Search NASASearch

SEARCH · Search NASA

Results for “cloud detection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

Enhancing Cluster Identification in Atom Probe Tomography Data Using Transfer Learning

Atom Probe Tomography (APT) is a powerful technique for visualizing the atomic-scale distribution of solutes in materials, but quantitative cluster analysis of APT datasets remains a challenge due to the need for subjective parameter selection in clustering algorithms. While distance-based and density-based methods such as HDBSCAN are widely used, their performance is highly sensitive to user-defined parameters, which undermines reproducibility and accuracy. This study proposes an image-based, deep learning-aided workflow for automating parameter selection and cluster detection in APT data analysis. By projecting 3D APT point clouds onto 2D planes, we leverage pretrained convolutional neural networks (ConvNeXt-Tiny and ResNet-50) through transfer learning to predict the number of clusters present in synthetic datasets. The output is used to guide K-means clustering and estimate HDBSCAN parameters, specifically minimum cluster size and minimum sample points. This approach reduces reliance on manual parameter tuning, improving consistency and scalability. The methodology demonstrates the feasibility of using image-based deep learning for interpreting complex spatial patterns in APT data, enabling faster and more objective analysis. The complete workflow and code are made publicly available to support reproducibility and future research.

Density-based clustering

The role of local shipping emissions in aerosol-cloud interactions in the central Arctic

Arctic shipping is projected to increase as sea ice retreats, yet the impact of modern low-sulfur ship emissions on Arctic clouds and radiation remain poorly constrained. We use year-long in situ observations from the MOSAiC expedition to characterize ship-aerosol-cloud interactions for an icebreaker burning ultra-low sulfur fuel (0.1% mass per mass). Exhaust plumes were found to be strongly enriched in Aitken-mode particles, organic aerosol, and black carbon, but showed no detectable enhancement in particulate sulfate. Despite reduced hygroscopicity relative to ambient aerosols, ship emissions substantially increased local cloud condensation nuclei concentrations. A droplet activation parameterization was applied to quantify responses in cloud droplet number concentration ( N d ) to ship-induced perturbations in low-level Arctic clouds. In winter, abundant background accumulation-mode particles from Arctic haze supplied nearly all cloud droplets, while additional particles from ship emissions had little impact on N d . In contrast, during summer months, when unperturbed background aerosol concentrations are low, ship emissions nearly doubled N d compared to average background conditions and increased N d by a factor of five compared to very clean background conditions (25th percentile of background aerosol number concentrations). Longwave radiative transfer simulations for typical conditions of summer Arctic low-level clouds/fog suggest that these ship-induced increases in N d locally (i.e. <100 km downwind) lead to enhanced net surface longwave fluxes and consequent warming, primarily for optically thin clouds (liquid water path (LWP) ⩽ 30 g·m −2 ). For LWP = 10 g · m −2 , ship emissions lead to an increase of 1 W · m −2 in cloud longwave forcing at the surface compared to average unperturbed conditions (+7% relative increase), and up to 4 W · m −2 when compared to very clean background conditions (+22% relative increase). Even ultra-low sulfur fuel emissions can therefore locally and episodically modify Arctic cloud microphysics and radiative properties, especially during summer, implying that future increases in Arctic shipping could have non-negligible regional climate impacts.

Arctic

TRACER Perspectives on Gulf-Breeze and Bay-Breeze Circulations and Coastal Convection

Abstract This study explores gulf-breeze circulations (GBCs) and bay-breeze circulations (BBCs) in Houston–Galveston, investigating their characteristics, large-scale weather influences, and impacts on surface properties, boundary layer updrafts, and convective clouds. The results are derived from a combination of datasets, including satellite observations, ground-based measurements, and reanalysis datasets, using machine learning, changepoint detection method, and Lagrangian cell tracking. We find that anticyclonic synoptic patterns during the summer months (June–September) favor GBC/BBC formation and the associated convective cloud development, representing 74% of cases. The main Tracking Aerosol Convection Interactions Experiment (TRACER) site located close to the Galveston Bay is influenced by both GBC and BBC, with nearly half of the cases showing evident BBC features. The site experiences early frontal passages ranging from 1040 to 1630 local time (LT), with 1300 LT being the most frequent. These fronts are stronger than those observed at the ancillary site which is located further inland from the Galveston Bay, including larger changes in surface temperature, moisture, and wind speed. Furthermore, these fronts trigger boundary layer updrafts, likely promoting isolated convective precipitating cores that are short lived (average convective lifetime of 63 min) and slow moving (average propagation speed of 5 m s −1 ), primarily within 20–40 km from the coast.

