Search NASA⌕ Search

SEARCH · Search NASA

Results for “test frameworks”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12

Concurrent two-way coupling of global and local models across internal boundaries with non-matching discretizations

Coupling local and global models enables efficient simulation of multiscale systems, where global models capture large-scale behavior and local models, with enhanced physics, resolve finer details over a smaller region. Here, this paper presents a mathematically consistent method for coupling physics-based models of varying fidelity across adjacent, non-overlapping subdomains, even when discretizations do not match at the immersed interdomain interfaces. Incompressible Navier-Stokes equations (NSE) constitute the global model while residual-based turbulence model serves as the local high-fidelity model. In addition, a scalar advection-diffusion equation that models the convection of an active scalar field is appended to the turbulence model in the local domain. This scalar field does not have its complement in the global model, giving rise to unequal number of equations at the immersed boundary between local and global models. Interdomain coupling terms are derived via the Variational Multiscale Discontinuous Galerkin (VMDG) method with new developments in scale representation and efficient fine-scale estimation. While transient laminar flows modeled with NSE in the global domain can be resolved with relatively coarse mesh, turbulent flow calculations in the local model require much finer spatial discretizations as well as smaller time-step for appropriately resolving the turbulent flow physics. The proposed framework also accommodates non-matching meshes at the immersed boundaries. Test problems in 2D and 3D numerically showcase the concurrent two-way coupling of unknown fields across the immersed boundaries. The 3D test presents a case with an unequal number of equations, where the scalar field represents the convection of contaminant concentration. This provides more detailed physics in the local region and highlights its application in climate modeling and atmospheric sciences.

Variational Multiscale Discontinuous Galerkin (VMD↗

A bi-level advanced control framework for large-scale control of buildings with system-level impact

Increased electricity consumption combined with new forms of generation is testing the reliability of our grid infrastructure. This work describes a method to improve the reliability of the grid through large-scale advanced building control. This paper develops a bi-level distributed control framework to shift the load of 153 buildings to achieve a system-level objective of tracking a power reference signal. This bi-level control is based on the previously-developed ANPV-MPC, a predictive controller that uses a Bayesian neural network to generate an accurate control model and adapt to changing conditions over time. By shifting the building electricity demand to better match the available power, the grid system supplying the buildings is more reliable as evidenced by the analysis of node voltages across an IEEE 13-bus distribution system. The proposed bi-level control framework tracks the system-level power reference with enough accuracy to regulate node voltages across the IEEE 13-bus distribution system within ANSI limits of ±5%. Additionally, the adaptive nature of ANPV-MPC allows each building across the system to adapt to changing conditions, further amplifying the system-level reliability.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Integrating PCTRAN with AI-Driven Host-Intrusion Detection and Secured Container Systems for Advanced Malware Analysis (Summer Internship Report)

This study presents a solution for enhancing the security of the Personal Computer Transient Analyzer (PCTRAN) PC-based Nuclear Power Plant Simulator by integrating the software with an artificial intelligence (AI)-driven host-intrusion detection system (HIDS), in addition to a secured container system, for malware analysis. PCTRAN is a Windows XP-based software package that has the ability to simulate a variety of accident and transient conditions for nuclear power plants (NPPs). It offers a high-resolution replica of the Nuclear Steam Supply System (NSSS) and displays the status of important parameters allowing for operator interaction. By including AI-driven HIDS for the NSSS, the framework can identify security threats in real-time, ensuring the integrity of the nuclear simulation environment. Additionally, the secured container system offers the ability to isolate and analyze malware, preventing potential threats from affecting core systems. The integration process involves extensive testing and validation in order to ensure accuracy, reliability, and compliance with security policies. This framework sets a new precedent for secure simulation and training in NPP operations, and offers insight for future advancements in cybersecurity.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Field Emission Analysis in SRF Cavities for PIP-II Using GEANT4

Field emission (FE) remains a key limitation to achieving optimal performance and reliability in superconducting radiofrequency (SRF) cavities used in accelerator cryomodules. Addressing this challenge requires a detailed understanding of the generation and transport of FE-induced radiation; however, the absence of standardized measurement protocols complicates comparisons across different testing stages and facilities. This work presents initial steps toward a quantitative, systematic framework for analyzing FE-induced radiation using Geant4 simulations. We model four cavity types to be deployed in Fermilab’s Proton Improvement Plan-II (PIP-II) linac - HB650, LB650, SSR2, and SSR1 - to investigate radiation signatures and their dependence on emission conditions. By integrating simulation results with radiation diagnostics, our goal is to identify probable emission sites, enhance diagnostic accuracy, and optimize detector placement. Ultimately, this approach seeks to inform cavity preparation, assembly, and testing procedures, enabling the delivery of FE-free SRF cryomodules for PIP-II.

