Search NASA⌕ Search

SEARCH · Search NASA

Results for “PATCH TEST”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

89 records · Page 5

MCNP6.3: A Year in Review [Slides]

This presentation discusses the past year and the many accomplishments of the MCNP6.3 team. It states that the MCNP6.3 release is imminent and that the approved, final documents have been making their way to the website. The code executables and source are already packaged up for distribution and the new installer is being finalized and tested now, for all platforms. The package will be sent to RSICC before the end of October 2022. Additionally, the presentation discusses some things to think about as MCNP6.3 is requested and/or used. For example, many of the recent efforts have been focused on making development, updates, and distribution of the code and documents more robust and streamlined. They will be revising/updating documents more frequently than ever before and they will be exploring avenues to distribute official patches to MCNP6.3. As they explain, this allows them to be more responsive to bugs and issues that are identified. In conclusion, the application of a patch to MCNP6.3 will require having the source code.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

(Project 18-15531) Repair and Mitigation of Chloride-Induced Pitting and Chloride-Induced Stress Corrosion Cracking in Used Spent Nuclear Fuel Dry Cask Canister Materials (Final Technical Report)

Several experimental techniques were utilized to understand the corrosion and SCC performance of possible techniques for repairing cracks and pits in SS304 utilized for dry cask storage of spent nuclear fuel. The repairs examined included cold spray, FSW, soldering, and VFAW. The corrosion and SCC assessment techniques utilized for comparing repairs against the base material were 4-pt bending SCC testing in boiling MgCl 2 at stress levels between 0 MPa and 350 MPa, immersion testing in 40% RH brine solution meant to mimic a service-like environment, SSRT SCC testing in 40% RH brine solution. For FSW alone, scanning electrochemical cell microscopy and microelectrochemical syringe cell were utilized to understand the corrosion performance across the weld, in the retreating/advancing sides, and base material. Based on the results of this study, the FSW and cold spray repair techniques proved most viable for SCC repair in SS304 dry cask storage applications and continuing research is highly recommended to understand and quantify in further detail their SCC performance compared to unrepaired SS304. Additionally, solder and VFAW (patch or incline) would not be recommended based on the corrosion and SCC findings in this study.

42 ENGINEERING↗

Sampling Subjective Polygons for Patch-Based Deep Learning Land-Use Classification in Satellite Images

Model generalization remains a key challenge in the analysis of large amounts of heterogeneous satellite image data. One major limiting factor in developing generalizable models, in the context of supervised learning, is the lack of high quality training datasets. A model's capacity to perform well on new data is often inhibited by imbalance and bias in the data that was used for training. This is especially a problem when using convolutional neural networks to classify urban land-use in satellite images. Notable dataset imbalance issues in this application include land-use type imbalance and image scene imbalance. To begin understanding these dataset imbalance problems in more detail, we develop and test a number of sampling methods for generating training image datasets from subjective training polygons for urban land-use classification. We investigate sampling at different point densities as a means to reduce content repetition and therefore content imbalance and bias in the training image dataset.

Arndt, Jacob↗

Structural bases for stoichiometry‐selective calcium potentiation of a neuronal nicotinic receptor

Background and Purpose α4β2 nicotinic acetylcholine (nACh) receptors assemble in two stoichiometric forms, one of which is potentiated by calcium. The sites of calcium binding that underpin potentiation are not known. Experimental Approach To identify calcium binding sites, we applied cryo‐electron microscopy (cryo‐EM) and molecular dynamics (MD) simulations to each stoichiometric form of the α4β2 nACh receptor in the presence of calcium ions. To test whether the identified calcium sites are linked to potentiation, we generated mutants of anionic residues at the sites, expressed wild type and mutant receptors in clonal mammalian fibroblasts, and recorded ACh‐elicited single‐channel currents with or without calcium. Key Results Both cryo‐EM and MD simulations show calcium bound to a site between the extracellular and transmembrane domains of each α4 subunit (ECD‐TMD site). Substituting alanine for anionic residues at the ECD‐TMD site abolishes stoichiometry‐selective calcium potentiation, as monitored by single‐channel patch clamp electrophysiology. Additionally, MD simulation reveals calcium association at subunit interfaces within the extracellular domain. Substituting alanine for anionic residues at the ECD sites reduces or abolishes stoichiometry‐selective calcium potentiation. Conclusions and Implications Stoichiometry‐selective calcium potentiation of the α4β2 nACh receptor is achieved by calcium association with topographically distinct sites framed by anionic residues within the α4 subunit and between the α4 and β2 subunits. Stoichiometry‐selective calcium potentiation could result from the greater number of calcium sites in the stoichiometric form with three rather than two α4 subunits. The results are relevant to modulation of signalling via α4β2 nACh receptors in physiological and pathophysiological conditions.