54 ENVIRONMENTAL SCIENCES

Formation of 1 H -Phenalene (C 13 H 10 ) in the Taurus Molecular Cloud via Methylidyne Addition-Cyclization-Aromatization (MACA)

The formation of 1H-phenalene (C 13 H 10 ) in cold molecular clouds, such as the Taurus Molecular Cloud-1 (TMC-1), presents a significant challenge to traditional astrochemical models, which predominantly suggest high-temperature pathways for polycyclic aromatic hydrocarbon (PAH) formation. In this study, we explore computationally the Methylidyne Addition-Cyclization-Aromatization (MACA) mechanism as a viable, barrierless pathway for phenalene synthesis under low-temperature conditions. Through electronic structure calculations and Rice–Ramsperger–Kassel–Marcus (RRKM) statistical methods, we demonstrate that the reaction of 1-vinylnaphthalene (C 10 H 7 C 2 H 3 ) with the methylidyne radical (CH) leads to the formation of 1H-phenalene via a bimolecular reaction, a process that is exoergic and without entrance barrier. The MACA mechanism facilitates the growth of the aromatic carbon backbone via a [5 + 1] ring annulation, providing a new insight into PAH formation in cold molecular clouds. Notably, the MACA mechanism has previously been shown to form indene (C9H8), which was detected in TMC-1 as well, via a [4 + 1] annulation, demonstrating its potential to produce a variety of complex PAHs by addition of a five- and six-membered ring to a benzene moiety via [4 + 1] and [5 + 1] annulation, respectively. As a result, this work highlights the importance of barrierless, exoergic reactions involving MACA in the synthesis of complex aromatic molecules in space, expanding our physicochemical understanding of carbon-rich chemistry in cold molecular clouds.

Aromatic compounds

Ice nucleation by volcanic ash greatly alters cirrus cloud properties

The formation of ice crystals in the atmosphere strongly affects cloud properties and climate. While volcanic ash (VA) has been shown to nucleate ice crystals efficiently in laboratory settings, its importance for ice formation in the atmosphere remains elusive. Here, we show evidence of cirrus modification by volcanic eruptions through ice nucleation on VA, revealed by abrupt changes in cirrus properties following volcanic eruptions based on satellite measurements. The distinct changes captured are a phenomenal decrease in number, an increase in size of ice crystals in cirrus clouds, and an increase in cirrus occurrences after ash-rich volcanic eruptions. Conversely, no such changes were detected following the ash-poor eruption. We propose a cirrus formation mechanism where VA nucleates ice heterogeneously, suppressing homogeneous freezing and resulting in fewer but larger ice crystals. This suppression of homogeneous freezing by VA is supported by process-level cloud microphysical simulations. Our findings advance the understanding of aerosol–ice cloud interactions and illuminate cirrus geoengineering.

Lin, Lin [Texas A & M Univ., College Station, TX (

Leveraging machine learning to enhance aerosol classification using Single-Particle Mass Spectrometry

