Search NASA⌕ Search

SEARCH · Search NASA

Results for “intrusion”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

Laika BOSS (Binary Object Scanning System)

Laika BOSS (Binary Object Scanning System), often written as "Laikaboss", is an object scanner and intrusion detection system that strives to be scalable, flexible, and verbose. Its goal is to take arbitrary file input and extract all relevant subfiles and metadata for use in helping analysts determine the function and maliciousness of a file at a glance. This is an extension to the original code developed by Lockheed Martin.

Walkup, Gregory↗

Time-Based CAN IDS Paper Results Code

Modern vehicles are complex cyber-physical systems made of hundreds of electronic control units (ECUs) that communicate over controller area networks (CANs). This inherited complexity has expanded the CAN attack surface which is vulnerable to message injection attacks. These injections change the overall timing characteristics of messages on the bus, and thus, to detect these malicious messages, time-based intrusion detection systems (IDSs) have been proposed. However, time-based IDSs are usually trained and tested on low-fidelity datasets with unrealistic, labeled attacks. This makes difficult the task of evaluating, comparing, and validating IDSs. Here we detail and benchmark four time-based IDSs against the newly published ROAD dataset, the first open CAN IDS dataset with real (non-simulated) stealthy attacks with physically verified effects. We found that methods that perform hypothesis testing by explicitly estimating message timing distributions have lower performance than methods that seek anomalies in a distribution related statistic. In particular, these “distribution-agnostic” based methods outperform “distribution-based” methods by at least 55% in area under the precision-recall curve (AUC-PR). Our results expand the body of knowledge of CAN time-based IDSs by providing details of these methods and reporting their results when tested on datasets with real advanced attacks. Finally, we develop an after-market plug-in detector using lightweight hardware, which can be used to deploy the best performing IDS method on nearly any vehicle.

Moriano, Pablo [Oak Ridge National Lab. (ORNL), Oa↗

Optimization Plugin Library

The Optimization Plugin library ("op") is a lightweight general optimization solver interface. The primary purpose of op is to simplify the process of integrating different optimization solvers (serial or parallel) with scalable parallel physics engines. By design it has several features that help make this a reality. The core abstraction interface was developed to encompass a large class of optimization problems in an optimizer-agnostic way. This enables us to describe the optimization problem once and then use a variety of supported "op" optimizers with ideally no code-changes. The abstraction interface is made up of lightweight wrappers that make it easy to integrate with existing simulation codes. This makes integration less intrusive and should minimize changes to existing physics codes. The "op" interface includes an assortment of utility methods that help specify parallel communication patterns as well as methods to convert from optimization-specific interfaces to the more general "op" interface. Lastly a dynamic library linking interface is provided to allow for use of proprietary optimization engines without explicit reference in the source code, along with standard shared library interfaces for opensource engines.

Jekel, CharlesF↗

Data Driven User Emulator

This software generates realistic network traffic to test intrusion detection systems. The most realistic traffic is generated when software is used to drive actual applications, thereby behaving like a real user. Tools that generate such realistic user behavior are called user emulators. However, no existing user emulators use models based on data science and real user data, and they suffer from a decrease in the fidelity of the generated traffic. We develop a user emulator that uses real user data and data science to generate higher fidelity emulation and increase the accuracy of our experimental results.

Oesch, TimothyS.↗

Using Signal Clustering Similarity for Detecting CAN Masquerade Attacks

The computer code assumes that time series representing the physical signals of the vehicle have been extracted from the CAN bus. The main input of the computer code is the multivariate time series representation of the signals in the CAN bus. The computer code cluster these time series using agglomerative hierarchical clustering from benign and attack datasets. Based on this, it generates probability distributions from the similarity of the obtained clusters based in each scenario---benign and attack---using the CluSim method (https://github.com/Hoosier-Clusters/clusim). Finally, it compares how a new data collection compares with the previous distribution to provide and probability score for an intrusion.

