Search NASA⌕ Search

SEARCH · Search NASA

Results for “Detection and Defense”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

White Paper: Drone Detection with Radar

INL recently summarized how Ukraine conducted an unprecedented drone attack on Russian air bases on Sunday, June 1, 2025 using Russian cellular networks to operate the drones. It also showed how a drone with a cellular connection can be detected using network signatures. This report adds an additional section, section 2, on detecting drones with radar if they are not connected to a cellular network and hence network signatures are not available.

42 ENGINEERING↗

Detection of Cyber Attacks in Grid-tied PV Systems Using Dynamic Watermarking

This paper presents of an active detection scheme for detecting cyber attacks on sensors controlling a grid-tied PV systems. Several cyber vulnerabilities in Grid tied PV Systems are discussed. The defense mechanism introduces a private (secret) watermarking signal into the control inputs of the grid-tied inverter system. This will enable the detection of any malicious manipulation of sensor measurements. Based on the measured data, two statistical tests are conducted to identify anomalies in the system using the presence of the watermarking signal. It shown that when a sensor data is compromised and/or replaced by a pre-recorded healthy signal, both test 1 and 2 exhibit high values indicating a possible malicious activity. The robustness of the proposed algorithm is tested and validated with several attack scenarios on a grid tied PV system. Select results from an experimental setup are discussed.

Ibrahim, Hasan↗

Analysis of hydrogen and lithium isotopes using Laser-Induced Breakdown Spectroscopy

The detection and quantification of hydrogen (1,2,3H) and lithium (6,7Li) isotopes are critical to several energy and defense application areas, including hydrogen storage, nuclear forensics, and safeguards/non-proliferation. In this context, laser-induced breakdown spectroscopy (LIBS) is very promising and it comes with certain advantages such as rapid detection, and standoff capability. Although LIBS provides experimental simplicity and is capable of detecting all elements in the periodic table in any phase (solid, liquid, or gas), there exist certain challenges for isotopic analyses of H and Li due to spectral broadening, the presence of closely spaced fine and hyperfine structures, and line distortion effects (e.g., self-absorption and self-reversal) present in laser-produced plasmas. This article reports recent developments in H and Li isotopic analysis using LIBS, and existing challenges.

(020.3260) Isotope shifts, (140.3440) Laser-induce↗

Conserved defense responses between maize and sorghum to Exserohilum turcicum

Abstract Background Exserohilum turcicum is an important pathogen of both sorghum and maize, causing sorghum leaf blight and northern corn leaf blight. Because the same pathogen can infect and cause major losses for two of the most important grain crops, it is an ideal pathosystem to study plant-pathogen evolution and investigate shared resistance mechanisms between the two plant species . To identify sorghum genes involved in the E. turcicum response, we conducted a genome-wide association study (GWAS). Results Using the sorghum conversion panel evaluated across three environments, we identified a total of 216 significant markers. Based on physical linkage with the significant markers, we detected a total of 113 unique candidate genes, some with known roles in plant defense. Also, we compared maize genes known to play a role in resistance to E. turcicum with the association mapping results and found evidence of genes conferring resistance in both crops, providing evidence of shared resistance between maize and sorghum . Conclusions Using a genetics approach, we identified shared genetic regions conferring resistance to E. turcicum in both maize and sorghum. We identified several promising candidate genes for resistance to leaf blight in sorghum, including genes related to R-gene mediated resistance. We present significant advancements in the understanding of host resistance to E. turcicum , which is crucial to reduce losses due to this important pathogen.

59 BASIC BIOLOGICAL SCIENCES↗

Computational Prediction of Infrasound Arrival Times and Directions from Stationary and Moving Impulsive Sources

This report addresses the need to predict infrasound signal arrival times and back azimuths at monitoring stations, enabling more focused and efficient searches within recorded waveform data. The primary challenge is estimating expected signal arrival windows for stationary and moving acoustic sources, such as chemical explosions, volcanic eruptions, meteoroids, and spacecraft re-entry events. To address this challenge, a reproducible methodology is described that uses simplified propagation speeds for boundary layer, tropospheric, stratospheric, and thermospheric atmospheric waveguides. While the Python source code itself is not freely available, this document provides detailed, step-by-step instructions, and equations enabling users to replicate and adapt the method independently. The method reliably predicts signal arrival intervals and back azimuths, thereby supporting rapid detection and accurate interpretation of infrasound events. Results demonstrate that this method effectively identifies plausible signal arrival intervals and directions, facilitating faster event detection and more reliable interpretation. This methodology directly supports atmospheric monitoring, planetary defense, and forensic analysis of explosive atmospheric events.