Wijethunga, Sajini [Fermilab] (ORCID:0000000287659↗

Field Emission Analysis in SRF Cavities for PIP-II Using GEANT4

Field emission (FE) remains a key limitation to achieving optimal performance and reliability in superconducting radiofrequency (SRF) cavities used in accelerator cryomodules. Addressing this challenge requires a detailed understanding of the generation and transport of FE-induced radiation; however, the absence of standardized measurement protocols complicates comparisons across different testing stages and facilities. This work presents initial steps toward a quantitative, systematic framework for analyzing FE-induced radiation using Geant4 simulations. We model four cavity types to be deployed in Fermilab’s Proton Improvement Plan-II (PIP-II) linac - HB650, LB650, SSR2, and SSR1 - to investigate radiation signatures and their dependence on emission conditions. By integrating simulation results with radiation diagnostics, our goal is to identify probable emission sites, enhance diagnostic accuracy, and optimize detector placement. Ultimately, this approach seeks to inform cavity preparation, assembly, and testing procedures, enabling the delivery of FE-free SRF cryomodules for PIP-II.

Wijethunga, Sajini [Fermilab] (ORCID:0000000287659↗

CGSim: A Simulation Framework for Large Scale Distributed Computing Environment

Large-scale distributed computing infrastructures such as the Worldwide LHC Computing Grid (WLCG) require comprehensive simulation tools for evaluating performance, testing new algorithms, and optimizing resource allocation strategies. However, existing simulators suffer from limited scalability, hardwired algorithms, lack of real-time monitoring, and inability to generate datasets suitable for modern machine learning approaches. We present CGSim, a simulation framework for large-scale distributed computing environments that addresses these limitations. Built upon the validated SimGrid simulation framework, CGSim provides high-level abstractions for modeling heterogeneous grid environments while maintaining accuracy and scalability. Key features include a modular plugin mechanism for testing custom workflow scheduling and data movement policies, interactive real-time visualization dashboards, and automatic generation of event-level datasets suitable for AI-assisted performance modeling. We demonstrate CGSim’s capabilities through a comprehensive evaluation using production ATLAS PanDA workloads, showing significant calibration accuracy improvements across WLCG computing sites. Scalability experiments show near-linear scaling for multi-site simulations, with distributed workloads achieving 6 × better performance compared to single-site execution. The framework enables researchers to simulate WLCG-scale infrastructures with hundreds of sites and thousands of concurrent jobs within practical time budget constraints on commodity hardware.

Vatsavai, Sairam Sri [Brookhaven National Laborato↗

Validation Testing for Molten Chloride Reactor Experiment Equipment Removal and Disposal Techniques

