Search NASA⌕ Search

SEARCH · Search NASA

Results for “current attack”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12
All sourcesNASA NTRSDOE OSTI
DOE OSTI2015

A Selectivity based approach to Continuous Pattern Detection in Streaming Graphs

Cyber security is one of the most significant technical challenges in current times. Detecting adversarial activities, prevention of theft of intellectual properties and customer data is a high priority for corporations and government agencies around the world. Cyber defenders need to analyze massive-scale, high-resolution network flows to identify, categorize, and mitigate attacks involving net- works spanning institutional and national boundaries. Many of the cyber attacks can be described as subgraph patterns, with promi- nent examples being insider infiltrations (path queries), denial of service (parallel paths) and malicious spreads (tree queries). This motivates us to explore subgraph matching on streaming graphs in a continuous setting. The novelty of our work lies in using the subgraph distributional statistics collected from the streaming graph to determine the query processing strategy. We introduce a “Lazy Search" algorithm where the search strategy is decided on a vertex-to-vertex basis depending on the likelihood of a match in the vertex neighborhood. We also propose a metric named “Relative Selectivity" that is used to se- lect between different query processing strategies. Our experiments performed on real online news, network traffic stream and a syn- thetic social network benchmark demonstrate 10-100x speedups over selectivity agnostic approaches.

graphs, cybersecurity↗
DOE OSTI2015

A Selectivity based approach to Continuous Pattern Detection in Streaming Graphs

Cyber security is one of the most significant technical challenges in current times. Detecting adversarial activities, prevention of theft of intellectual properties and customer data is a high priority for corporations and government agencies around the world. Cyber defenders need to analyze massive-scale, high-resolution network flows to identify, categorize, and mitigate attacks involving networks spanning institutional and national boundaries. Many of the cyber attacks can be described as subgraph patterns, with prominent examples being insider infiltrations (path queries), denial of service (parallel paths) and malicious spreads (tree queries). This motivates us to explore subgraph matching on streaming graphs in a continuous setting. The novelty of our work lies in using the subgraph distributional statistics collected from the streaming graph to determine the query processing strategy. We introduce a ``Lazy Search" algorithm where the search strategy is decided on a vertex-to-vertex basis depending on the likelihood of a match in the vertex neighborhood. We also propose a metric named ``Relative Selectivity" that is used to select between different query processing strategies. Our experiments performed on real online news, network traffic stream and a synthetic social network benchmark demonstrate 10-100x speedups over non-incremental, selectivity agnostic approaches.

dynamic graphs↗
DOE OSTI2022

Evaluating efficacy of indoor non-pharmaceutical interventions against COVID-19 outbreaks with a coupled spatial-SIR agent-based simulation framework

Contagious respiratory diseases, such as COVID-19, depend on sufficiently prolonged exposures for the successful transmission of the underlying pathogen. It is important that organizations evaluate the efficacy of non-pharmaceutical interventions aimed at mitigating viral transmission among their personnel. We have developed a operational risk assessment simulation framework that couples a spatial agent-based model of movement with an agent-based SIR model to assess the relative risks of different intervention strategies. By applying our model on MIT’s Stata center, we assess the impacts of three possible dimensions of intervention: one-way vs unrestricted movement, population size allowed onsite, and frequency of leaving designated work location for breaks. We find that there is no significant impact made by one-way movement restrictions over unrestricted movement. Instead, we find that reducing the frequency at which individuals leave their workstations combined with lowering the number of individuals admitted below the current recommendations lowers the likelihood of highly connected individuals within the contact networks that emerge, which in turn lowers the overall risk of infection. We discover three classes of possible interventions based on their epidemiological effects. By assuming a direct relationship between data on secondary attack rates and transmissibility in the agent-based SIR model, we compare relative infection risk of four respiratory illnesses, MERS, SARS, COVID-19, and Measles, within the simulated area, and recommend appropriate intervention guidelines.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2017