47 OTHER INSTRUMENTATION↗

End-User Perspectives on Using Quantitative Real-Time PCR and Genomic Sequencing in the Field

Quantitative real-time PCR and genomic sequencing have become mainstays for performing molecular detection of biological threat agents in the field. There are notional assessments of the benefits, disadvantages, and challenges that each of these technologies offers according to findings in the literature. However, direct comparison between these two technologies in the context of field-forward operations is lacking. Most market surveys, whether published in print form or provided online, are directed to product manufacturers who can address their respective specifications and operations. One method for comparing these technologies is surveying end-users who are best suited for discussing operational capabilities, as they have hands-on experience with state-of-the-art molecular detection platforms and protocols. These end-users include operators in military defense and first response, as well as various research scientists in the public sector such as government and service laboratories, private sector, and civil society such as academia and nonprofit organizations performing method development and executing these protocols in the field. Our objective was to initiate a survey specific to end-users and their feedback. We developed a questionnaire that asked respondents to (1) determine what technologies they currently use, (2) identify the settings where the technologies are used, whether lab-based or field-forward, and (3) rate the technologies according to a set list of criteria. Of particular interest are assessments of sensitivity, specificity, reproducibility, scalability, portability, and discovery power. This article summarizes the findings from the end-user perspective, highlighting technical and operational challenges.

59 BASIC BIOLOGICAL SCIENCES↗

Report on Next-Gen AI for Proliferation Detection Workshop: Domain-Aware Methods

The emergence of artificial intelligence (AI) and machine learning (ML) in the modern world has impacted nearly every application imaginable. This includes nuclear proliferation detection, which offers the potential to improve existing capabilities as well as create new ones. Proliferation detection seeks to detect and characterize attempts by state and non-state actors to acquire nuclear weapons or associated technology, materials, or knowledge. Such a mission is vitally important for global stability and security but is notoriously difficult. By leveraging advances in AI, exciting opportunities exist to enhance the proliferation detection regime. The Data Science and AI portfolio within the National Nuclear Security Administration’s Office of Defense Nuclear Nonproliferation Research and Development (DNN R&D) seeks to leverage the capabilities of the Department of Energy’s (DOE’s) national laboratories and other partners to develop AI systems that can accomplish otherwise impossible tasks in support of proliferation detection. As part of its efforts, the portfolio has created a series of workshops on Next-Gen AI for Proliferation Detection to help define the requirements for suitable AI systems, share successful research and best practices, and foster connection and understanding between the relevant parties including researchers and end-users. Each workshop in the series focuses on a specific and critical aspect of AI to enable it to accomplish proliferation detection objectives. The first workshop focused on explainability techniques; the second workshop and the topic of this report, covers methods for incorporating domain awareness into AI. The Next-Gen AI for Proliferation Detection Workshop: Domain-Aware Methods took place virtually over two days in February 2021 and included four keynote presentations, 22 technical presentations, and a concluding panel. The presentations, discussions, and workshop findings are summarized in this report.

97 MATHEMATICS AND COMPUTING↗

Detection of Stealthy False Data Injection Attacks in Unobservable Distribution Networks

In this paper, a composite scheme is proposed for detecting stealthy data manipulation attacks on distribution system which is unobservable with standard least squares based state estimators. This technique has three stages where the process of data imputation, voltage phasor estimation and the bad data detection are carried out in a systematic manner. The proposed approach is then integrated with moving target defense strategies which perturbs the network parameters to reveal stealthy false data injection attacks. The proposed approach is tested is validated on a three-phase, unbalanced 37-node distribution system and its results are presented. It is shown that the proposed approach has the ability to accurately detect the presence of FDI attacks using limited measurements (i.e., the test system is unobservable).

