Search NASA⌕ Search

SEARCH · Search NASA

Results for “Detection and Defense”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14

BILLIARDS: Baseline Instrumented Lithology Lander, Inspector and Asteroid Redirection Demonstration System

BILLIARDS Baseline Instrumented Lithology Lander, Inspector, and Asteroid Redirection Demonstration System Proposed demonstration mission for Billiard-Ball concept Select asteroid pair with natural close approach to minimize cost and complexity Primary Objectives Rendezvous with a small (10m), near Earth (alpha) asteroid Maneuver the alpha asteroid to a collision with a 100m (beta) asteroid Produce a detectable deflection or disruption of the beta asteroid Secondary objectives Contribute knowledge of asteroid composition and characteristics Contribute knowledge of small-body formation Opportunity for international collaboration

Asteroid Redirection↗

Stationary Plasma Thruster Plume Emissions

The emission spectrum from a xenon plasma produced by a Stationary Plasma Thruster provided by the Ballistic Missile Defense Organization (BMDO) was measured. Approximately 270 individual Xe I, Xe II, and XE III transitions were identified. A total of 250 mW of radiated optical emission was estimated from measurements taken at the thruster exit plane. There was no evidence of erosion products in the emission signature. Ingestion and ionization of background gas at elevated background pressure was detected. The distribution of excited states could be described by temperatures ranging from fractions of 1 eV to 4 eV with a high degree of uncertainty due to the nonequilibrium nature of this plasma. The plasma was over 95 percent ionized at the thruster exit plane. Between 10 and 20 percent of the ions were doubly charged. Two modes of operation were identified. The intensity of plasma emission increased by a factor of two during operation in an oscillatory mode. The transfer between the two modes of operation was likely related to unidentified phenomena occurring on a time scale of minutes.

Manzella, David H.↗

Lightning Imaging Sensor (LIS) for the International Space Station (ISS): Mission Description and Science Goals

In recent years, NASA Marshall Space Flight Center, the University of Alabama in Huntsville, and their partners have developed and demonstrated space-based lightning observations as an effective remote sensing tool for Earth science research and applications. The Lightning Imaging Sensor (LIS) on the Tropical Rainfall Measuring Mission (TRMM) continues to provide global observations of total lightning after 17 years on-orbit. In April 2013, a space-qualified LIS built as the flight spare for TRMM, was selected for flight as a science mission on the International Space Station. The ISS LIS (or I-LIS as Hugh Christian prefers) will be flown as a hosted payload on the Department of Defense Space Test Program (STP) H5 mission, which has a January 2016 baseline launch date aboard a SpaceX launch vehicle for a 2-4 year or longer mission. The LIS measures the amount, rate, and radiant energy of global lightning. More specifically, it measures lightning during both day and night, with storm scale resolution, millisecond timing, and high, uniform detection efficiency, without any land-ocean bias. Lightning is a direct and most impressive response to intense atmospheric convection. It has been found that the characteristics of lightning that LIS measures can be quantitatively coupled to both thunderstorm and other geophysical processes. Therefore, the ISS LIS lightning observations will provide important gap-filling inputs to pressing Earth system science issues across a broad range of disciplines, including weather, climate, atmospheric chemistry, and lightning physics. A unique contribution from the ISS platform will be the availability of real-time lightning, especially valuable for operational applications over data sparse regions such as the oceans. The ISS platform will also uniquely enable LIS to provide simultaneous and complementary observations with other payloads such as the European Space Agency's Atmosphere-Space Interaction Monitor (ASIM) that will be exploring the connection between thunderstorms and lightning with terrestrial gamma-ray flashes (TGFs). Another important function of the ISS LIS will be to provide cross-sensor calibration/validation with a number of other payloads, including the TRMM LIS and the next generation geostationary lightning mappers (e.g., GOES-R Geostationary Lightning Mapper and Meteosat Third Generation Lightning Imager). This inter-calibration will improve the long term climate monitoring provided by all these systems. Finally, the ISS LIS will extend the time-series climate record of LIS lightning observations and expand the latitudinal coverage of LIS lightning to the climate significant upper middle-latitudes.