The Molten Chloride Reactor Experiment (MCRE) will be the first reactor featuring a fast-spectrum molten chloride circulating nuclear fuel system in the world. Planning for equipment removal and disposal (ERD) of MCRE has identified several technology gaps due to the unique environment of this nuclear experiment. Some of the gaps arise from the application of existing disassembly and/or sizing methods to novel material forms or in novel configurations. Others arise from unknown material behavior. This paper summarizes proposed test plans for ERD validation experiments to address these complicated or unknown equipment removal procedures. At the Waste Management Symposia in 2024, the Idaho National Laboratory (INL) MCRE ERD team presented the challenges associated with hosting multiple nuclear experiments in series with only brief transition periods between systems. Such difficulties include higher dose rates, the presence of radioisotopes infrequently encountered in reactor decommissioning and radioactive waste management, lack of intrinsic remote-operations infrastructure in the test bed, space constraints in the test bed, and contamination minimization requirements. To address these challenges, remote or semi-remote technologies are planned to be implemented in a non-hot cell environment with limited space availability. The team also discussed how a systems engineering approach is being used for conceptual development and design of equipment removal systems to address these challenges. For example, to reduce constraints for the removal of more difficult components, non-activated, noncontaminated elements are planned to be taken out first where possible. Still, there are complexities associated with the remaining components. In this work, the operational framework for MCRE ERD was reviewed for technical gaps and open questions, and test plans were drafted to address these areas. The tests plans were written for the following categories: vision systems, pipe cutting, drill/grout/filler, flush salt, and miscellaneous, with the miscellaneous group consisting of tests like techniques for removing bearings and reflector bricks. The test plans explore material, infrastructure, and staffing requirements needed for test execution. The test plans additionally focus on the evaluation of success. Determining the outcome of a test is imperative - as these explorative actions have the potential to rearrange or re-scope planned ERD activities. Success criteria identified thus far include required tool output, required area(s), debris production and mitigation, and repeatability. Test plans are an essential aspect of the systems engineering approach to MCRE ERD. They are used as the beginning steps in defining use cases for the ERD system. Performance of the validation tests is expected to begin in the summer of 2025 and will take approximately 9 to 12 months to complete. Execution of these plans will be expedited by specifying test needs ahead of time, facilitating efficient interactions with any subcontractors tasked with running the requested tests. Evaluating the outcomes of these tests will inform MCRE ERD procedures and timing and will also identify additional technical constraints for the MCRE ERD System. This upfront process optimization effort will help the project save time and resources at the end of the experiment.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗

Promoting the regulatory acceptance of combined ion and neutron irradiation for material degradation in nuclear reactors

The Advanced Materials and Manufacturing Technologies (AMMT) program within the Department of Energy (DOE) Office of Nuclear Energy has developed its current recommendation for promoting the use of combined ion irradiation and neutron irradiation for the accelerated qualification of materials to be deployed in nuclear reactors. This plan is intended to provide a collaborative path forward that can be adopted by academia, national laboratories, and industry, and has been developed with input from the regulatory research arm of the U.S. Nuclear Regulatory Commission (NRC). To deploy new materials or materials manufactured with new technologies, such as additive manufacturing, materials must be evaluated for reactor-induced degradation from the combination of harsh temperatures, corrosive environments, and radiation fields. However, rapid deployment of materials necessitates accelerated testing methods rather than relying on years of neutron irradiation in a material test reactor. Ion irradiation has demonstrated success in reproducing material microstructure and select property evolution resulting from neutron irradiation with three to four orders of magnitude reduction in time and cost, making it an ideal candidate for accelerated irradiation testing. This presentation provides context governing both the scientific and regulatory aspects of the proposed goal. The discussion is aimed at a broad audience including researchers from industry, national laboratories, and academia. The recommended path forward is presented as a conceptual framework of specific steps. In brief, the strategy entails developing an integrated ion and neutron irradiation test plan for the material property of interest based on the fundamental tenet of the linkage of microstructure and properties in materials. Physics-based modeling interprets ion irradiation data and predicts neutron irradiation microstructure and properties with uncertainty bounds. The first round of testing is sufficient for an initial licensing application using a risk-informed approach, while a minimum required neutron irradiation test plan reduces cost and time requirements. A surveillance program with witness specimens in-reactor provides additional data over time to improve model predictions to higher damage levels and further reduce uncertainty bounds, which can be used for license extensions or longer lifetimes in new license applications.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Summary of Developing a Hanford Grout Modeling Framework Initial Workshop

The “Development of the Hanford Grout Modeling Framework” project as part of the Network of National Laboratories for Environmental Management and Stewardship (NNLEMS) funding program is underway. An initial project team workshop was held in Richland, WA on June 4 and 5, 2024 with participants from PNNL, SRNL, SNL, WRPS and CRESP (VU and UCF). The workshop covered an overview of the current state of the art in grout modeling tools provided by the team. Based on a focus on liquid waste immobilization grout and encapsulation grout for solid wastes and tank closure grout at Hanford, the team identified preliminary conceptual models for these three applications which will be used to form the basis of the Hanford Grout Modeling Framework. The key processes that can drive mechanisms impacting the grout performance were identified for each test case. The programmatic plan was also identified with five core Themes being selected that will form the focus of the project. Within each theme, individual tasks for Year 1 were planned in support of the development of an updated Hanford Grout Modeling Framework. This report presents a summary of the information presented during the workshop.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Bayesian stability and force modeling for uncertain machining processes