Advancing automated classification of atmospheric aerosols from Single-Particle Mass Spectrometry (SPMS) data remains challenging due to overlapping ion signatures, compositional diversity, and limited labeled data. This study evaluates supervised and semi-supervised learning frameworks to enhance aerosol identification by jointly leveraging labeled and unlabeled spectra. Four models were compared: a supervised Support Vector Machine (SVM), a self-training SVM, a stacked autoencoder classifier, and a stacked autoencoder trained using a temporal-ensembling Mean Teacher approach. All models achieved high and stable accuracies (90.0 %–91.1 %), surpassing previous results on the same dataset (87 %) and matching the performance of state-of-the-art deep learning methods. Despite small global metric differences (≤ 1 %), semi-supervised variants yielded up to 5 %–10 % improvements for compositionally rare particle types – such as soot (0.77 % of spectra, F1-score: 0.93–0.97) and hazelnut pollen (0.98 % of spectra, F1-score: 0.97–1.00) – equating to roughly ∼ 187 additional correctly classified spectra. These gains are scientifically significant, as such rare particles exert disproportionate influence on radiative absorption and ice nucleation processes; their improved detection reduces modeled uncertainties in aerosol absorption optical depth and mixed-phase cloud ice nucleation rates. The models' residual misclassifications (≈ 9 %) largely arise from true spectral overlap among chemically adjacent species (e.g., Na- vs. K-feldspar, coated vs. uncoated feldspars), reflecting physical compositional continuity rather than algorithmic error. Collectively, these findings demonstrate that leveraging unlabeled data to learn robust spectral representations and refine classification enhances both fidelity and interpretability, bridging data-driven analysis with aerosol–climate process understanding.

54 ENVIRONMENTAL SCIENCES

Cloud-Based Demonstration of the Eastern Interconnection Situational Awareness Monitoring System (ESAMS)

This report describes a cloud-based implementation and field demonstration of the Eastern Interconnection Situational Awareness and Monitoring System (ESAMS). ESAMS was developed to support the detection and source localization of forced oscillations using synchrophasor measurements from tie-lines connecting areas served by different reliability coordinators (RCs), so that RCs could better coordinate their response to wide-area events. A previous effort had identified deployment barriers associated with hosting shared situational awareness tools at a single RC. To address these barriers, ESAMS was migrated to Amazon Web Services and evaluated in a six-month field demonstration. ISO New England (ISO-NE) and PJM streamed data to the platform using AWS Direct Connect and a site-to-site VPN, respectively. The resulting multi-utility measurement footprint enabled regional source localization across major portions of the U.S. Eastern Interconnection and supported routine identification of oscillation events. During the final three months of the trial, 24 events above 2 MW/MVAR were detected. The largest detected oscillation approached a 25 MW peak-to-peak amplitude, and the longest persisted intermittently for more than 11 hours. The demonstration also assessed operational considerations—including data transfer volumes, end-to-end latency, and cloud computing costs—and found that network and compute requirements were modest relative to typical cloud capabilities while providing performance comparable to prior on-premises deployments. Overall, the results indicate that cloud hosting can provide a practical path to shared interconnection-wide oscillation monitoring. The cloud ESAMS demonstration establishes a foundation for broader utility participation and for building future wide-area analytics that leverage measurements across organizational boundaries.

Follum, James D.

Deep Learning and Photogrammetric Reconstruction for Automated Crack Detection and Dimensional Measurement in Mining Operations

Surface crack detection and dimensional measurement at active mining sites present significant safety and operational challenges. Manual inspection methods are labor-intensive, spatially incomplete, and expose personnel to hazardous environments, while existing automated approaches have been developed primarily for concrete civil infrastructure and have not been validated on the complex, variable surfaces characteristic of mining environments. This dissertation presents an automated pipeline that integrates deep learning semantic segmentation with Structure-from-Motion photogrammetry to detect surface cracks and measure their aperture, length, and vertical displacement from standard RGB imagery acquired during routine Uncrewed Aerial Vehicle (UAV) survey operations, without requiring additional sensor hardware or manual measurement. The pipeline combines a U-Net architecture with an EfficientNet-B0 encoder, pretrained on the SDNET2018 concrete crack dataset and fine-tuned on a mining-specific dataset spanning laboratory concrete specimens, coal refuse impoundment embankments, and post-blast limestone quarry benches. Photogrammetric reconstruction is performed using COLMAP Structure-from-Motion and Multi-View Stereo, with crack segmentation masks projected into the reconstructed point cloud to enable three-dimensional vertical displacement measurement through local plane fitting and bimodal surface detection. The pipeline was validated across 36 controlled laboratory specimens at three imaging distances and four vertical displacement levels, achieving aperture measurement RMSE of 0.047 cm and R² of 0.954, and vertical displacement RMSE of 0.140 cm and R² of 0.966, against independent caliper measurements. Field application at a coal refuse impoundment in southwestern Pennsylvania detected 71 crack components across the embankment crest, with a dominant longitudinal crack exhibiting aperture values reaching 28 cm and a 95th percentile vertical displacement of 35.53 cm, consistent in magnitude and spatial distribution with simultaneously acquired LiDAR-derived estimates. Application across four post-blast limestone quarry bench datasets in California successfully characterized blast-induced fracture networks at ground sampling distances ranging from 0.59 to 1.23 cm/pixel, with detected crack geometries physically consistent with observable surface conditions at each site. The results demonstrate that deep learning-based crack detection and photogrammetric measurement can be integrated into routine UAV inspection workflows at mining sites, providing repeatable, scalable, and quantitative crack characterization across surface types, crack scales, and displacement magnitudes not previously addressed in the literature. The pipeline requires no dedicated surveying equipment beyond the UAV platforms already deployed at mine sites for survey and monitoring purposes, supporting practical adoption within existing operational workflows.