Blakeslee, R. J.↗

Lightning Imaging Sensor (LIS) for the International Space Station (ISS): Mission Description and Science Goals

In recent years, NASA Marshall Space Flight Center, the University of Alabama in Huntsville, and their partners have developed and demonstrated space-based lightning observations as an effective remote sensing tool for Earth science research and applications. The Lightning Imaging Sensor (LIS) on the Tropical Rainfall Measuring Mission (TRMM) continues to provide global observations of total lightning after 17 years on-orbit. In April 2013, a space-qualified LIS built as the flight spare for TRMM, was selected for flight as a science mission on the International Space Station. The ISS LIS (or I-LIS as Hugh Christian prefers) will be flown as a hosted payload on the Department of Defense Space Test Program (STP) H5 mission, which has a January 2016 baseline launch date aboard a SpaceX launch vehicle for a 2-4 year or longer mission. The LIS measures the amount, rate, and radiant energy of global lightning. More specifically, it measures lightning during both day and night, with storm scale resolution, millisecond timing, and high, uniform detection efficiency, without any land-ocean bias. Lightning is a direct and most impressive response to intense atmospheric convection. It has been found that the characteristics of lightning that LIS measures can be quantitatively coupled to both thunderstorm and other geophysical processes. Therefore, the ISS LIS lightning observations will provide important gap-filling inputs to pressing Earth system science issues across a broad range of disciplines, including weather, climate, atmospheric chemistry, and lightning physics. A unique contribution from the ISS platform will be the availability of real-time lightning, especially valuable for operational applications over data sparse regions such as the oceans. The ISS platform will also uniquely enable LIS to provide simultaneous and complementary observations with other payloads such as the European Space Agency's Atmosphere-Space Interaction Monitor (ASIM) that will be exploring the connection between thunderstorms and lightning with terrestrial gamma-ray flashes (TGFs). Another important function of the ISS LIS will be to provide cross-sensor calibration/validation with a number of other payloads, including the TRMM LIS and the next generation geostationary lightning mappers (e.g., GOES-R Geostationary Lightning Mapper and Meteosat Third Generation Lightning Imager). This inter-calibration will improve the long term climate monitoring provided by all these systems. Finally, the ISS LIS will extend the time-series climate record of LIS lightning observations and expand the latitudinal coverage of LIS lightning to the climate significant upper middle-latitudes.

Blakeslee, R. J.↗

Potential Role of Malassezia restricta in Pterygium Development

Pterygium is a condition affecting the ocular surface, marked by a triangular-shaped growth of fibrotic tissue extending from the nasal conjunctiva toward the corneal center, potentially causing visual impairment. While ultraviolet (UV )light exposure is the primary risk factor for pterygium, its underlying cause remains unclear. In order to better understand the true genesis of pterygium development, we investigated pterygium tissue and compared it with healthy conjunctiva controls. Given the eye’s direct environmental exposure, we analyzed the microbiota composition using metagenomic sequencing of pterygium tissue to identify microbes potentially associated with this condition. Metagenomic sequencing revealed a higher prevalence of the fungus Malassezia restricta in five pterygium samples, confirmed by in situ hybridization. The CHIT1 gene, which plays a role in antifungal defenses, displayed the highest expression in five pterygium tissue samples compared to healthy conjunctiva controls, suggesting the potential involvement of Malassezia restricta in pterygium development. Gene expression profiling of pterygium highlighted an IL-33 and IL-4 gene expression signature, along with an increased presence of M2 macrophages, emphasizing their role in promoting fibrosis—a hallmark feature of pterygium. The detection of Malassezia restricta in the pterygium samples and associated molecular changes provides novel insights into the ocular microbiome and raises the possibility of Malassezia’s involvement in pterygium pathology.