Accurately simulating machining operations requires knowledge of the cutting force model and system frequency response. However, this data is collected using specialized instruments in an ex-situ manner. Bayesian statistical methods instead learn the system parameters using cutting test data, but to date, these approaches have only considered milling stability. This paper presents a physics-based Bayesian framework which incorporates both spindle power and milling stability. Initial probabilistic descriptions of the system parameters are propagated through a set of physics functions to form probabilistic predictions about the milling process. The system parameters are then updated using automatically selected cutting tests to reduce parameter uncertainty and identify more productive cutting conditions, where spindle power measurements are used to learn the cutting force model. The framework is demonstrated through both numerical and experimental case studies. Results show that the approach accurately identifies both the system natural frequency and cutting force model.

42 ENGINEERING↗

Generalizing synthetic data-trained acoustic predictive models to real-world measurements

Acoustic Resonance Spectroscopy (ARS) is highly sensitive to structural properties such as material, geometry, and environmental conditions; as a consequence, it can noninvasively measure internal properties that are unobservable by most other methods. Because of its sensing capabilities and low implementation cost and complexity, ARS has potential as a paradigm shift in noninvasive sensing, characterization, and monitoring applications. However, extracting specific properties from ARS measurements, comprising the vibration spectrum of a test object, is challenging due to the sensitivity of the spectra to other structural changes not being measured, e.g. manufacturing tolerances, component coupling, environmental variation, etc. Neural Networks are promising tools for identifying trends in ARS measurements, but their training typically requires large datasets, which are often impractical to obtain for real-world systems. Synthetic data can be simulated efficiently, but discrepancies between synthetic and real-world data frequently lead to poor generalization when testing on the real-world data. We propose a novel ARS model training framework that enables networks trained exclusively on synthetic ARS data to generalize effectively to real-world measurements. Our approach leverages the Correlation Alignment (CORAL) technique to enforce the extraction of features common to both synthetic and real-world domains. As a case study, we demonstrate noninvasive ARS-based pressure measurements in sealed systems. Finite element method (FEM) simulations were used to generate synthetic training data across diverse vessel configurations and pressure conditions, and model performance was then tested on real-world measurements. We demonstrate that robust machine learning models for ARS can be developed without large real-world datasets, significantly broadening the applicability of ARS for noninvasive sensing. Moreover, the approach is extensible to other sensing modalities where synthetic data are abundant but real-world data are limited.

36 MATERIALS SCIENCE↗

A Design for Remanufacturing Framework Incorporating Identification, Evaluation, and Validation: A Case Study of Hydraulic Manifold

In recent years, academic researchers and engineers in the industry have widely recognized the necessity of integrating remanufacturing considerations into product design iterations to advance sustainability objectives. Acknowledging the importance of design for remanufacturing (DfRem), efforts were made to develop tools and guidelines that could be implemented in practice. However, such methods largely rely upon experiential insights and qualitative assessments, leaving a gap in the ability to quantitatively assess the economic and environmental impacts of design choices. To bridge this gap, we investigate existing efforts and present a framework for DfRem that integrates established design and remanufacturing practices into a cohesive workflow with quantitative assessments. To demonstrate its efficacy for making practical design changes for remanufacturing, we apply the framework to a hydraulic manifold in a transmission system for heavy-duty tractors. Through this industry-relevant case study, we focus on showcasing the practical utility of our framework. Based on the identified design modifications from remanufacturability analysis, we estimate the reductions in life cycle costs, energy consumption, and emissions. Afterward, the modifications are tested using physical experiments with plans for integration into future iterations of the hydraulic manifold design and production. Here, we anticipate this framework can illustrate the process of remanufacturing that ensures improvements in sustainability while maintaining performance and reliability standards.

design for X↗

Identifying Robust Decarbonization Pathways for the Western U.S. Electric Power System Under Deep Climate Uncertainty