Moriano, Pablo↗

Sentinel

Network intrusion detection systems (NIDS) are commonplace in network security but they frequently employ algorithms that are computational demanding requiring hardware and software with significant power requirements. Two examples of such resource-intensive algorithms used for network security are regular expression matching and broader signature pattern matching which are commonly used in deep packet inspection (DPI). Network security algorithms that have large power requirements may be a challenge for low-power internet-of-things (IoT) environments, which generally lack the power resources to implement complex security measures like computationally expensive DPI at the edge. Furthermore, IoT environments incorporating 5G standalone networks have network latency constraints beyond just power that make DPI at the edge even more difficult. Programmable logic is ideally suited for machine learning inference for DPI because of its deep instruction level parallelism and single-cycle memory access. Machine learning approaches for DPI have been explored before using the programmable logic of field programmable gate arrays (FPGA) as a potential solution for NIDS approaches that would be power-suitable for IoT. However, those previous programmable logic NIDS approaches utilize either a supervised or unsupervised learning model. Sentinel utilizes the ensemble of these two machine learning approaches known as a semi-supervised approach which has shown promise in NIDS implementations. Sentinel provides a programmable logic implementation of a semi-supervised approach for DPI which operates at much lower power and latency than a GPU implementation with negligible loss of accuracy due to quantization through a logistic regressor.

Anderson, MatthewW [Idaho National Laboratory (INL↗

DER Translate

SAND2024-13723O This software translates and maps any .xlsx-based distributed energy resource (DER) device from the SunSpec certification registry (https://sunspec.org/certified-registry/) to a JSON-based DER models map. It is then read by DER monitoring tools for applications such as network intrusion detection and system health monitoring. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Fragkos, Georgios↗

Subtropical Jet Regulates Arabian Winter Precipitation: A Viable Mechanism

The present study explores the mechanism governing wintertime (November–April) precipitation over the Arabian Peninsula (AP) using a 17-yr-long (2002–18) high-resolution WRF simulation. The composite analysis of strong precipitation events suggests that the equatorward extension of the upper-level jet together with the embedded upper-level trough creates a positive (cyclonic) midlevel vorticity and subsequently generates an anomalous lower-level convergence through Ekman pumping. This leads to the development of an anomalous surface low, which is further enhanced in the presence of the existing Red Sea trough over the AP. This surface low weakens the persistent anticyclone over the AP, shifting it further eastward to the Arabian Sea. The eastward shift in the lower-level anticyclone contributes to the transport of warm, moist air from the Arabian Sea and the Red Sea toward the AP. This warm, moist air converges with the cold and dry air advected by the midlatitude jet and creates a moisture convergence zone, leading to the initiation of convection. We test the proposed mechanism through numerical experiments with modified upper-level wind and demonstrate that a strong, southward intrusion of the jet can indeed lead to precipitation over the AP. The above mechanism also explains the interannual variability of precipitation over the AP. During wet years, we notice approximately 3 m s -1 stronger jet core magnitude and about a 2° equatorward shift of the jet compared to dry years. While the equatorward extension of the jet explains about 21% of the interannual variability, the jet magnitude explains around 7% of the variability during wet years.

54 ENVIRONMENTAL SCIENCES↗

Intermittent Frontogenesis in the Alboran Sea

Abstract We present a phenomenological description and dynamical analysis of the Alboran fronts using a realistic simulation at submesoscale resolution. The study is focused on east Alboran fronts emerging within relatively strong flows that separate from the Spanish coast into the basin interior. Despite modest lateral shifting associated with the position of the Alboran anticyclonic gyres and variations in intensity, these fronts present a similar structure and dynamical configuration as the climatological Almeria–Oran front. The statistical analysis of our solution shows that strained-induced frontogenesis is a recurrent submesoscale mechanism associated with these fronts, and the process is assessed in terms of the advective Lagrangian frontogenetic tendencies associated with buoyancy and velocity horizontal gradients. Intermittency in their strength and patterns is indicative of high variability in the occurrence of active frontogenesis in association with the secondary (overturning) circulation across the frontal gradient. As a result, we find many episodes with strong surface fronts that do not have much associated downwelling. Frontogenesis and the associated secondary circulation are further explored during two particular frontal events, both showing strong downwelling of (1) cm s −1 extending down into the pycnocline. A frontogenetic contribution of turbulent vertical momentum mixing to the secondary circulation is identified in the easternmost region during the cold season, when the dynamics are strongly influenced by the intrusion of the salty Northern Current. The background vertical velocity fields observed during the analyzed events indicate other currents in the submesoscale range, including tidal and topographic internal waves.