Epidemiologic Study of One Million U.S. Radiation Workers and Veterans

The single most important question in radiation epidemiology is determining the level of health risks associated with radiation exposures that occur gradually over time. The study of one million early U.S. radiation workers and veterans has been designed to provide information on risk following chronic exposures by focusing on occupational groups with differing radiation exposure patterns, including intakes of radionuclides. The cost-efficient study builds on the investments made and foundations laid by investigators and government agencies over the past 30-40 years, which have established early worker cohorts that can now provide answers to questions on the lifetime human health risks associated with low-level radiation exposures. Within the overall goal of the epidemiologic study of one million U.S. radiation workers and veterans, this project had a total of nine specific aims which included studies of six populations for multiple endpoints including cancer overall mortality, leukemia and non-cancer mortality. The six populations included: Mound, Ohio, workers exposed to polonium, tritium and plutonium; nuclear power plant workers within the Landauer dosimetry and Nuclear Regulatory Commission data files; industrial radiographers; Mallinckrodt uranium workers; uranium workers who linked with the US Renal Data System; and nuclear weapons test participants. Over 400,000 workers and atomic veterans are included in these populations, with vital status being determined and analyses of all causes of death undertaken. A critical, integral component of the studies has been comprehensive evaluations of dosimetry involving, in many cases, complex dose reconstructions, and assessments of uncertainties. The work has also involved development of state-of-the art statistical approaches and modeling. All nine aims were accomplished successfully, resulting in publication of two NCRP documents, 13 literature papers, numerous Boice Reports in Health Physics News and many presentations of the work at scientific meetings. Furthermore, recommendations have been developed for an approach to integrate epidemiologic observations with radiation biology for risk assessment and biological models of radiation effect. The results of this project, as well as ongoing epidemiology studies of US radiation workers and veterans, are providing much-needed insights into complex issues regarding cancer and non-cancer health risks from low dose irradiation, how to apply a "dose and dose rate effectiveness factor" to scale the risks from the A-bomb survivor data to current occupational and environmental circumstances, and how to evaluate risk following intakes of radioactive substances. In addition to application to radiation workers, the results of the studies can provide guidance as society debates the role of nuclear energy and deals with nuclear waste, threats of terrorist attacks with nuclear/radiological devices, the remarkable increase in medical exposures to CT scans and nuclear imaging, and to NASA as radiation protection for astronauts on long-duration mission beyond low-Earth orbit is planned.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2019

Recommended Functionalities for Improving Cybersecurity of Distributed Energy Resources: Preprint

The legacy electric grid is transitioning into a 'present' modern grid due to increasing penetration of intermittent renewable generation at the distribution side, also known as distributed energy resources (DERs). Monitoring and control of such DERs requires extensive data-exchange and bidirectional communication networks. This bidirectional communication paves the way to cyber vulnerabilities and risks for new kinds of cyber-attacks that may have destructive impacts on power system operations. Since IEEE Std. 1547-2018 does not discuss cybersecurity measures for DERs, cybersecurity controls should be developed for securing DER systems at all three levels: device level, communications level, and applications level. This paper discusses the current industry's best practices related to DER cybersecurity and proposes recommended functionalities for improving the cybersecurity posture of DERs. These practical recommended functionalities have been discussed and verified with the industry through a DER cybersecurity working group and are meant to improve the device level security of DERs.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

SCA Tools - SCRM Value Add or Lossy Noise Machines

Software supply chain risk management (SCRM) depends upon accurate information regarding the software components that comprise any given software system. The collection of components included in a software package can be organized within a software bill of materials, or SBOM. SBOMs are ideally generated when the software components are put together, such as at compile time, but for many reasons that has not and is not always possible. For example, legacy or proprietary software packages often do not have SBOMs available to downstream consumers of that software. It’s not just end users that are affected, manufacturers themselves also must deal with this problem. To answer these questions, the market has seen the rise of several commercial software composition analysis (SCA) tools. These tools aim to peer into completed software systems, automatically identifying hidden software dependencies and looking up known vulnerabilities associated with those dependencies to enable end-users to enhance their cyber supply chain risk management processes. These tools are potentially a huge boon to end users of legacy and proprietary software – and a potential bane, depending on how accurate they are. This research asks that question – how accurate are currently available binary SCA tools – and provides answers to several other questions: What does it mean to be “accurate”? What limitations do the tools have in identifying common edge cases that take place in modern software development? Can they help you avoid a devastating supply chain attack, or is it all just noise? After researching SCA tools on the market, we identified three vendors that fit our use case and would provide analysis on compiled binaries. Using these tools, we submitted firmware for critical infrastructure devices for analysis and SBOM generation. The SBOM outputs were then cross referenced with SBOMs generated through manual analysis for comparison. In addition to the firmware samples, we also submitted edge case samples based off a popular open-source library that were specifically crafted to evaluate each tools’ ability to accurately identify components. These samples were customized to be consistent with modifications we have seen in modern software development as well as a couple that are representative of supply chain attacks.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Combined Experimental and Computational Efforts to Establish Ion Mobility, Solubility and Stability of Functional Liquids for Electrochemical Energy Storage