Climate change threatens the resource adequacy of future power systems. Existing research and practice lack frameworks for identifying decarbonization pathways that are robust to climate-related uncertainty. We create such an analytical framework, then use it to assess the robustness of alternative pathways to achieving 60% emissions reductions from 2022 levels by 2040 for the Western U.S. power system. Our framework integrates power system planning and resource adequacy models with 100 climate realizations from a large climate ensemble. Climate realizations drive electricity demand; thermal plant availability; and wind, solar, and hydropower generation. Among five initial decarbonization pathways, all exhibit modest to significant resource adequacy failures under climate realizations in 2040, but certain pathways experience significantly less resource adequacy failures at little additional cost relative to other pathways. By identifying and planning for an extreme climate realization that drives the largest resource adequacy failures across our pathways, we produce a new decarbonization pathway that has no resource adequacy failures under any climate realizations. This new pathway is roughly 5% more expensive than other pathways due to greater capacity investment, and shifts investment from wind to solar and natural gas generators. Our analysis suggests modest increases in investment costs can add significant robustness against climate change in decarbonizing power systems. Our framework can help power system planners adapt to climate change by stress testing future plans to potential climate realizations, and offers a unique bridge between energy system and climate modeling.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Extreme radiation emission regime for electron beams in strong focusing ion channels and undulators

A fundamental comparison between a magnetic undulator and an ion channel, or betatron, radiation from relativistic electrons is presented. While conventional theories nominally range from the undulator (𝐾 <1) to the wiggler (𝐾 >1) regime, they are only applicable for sufficiently large Lorentz factors (𝛾 0 ≫𝐾). They therefore do not account for high 𝐾/𝛾 0 cases, for which we show that particle trajectories and radiation characteristics strongly deviate from the linear predictions in both magnetic undulators and ion channels. This problem arises from the fundamental differences between a magnetostatically and electrostatically induced oscillation. A reformulation of both the ion channel betatron wavelength and amplitude, as well as the same parameters in a magnetic undulator, permits us to compare cases with equivalent oscillation period and amplitude in the two different scenarios. The notable differences in spectral features of the two radiation mechanisms can then be addressed via numerical simulations of single particle as well as full beam dynamics. Additionally, we identify and quantify a novel transverse orbit precession effect in ion channels for particles with initial angular momentum relative to the device axis. This effect, which is significant in cases of strong transverse kinetic energy oscillations, alters both the radiation divergence and the beam emittance. In this paper, we present this new theoretical framework and compare its results with numerical simulation applied to realizable experimental tests of such radiation sources.

Frazzitta, Andrea [University of Rome “La Sapienza↗

Countering Weapons of Mass Destruction (CWMD) Device Cybersecurity Characterization Process and Profile

Countering Weapons of Mass Destruction (CWMD) recognizes that threats in the cyberspace domain continue to grow, which requires CWMD devices and supporting systems to be both cybersecure (ability to protect or defend from cyber-attacks) and resilient (ability to maintain required capability in the face of adversity) to cyber threats. The CWMD cybersecurity characterization approach in this document supports existing cyber resilience activities within the Acquisition Lifecycle Framework. Similarly, this process supports existing Department of Homeland Security Cyber Resilience Test and Evaluation activities, which consist of iterative processes, starting at the initiation of system acquisition and continuing throughout the entire device and system life cycle. Cyber resilience is the ability of an information system to continue to operate while under attack, even if in a degraded or debilitated state,1 and to rapidly recover operational capabilities for essential functions after a successful attack.2 The goal of the security characterization task for CWMD is to support the development of a CBRN device-dependent profile that aligns with device network capabilities and maps to recommended security controls to create a characterization security profile impact levels. The impact levels for CWMD devices should be characterized as Low (L), Moderate (M), High (H) to align with the low, moderate, high control baselines. To estimate the impact levels, the device’s security-related attributes are translated into the security objectives: Confidentiality (C), Integrity (I), and Availability (A), known as the CIA triad. The potential impact for each device can be L, M, H, for devices that connect and transmit different types of data and may have different impact levels. National Institute of Standards and Technology Federal Information Processing Standards Publication 199 states, “the potential impact values assigned to the respective security objectives shall be the highest value from among those security categories that have been determined for each type of information resident on the information system.”3 As CWMD is determining the cybersecurity impact levels of CBRN devices based on network connections and data transfers, the impact levels are aligned with the associated attributes of network connections and communications. For example, if the device system is connected to a wireless network and transmits different data types based on the confidentiality of the data, the highest impact value for each security objective should represent the device’s CIA impact level. This document is intended to be used by test managers, test team, and program managers.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