60 APPLIED LIFE SCIENCES↗

BLADE: An Automated Framework for Classifying Light Curves from the Center for Near-Earth Object Studies Fireball Database

Fireballs (bolides) are high-energy luminous phenomena produced when meteoroids and small asteroids enter Earth’s atmosphere at hypersonic speeds, often resulting in fragmentation or complete disintegration accompanied by significant energy release. The resulting bolide light curves capture temporal brightness variations as these objects traverse increasingly dense atmospheric layers, providing essential information on meteoroid entry dynamics, fragmentation behavior, and atmospheric energy deposition processes. The Center for Near-Earth Object Studies’ (CNEOS) continuously expanding fireball database offers a globally comprehensive archive of bolide events, including light curves and associated metadata. Events associated with infrasound detections allow direct correlations between acoustic signatures and light curve features, therefore enabling detailed analyses of fragmentation dynamics and energy deposition. Here, we introduce Bolide Light-curve Analysis and Discrimination Explorer (BLADE), a robust and high-fidelity framework specifically designed to analyze bolide light curves for objects detected from space. BLADE incorporates a processing pipeline integrating Savitzky–Golay filtering, prominence-based peak detection, and gradient analysis, enabling systematic identification and classification of fragmentation events and their associated energy release characteristics. Preliminary results demonstrate that BLADE reliably distinguishes distinct bolide behaviors, providing an objective, scalable methodology for characterization and analysis of large bolide light curve data sets. This foundational work establishes a novel pathway for advanced bolide research, with promising applications in planetary defense and global atmospheric monitoring. Future research should adopt an integrative approach combining CNEOS optical data with complementary infrasound measurements, further clarifying relationships between bolide energy deposition and acoustic signatures, thus refining our understanding of meteoroid and asteroid atmospheric entry processes.

Asteroids↗

Comet/Asteroid Protection System (CAPS): A Space-Based System Concept for Revolutionizing Earth Protection and Utilization of Near-Earth Objects

There exists an infrequent, but significant hazard to life and property due to impacting asteroids and comets. There is currently no specific search for long-period comets, smaller near-Earth asteroids, or smaller short-period comets. These objects represent a threat with potentially little or no warning time using conventional ground-based telescopes. These planetary bodies also represent a significant resource for commercial exploitation, long-term sustained space exploration, and scientific research. The Comet/Asteroid Protection System (CAPS) would expand the current detection effort to include long-period comets, as well as small asteroids and short-period comets capable of regional destruction. A space-based detection system, despite being more costly and complex than Earth-based initiatives, is the most promising way of expanding the range of detectable objects, and surveying the entire celestial sky on a regular basis. CAPS is a future spacebased system concept that provides permanent, continuous asteroid and comet monitoring, and rapid, controlled modification of the orbital trajectories of selected bodies. CAPS would provide an orbit modification system capable of diverting kilometer class objects, and modifying the orbits of smaller asteroids for impact defense and resource utilization. This paper provides a summary of CAPS and discusses several key areas and technologies that are being investigated.

Mazanek, Daniel D.↗

ALD1 accumulation in Arabidopsis epidermal plastids confers local and non-autonomous disease resistance

The Arabidopsis plastid-localized ALD1 protein acts in the lysine catabolic pathway that produces infection-induced pipecolic acid (Pip), Pip derivatives, and basal non-Pip metabolite(s). ALD1 is indispensable for disease resistance associated with Pseudomonas syringae infections of naïve plants as well as those previously immunized by a local infection, a phenomenon called systemic acquired resistance (SAR). Pseudomonas syringae is known to associate with mesophyll as well as epidermal cells. To probe the importance of epidermal cells in conferring bacterial disease resistance, we studied plants in which ALD1 was only detectable in the epidermal cells of specific leaves. Local disease resistance and many features of SAR were restored when ALD1 preferentially accumulated in the epidermal plastids at immunization sites. Interestingly, SAR restoration occurred without appreciable accumulation of Pip or known Pip derivatives in secondary distal leaves. Our findings establish that ALD1 has a non-autonomous effect on pathogen growth and defense activation. We propose that ALD1 is sufficient in the epidermis of the immunized leaves to activate SAR, but basal ALD1 and possibly a non-Pip metabolite(s) are also needed at all infection sites to fully suppress bacterial growth. Thus, epidermal plastids that contain ALD1 play a key role in local and whole-plant immune signaling.