This work provides a computation-driven investigation of the stability of organic electrolytes for lithium-air batteries. Electrolyte instability is currently a key challenge that limits practical use of aprotic Li-air batteries, and the chemical processes that cause this instability are often kinetically-driven. Computational screening for kinetic stability involves the determination of reaction barriers for the numerous potential reaction mechanisms, barriers that are challenging to calculate due to the difficulty of locating transition state structures. Here we screen a broad set of substituted electrolytes for susceptibility to nucleophilic attack by superoxide. We find that carbonates are not typically expected to be stable and that sulfones are generally stable, validating literature trends. We study the effects of chemical functionalization with electron-donating and withdrawing groups and their interplay with steric factors, identifying functional groups and other chemical modifications that increase stability in these groups. User-input driven transition state identification is used for these initial calculations, and an automated computational pipeline is subsequently presented and validated as a means to perform further high-throughput searches across mechanisms and chemistries. The pipeline integrates cheminformatics-based reaction encoding, relaxed potential energy scans, and nudged elastic band calculations for an end-to-end approach to barrier calculations. We review this automated search approach and its current limitations, and discuss challenges and further work.

25 ENERGY STORAGE↗
DOE OSTI2023

Strengthening Cybersecurity for Industrial Control Systems: Innovations in Protecting PLC-Based Infrastructure

In this paper, we propose two new approaches aimed at enhancing the security of industrial control systems (ICS) that utilize programmable logic controllers (PLCs) for the control of critical processes. The first approach involves the addition of a unique digital watermark to the PWM control that adjusts the motor speed to control the critical process. This enables efficient detection and identification of any unauthorized modifications to the sensor signals responsible for controlling the plant. The second approach focuses on monitoring the input current (i.e power) drawn by the PLC during the execution of critical process control tasks. Malicious intrusions to change the PLC parameters and/or unauthorized firmware updates can be rapidly detected. Both approaches demonstrate a substantial improvement in the security of ICS, effectively safeguarding against potential cyber-attacks. Experimental results from a laboratory scale water tank level controlled via PLC showcases rapid intrusion detection capabilities.

Huang, Peng-Hao↗
DOE OSTI2016

Formal Approach For Resilient Reachability based on End-System Route Agility

The deterministic nature of existing routing protocols has resulted into an ossified Internet with static and predictable network routes. This gives persistent attackers (e.g. eavesdroppers and DDoS attackers) plenty of time to study the network and identify the vulnerable links (critical) to plan a devastating and stealthy attack. Recently, route mutation approaches have been proposed to address such issues. However, these approaches incur significantly high overhead and depend upon the availability of disjoint routes in the network, which inherently limit their use for mission critical services. To cope with these issues, we extend the current routing architecture to consider end-hosts as routing elements, and present a formal method based agile defense mechanism to increase resiliency of the existing cyber infrastructure. The major contributions of this paper include: (1) formalization of efficient and resilient End to End (E2E) reachability problem as a constraint satisfaction problem, which identifies the potential end-hosts to reach a destination while satisfying resilience and QoS constraints, (2) design and implementation of a novel decentralized End Point Route Mutation (EPRM) protocol, and (3) design and implementation of planning algorithm to minimize the overlap between multiple flows, for the sake of maximizing the agility in the system. Our implementation and evaluation validates the correctness, effectiveness and scalability of the proposed approach.

Rauf, Usman↗
DOE OSTI2018

Perspective on Improving Environmental Monitoring of Biothreats

For more than a decade, the United States has performed environmental monitoring by collecting and analyzing air samples for a handful of biological threat agents (BTAs) in order to detect a possible biological attack. This effort has faced numerous technical challenges including timeliness, sampling efficiency, sensitivity, specificity, and robustness. The cost of city-wide environmental monitoring using conventional technology has also been a challenge. A large group of scientists with expertise in bioterrorism defense met to assess the objectives and current efficacy of environmental monitoring and to identify operational and technological changes that could enhance its efficacy and cost-effectiveness, thus enhancing its value. The highest priority operational change that was identified was to abandon the current concept of city-wide environmental monitoring because the operational costs were too high and its value was compromised by low detection sensitivity and other environmental factors. Instead, it was suggested that the focus should primarily be on indoor monitoring and secondarily on special-event monitoring because objectives are tractable and these operational settings are aligned with likelihood and risk assessments. The highest priority technological change identified was the development of a reagent-less, real-time sensor that can identify a potential airborne release and trigger secondary tests of greater sensitivity and specificity for occasional samples of interest. This technological change could be transformative with the potential to greatly reduce operational costs and thereby create the opportunity to expand the scope and effectiveness of environmental monitoring.