Crack detection, Dimensional Measurement

Cepheids with giant companions: II. Spectroscopic confirmation of nine new double-lined binary systems composed of two Cepheids

Context.Binary Cepheids with giant companions are crucial for studying the physical properties of Cepheid variables, in particular providing the best means to measure their masses. Systems composed of two Cepheids are even more important, but to date, only one such system has been identified, in the Large Magellanic Cloud (LMC). Aims.Our current aim is to increase the number of these systems known tenfold and to provide their basic characteristics. The final goal is to obtain the physical properties of the component Cepheids, including their masses and radii, and to learn about their evolution in the multiple systems, also revealing their origin. Methods.We started a spectroscopic monitoring campaign of nine unresolved pairs of Cepheids from the OGLE catalog to check if they are gravitationally bound. Two of these so-called double Cepheids are located in the LMC, five are in the Small Magellanic Cloud (SMC), and two are in the Milky Way (MW). Results.We report a spectroscopic detection of the binarity of all nine of these double Cepheids with orbital periods ranging from 2 to 18 years. This increases the number of known binary double (BIND) Cepheids from 1 to 10 and triples the number of all confirmed double-lined binary (SB2) Cepheids. For five BIND Cepheids, the disentangled pulsational light curves of the components show anti-correlated phase shifts due to orbital motion. We show the first empirical evidence that typical period–luminosity relations (PLRs) are rather binary Cepheid PLRs, as they include light of the companion. Conclusions.The statistics of pulsation period ratios of BIND Cepheids do not agree with those expected for pairs of Cepheids of the same age. These ratios together with the determined mass ratios far from unity suggest a merger origin of at least one component for about half of the systems. The SMC and MW objects are the first found in SB2 systems composed of giants in their host galaxies. The Milky Way BIND Cepheids are also the closest such systems, being located at about 11 and 26 kpc.

Astronomy & Astrophysics

Fast and sensitive measurements of sub-3 nm particles using Condensation Particle Counters For Atmospheric Rapid Measurements (CPC FARM)

New particle formation (NPF) is the atmospheric process whereby gas molecules react and nucleate to form detectable particles. NPF has a strong impact on Earth's radiative balance as it produces roughly half of global cloud condensation nuclei. However, the time resolution and sensitivity of current instrumentation are inadequate in measuring the size distribution of sub-3 nm particles, the particles critical for understanding NPF. Here we present the Condensation Particle Counters For Atmospheric Rapid Measurements (CPC FARM), a method to measure the concentrations of freshly nucleated particles. The CPC FARM consists of five CPCs operating in parallel, each configured to operate at different detectable particle sizes between 1–3 nm. This study explores two methods to calculate the size distribution from the differential measurements across the CPC channels. The performance of both inversion methods was tested against the size distribution measured by a pair of stepping particle mobility sizers (SMPSs) during an ambient air sampling study in Pittsburgh, PA. Observational results indicate that the CPC FARM is more accurate with higher time resolution and sensitivity in the sub-3 nm range compared to the SMPS.