Rajasekaran, James K.↗

On the Limits of EM Based Detection of Control Logic Injection Attacks In Noisy Environments

The difficulty in applying traditional security mechanisms in Industrial Control System (ICS) environments makes a large portion of these mission-critical assets vulnerable to cyber attacks. Therefore, there is a dire need for the development of novel security mechanisms specifically designed to protect such critical systems. Recently a lot of attention has been given to mechanisms that exploit the EM emanations of devices for defense purposes. Such practices may lead to the development of robust external and non-intrusive anomaly detection systems. Nevertheless, the majority of current work in the area neglects to consider the implications of real-life environments, particularly environmental noise. In this work, we explore the limits of EM-based anomaly detection towards identifying injection attacks in control logic software in noisy environments. Our study conducted upon both synthetically generated and real signals identified that indeed environmental noise might significantly degrade the accuracy of the anomaly detection process. Experiments done upon synthetic data indicated that assuming that signals are captured with high sampling rates, even minor code injections can be detected with above-90% accuracy in noisy environments where SNR is up to -2dB. This is true even if naive detection methods are considered. Moreover, experiments done using a real-life testbed attest that even single-instruction injections can be detected with near-perfect accuracy in relatively clean environments. Finally, noise-elimination techniques can drastically improve the reliability of the detection mechanism even in noisy environments.

97 MATHEMATICS AND COMPUTING↗

Workshop Report for Next-Gen AI for Proliferation Detection: Accelerating the Development and Use of Explainability Methods to Design AI Systems Suitable for Nonproliferation Mission Applications

Artificial intelligence (AI) promises powerful new capabilities in an expansive array of applications. One area is proliferation detection, where AI can provide transformative tools to achieve objectives currently inaccessible using conventional methods. In particular, AI affords the opportunity to use new indicators and process massive amounts of heterogeneous data that can increase sensitivity to proliferant activities and push proliferation detection to the earliest possible stages. However, existing AI tools are not ready to achieve such potential, falling short in regard to some important considerations involved in proliferation detection. One crucial aspect that requires improvement is the explainability of the most powerful AI algorithms (i.e., understanding how the algorithms actually arrive at their conclusions)-the lack of which prevents widespread adoption in national security missions. The Data Science and AI portfolio within the National Nuclear Security Administration's Office of Defense Nuclear Nonproliferation Research and Development is driving the development of next-generation AI for proliferation detection through the expertise and work of the national laboratories and partners in academia. The "Next-Gen AI for Proliferation Detection: Accelerating the Development and Use of Explainability Methods to Design AI Systems Suitable for Nonproliferation Mission Applications" workshop aimed to further this objective. The meeting was held virtually on Sept. 15-16, 2020 and included more than 170 participants, primarily from the national laboratories with additional contributions from university researchers and mission partners. Each day included a keynote presentation, four technical presentations about cutting-edge research in explainability, and a panel to explore considerations in applying explainability and developing AI systems that can accelerate the transition of emerging AI technologies among partners and end users to solve critical mission questions. This report summarizes the Next-Gen AI for Proliferation Detection workshop's content and findings.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Autonomous Cyber Defense Against Dynamic Multi-strategy Infrastructural DDoS Attacks

Dynamic Infrastructural Distributed Denial of Service (I-DDoS) attacks constantly change attack vectors to congest core backhaul links and disrupt critical network availability while evading end-system defenses. To effectively counter these highly dynamic attacks, defense mechanisms need to exhibit adaptive decision strategies for real-time mitigation. This paper presents a novel Autonomous DDoS Defense framework that employs model-based reinforcement agents. The framework continuously learns attack strategies, predicts attack actions, and dynamically determines the optimal composition of defense tactics such as filtering, limiting, and rerouting for flow diversion. Our contributions include extending the underlying formulation of the Markov Decision Process (MDP) to address simultaneous DDoS attack and defense behavior, and accounting for environmental uncertainties. We also propose a fine-grained action mitigation approach robust to classification inaccuracies in Intrusion Detection Systems (IDS). Additionally, our reinforcement learning model demonstrates resilience against evasion and deceptive attacks. Evaluation experiments using real-world and simulated DDoS traces demonstrate that our autonomous defense framework ensures the delivery of approximately 96 - 98% of benign traffic despite the diverse range of attack strategies.

Dutta, Ashutosh↗

Characterization of Infrasonic Signatures of Earth-Grazing Fireballs as Analogues to Hypersonic Vehicles (Final Report)

Accurate detection, discrimination, and characterization of high-altitude hypersonic events using infrasonic monitoring are critical to planetary defense and global strategic surveillance. This report synthesizes recent advances achieved through rigorous analysis of infrasonic signatures from natural meteoroids, emphasizing shallow entry-angle meteoroids as essentially proxies for artificial hypersonic systems. Meteoroids naturally encompass diverse velocities, trajectories, altitudes, and fragmentation behaviors, enabling systematic validation of empirical period–yield relationships, waveform morphology classifiers, and trajectory-induced back-azimuth deviation models. Integration of adaptive array-processing enhancements within Cardinal software further extends infrasonic detection sensitivity and signal classification reliability. Collectively these advances, based solely on infrasonic signatures or limited optical data, offer robust methodologies for distinguishing natural from artificial hypersonic sources, significantly reducing event geolocation uncertainties and refining source-function determination. The outcomes detailed herein lay foundational groundwork for improved global hypersonic event-surveillance frameworks, supporting improved security preparedness and informing strategic monitoring and defense policies.

54 ENVIRONMENTAL SCIENCES↗

Towards Secure Autonomous Vehicles: An Integrated Edge and Multi-Modal Machine Learning Framework for Intrusion Detection

Autonomous vehicles (AVs) are vulnerable to cyberattacks targeting both internal communication networks and external perception sensors. While edge-based intrusion de- tection for Controller Area Network (CAN) buses offers real-time protection, it cannot detect cross-modal threats. Conversely, multi-modal fusion approaches improve coverage but often lack efficiency for in-vehicle deployment. This thesis integrates two complemen- tary solutions: (1) a lightweight, edge-deployable machine learning framework for CAN bus intrusion detection, and (2) a late-fusion system combining CAN FD and LiDAR data. Together, they form a hierarchical defense capable of handling single-modality and coordi- nated attacks. Simulations show that CAN-only models reach 93% accuracy on simulated DoS, spoofing, replay, and fuzzy attacks, while the fusion system achieves 0.87 AUC and 0.82 F1-score at 2 ms latency. This unified framework establishes a scalable, explainable, and field-ready strategy for AV cybersecurity.

97 MATHEMATICS AND COMPUTING↗

Fast Data Processing for Hyperspectral Sensors on Small Platforms

Hyperspectral imaging is a very promising technology for nuclear proliferation detection. However, due to size and weight restrictions, small hyperspectral platforms such as satellites and small drones lack the on-board computing resources for accurate, real-time analysis of the enormous flow of data that a continuously operating hyperspectral sensor generates. This severely limits satellite systems, which can collect far more data than what they can telemeter, and hinders the ability of all platforms to adapt their missions on the fly in response to observations. This program addresses the hyperspectral data processing challenge through development of new, fast and accurate algorithms that produce data products in real time. The algorithms circumvent the major computational bottlenecks in existing processing streams, and would be incorporated in lightweight, power-efficient single-board computer systems. The toolkit of fast algorithms will be immediately useful in current and future hyperspectral systems being built by the Government and by private industry, including drone-based systems and satellite constellations that acquire timely global imagery.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

A Search for L4 Earth Trojan Asteroids Using a Novel Track-before-detect Multiepoch Pipeline

We report Earth Trojan asteroids are an important but elusive population that co-orbit with Earth at the L4 and L5 Lagrange points. There is only one known, but a large population is theoretically stable and could provide insight into our solar system’s past and present, as well as planetary defense. In this paper, we present the results of an Earth Trojan survey that uses a novel shift-and-stack detection method on 2 nights of data from the Dark Energy Camera. We find no new Earth Trojan asteroids. We calculate an upper limit on the population that is consistent with previous searches despite much less sky coverage. Additionally, we elaborate on previous upper-limit calculations using current asteroid population statistics and an extensive asteroid simulation to provide the most up-to-date population constraints. We find an L4 Earth Trojan population of N ET < 1 for H = 13.93, N ET < 10 for H = 16, and N ET < 938 for H = 22.

79 ASTRONOMY AND ASTROPHYSICS↗

Method for Assessment of Security-Relevant Settings in Anomaly-Based Intrusion Detection for Industrial Control Systems

Ensuring the integrity of Ethernet-based networks is a challenging and constantly evolving domain. This problem is exacerbated for those operational technology (OT) networks supporting industrial control systems (ICS) since much of that equipment was originally designed to be on a network that was isolated and generally considered free of malefactors. Increasing pressure to bridge these systems with traditional information technology (IT) networks has introduced a bevy of new threats. In response, both academia and industry have responded with security solutions tailored to ICS environments. Deploying these protection systems often involves several configuration choices. While some of these choices are clear (e.g., block/enable protocol X) others are far more subjective (e.g. alert threshold == 3.43). Further complicating the situation, while often similar to IT networks, OT networks have unique challenges and characteristics that make the task of protecting them simultaneously more difficult and straight forward.Extant solutions for quantifying the relative security of intrusion detection systems fail to effectively support the operators of said systems with understanding the impact of various configuration changes. Further, they assume that the attacks are static and not subject to manipulation or alteration in the face of defenses. In this paper, we present a threat-based method for quantifying the relative impact of various security settings for intrusion detection systems (IDSs) within ICS environments. This method provides operational staff with a clear understanding of the relative impact of their settings and assumes that the attacks levied against them are dynamic. The model is described in detail, we apply the model to a synthetic data set, and discuss the inferences that can be made and what types of decisions they could be used to support.

Gillen, Rob↗

ChatGPT and Other Large Language Models for Cybersecurity of Smart Grid Applications

Cybersecurity breaches targeting electrical substations constitute a significant threat to the integrity of the power grid, necessitating comprehensive defense and mitigation strategies. Any anomaly in information and communication technology (ICT) should be detected for secure communications between devices in digital substations. This paper proposes large language models (LLMs), e.g., ChatGPT, for the cybersecurity of IEC 61850-based communications. Multi-cast messages such as generic object oriented system events (GOOSE) and sampled values (SV) are used for case studies. The proposed LLM-based cybersecurity framework includes, for the first time, data pre-processing of communication systems and human-in-the-loop (HITL) training (considering the cybersecurity guidelines recommended by humans). The results show a comparative analysis of detected anomaly data carried out based on the performance evaluation metrics for different LLMs. A hardware-in-the-loop (HIL) testbed is used to generate and extract a dataset of IEC 61850 communications.

ChatGPT↗

Collaborative Research and Development Program on Explosive Detection Technology

In September 2013, at the 6th Permanent Coordinating Group Meeting between the U.S Department of Energy (DOE) and the French Institut de Radioprotection et de Sureté Nucléaire (IRSN), France expressed an interest in bilateral cooperation with the United States because its newly revised regulations that require enhanced explosives detection capabilities at nuclear and radiological facilities. In the ensuing years, PNNL (DOE/NNSA) and IRSN sought to identify an area of collaboration within explosives detection that would leverage the specific technical strengths of each organization. Based upon awareness of each other’s technical acumen gleaned from the scientific literature on explosives detection, it was clear that specific organizations within each nation could provide the needed expertise to enable enhancement of explosives detection through a collaborative development effort. The French lnstitut Saint-Louis was determined to be an optimal partner for IRSN to develop a collaboration with DOE/NNSA using PNNL’s detection team in this effort. Thus, the dialog was started between the technical experts at each organization to define where complementary expertise in explosives detection could be best leveraged. The technical plans and objectives of this project were sound with promising results. In the end, the joint action sheet was not implemented. The challenge with executing the project was in the complexity of getting a signed agreement between DOE, IRSN and ISL. Most of the obstacles surrounded the ability to protect intellectual property and obtain an agreement which included all of the parties. At a high level, this report documents the interactions and attempt to develop a cooperative framework for explosives detection development from FY 2014 through FY 2020.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