59 BASIC BIOLOGICAL SCIENCES↗

Metabolic Interactions between Brachypodium and Pseudomonas fluorescens under Controlled Iron-Limited Conditions

Plant iron (Fe) nutritional status has a significant impact on rhizosphere microbial communities. While this effect has been attributed to alterations in the composition of root exudates, the underlying mechanisms are not known. Here, we investigated the effect of Fe deficiency on the interactions between the grass Brachypodium distachyon and the common soil bacteria Pseudomonas fluorescens SBW25. Increased phytosiderophore production was the most significant response of Brachypodium root exudation to Fe deficiency. We observed upregulated expression of phytosiderophore biosynthesis genes but lower accumulated exudate concentrations in the presence of Pseudomonas, indicating that the bacteria degrade these phytosiderophores. Pseudomonas did not produce endogenous siderophores under the low Fe conditions. Rather, the bacterial transcriptome revealed upregulation of four genes in response to Fe deficiency that contain motifs associated with cellular uptake of small molecules. Collectively, these results suggest that rhizosphere Pseudomonas fluorescens may take up phytosiderophores produced by grasses in response to Fe deficiency, and we propose target genes that may be involved. Our findings provide insight into the molecular basis for the exchange of C, N, and Fe between plants and bacteria under Fe deficient conditions. These interactions may contribute to differences in the rhizosphere microbial community structure across soil pH regimes.

Boiteau, Rene M.↗

Complete Evaluation on Advanced Reactor Machine Learning Subversion Attacks (Final)

Navigating through the world of Artificial Intelligence (AI) in nuclear reactors and their Instrumentation and Control (I&C) systems demands a careful, deliberate journey. AI’s capability to manage massive datasets and streamline control systems has indeed carved out a significant role in various sectors, including nuclear energy. However, while AI, and particularly Large Language Models (LLMs), bring a lot to the table in terms of operational efficiency and anomaly detection, they also expose the sector to a new breed of cybersecurity threats, like Inference Attacks, Adversarial Attacks, and Trojan Attacks. This guide is designed to be a straightforward manual, diving deep into the intertwining worlds of AI and cybersecurity within nuclear reactors, and tailoring insights for three crucial audiences: I&C Vendors/Developers, Nuclear Regulators, and Nuclear Reactor Operators and Cyber Defense Teams. (1) Section 2, directed at I&C Vendors/Developers, will provide a clear and focused look at several cybersecurity attacks, offering practical recommendations and detailed scenarios related to AI cybersecurity. This section isn’t just about identifying problems but also about giving solid, usable solutions. (2) Section 3, meant for Nuclear Regulators, gets straight to the point about regulations, policy suggestions, and guidelines that are needed to lay down a robust, secure, and ethical foundation for the application of AI in nuclear operations. The focus is on making sure that everything adheres to international standards and laws while being practicable and clear-cut. (3) Section 4, aimed at Nuclear Reactor Operators and Cyber Defense Teams, offers an exhaustive exploration and technical reports, with clear recommendations and scenario analyses vital to protect operational environments and guarantee the secure application of AI in nuclear reactor operations. The goal is simple: as we step into an era where AI becomes a fundamental element of our technological and energy infrastructures, this guide is here to act as a clear, direct handbook, ensuring that AI is implemented within the nuclear sector in a manner that is secure, responsible, and practical. It’s about striking a balance – optimizing the undeniable benefits offered by AI while securing and shielding against potential cyber threats as we move through this new and complex landscape.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Proposal to Develop Neutrino Diagnostics for Nuclear Weapons Tests