Dunbar, John↗
DOE OSTI2016

Pilot-Scale Demonstration of a Fully Integrated Commercial Process for Converting Woody Biomass into Clean Biomass Diesel Fuel

The economic recovery of petroleum, like other fossil fuels, is limited. Although the current price of oil has dramatically dropped due to increased production and new production methods, it is not expected to remain low for an extended period of time as demand increases. While new methods of obtaining these fossil energy reserves are constantly being invented and introduced, the cost of production generally continues to increase. New sources of energy such as fracking and oil shale or oil sands recovery can produce enormous amounts of energy, but at a severe cost. The current estimate on energy return for energy invested for oil shale for instance is just barely over 1, meaning that for every barrel of energy produced by oil shale there was nearly a barrel of energy invested to recover it. Furthermore, these new technologies are often constantly under attack for environmental concerns (especially given the poor ratio of energy conversion), while conventional oil is regarded as dangerous due to lack of domestic supply and susceptibility to foreign intervention that compromises overall national security. Alternatives to a petroleum-based supply of fuel are a potential route to address these issues, although they must also be economically feasible. The fuels industry is forced to consider these issues in addition to federal mandates intended to gradually diversify our fuel sources.

09 BIOMASS FUELS↗
DOE OSTI2018

Chapter 1: A Brief Introduction to Lignin Structure

Lignin is an alkyl-aromatic polymer found in the cell walls of terrestrial plants. Lignin provides structure and rigidity to plants, is a natural, highly effective barrier against microbial attack, and enables water and nutrient transport through plant tissues. Depending on the plant species, the constituents of lignin can vary considerably, leading to substantial diversity in lignin chemistry and structure. Despite nearly a century of research and development attempting to convert lignin into valuable products, lignin in most current and planned biorefinery contexts remains underutilized, most often being burned to generate heat and power. However, the drive towards effective lignin valorization processes has witnessed a significant resurgence in the past decade, catalyzed by advances in improved understanding of lignin chemistry, structure, and plasticity in parallel with new catalytic and biological approaches to valorize this important, prevalent biopolymer. As a preface to the subsequent chapters in this book, this chapter briefly highlights the known aspects of lignin structure.

09 BIOMASS FUELS↗
DOE OSTI2024

Field Programmable Gate Array-Based Reactor Protection Systems and Potential for Inclusion of Secure Elements to Improve Cybersecurity

For acceptable implementations of technologies like wireless communications, remote monitoring, etc., strong mitigations must be developed and evaluated to ensure that new attack pathways do not increase risk for Advanced Reactors. Secure Elements can be adopted and adapted for this purpose based on tamper resistance and cryptographic abilities, but research must be done to properly integrate into critical components such as FPGA-based Important to Safety systems in conjunction with current and future regulations on cyber security features in Advanced Reactors. Typically, the integration of a Secure Element happens during the POST and UEFI boot of a computing platform, performed by the Operating System, which is not possible with FPGAs because they do not include these firmware components. Work must be done to identify a reliable and secure method for integration in FPGA-based systems which lack Operating Systems and therefore complex boot procedures, system calls, etc.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Field Programmable Gate Array-Based Reactor Protection Systems and Potential for Inclusion of Secure Elements to Improve Cybersecurity

For acceptable implementations of technologies like wireless communications, remote monitoring, etc., strong mitigations must be developed and evaluated to ensure that new attack pathways do not increase risk for Advanced Reactors. Secure Elements can be adopted and adapted for this purpose based on tamper resistance and cryptographic abilities, but research must be done to properly integrate into critical components such as FPGA-based Important to Safety systems in conjunction with current and future regulations on cyber security features in Advanced Reactors. Typically, the integration of a Secure Element happens during the POST and UEFI boot of a computing platform, performed by the Operating System, which is not possible with FPGAs because they do not include these firmware components. Work must be done to identify a reliable and secure method for integration in FPGA-based systems which lack Operating Systems and therefore complex boot procedures, system calls, etc.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2023

Cyber-Informed Engineering Principles: What’s in it for me?