Cheng, Darren [Carnegie Mellon Univ., Pittsburgh,

Allometric and Mobile Terrestrial LiDAR Modeling of Aboveground Woody Biomass of Populus in Coppice Production

Poplars ( Populus spp.) and their hybrids are increasingly being grown in coppice production to generate bioenergy feedstocks at frequent intervals. Allometric equations are re-quired to predict aboveground biomass (AGB) of coppiced individuals with minimal field measurements. Likewise, remote sensing tools like LiDAR (light detection and ranging) can be used if models are available to predict AGB from point cloud data. Therefore, this study sought to develop equations to predict dry woody AGB from field measurements and LiDAR data from coppiced poplar field trials containing eastern cottonwood ( P. del-toides ) and hybrid poplar taxa. We found that taxa-specific allometric models containing the summed basal area of the three largest stems in the coppice provided the best predictive model, with stem height and stem count failing to provide additional explanatory power. The best predictive LiDAR-based model was independent of taxa but had slightly lower adjusted R 2 and higher RMSE than the allometric model. It contained four parameters including crown volume, leaf area index, variance of height returns, and the top point density (i.e., density metric 9 or the proportion of points in the highest point interval when the point cloud is evenly divided into ten vertical intervals). In total, these models can be used to quickly and efficiently estimate dry woody AGB of Populus coppice systems for bioenergy feedstock production.

AGB

Surface and Buried Thermal, and RGB Unexploded Ordnance Data Collection

This document provides a description of a data collection campaign of unexploded ordnance (UXOI) set. The dataset captures a controlled UAV imaging campaign designed to support detection of UXO across varied environmental conditions. Data were collected during three campaigns in Norris and Northeast Knoxville, Tennessee, using RGB, and thermal sensors mounted on Parrot UKR. In total, the dataset contains 9925 images, 26 full-motion video, and approximately 81.99 GB of data, collected across late spring/summer conditions, every hour during sunlight, and multiple surface contexts, including tall grass, short grass, gravel, as well as buried in sand, and other gravel mixtures. The collection was designed to capture thermal and visual variability relevant to UXO detection in agricultural land, bare earth, and subsurface. Review of the imagery showed that ordnance was most detectable during periods of changing solar input, especially approximately 10-60 minutes after sunrise, approximately 20-60 minutes after sunset, and 2-3 min after cloud cover interrupted prolonged solar heating. These conditions increased thermal contrast because many ordnance items retained or released heat differently than the surrounding vegetation and ground surface. This dataset provides a useful resource for developing and evaluating airborne UXO detection methods under realistic field conditions. All ordnance used in the study was inert, and thermal behavior may differ from that of live ordnance. In addition, variation in ordnance type, composition, and placement introduced differences in thermal response that should be considered when interpreting results.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF

Reference Shapefiles and Pre-trained Random Forest Classification Models for Detecting Aufeis on the North Slope of Alaska in Landsat Imagery

This dataset provides shapefiles and trained machine learning models used for aufeis detection at four sites on the North Slope of Alaska. It includes reference data for evaluating Landsat-based detection methods, supporting research on remote sensing approaches for identifying aufeis. The ReferenceData folder contains ArcGIS shapefiles of semi-automated land cover classifications for 217 Landsat Collection 2 images, categorizing pixels into six classes: aufeis, snow, ground, none, water, and cloud. The SiteBuffers.zip file includes 10-kilometer buffer shapefiles defining regions of interest around four aufeis fields (Canning21, FH1, Firth, and Kuparuk), used to test three detection techniques. Additionally, the TrainedRFModels folder contains six pre-trained Scikit-Learn Random Forest classifiers (100 trees, max depth = 30) designed to predict aufeis presence in Landsat Collection 2 Surface Reflectance images using Red, Blue, SWIR2, NDVI, and NDWI bands. This dataset supports the development and validation of remote sensing methods for mapping aufeis in Arctic environments.The Next-Generation Ecosystem Experiments: Arctic (NGEE Arctic), was a research effort to reduce uncertainty in Earth System Models by developing a predictive understanding of carbon-rich Arctic ecosystems and feedbacks to climate. NGEE Arctic was supported by the Department of Energy's Office of Biological and Environmental Research.The NGEE Arctic project had two field research sites: 1) located within the Arctic polygonal tundra coastal region on the Barrow Environmental Observatory (BEO) and the North Slope near Utqiagvik (Barrow), Alaska and 2) multiple areas on the discontinuous permafrost region of the Seward Peninsula north of Nome, Alaska.Through observations, experiments, and synthesis with existing datasets, NGEE Arctic provided an enhanced knowledge base for multi-scale modeling and contributed to improved process representation at global pan-Arctic scales within the Department of Energy's Earth system Model (the Energy Exascale Earth System Model, or E3SM), and specifically within the E3SM Land Model component (ELM).