Capó, Esther↗

Doppler-Lidar Evaluation of HRRR-Model Skill at Simulating Summertime Wind Regimes in the Columbia River Basin during WFIP2

Complex-terrain locations often have repeatable near-surface wind patterns, such as synoptic gap flows and local thermally forced flows. An example is the Columbia River Valley in east-central Oregon-Washington, a significant wind-energy-generation region and the site of the Second Wind-Forecast Improvement Project (WFIP2). Data from three Doppler lidars deployed during WFIP2 define and characterize summertime wind regimes and their large-scale contexts, and provide insight into NWP model errors by examining differences in the ability of a model [NOAA’s High-Resolution Rapid-Refresh (HRRR-version1)] to forecast wind-speed profiles for different regimes. Seven regimes were identified based on daily time series of the lidar-measured rotor-layer winds, which then suggested two broad categories. First, in three regimes the primary dynamic forcing was the large-scale pressure gradient. Second, in two regimes the dominant forcing was the diurnal heating-cooling cycle (regional sea-breeze-type dynamics), including the marine intrusion previously described, which generates strong nocturnal winds over the region. The other two included a hybrid regime and a non-conforming regime. For the large-scale pressure-gradient regimes, HRRR had wind-speed biases of ~1 m s -1 and RMSEs of 2-3 m s -1 . Errors were much larger for the thermally forced regimes, owing to the premature demise of the strong nocturnal flow in HRRR. Thus, the more dominant the role of surface heating in generating the flow, the larger the errors. Major errors could result from surface heating of the atmosphere, boundary-layer responses to that heating, and associated terrain interactions. Finally, measurement/modeling research programs should be aimed at determining which modeled processes produce the largest errors, so those processes can be improved and errors reduced.

17 WIND ENERGY↗

Tissue scale agent-based simulation of premalignant progressions in Barrett’s esophagus

Barrett’s esophagus (BE) is a benign condition of the distal esophagus that initiates a multistage pathway to esophageal adenocarcinoma (EAC). Short of frequent intrusive (and costly) surveillance, effective screening for neoplasia in BE populations is yet to be established since progressors are rare and virtually undetectable without routine biopsies, which often sample only a small portion of the BE tissue. As a result, reliable estimation of the true prevalence of dysplasia in a BE population and evidence-based optimization of screening for at-risk individuals is challenging. Data-driven microsimulations, i.e., model-generated instances of disease history in a predefined virtual population, have found utility in the EAC screening literature as low-overhead alternatives to real-world hypothesis testing of optimal interventions for dysplasia. Despite the successes, computational limitations, paucity of knowledge and data on Barrett’s dysplasia, and the complexities of disease progression as a multiscale multiphysics process have hindered the treatment of disease progression in BE as a spatial process. Agent-based modeling of nucleation and proliferation processes in dysplasia warrants exploration in this context as an approximation that operates at a trade-off between computational tractability and precise representation of the composition and physics of the substrate (tissue). In this study, we describe spatially resolved simulations of premalignant progression toward EAC in a coarse-grained model of Barrett’s tissue that resolves the metaplastic tissue at a length scale of 0.42 mm (~3300 crypts/mm 2 ). Finally, the model is calibrated to reproduce historical high-grade dysplasia prevalence when model-generated patients are screened using the Seattle protocol.

59 BASIC BIOLOGICAL SCIENCES↗

Development of Cable Aging Acceptance Criteria for Nuclear Facilities

The aging of nuclear power plant electrical cables has been the subject of substantial research and development (R&D) projects in the nuclear industry, national and international laboratories, universities, and vendor organizations for several years. More specifically, these R&D efforts were conducted to develop equipment and techniques for assessing age-related degradation of in-service cables in nuclear facilities including power plants, research reactors, waste facilities and fuel fabrication plants. In recent years, cable R&D efforts in the nuclear arena have also included work to develop new cables for the next generation of reactors. Over time, exposure to harsh environmental conditions such as elevated temperatures, radiation, and humidity in nuclear installations can result in age-related degradation and failure of cables. In the current fleet of nuclear reactors, there are thousands of miles of cabling installed in each plant and many of these cables are exposed to these harsh environmental conditions. For these cables, the jacket and insulation polymers harden and become brittle over time, making them more susceptible to crack formation and growth, moisture intrusion, and other mechanisms that can lead to cable failure. Moreover, the existing U.S. fleet of 98 nuclear reactors has an average operating age of 38 years. Many of these nuclear power plants have applied for and almost all have been granted regulatory approval for license renewals to operate for 60 years, 20 years beyond their original 40-year life. Further, subsequent license renewals (SLRs) are underway with a few commercial nuclear power sites already approved to operate up to 80 years. As these reactors pursue operating life extensions, utilities must find a way to address issues associated with age-related degradation of cables. Designers of small modular reactors are also in need of technologies to evaluate the performance of cables that will be installed in harsher environments (e.g. higher temperatures, radiation doses, dose rates, etc.) than those present in current-generation reactors. Today, a variety of cable condition monitoring (CM) techniques have been developed and successfully used in nuclear facilities. These techniques are used to identify age-related degradation and assess the condition of cables to determine if their performance characteristics have changed with age. However, objective criteria must be developed for these CM tests to help quantify cable condition and thereby develop repair and replacement schedules. With operating life extending to 80 years and more SLRs on the horizon, both nuclear facilities and regulators need an objective means to determine the aged condition of cables.

