common web protocols alongside zero-knowledge proofs to authenticate members while maintaining anonymity. Additionally, we outline a privacy model tailored for STIX (Structured Threat Information eXpression) cyber observables to minimize the risk of inadvertently disclosing private information. Through our threat models, we assess the privacy implications of our proposed system and demonstrate its potential to enhance collaborative cyber defense efforts without exposing entities to undue risk.

BBS+ Signatures↗
DOE OSTI2021

Directional Laplacian Centrality for Cyber Situational Awareness

Cyber operations is drowning in diverse, high-volume, multi-source data. To get a full picture of current operations and identify malicious events and actors, analysts must see through data generated by a mix of human activity and benign automated processes. Although many monitoring and alert systems exist, they typically use signature-based detection methods. We introduce a general method rooted in spectral graph theory to discover patterns and anomalies without a priori knowledge of signatures. We derive and propose a new graph-theoretic centrality measure based on the derivative of the graph Laplacian matrix in the direction of a vertex. To build intuition about our measure, we show how it identifies the most central vertices in standard network datasets and compare to other graph centrality measures. Finally, we focus our attention on studying its effectiveness in identifying important IP addresses in network flow data. Using both real and synthetic network flow data, we conduct several experiments to test our measure’s sensitivity to two types of injected attack profiles and show that vertices participating in injected attack profiles exhibit noticeable changes in our centrality measures, even when the injected anomalies are relatively small, and in the presence of simulated network dynamics.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2024

Designing, Constructing, and Operating an IPv6 Network at SC23: A case study in implementing the IPv6 protocol on a heterogenous network that supports the SC23 conference

IPv6 is the current version of IP, the protocol that is used to route traffic across internet connections. This standard was originally developed as a new approach to mitigate concerns about address exhaustion and allow for near infinite scalability. While this protocol has gained significant support in mobile and broadband networks, as well as being the default for networks in emerging economies, it has yet to be fully adopted as a standard deployment model. Complications include legacy devices unable to support the proposed changes, as well as potential challenges that exist between devices that may not be able to fully implement current standards or configuration norms. The SCinet volunteers who deliver advanced networking to support the SC Conference set an ambitious goal of deploying an IPv6-only network at SC23. While the necessary technology is widely available and understood, the implications of deployment to support more than 15,000 users, each with multiple devices of different operating environments and ages, presents a unique technology and policy challenge. This paper will highlight the effort put into designing, implementing, and operating this innovative IPv6-only environment.

Robinson, Kate↗
DOE OSTI2022

Identification of therapeutic targets in a murine model of severe exertional heat stroke

Exertional heat stroke (EHS) is a potentially lethal condition resulting from high core body temperatures (T C ) in combination with a systemic inflammatory response syndrome (SIRS) with varying degrees of severity across victims, and limited understanding of the underlying mechanism(s). We established a mouse model of severe EHS to identify mechanisms of hyperthermia/inflammation that may be responsible for organ damage. Mice were forced to run on a motorized wheel in a 37.5°C chamber until loss of consciousness and were either removed immediately (exertional heat injury or EHI; T CMax = 42.4 ± 0.2°C) or remained in the chamber an additional 20 min (EHS; T CMax = 42.5 ± 0.4°C). Exercise control mice (ExC) experienced identical procedures to EHS at 25°C. At 3 h post-EHS, there was evidence for an immune/inflammatory response as elevated blood chemokine [interferon γ-induced protein 10 (IP-10), keratinocytes-derived chemokine (KC), macrophage inflammatory proteins (MIP-1α), MIP-1β, MIP-2] and cytokine [granulocyte colony-stimulating factor (G-CSF), interleukins (IL-10), IL-6] levels peaked and were highest in EHS mice compared with EHI and ExC mice. Immunoblotting of organs susceptible to EHS damage indicated that several kinases were sensitive to stress associated with heat/inflammation and exercise; specifically, phosphorylation of liver c-Jun NH 2 -terminal kinase (JNK) at threonine 183/tyrosine 185 immediately (0 h) postheating related to heat illness severity. We have established a mouse EHS model, and JNK [or its downstream target(s)] could underlie EHS symptomatology, allowing the identification of molecular pathways or countermeasure targets to mitigate heat illness severity, enable complete recovery, and decrease overall EHS-related fatalities.