A nuclear weapon test would be a prolific source of neutrinos in a relatively short time window (<1 s). These neutrinos could be easily detected at distances of 10s of meters or more by detector technology that has been developed for studying neutrino interactions from nuclear reactors. Such a concept was already proposed at LANL in the 50’s but was finally reject for a more controlled experiment at a nuclear reactor – this latter method went on to win the 1995 Nobel prize in physics for the detection of the neutrino. However, times have changed and revisiting this concept could have new unappreciated applications.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Precursor Analysis Report: JBS Foods Ransomware Attack 2021

The JBS Foods 2021 Ransomware Attack Precursor Analysis Report leverages publicly available information about the JBS ransomware cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. In late May 2021, one of the world’s largest meat producers, JBS Foods, announced they had fallen victim to a worldwide ransomware attack, later found to be REvil ransomware. In the United States alone, JBS Foods accounts for nearly 25% of beef and roughly 20% of pork production. Adversaries initially launched a Distributed Denial of Service (DDoS) attack on the company’s Information Technology (IT) networks in Australia, but the attack impacted operations in Brazil, Canada, and the United States, as well. The attack caused plant operations in all four countries to shut down for at least one day. All nine of the U.S. meatpacking plants temporarily shut down because of the attack. The adversaries initially demanded a $\$$22 million ransom for the company’s data, but later negotiated the ransom down to $\$$11 million even after JBS Foods restored most of their systems. JBS Foods eventually paid the $\$$11 Million for reassurance from the adversaries that none of their customers’ data would be compromised in the future. Despite its short duration, the attack still caused large stocks of meat to spoil. The incident also underscored how adversaries can simultaneously compromise and move laterally through global subsidiaries of an organization. Researchers and analysts identified 22 unique techniques (in a sequence of 21 steps) utilized during the attack with a total of 361 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Sixteen of the identified techniques used during the JBS Foods cyber attack were precursors to the triggering event. Analysis identified 308 observables associated with these precursor techniques, 163 of which were assessed to have an increased likelihood of being perceived in the 75 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Precursor Analysis Report: SQL Slammer Worm Infection of Davis-Besse Nuclear Power Plant 2003

The SQL Slammer Worm Infection of Davis-Besse Nuclear Power Plant 2003 Precursor Analysis Report leverages publicly available information about Davis-Besse’s 2003 cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. On 25 January 2003, the SQL Slammer worm infected more than 90% of vulnerable hosts and crashed the internet in 10 to 15 minutes, making it one of the fastest spreading worms in history. SQL Slammer is a fileless, memory-resident worm that remotely exploits a stack-based buffer overflow vulnerability on local hosts to intensively scan and rapidly self-propagate across the internet. The worm infected approximately 300,000 unpatched hosts running Microsoft Structured Query Language (SQL) Server 2000 or Microsoft Desktop Engine (MSDE) 2000 with SQL Server Resolution Service. The SQL Slammer worm indirectly infected FirstEnergy’s Davis-Besse nuclear power plant by first infecting a consultant’s company network server and then propagating through an external misconfigured connection into Davis-Besse’s site network. The infection caused major network congestion, slow performance, data overloads, and the inability of local hosts to communicate with each other, which eventually caused a loss of availability and a loss of view when the Safety Parameter Display System (SPDS) and Plant Process Computer (PPC) crashed. At the time of the infection, the plant was already offline, the digital monitoring systems had redundant analog backups, and the plant control and safety functions were not affected, so there were no concerns of a safety breach. However, this incident resulted in many lessons learned and spawned important discussions about cybersecurity’s role in nuclear safety and electric power reliability regulation, policy, and guidance. Researchers and analysts identified 10 unique techniques utilized during the attack with a total of 640 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Eight of the identified techniques used during Davis-Besse cyber attack were precursors to the triggering event. Analysis identified 596 observables associated with these precursor techniques, 428 of which were assessed to have an increased likelihood of being perceived in the 331 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Precursor Analysis Report: Industroyer2 and Wiper Malware Targeting Ukrainian Energy Provider 2022