54 ENVIRONMENTAL SCIENCES

GRB 180128A: A second magnetar giant flare candidate from the Sculptor Galaxy

Magnetars are slowly rotating neutron stars that possess the strongest magnetic fields known in the cosmos (10 14 − 10 15 G). They display a range of transient high-energy electromagnetic activity. The brightest and most energetic of these events are the gamma-ray bursts (GRBs) known as magnetar giant flares (MGFs), with isotropic energies E iso ≈ 10 44 − 10 46 erg. Only seven MGF detections have been made to date: three unambiguous events occurred in our Galaxy and the Magellanic Clouds, and the other four MGF candidates are associated with nearby star-forming galaxies. As all seven identified MGFs are bright at Earth, additional weaker events likely remain unidentified in archival data. We conducted a search of the Fermi Gamma-ray Burst Monitor database for candidate extragalactic MGFs and, when possible, collected localization data from the Interplanetary Network (IPN) satellites. Our search yielded one convincing event, GRB 180128A. IPN localizes this burst within NGC 253, commonly known as the Sculptor Galaxy. The event is the second MGF in modern astronomy to be associated with this galaxy and the first time two bursts have been associated with a single galaxy outside our own. Here we detail the archival search criteria that uncovered this event and its spectral and temporal properties, which are consistent with expectations for a MGF. We also discuss the theoretical implications and finer burst structures resolved from various binning methods. Our analysis provides observational evidence of an eighth identified MGF.

Trigg, Aaron C. (ORCID:000900068598728X)

Cognitive IoT and Edge Computing for Intrusion Detection with Federated TinyML

Internet of Things (IoT) and Edge Computing (EC) are rapidly becoming an integral part of the modern society. By 2030, there is estimated to be over 40 billion active and connected IoT devices [1]. This rapid progress also comes with a significant implication on cybersecurity. Back-end infrastructure and systems have a much broader attack than they did previously due to vulnerable IoT/EC devices being connected to wireless networks. This expanding attack surface is a growing concern because IoT/EC are increasingly being used in critical systems such as power grids, health care, and smart homes. To effectively address a problem of this scale, cognitive cyber methods—which can autonomously detect and react to cyber attacks as they develop—are needed. To address this, we bring Artificial Intelligence (AI) and Machine Learning (ML) to IoT/EC devices, using tinyML to monitor voluminous IoT data against cyber threats, and using Federated Learning (FL) to share local detection knowledge across the system while preserving privacy. We propose a novel three-layer architecture: (1) an IoT layer for tinyML-based inference, (2) an edge layer for ML model training, and (3) a cloud layer for FL operations. Using the publicly available 11-class N-BaIoT dataset [2], we demonstrate that this architecture mitigates resource constraints at the IoT layer while improving detection accuracy over standard two-layer designs. An outlier-resistant scaler, feature reduction, and quantization enable the tinyML model to maintain detection accuracy with a reduced model size. Additionally, federated learning that only utilizes the intersection (across heterogenous devices) of the reduced feature set achieves superior detection accuracy compared to locally trained models.

Li, Mingyan [ORNL] (ORCID:0009000569532640)

Zero Trust Strategies for Chemical, Biological, Radiological, and Nuclear Detection Systems: D.1 Cyber Scenarios