36 MATERIALS SCIENCE↗

One-dimensional air temperature measurements by air resonance enhanced multiphoton Ionization thermometry (ART)

In this work, a detailed calibration study is performed to establish non-intrusive one-dimensional (1D) rovibrational temperature measurements in unseeded air, based on air resonance enhanced multiphoton ionization thermometry (ART). ART is generated by REMPI (resonance enhanced multi-photon ionization) of molecular oxygen and subsequent avalanche ionization of molecular nitrogen in a single laser pulse. ART signal, the fluorescence from the first negative band of molecular nitrogen, is directly proportional to the 2-photon transition of molecular oxygen C 3 Π (v = 2) ← X 3 Σ (v’=0), which is used to determine temperature. Experimentally, hyperfine structures of the O 2 rotational branches with high temperature sensitivity are selectively excited through a frequency-doubled dye laser. Electron-avalanche ionization of N 2 results in the fluorescence emissions from the first negative bands of N 2 + near 390, 425, and 430nm, which are captured as a 1D line by a gated intensified camera. Post processing of the N 2 + fluorescence yields a 1D thermometry line that is representative of the air temperature. It is demonstrated that the technique provides ART fluorescence of ∼5cm in length in the unseeded air, presenting an attractive thermometry solution for high-speed wind tunnels and other ground test facilities.

42 ENGINEERING↗

O 2 based resonantly ionized photoemission thermometry analysis of supersonic flows

Characterization of the thermal gradients within supersonic and hypersonic flows is essential for understanding transition, turbulence, and aerodynamic heating. Developments in novel, impactful non-intrusive techniques are key for enabling flow characterizations of sufficient detail that provide experimental validation datasets for computational simulations. In this work, Resonantly Ionized Photoemission Thermometry (RIPT) signals are directly imaged using an ICCD camera to realize the techniques 1D measurement capability for the first time. The direct imaging scheme presented for oxygen-based RIPT (O 2 RIPT) uses the previously established calibration data to direct excite various resonant rotational peaks within the S-branch of the C 3 Π, ( v = 2) ← X 3 Σ( v ′ = 0) absorption band of O 2 . The efficient ionization of O 2 liberates electrons that induce electron avalanche ionization of local N 2 molecules generating N 2 + , which primarily deexcites via photoemissions of the first negative band of N 2 + ( B 2 Σ <#comment/> u + − <#comment/> X 2 Σ <#comment/> g + ) . When sufficient lasing energy is used, the ionization region and subsequent photoemission signal is achieved along a 1D line thus, if directly imaged can allow for gas temperature assignments along said line; demonstrated here of up to five centimeters in length. The temperature gradients present within the ensuing shock train of a supersonic under expanded free jet serves as a basis of characterization for this new RIPT imaging scheme. The O 2 RIPT results are extensively compared and validated against well-known and established techniques (i.e., CARS and CFD). The direct imaging capability fully realizes the technique’s fundamental potential and is expected to be the standard of implementation going forward. The direct imaging capability can play instrumental roles in future scientific studies that rely upon acute characterization of thermal gradients within a medium that cannot be easily resolved by a point. Furthermore, the removal of the spectrometer greatly reduces the cost, complexity, and optical alignment associated with prior RIPT measurements.