The Industroyer2 and Wiper Malware Targeting Ukrainian Energy Provider 2022 Precursor Analysis Report leverages publicly available information about the Industroyer2 cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. An adversary attempted to cause a blackout in Ukraine in April 2022 by using the Industroyer2 malware against a regional Ukrainian energy provider. The adversary targeted eight high-voltage electrical substations and utilized the malware in tandem with disk wipers for Windows, Linux, and Solaris operating systems in an attempt to make response and recovery efforts more difficult. The adversary reused a piece of the original Industroyer malware designed to open circuit breakers and de-energize target substations. The adversary gained initial access to the victim’s enterprise network through unknown means in February 2022 and was able to perform reconnaissance, pivot to the operations network, and reside in the system for at least 51 days. This gave the adversary a detailed understanding of the environment and allowed them to customize the Industroyer2 malware to the victim’s operations network. However, defenders detected and stopped the attack before the adversary could achieve their intended impact. Had the Industroyer2 attack been successful, it could have caused a blackout for more than two million people during the early stages of Russia’s invasion of Ukraine. Researchers and analysts identified 22 unique techniques (used in a sequence of 31 steps) utilized during the attack with a total of 297 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Twenty-three of the identified techniques used during the Industroyer2 cyber attack were precursors to the triggering event. Analysis identified 224 observables associated with these precursor techniques, 122 of which were assessed to have an increased likelihood of being perceived in the 51 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Precursor Analysis Report: Industroyer Targeting Ukraine Electric Power Transport Utility (Ukrenergo) 2016

The Industroyer Targeting Ukraine Electric Power Transport Utility (Ukrenergo) 2016 Precursor Analysis Report leverages publicly available information about the December 2016 cyber attack against the Ukrainian Ukrenergo electric transmission utility and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. Industroyer is a modular malware framework designed to deploy several Industrial Control System (ICS) protocol-specific attack payloads to disrupt electricity distribution. Adversaries deployed Industroyer within the target network on a Microsoft Windows endpoint capable of directly manipulating or communicating with ICS. Industroyer abuses the functionality of a targeted ICS’s legitimate control system to achieve its intended impact. Adversaries likely first gained access to Ukrenergo enterprise networks in early 2016 after a successful spearphishing campaign against organizations in the electric power sector. Adversaries then began capturing credentials beginning on 1 December 2016. This allowed access to the ICS environment at the Pivnichna electric transmission substation outside Kyiv through a device dual-homed on the Information Technology (IT) and ICS networks. Adversaries conducted discovery, targeting, and access to this device using information and previously captured credentials from compromised enterprise IT machines. Finally, the adversaries deployed and launched the Industroyer malware just before midnight on 17 December. By midnight, Ukrenergo had lost control of a targeted substation, resulting in electric power outages for over an hour in the city of Kyiv and the Kyiv region. Researchers and analysts identified 31 unique techniques (used in a sequence of 33 steps) utilized during the attack with a total of 846 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Twenty-nine of the identified techniques used during the Industroyer cyber attack were precursors to the triggering event. Analysis identified 548 observables associated with these precursor techniques, 353 of which were assessed to have an increased likelihood of being perceived in the 300 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

The development and applications of charge-coupled devices for space astronomy

The developments in charge-coupled device technology over the past decade are reviewed, with emphasis on the relevance of these developments to astronomical applications. The characteristics and limitations of current commercial devices are described, and the future requirements on CCDs for space astronomy are summarized for the X-ray and near UV, optical, and infrared wavelength ranges. Emphasis is placed on the commonality of technological development which is called for, including the issues of quantum detection efficiency (photon entrance and depletion depth), charge transfer efficiency, modulation transfer function, output noise level, and array size. The system requirements on focal plane instrumentation for space astronomy are summarized, and shown to have much in common for the different wavelength bands. These requirements are discussed in terms of CCD mosaicing, cryogenic cooling, and electronics. The overlap in CCD developments in the defense, astronomical and commercial arenas is summarized.