Physiology↗
DOE OSTI2022

Initial Results from Boron Powder Injection Experiments in WEST Lower Single Null L-mode Plasmas

Using a recently installed impurity powder dropper (IPD), boron powder (< 150 μm) was injected into lower single null (LSN) L-mode discharges in WEST. IPDs possibly enable real-time wall conditioning of the plasma-facing components and may help to facilitate H-mode access in the full-tungsten environment of WEST. The discharges in this experiment featured Ip = 0.5 MA, BT = 3.7 T, q95 = 4.3, tpulse = 12–30 s, ne,0 ~ 4×1019 m-2, and PLHCD ~ 4.5 MW. Estimates of the deuterium and impurity particle fluxes, derived from a combination of visible spectroscopy measurements and their corresponding S/XB coefficients, showed decreases of ~ 50% in O+, N+, and C+ populations during powder injection and a moderate reduction of these low-Z impurities (~ 50%) and W (~ 10%) in the discharges that followed powder injection. Along with the improved wall conditions, WEST discharges with B powder injection observed improved confinement, as the stored energy WMHD, neutron rate, and electron temperature Te increased significantly (10–25% for WMHD and 60–200% for the neutron rate) at constant input power. These increases in confinement scale up with the powder drop rate and are likely due to the suppression of ion temperature gradient (ITG) turbulence from changes in Zeff and/or modifications to the electron density profile.

Boronization↗
DOE OSTI2026

MARIAH PCAP data for Validation Demonstration

This dataset holds simulated PCAP (packet capture) data from the SCEPTRE validation demonstration model as a set of pairwise communications between devices via specific protocols. All connections should be assumed to be symmetric, as this data is an aggregation of the true PCAP. A mapping is also provided associating each IP address with its true device type.

cyber-physical system↗
DOE OSTI2021

Charging-management And Infrastructure-planning (cmip) Model

CMIP model explores various charging infrastructure network designs to serve a free-floating car-sharing fleet and determine the charging downtime experienced by the fleet for each design. Development of the CMIP model had two major steps: (1) describing modeling assumptions and (2) developing an integer program (IP) that jointly optimizes decisions about locations to install DC fast chargers and EV-to-charger assignments. The CMIP model integrates an EV charging model, EV energy consumption model, and heterogeneous, real-world vehicle use data with an integer programming optimization model to identify optimal location of new charging stations and calculate vehicle downtime for charging. The CMIP model can be applied to understand: (a) the reduction of EV fleet downtime if an additional fast-charging station is added to the current infrastructure and (b) to what extent total vehicle downtime would be sensitive to additional charging infrastructure.

Roni, MohammadS↗
DOE OSTI2021

ModuleOT

ModuleOT is an open hardware security platform which provides all features necessary for securing remote energy resources. The platform consists of a physical bump in-the wire device which runs a custom-built application built with Go and Python and leverages AES-NI Instruction set available on modern hardware for cryptographic acceleration. By combining these features, ModuleOT acts as an all-in-one low-cost solution to enable cryptographically secured communications to any critical remote servers or devices. Because the software application has been built using Golang, this source can be easily compiled for different hardware platforms. The module is designed to provide the following core features: (1) encrypted communications across an untrusted network, (2) certificate-based authentication with secure storage, (3) hardware cryptographic acceleration, (4) IP-based whitelisting, (5) local firewall management, and (6) legacy (RS485) device support.

Hasandka, Adarsh↗
DOE OSTI2021

Network Architecture Verification & Validation Tool

The NAVV Tool is an automation of Linux commands run Zeek IDS software on a packet capture to create a Microsoft Excel spreadsheet table breaking down network traffic observed. The tool automates the Zeek software analysis, the collation of logs, and then the dissection of the Conn.log and DNS.logs to create a summary table within a Excel. This spreadsheet can then be updated with network segments using CIDR formatting and labels along with inventory information including name and IP address. Using the tool again will integrate these label and color coding into the existing analysis table to aid in conducting an evaluation of the network traffic.

Nichols, DonovanW↗