42 ENGINEERING↗

One dimensional temperature measurements by resonantly ionized photoemission thermometry of molecular nitrogen

This paper presents an extensive parameter study of a non-intrusive and non-seeded laser diagnostic method for measuring one dimensional (1D) rotational temperature of molecular nitrogen (N 2 ) at 165 - 450 K. Compared to previous efforts using molecular oxygen, here resonantly ionized and photoelectron induced fluorescence of molecular nitrogen for thermometry (N 2 RIPT) was demonstrated. The RIPT signal is generated by directly probing various rotational levels within the rovibrational absorption band of N 2 , corresponding to the 3-photon transition of N 2 ( X 1 Σ g + , v =0→ b 1 Π u , v ′ =6) near 285 nm, without involving collisional effects of molecular oxygen and nitrogen. The photoionized N 2 produces strong first negative band of N 2 + ( B 2 Σ u + − X 2 Σ g + ) near 390 nm, 420 nm, and 425 nm. Boltzmann analyses of various discrete fluorescence emission lines yield rotational temperatures of molecular nitrogen. By empirically choosing multiple rotational levels within the absorption band, non-scanning thermometry can be accurately achieved for molecular nitrogen. It is demonstrated that the N 2 RIPT technique can measure 1D temperature profile up to ∼5 cm in length within a pure N 2 environment. Multiple wavelengths are thoroughly analyzed and listed that are accurate for RIPT for various temperature ranges.

McCord, Walker (ORCID:0000000179747550)↗

One-dimensional temperature measurement of supersonic jet flow by resonantly ionized photoemission thermometry of molecular nitrogen

As the field of fluid dynamics progresses, the demand for sophisticated diagnostic methods to accurately assess flow conditions rises. In this work, resonantly ionized photoemission thermometry (RIPT) has been used to directly target and ionize diatomic nitrogen (N 2 ) to measure one-dimensional (1D) temperature profiles in a supersonic jet flow. This technique can be considered non-intrusive as the premise uses resonantly enhanced multiphoton ionization (REMPI) to target molecular nitrogen. This resonance excites N 2 into absorption bands of the P, Q, and R rotational branches of N 2 ( b 1 Π u ). The ideal (3 + 1) REMPI scheme excites from the ground state and ionizes N 2 ( b 1 Π u ← X 1 Σ g + ) where de-excitation results in photoemission from the first negative band of ionized N 2 + ( B 2 Σ u + → X 2 Σ g + ) as nitrogen returns to the ground state. The resulting emission can be observed using an intensified camera, thus permitting inference of the rotational temperature of ground-state molecular nitrogen. A linearly regressive Boltzmann distribution is applied based on previous calibration data for this technique to quantify the temperature along the ionized line. This work applies this technique to a pure N 2 supersonic jet in cross-flow and counter-flow orientations to demonstrate N 2 RIPT’s applications in a supersonic flow. Temperature variations are observed at different locations downstream of the exit in cross-flow, and axisymmetric in counter-flow, to generate profiles characterizing the flow dynamics. Due to the collisional effects resulting from the number density of N 2 at higher pressures, a (3 + 2) REMPI scheme is observed throughout this text.

Clark, Aleksander (ORCID:0009000855600042)↗

Automated pipeline framework for processing of large-scale building energy time series data

Commercial buildings account for one third of the total electricity consumption in the United States and a significant amount of this energy is wasted. Therefore, there is a need for “virtual” energy audits, to identify energy inefficiencies and their associated savings opportunities using methods that can be non-intrusive and automated for application to large populations of buildings. Here we demonstrate virtual energy audits applied to large populations of buildings’ time-series smart-meter data using a systematic approach and a fully automated Building Energy Analytics (BEA) Pipeline that unifies, cleans, stores and analyzes building energy datasets in a non-relational data warehouse for efficient insights and results. This BEA pipeline is based on a custom compute job scheduler for a high performance computing cluster to enable parallel processing of Slurm jobs. Within the analytics pipeline, we introduced a data qualification tool that enhances data quality by fixing common errors, while also detecting abnormalities in a building’s daily operation using hierarchical clustering. We analyze the HVAC scheduling of a population of 816 buildings, using this analytics pipeline, as part of a cross-sectional study. With our approach, this sample of 816 buildings is improved in data quality and is efficiently analyzed in 34 minutes, which is 85 times faster than the time taken by a sequential processing. The analytical results for the HVAC operational hours of these buildings show that among 10 building use types, food sales buildings with 17.75 hours of daily HVAC cooling operation are decent targets for HVAC savings. Overall, this analytics pipeline enables the identification of statistically significant results from population based studies of large numbers of building energy time-series datasets with robust results. These types of BEA studies can explore numerous factors impacting building energy efficiency and virtual building energy audits. This approach enables a new generation of data-driven buildings energy analysis at scale.

36 MATERIALS SCIENCE↗