CIE is an emerging method to integrate cybersecurity considerations into the conception, design, development, and operation of any physical system that has digital connectivity, monitoring, or control. CIE complements—but does not replace—the application of cybersecurity standards or practices currently in place within an organization. Rather, it expands cybersecurity decisions into the engineering space, not by asking engineers to become cyber experts, but by calling on engineers to apply engineering tools and make engineering decisions that improve cybersecurity outcomes. CIE examines the engineering consequences that a sophisticated cyber attacker could achieve, and drives engineering changes that may provide deterministic mitigations to limit or eliminate those consequences. Engineers and technicians that design critical energy infrastructure installations can integrate the 12 principles of CIE into each phase of the engineering lifecycle, from concept to retirement. These principles are aimed at system or design engineers, operators, and technicians, rather than software engineers or operational cybersecurity practitioners, because the engineers who design, build, operate, and maintain the physical infrastructure are best positioned to leverage a system’s engineering design to diminish the severity of cyber attacks or digital technology failures. This approach creates new opportunities for engineering teams—and not just cybersecurity teams—to secure the system using the physics and mechanics of engineering controls—not just digital monitoring and controls.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2024

Aspects of Spodumene Lithium Extraction Techniques

Lithium (Li), a leading cathode material in rechargeable Li-ion batteries, is vital to modern energy storage technology, establishing it as one of the most impactful and strategical elements. Given the surge in the electric car market, it is crucial to improve lithium recovery from its rich mineral deposits using the most effective extraction technique. In recent years, both industry and academia have shown significant interest in Li recovery from various Li-bearing minerals. Of these, only extraction from spodumene has established a reliable industrial production of Li salts. The current approaches for cracking of the naturally occurring, stable α-spodumene structure into a more open structure—β-spodumene—involve the so-called decrepitation process that takes place at extreme temperatures of ~1100 °C. This conversion is necessary, as β-spodumene is more susceptible to chemical attacks facilitating Li extraction. In the last several decades, many techniques have been demonstrated and patented to process hard-rock mineral spodumene. The objective of this review is to present a thorough analysis of significant findings and the enhancement of process flowsheets over time that can be useful for both research endeavors and industrial process improvements. The review focuses on the following techniques: acid methods, alkali methods, carbonate roasting/autoclaving methods, sulfuric acid roasting/autoclaving methods, chlorinating methods, and mechanochemical activation. Recently, microwaves (MWs), as an energy source, have been employed to transform α-spodumene into β-spodumene. Considering its energy-efficient and short-duration aspects, the review discusses the interaction mechanism of MWs with solids, MW-assisted decrepitation, and Li extraction efficiencies. Finally, the merits and/or disadvantages, challenges, and prospects of the processes are summarized.

25 ENERGY STORAGE↗
DOE OSTI2013

ALLOY 690 SURFACE NANOSTRUCTURES DURING EXPOSURE TO PWR PRIMARY WATER AND POTENTIAL INFLUENCE ON STRESS CORROSION CRACKING INITIATION

Alloy 690 (30 wt% Cr) is currently being used to replace lower Cr alloy 600 (16 wt% Cr) in critical pressurized water reactor (PWR) components due to its superior protection against stress corrosion cracking (SCC). The increased Cr content is believed to assist in forming a protective chromia film on the surface that inhibits corrosion and intergranular attack (IGA) in particular. A key objective for this work is to understand how surface microstructural features act as precursor sites for SCC nucleation. Unstressed alloy 690 specimens have been exposed to simulated PWR water conditions at 360°C including cold-worked materials shown to susceptible to SCC in crack-growth tests. Detailed surface and near-surface characterizations were performed on cross-section samples starting with low kV backscatter scanning electron microscopy (SEM) imaging to document the extent of general and localized corrosion. Selected surface and local corrosion regions were then prepared by focused ion beam milling for transmission electron microscopy (TEM) and atom probe tomography (APT) analyses. TEM is used to determine the oxidation microstructures as well as compositional gradients associated with the degradation, while APT is conducted to investigate the atomistic redistribution of alloying and impurity elements in the oxides and surrounding metal.

Olszta, Matthew J.↗