EJFAT Scientific Perspective

Presented new computing model to the test by deploying the EJFAT system alongside a data-stream processing framework running the production-level CLAS12 event reconstruction application. In this experiment, a continuous stream of CLAS12 Level-1 identified events was processed in real-time using the EJFAT load balancer, distributing the workload across 90 computing nodes located across the U.S. This marks the first-ever large-scale, real-time distributed data stream processing experiment, demonstrating that scientific data-streaming pipelines can efficiently scale across four dimensions, thanks to EJFAT’s advanced hardware and software capabilities.

Gyurjyan, Vardan [Thomas Jefferson National Accele↗

Boosting H I -Galaxy Cross-Clustering Signal through Higher-Order Cross-Correlations

After reionization, neutral hydrogen (${\rm H\, \small {I}}$) traces the large-scale structure (LSS) of the Universe, enabling ${\rm H\, \small {I}}$ intensity mapping (IM) to capture the LSS in 3D and constrain key cosmological parameters. We present a new framework utilizing higher-order cross-correlations to study ${\rm H\, \small {I}}$ clustering around galaxies, tested using real-space data from the IllustrisTNG300 simulation. This approach computes the joint distributions of k-nearest neighbor (kNN) optical galaxies and the ${\rm H\, \small {I}}$ brightness temperature field smoothed at relevant scales (the kNN-field framework), providing sensitivity to all higher-order cross-correlations, unlike two-point statistics. To simulate ${\rm H\, \small {I}}$ data from actual surveys, we add random thermal noise and apply a simple foreground cleaning model, filtering out Fourier modes of the brightness temperature field with k ∥ < k min,∥ . Under current levels of thermal noise and foreground cleaning, typical of a Canadian Hydrogen Intensity Mapping Experiment (CHIME)-like survey, the ${\rm H\, \small {I}}$-galaxy cross-correlation signal in our simulations, using the kNN-field framework, is detectable at >30σ across r = [3, 12] h –1 Mpc. In contrast, the detectability of the standard two-point correlation function (2PCF) over the same scales depends strongly on the foreground filter: a sharp k ∥ filter can spuriously boost detection to 8σ due to position-space ringing, whereas a less sharp filter yields no detection. Nonetheless, we conclude that kNN-field cross-correlations are robustly detectable across a broad range of foreground filtering and thermal noise conditions, suggesting their potential for enhanced constraining power over 2PCFs.

79 ASTRONOMY AND ASTROPHYSICS↗

StructuredFuzzer: Fuzzing Structured Text-Based Control Logic Applications

Rigorous testing methods are essential for ensuring the security and reliability of industrial controller software. Fuzzing, a technique that automatically discovers software bugs, has also proven effective in finding software vulnerabilities. Unsurprisingly, fuzzing has been applied to a wide range of platforms, including programmable logic controllers (PLCs). However, current approaches, such as coverage-guided evolutionary fuzzing implemented in the popular fuzzer American Fuzzy Lop Plus Plus (AFL++), are often inadequate for finding logical errors and bugs in PLC control logic applications. They primarily target generic programming languages like C/C++, Java, and Python, and do not consider the unique characteristics and behaviors of PLCs, which are often programmed using specialized programming languages like Structured Text (ST). Furthermore, these fuzzers are ill suited to deal with complex input structures encapsulated in ST, as they are not specifically designed to generate appropriate input sequences. This renders the application of traditional fuzzing techniques less efficient on these platforms. To address this issue, this paper presents a fuzzing framework designed explicitly for PLC software to discover logic bugs in applications written in ST specified by the IEC 61131-3 standard. The proposed framework incorporates a custom-tailored PLC runtime and a fuzzer designed for the purpose. We demonstrate its effectiveness by fuzzing a collection of ST programs that were crafted for evaluation purposes. We compare the performance against a popular fuzzer, namely, AFL++. The proposed fuzzing framework demonstrated its capabilities in our experiments, successfully detecting logic bugs in the tested PLC control logic applications written in ST. On average, it was at least 83 times faster than AFL++, and in certain cases, for example, it was more than 23,000 times faster.

47 OTHER INSTRUMENTATION↗