Griffiths, R. E.↗

Virulence factors and antimicrobial resistance profiles of Campylobacter isolates recovered from consecutively reused broiler litter

ABSTRACT Campylobacterinfections are a leading cause of bacterial diarrhea in humans globally. Infections are due to consumption of contaminated food products and are highly associated with chicken meat, with chickens being an important reservoir forCampylobacter. Here, we characterized the genetic diversity ofCampylobacter jejuni(C. jejuni) andCampylobacter coli(C. coli) detected in broiler chicken litter over three consecutive flocks and determined their antimicrobial resistance (ARM) and virulence factor (VF) profiles.Campylobacterwas detected in 9.38% (27/288) of litter samples collected. Antimicrobial susceptibility testing and whole genome sequencing were performed onC. jejuni(n= 39) andC. coli(n= 5) isolates.Campylobactervirulence factors differed within and across broiler houses but were explained by the broiler flock cohort raised on litter,Campylobacterspecies andCampylobactermultilocus sequence type (MLST). Virulence factors involved in the ability to invade and colonize host tissues and evade host defenses were present inC. jejuniisolates (ST-464) from flock cohorts 1 and 2 but absent inC. jejuniisolates (ST-48) from flock cohort 3.C. jejuniisolates from house three harbored a significantly higher proportion of virulence genes with functions related to glycosylation and immune evasion thanC. jejuniisolates from houses 1 and 2 (P< 0.01). AllC. jejuniisolates were susceptible to all antibiotics tested whileC. coli(n= 4) were resistant to tetracycline and harbored the tetracycline resistant ribosomal protection protein (TetO). Our results suggest that house environment and broiler management practices imposed selective pressures on virulence factors and antimicrobial resistance genes ofCampylobacter. IMPORTANCE Campylobacteris a leading cause of foodborne illness in the United States due to consumption of contaminated or mishandled food products, often associated with chicken meat.Campylobacteris common in the microbiota of avian and mammalian gut; however, acquisition of antimicrobial resistance genes (ARGs) and virulence factors (VFs) may result in strains that pose significant threat to public health. Although there are studies investigating the genetic diversity ofCampylobacterstrains isolated from post-harvest chicken samples, there are limited data on the genome characteristics of isolates recovered from preharvest broiler production. Here, we show thatCampylobacter jejuniandCampylobacter colidiffer in their carriage of antimicrobial resistance and virulence factors may also differ in their ability to persist in litter during consecutive grow-out of broiler flocks. We found that presence/absence of virulence factors needed for evasion of host defense mechanisms and gut colonization played an integral role in differentiatingCampylobacterstrains.

Microbiology↗

Attack on Grid Event Cause Analysis: An Adversarial Machine Learning Approach

With the ever-increasing reliance on data for data-driven applications in power grids, such as event cause analysis, the authenticity of data streams has become crucially important. The data can be prone to adversarial stealthy attacks aiming to manipulate the data such that residual-based bad data detectors cannot detect them, and the perception of system operators or event classifiers changes about the actual event. This paper investigates the impact of adversarial attacks on convolutional neural network-based event cause analysis frameworks. We have successfully verified the ability of adversaries to maliciously misclassify events through stealthy data manipulations. The vulnerability assessment is studied with respect to the number of compromised measurements. Furthermore, a defense mechanism to robustify the performance of the event cause analysis is proposed. The effectiveness of adversarial attacks on changing the output of the framework is studied using the data generated by real-time digital simulator (RTDS) under different scenarios such as type of attacks and level of access to data.

Niazazari, Iman↗