The evolving landscape of cybersecurity necessitates a paradigm shift to a Zero Trust (ZT) model, which assumes breaches and continuously verifies trust. This approach reshapes how trust boundaries are established, focusing on identities, devices, networks, applications, and data, rather than solely relying on perimeter defenses such as firewalls. Central to this transformation is the National Institute of Standards and Technology's (NIST) Special Publication 800-207, outlining the Zero Trust Architecture (ZTA), along with Executive Order 14028, which mandates federal agencies to adopt ZT principles. Complementary to these efforts, the Cybersecurity and Infrastructure Security Agency (CISA) developed the Zero Trust Maturity Model (ZTMM), providing a framework with five pillars and three cross-cutting capabilities to guide agencies toward enhanced cybersecurity maturity. In support of these initiatives, the DHS Countering Weapons of Mass Destruction Office (CWMD) is applying ZT principles to secure Chemical, Biological, Radiological, and Nuclear (CBRN) detection systems. Recognizing the diverse deployment models and network connectivity of these systems—from stationary, non-networked units to mobile, cloud-connected devices—the Pacific Northwest National Laboratory (PNNL) is developing cybersecurity scenarios specifically for CBRN environments. These scenarios examine various configurations and technological capabilities, offering insights into the application of ZTMM pillars in enhancing the security postures of CBRN devices. The cybersecurity scenarios presented by PNNL are hypothetical, crafted to explore theoretical situations and stimulate discussion on the potential use or compromise of CBRN detection systems in varied contexts. These narratives are illustrative and do not reference any real events or actual networks. Instead, they employ generalized reference models to highlight concepts and potential issues within CBRN security, focusing on how Zero Trust strategies can be adapted to address these challenges effectively.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF

Integrated System for Methane Emissions Monitoring, Mapping, and Quantification

This report presents the work completed under the DOE iM4 project for the development of a methane emission monitoring system for detection, location, and quantification of methane in oil and gas industries. The task was divided into four main areas including: 1) Sensors and Input, 2) Centralized Cloud Information Center, 3) Algorithms, and 4) Testing and Validation. Task 1 focused on researching and developing an understanding of the current, or soon to be, available methane sensing technologies. Task 2 consisted of developing the architecture, selecting hardware, software and elements for the methane monitoring system. Task 3 focused on the algorithms used for the complex inverse model of going from measured methane signatures to the detection, localization, and quantification of sources that are desired. Finally, Task 4 focused on the methods of testing and validating the operation of the system. Attention was also given to the development method and cost breakdown of the system.

03 NATURAL GAS

Emulation and detection of physical faults and cyber-attacks on building energy systems through real-time hardware-in-the-loop experiments

The increasing use of remote or mobile access, integrated wearable technologies, data exchange, and cloud-based data analytics in modern smart buildings is steering the building industry towards open communication technologies. The increased connectivity and accessibility could lead to more cyber-attacks in smart buildings. On the other hand, physical faults (e.g., HVAC -heating, ventilation, and air-conditioning faults) may have similar adverse impacts as those from the cyber-attacks on building energy systems, such as occupant discomfort, energy wastage, and equipment downtime. However, current physical behavior-based anomaly detection methods fail to differentiate between cyber-attacks and physical faults in building energy systems. Moreover, the challenge in collecting real-world threat data with ground truth has led researchers to rely on numerical models with user-defined assumptions, which may not accurately reflect real-world conditions due to the lack of in-situ experimental datasets. To address these challenges and gaps, this paper presents a flexible hardware-in-the-loop (HIL) testbed for generating cyber-attack and physical fault datasets and demonstrating threat detection algorithms in a real building automation system (BAS) environment. This testbed combines hardware (i.e., real BAS with local HVAC controllers and a physical network) with software (i.e., high-fidelity models to represent behaviors of building envelope and HVAC energy systems), enabling emulations of realistic threats. Five HIL experiments, including one baseline without any threats, two with physical faults, and two with cyber-attacks, were conducted to generate datasets containing detailed network traffic and system states. A joint classification framework, incorporating a network analyzer and a physical HVAC fault detector, was proposed to automatically detect cyber-physical abnormalities on BAS at both the network and the physical HVAC levels. The network analyzer comprises a conditional random fields (CRF) based command validator and a statistics-based detection strategy. The fault detector employs a weather and schedule-based pattern matching and feature-based principal component analysis (WPM-FPCA) method. Evaluation of the classification using four metrics from the multi-class confusion matrix revealed an average accuracy of 90.2%, recall of 89.7%, precision of 88.5% and F1-score of 89.2%. Finally, these results demonstrate that the proposed joint classification framework can effectively differentiate between specific types of cyber-attacks (e.g., device reinitialization attack, network Denial-of-Service attack) and physical faults (e.g., air handling unit operational fault, cooling coil valve stuck) in real time for improved building energy management.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI