Search NASA⌕ Search

SEARCH · Search NASA

Results for “integrity attacks”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
DOE OSTI2016

Cybersecurity for distributed energy resources and smart inverters

The increased penetration of distributed energy resources (DER) will significantly increase the number of devices that are owned and controlled by consumers and third parties. These devices have a significant dependency on digital communication and control, which presents a growing risk from cyber attacks. This paper proposes a holistic attack-resilient framework to protect the the integrated DER and the critical power grid infrastructure from malicious cyber attacks, helping ensure the secure integration of DER without harming the grid reliability and stability. Specifically, we discuss the architecture of the cyber-physical power system with a high penetration of DER and analyze the unique cybersecurity challenges introduced by DER integration. Next, we summarize important attack scenarios against DER, propose a systematic DER resilience analysis methodology, and develop effective and quantifiable resilience metrics and design principles. Lastly, we introduce attack prevention, detection, and response measures specifically designed for DER integration across cyber, physical device, and utility layers of the future smart grid.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2016

A tamper-indicating quantum seal

Technical means for identifying when tampering occurs is a critical part of many containment and surveillance technologies. Conventional fiber optic seals provide methods for monitoring enclosed inventories, but they are vulnerable to spoofing attacks based on classical physics. We address these vulnerabilities with the development of a quantum seal that offers the ability to detect the intercept-resend attack using quantum integrity verification. Our approach represents an application of entanglement to provide guarantees in the authenticity of the seal state by verifying it was transmitted coherently. We implement these ideas using polarization-entangled photon pairs that are verified after passing through a fiber-optic channel testbed. Using binary detection theory, we find the probability of detecting inauthentic signals is greater than 0.9999 with a false alarm chance of 10 –9 for a 10 second sampling interval. In addition, we show how the Hong-Ou-Mandel effect concurrently provides a tight bound on redirection attack, in which tampering modifies the shape of the seal. Our measurements limit the tolerable path length change to sub-millimeter disturbances. As a result, these tamper-indicating features of the quantum seal offer unprecedented security for unattended monitoring systems.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2021

CPS Testbed Architectures for WAMPAC using Industrial Substation and Control Center Platforms and Attack-Defense Evaluation

Advanced persistent threats and cyberattacks can impact wide-area monitoring, protection, and control (WAMPAC) system operation. Many cyber-physical system (CPS) testbeds have been developed for attack-defense experimentation and attack-resiliency tools evaluation for WAMPAC, but they are limited to a simulation-and-emulation based environment. This paper presents a quasi-realistic CPS attack-defense testbed-based framework for WAMPAC applications using the industrial substation and control center platforms such as eTerra integrated with the hardware-in-the-loop CPS smart grid testbed available at Iowa State University. The proposed framework includes various combinations of industry-grade substation and control center platforms, communication topologies, real-time digital simulators, and a novel cyber-physical distributed intrusion-and-anomaly detection system (D-IADS) for WAMPAC applications. The D-IADS includes a master at the control center and geographically distributed sensor devices at each substation. Each D-IADS sensor deployed at a substation or control center network monitors ingress and egress traffic, detect intrusions, and dispatch alerts to the D-IADS master. The D-IADS master centrally monitors and analyze the alerts and controls D-IADS sensors. We considered an EMP60 synthetic CPS grid as a case study to demonstrate the framework and proposed D-IADS for WAMPAC applications against cyberattack vectors such as Man-in-the-Middle DNP3 attack, denial-of-service, and data-integrity attacks.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

A Cyber Threat Mitigation Approach For Wide Area Control of SVCs using Stability Monitoring

We propose a stability monitoring approach for the mitigation of cyber threats directed at the wide area control (WAC) system used for coordinated control of Flexible AC Transmission Systems (FACTS) used for power oscillation damping (POD) of active power flow on inter-area tie lines. The approach involves monitoring the modes of the active power oscillation on an inter-area tie line using the Matrix Pencil (MP) method. We use the stability characteristics of the observed modes as a proxy for the presence of destabilizing cyber threats. We monitor the system modes to determine whether any destabilizing modes appear after the WAC system engages to control the POD. If the WAC signal exacerbates the POD performance, the FACTS falls back to POD using local measurements. The proposed approach does not require an expansive system-wide view of the network. We simulate replay, control integrity, and timing attacks for a test system and present results that demonstrate the performance of the SM approach for mitigation.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2019

Electron Beam Welding of Pure Tungsten Hex Cans for Nuclear Thermal Propulsion Engines

Nuclear thermal propulsion (NTP) is an in-space propulsion method currently being developed at the NASA Marshall Space Flight Center (MSFC). NTP systems are a high specific impulse (750–1,100 s), high thrust (15,000–250,000 lbf ) method of propulsion which have the potential to allow for faster transit times when optimizing for high ΔV. In the nuclear rocket engine, the heat from the nuclear fission reaction is transferred to a low molecular mass propellant (such as hydrogen). Hot propellant is expanded through a nozzle to generate thrust. Development of ceramic metal (cermet) fuel systems for NTP applications is currently ongoing at MSFC. In cermet fuel systems, ceramic fissile fuel particles such as uranium nitride or uranium dioxide are dispersed within a net-shaped, high-density structural matrix. The composite material is cladded by a protective metal structure to make up an NTP fuel element. Cladding materials must be able to withstand the demanding operating conditions required of the engine as well as retain a hermetic seal to allow for retention of fuel element structural integrity, prevent hydrogen attack or migration of the ceramic fuel, and limit release of fission products during operation. For NTP applications, tungsten is a prime material for both the metal matrix and cladding in cermet fuel systems because of its high melting point, high temperature strength, and compatibility with hot hydrogen. If a weld in tungsten with the capability of holding a hermetic seal is achievable, tungsten becomes a strong candidate for NTP applications. This Technical Memorandum focuses on determining the weldability of pure tungsten using electron beam welding (EBW). Tungsten appears well suited for NTP applications, but it has a high ductile to brittle transition temperature (DBTT) dependent upon chemical composition, structure/stress distribution, and mechanical conditions. Therefore, it is highly subject to brittle fracture. Because of its high susceptibility to brittle fracture, it is very difficult to weld. EBW was chosen for joining pure tungsten because of its low heat input compared to gas tungsten arc welding. Reduced heat input can be directly correlated with an increase in ductility of a tungsten weld. EBW is a high energy density welding process in which a stream of electrons penetrates a weld joint in a deep, narrow spike in contrast to a broad gas tungsten arc weld pool. The investigation initially focused on EBW of tungsten plates of both 0.01 in and 0.03 in thickness to determine if EBW could weld pure tungsten without the presence of visual defects—particularly cracking—in the welds. Variation in the weld procedure and post-weld heat treatment (PWHT) was used to improve the surface appearance of flat EBWs on a pure tungsten sheet. The investigation moved on to weld 0.05-in-thick hexagonal tungsten cans with a weld joint thickness of 0.025 in. The goal for welding the pure tungsten hex cans was to avoid any visual surface defects and generate a weld capable of a hermetic seal. This proved difficult. Cold welds commonly exhibited porosity that leaked air. Hot welds exhibited cracks, typically observed immediately after welding. Later welds were preheated to increase ductility and decrease the likelihood of through-thickness cracking. PWHT was used to arrest microcrack growth both in the flat weld samples and hexagonal weld samples.

Courtright, Z. S.↗
DOE OSTI2026

Responsible Adoption of Artificial Intelligence (AI) in Electric Grid Operations

The future of the grid will be powered by AI—or undermined by it. Artificial intelligence is rapidly reshaping grid operations, improving fault detection, forecasting accuracy, and real-time optimization. As AI systems move closer to operational decision loops, however, they introduce new consequence pathways: expanded attack surfaces, model integrity risks, regulatory exposure, and human-automation challenges. This talk presents a consequence-driven framework for deploying AI responsibly in the electric grid. Attendees will gain practical strategies to strengthen resilience, boost reliability, and deploy AI securely — ensuring the grid of the future is not only smarter but safer.

25 - ENERGY STORAGE↗
NASA NTRS1923

General theory of thin wing sections

This report contains a new, simple method of calculating the air forces to which thin wings are subjected at small angles of attack, if their curvature is not too great. Two simple integrals are the result. They contain only the coordinates of the wing section. The first integral gives the angle of attack at which the lift of the wing is zero, the second integral gives the moment experienced by the wing when its angle is zero. The two constants thus obtained are sufficient to determine the lift and moment for any other angle of attack. This with the theory of the aerodynamical induction, and with our empirical knowledge of the drag due to friction, the results are valuable for actual wings also. A particular result obtained is the calculation of the elevator effect. (author)

Munk, Max M↗
DOE OSTI2023

Protection Against Graph-Based False Data Injection Attacks on Power Systems

Graph signal processing (GSP) has emerged as a powerful tool for practical network applications, including power system monitoring. By representing power system voltages as smooth graph signals, recent research has focused on developing GSP-based methods for state estimation, attack detection, and topology identification. Included, efficient methods have been developed for detecting false data injection (FDI) attacks, which until now were perceived as non-smooth with respect to the graph Laplacian matrix. Consequently, these methods may not be effective against smooth FDI attacks. In this paper, we propose a graph FDI (GFDI) attack that minimizes the Laplacian-based graph total variation (TV) under practical constraints. In addition, we develop a low-complexity algorithm that solves the non-convex GDFI attack optimization problem using ell_1-norm relaxation, the projected gradient descent (PGD) algorithm, and the alternating direction method of multipliers (ADMM). We then propose a protection scheme that identifies the minimal set of measurements necessary to constrain the GFDI output to high graph TV, thereby enabling its detection by existing GSP-based detectors. Our numerical simulations on the IEEE-57 bus test case reveal the potential threat posed by well-designed GSP-based FDI attacks. Moreover, we demonstrate that integrating the proposed protection design with GSP-based detection can lead to significant hardware cost savings compared to previous designs of protection methods against FDI attacks.

Morgenstern, Gal↗
DOE OSTI2019

Data-driven cyber attack detection and mitigation for decentralized wide-area protection and control in smart grids

Modern power systems have already evolved into complicated cyber physical systems (CPS), often referred to as smart grids, due to the continuous expansion of the electrical infrastructure, the augmentation of the number of heterogeneous system components and players, and the consequential application of a diversity of information and telecommunication technologies to facilitate the Wide Area Monitoring, Protection and Control (WAMPAC) of the day-to-day power system operation. Because of the reliance on cyber technologies, WAMPAC, among other critical functions, is prone to various malicious cyber attacks. Successful cyber attacks, especially those sabotage the operation of Bulk Electric System (BES), can cause great financial losses and social panics. Application of conventional IT security solutions is indispensable, but it often turns out to be insufficient to mitigate sophisticated attacks that deploy zero-day vulnerabilities or social engineering tactics. To further improve the resilience of the operation of smart grids when facing cyber attacks, it is desirable to make the WAMPAC functions per se capable of detecting various anomalies automatically, carrying out adaptive activity adjustments in time and thus staying unimpaired even under attack. Most of the existing research efforts attempt to achieve this by adding novel functional modules, such as model-based anomaly detectors, to the legacy centralized WAMPAC functions. In contrast, this dissertation investigates the application of data-driven algorithms in cyber attack detection and mitigation within a decentralized architecture aiming at improving the situational awareness and self-adaptiveness of WAMPAC. First part of the research focuses on the decentralization of System Integrity Protection Scheme (SIPS) with Multi-Agent System (MAS), within which the data-driven anomaly detection and optimal adaptive load shedding are further explored. An algorithm named as Support Vector Machine embedded Layered Decision Tree (SVMLDT) is proposed for the anomaly detection, which provides satisfactory detection accuracy as well as decision-making interpretability. The adaptive load shedding is carried out by every agent individually with dynamic programming. The load shedding relies on the load profile propagation among peer agents and the attack adaptiveness is accomplished by maintaining the historical mean of load shedding proportion. Load shedding only takes place after the consensus pertaining to the anomaly detection is achieved among all interconnected agents and it serves the purpose of mitigating certain cyber attacks. The attack resilience of the decentralized SIPS is evaluated using IEEE 39 bus model. It is shown that, unlike the traditional centralized SIPS, the proposed solution is able to carry out the remedial actions under most Denial of Service (DoS) attacks. The second part investigates the clustering based anomalous behavior detection and peer-assisted mitigation for power system generation control. To reduce the dimensionality of the data, three metrics are designed to interpret the behavior conformity of generator within the same balancing area. Semi-supervised K-means clustering and a density sensitive clustering algorithm based on Hierarchical DBSCAN (HDBSCAN) are both applied in clustering in the 3D feature space. Aiming to mitigate the cyber attacks targeting the generation control commands, a peer-assisted strategy is proposed. When the control commands from control center is detected as anomalous, i.e. either missing or the payload of which have been manipulated, the generating unit utilizes the peer data to infer and estimate a new generation adjustment value as replacement. Linear regression is utilized to obtain the relation of control values received by different generating units, Moving Target Defense (MTD) is adopted during the peer selection and 1-dimensional clustering is performed with the inferred control values, which are followed by the final control value estimation. The mitigation strategy proposed requires that generating units can communicate with each other in a peer-to-peer manner. Evaluation results suggest the efficacy of the proposed solution in counteracting data availability and data integrity attacks targeting the generation controls. However, the strategy stays effective only if less than half of the generating units are compromised and it is not able to mitigate cyber attacks targeting the measurements involved in the generation control.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS1984

A review of US Army aircrew-aircraft integration research programs

The desire of the Army for a one crew helicopter that can perform the scout and attack role is forcing the integration of handling qualities and mission management disciplines and concerns. Some recent studies and results in these disciplines are reviewed. The need for a more unified approach to support new helicopter development is described along with a plan to develop fundamental principles needed for efficient man machine interface design.

Key, D. L.↗
DOE OSTI2017

Real-Time Cyber-Physical False Data Attack Detection in Smart Grids Using Neural Networks

Attacks on cyber-physical systems have recently increased in frequency, impact, and publicity. In this paper, a cyber-physical false data attack detection mechanism is proposed to protect the operation of power transmission and distribution systems by automatically inferring underlying physical relationships using cross-sensor analytics in order to detect sensor failures, replay attacks, and other data integrity issues in real-time. We investigate a neural network based mechanism acting on voltage and current readings resulting from a wide variety of load conditions on the IEEE 30-bus power system standard and compare its performance with a support vector machine based mechanism. Experiments showed that 99% detection accuracy of replay attacks was achieved using the proposed neural network mechanism. More importantly, we showed that the best approach was to not create physics-based features using what we knew about the system, but rather to use a neural network to automatically learn the laws, and then use the outputs of that to build a classifier to identify whether and where data spoofing occurs. Thus, it is preferable to infer and exploit the physics using a single machine learning solution

Ferragut, Erik M.↗
NASA NTRS2012

NASA Integrated Network COOP

Natural disasters, terrorist attacks, civil unrest, and other events have the potential of disrupting mission-essential operations in any space communications network. NASA's Space Communications and Navigation office (SCaN) is in the process of studying options for integrating the three existing NASA network elements, the Deep Space Network, the Near Earth Network, and the Space Network, into a single integrated network with common services and interfaces. The need to maintain Continuity of Operations (COOP) after a disastrous event has a direct impact on the future network design and operations concepts. The SCaN Integrated Network will provide support to a variety of user missions. The missions have diverse requirements and include anything from earth based platforms to planetary missions and rovers. It is presumed that an integrated network, with common interfaces and processes, provides an inherent advantage to COOP in that multiple elements and networks can provide cross-support in a seamless manner. The results of trade studies support this assumption but also show that centralization as a means of achieving integration can result in single points of failure that must be mitigated. The cost to provide this mitigation can be substantial. In support of this effort, the team evaluated the current approaches to COOP, developed multiple potential approaches to COOP in a future integrated network, evaluated the interdependencies of the various approaches to the various network control and operations options, and did a best value assessment of the options. The paper will describe the trade space, the study methods, and results of the study.

Continuity of Operations (COOP)↗
DOE OSTI2024

On the Application of Cyber-Informed Engineering (CIE)

The 2023 National Cybersecurity Strategy has recommended a transition to secure-by-design methodologies in critical infrastructure. This paper presents the adoption of the National Cyber-Informed Engineering (CIE) Strategy as initiated by the U.S. DOE’s CESER office, advocating for the integration of cybersecurity at the earliest stages of system design. The strategy targets design engineers responsible for energy infrastructure to embed CIE principles within the engineering lifecycle, thus enhancing cyber resilience. This paper discusses the expansion of secure-by-design concepts to cyber-physical systems, moving beyond traditional IT security to include engineering considerations that can mitigate cyber risks through design choices. The paper introduces Digital Risk Management, balancing traditional cybersecurity with CIE to reduce both likelihood and impact of cyber threats. A set of CIE starter questions derived from 12 core principles is detailed, aiding engineers to consider cybersecurity in their designs and highlights the importance of CIE in anticipating and reducing the impacts of cyber attacks, suggesting that such integration is essential for national security and infrastructure resilience.

42 ENGINEERING↗
DOE OSTI2017

Resilient and Robust High Performance Computing Platforms for Scientific Computing Integrity

As technology advances, computer systems are subject to increasingly sophisticated cyber-attacks that compromise both their security and integrity. High performance computing platforms used in commercial and scientific applications involving sensitive, or even classified data, are frequently targeted by powerful adversaries. This situation is made worse by a lack of fundamental security solutions that both perform efficiently and are effective at preventing threats. Current security solutions fail to address the threat landscape and ensure the integrity of sensitive data. As challenges rise, both private and public sectors will require robust technologies to protect its computing infrastructure. The research outcomes from this project try to address all these challenges. For example, we present LAZARUS, a novel technique to harden kernel Address Space Layout Randomization (KASLR) against paging-based side-channel attacks. In particular, our scheme allows for fine-grained protection of the virtual memory mappings that implement the randomization. We demonstrate the effectiveness of our approach by hardening a recent Linux kernel with LAZARUS, mitigating all of the previously presented side-channel attacks on KASLR. Our extensive evaluation shows that LAZARUS incurs only 0.943% overhead for standard benchmarks, and is therefore highly practical. We also introduced HA2lloc, a hardware-assisted allocator that is capable of leveraging an extended memory management unit to detect memory errors in the heap. We also perform testing using HA2lloc in a simulation environment and find that the approach is capable of preventing common memory vulnerabilities.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

A Cyber-Physical Anomaly Detection for Wide-Area Protection Using Machine Learning

Wide-area protection scheme (WAPS) provides system-wide protection by detecting and mitigating small and large-scale disturbances that are difficult to resolve using local protection schemes. As this protection scheme is evolving from a substation-based distributed remedial action scheme (DRAS) to the control center-based centralized RAS (CRAS), it presents severe challenges to their cybersecurity because of its heavy reliance on an insecure grid communication, and its compromise would lead to system failure. This article presents an architecture and methodology for developing a cyber-physical anomaly detection system (CPADS) that utilizes synchrophasor measurements and properties of network packets to detect data integrity and communication failure attacks on measurement and control signals in CRAS. The proposed machine leaning-based methodology applies a rules-based approach to select relevant input features, utilizes variational mode decomposition (VMD) and decision tree (DT) algorithms to develop multiple classification models, and performs final event identification using a rules-based decision logic. Here, we have evaluated the proposed methodology of CPADS using the IEEE 39 bus system for several performance measures (accuracy, recall, precision, and F-measure) in a cyber-physical testbed environment. Furthermore, our experimental results reveal that the proposed algorithm (VMD-DT) of CPADS outperforms the existing machine learning classifiers during noisy and noise-free measurements while incurring an acceptable processing overhead.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS1974

Computer program for calculation of real gas turbulent boundary layers with variable edge entropy

A user's manual for a computer program which calculates real gas turbulent boundary layers with variable edge entropy on a blunt cone or flat plate at zero angle of attack is presented. An integral method is used. The method includes the effect of real gas in thermodynamic equilibrium and variable edge entropy. A modified Crocco enthalpy velocity relationship is used for the enthalpy profiles and an empirical correlation of the N-power law profile is used for the velocity profile. The skin-friction-coefficient expressions of Spalding and Chi and Van Driest are used in the solution of the momentum equation and in the heat-transfer predictions that use several modified forms of Reynolds analogy.

Boney, L. R.↗
NASA NTRS1990

Airdata calibration of a high-performance aircraft for measuring atmospheric wind profiles

The research airdata system of an instrumented F-104 aircraft has been calibrated to measure winds aloft in support of the space shuttle wind measurement investigation at the National Aeronautics and Space Administration Ames Research Center Dryden Flight Research Facility. For this investigation, wind measurement accuracies comparable to those obtained from Jimsphere balloons were desired. This required an airdata calibration more accurate than needed for most aircraft research programs. The F-104 aircraft was equipped with a research pilot-static noseboom with integral angle-of-attack and flank angle-of-attack vanes and a ring-laser-gyro inertial reference unit. Tower fly-bys and radar acceleration-decelerations were used to calibrate Mach number and total temperature. Angle of attack and angle of sideslip were calibrated with a trajectory reconstruction technique using a multiple-state linear Kalman filter. The F-104 aircraft and instrumentation configuration, flight test maneuvers, data corrections, calibration techniques, and resulting calibrations and data repeatability are presented. Recommendations for future airdata systems on aircraft used to measure winds aloft are also given.

Haering, Edward A., Jr.↗