Pharmacology & Pharmacy↗

Flower‐Type Organized Trade‐Wind Cumulus: A Multi‐Day Lagrangian Large Eddy Simulation Intercomparison Study

Shallow cumulus cloud fields in subtropical marine trade wind environments, particularly over the tropical Atlantic Ocean, show distinct organizational patterns. Among these, Flower‐type clouds are characterized by expansive stratiform cloud patches surrounded by regions of scattered convection. The objectives of this study were (a) to construct a case study of a time period during the EUREC 4 A/ATOMIC field campaign when Flower‐type organization was observed, (b) to evaluate the fidelity of a multi‐model ensemble of large eddy simulations of that case, and (c) to analyze the interaction between cloud and precipitation processes and mesoscale organization in the simulations. The simulations follow a quasi‐Lagrangian trajectory, allowing mesoscale features to develop over time in a domain that follows the boundary‐layer airmass. The results show a broad agreement in simulated thermodynamic properties across different LES codes, with Flower‐type cloud patches appearing within hours of each other. The consensus among models is consistent with observations made during the EUREC 4 A/ATOMIC field campaign on the specific day of interest. The cloud structure reveals three distinct peaks in the joint probability densities of cloud base and cloud top height, with the dominant peak at any given time influenced by the stage of cloud organization. The simulated cloud system evolution reveals consistent occurrence of maxima in liquid water path and rain rate before Flower reaches its maximum length scale. Targeted sensitivity tests reveal a weak relationship between Cloud Droplet Number concentration and the extent/degree/type of organization.

EUREC4A↗

Landscape connectivity for the invisibles

Because of land use changes, a worldwide decrease in biodiversity is underway, mostly driven by habitat degradation and fragmentation. Increasing landscape connectivity (i.e. the degree to which the landscape facilitates movement between habitat patches) has been proposed as a key landscape-level strategy to counterbalance the negative effects of habitat fragmentation. A robust theoretical and methodological framework has been developed for the concept of connectivity, and an increasing body of empirical evidence supports the relevance of connectivity for biodiversity. However, the framework was built ignoring species that represent the dominant proportion of biodiversity on earth: microorganisms. The extent to which the existing conceptual and methodological frameworks on connectivity can be applied to microorganisms remain unknown. We reviewed existing evidence and analyzed methods to test the influence of connectivity on microorganisms. We included all types of microorganisms, from symbiotic to pathogenic and free-living microorganisms, across all ecosystems. We describe the effect of connectivity on microorganism populations and communities, and identify the limitations and large gaps in current knowledge. Microorganisms can differ from macroorganisms in their response to connectivity due to short (distance less than a meter) dispersal distance of some groups, longer time lag of microorganisms response (possibly accompanied by evolutionary processes) and host association. The latter relies on tight interactions and feedback effects that drive microbial-landscape relationships and lead to possible coadaptation processes. Incorporating the connectivity concept in microbial community assembly rules to preserve the diversity of microbial communities and the ecosystem services they provide could be a crucial step forward in the face of pressing global changes.

60 APPLIED LIFE SCIENCES↗

Energy Exascale Earth System Model v2.0.1

First patch release of v2.0.0 Changes since v2.0.0 [Important change] Fix ocean threading bug seen in debug cases on Chrysalis with Intel 20.0.4. Was introduced around time of v2.0.0 tag. Does not change v2.0.0 answers on Chrysalis because those didn't use threading or debugging. [EAM] Add semi-lagrangian tracer transport for theta-l (F90 and C++), add new algorithm for finding tropopause, add DSCREAM to allow v2 and SCREAM settings in same code such as adjust_ps [EAM-MMF] 60L default, allow C++ back end of RRTMGP (EAM too). [EAMxx] add nu-top functionality, fix forcing functor, add ttype9 and dcmip2012 tests 2.1, 2.2, and 3 HOMME: remove obsolete remap algs, option to specify dynamics alg indep of tracer, new sponge layer, add imex tests [ELM] Add topography-based subgrid (topounits), add FATES-ELM Nitro., Phos. and CH4 coupling, add land-use ts for NARRM, add lulc for SSP3 RCP7, Fix nutrient fertilization exp test and carbon isotope flux, Fix xactive lnd dry deposition, add lake water storage option, fix plant hydraulics 2d params, fix carbon budget calc, fix soil nutrient conc. bug, fix mosart dam bug, add test for new ELM, MOSART features, fix bug in O3 dry dep stomatal resistances, fix plant hydraulics restart BFB error, update mkmapdata. [MOSART] fix bug for reading the latitude from an unstructured input file, fix oversat in bubble test. [MPAS-ocean] Add CFC11, CFC12 tracers, add 2D spherical transport tests, fix del4 tracer mixing, add MARBL ocean tracer mixing, modify harmonic analysis options, add GPU port of vmix routines, fix calc of ML-averaged BV freq. [MPAS-seaice] Change extents of initial polar disks for oRRS18to6v3 grid, fix ice BGC with MARBL, update spherical test cases, fix DON coupling, Remove Cf from sea ice constants. [MPAS-landice] add CRYO1850-4xCO2 compset [CIME] add GCP, ANL GCE, Spock, Perlmutter, deprecate config_compilers.xml, fix and clean-up cmake macros, fix slurm bindings, refactor CIME internal testing, cleanup SCORPIO perf data, allow position independent compset naming, [also] update v2 benchmarking suite, extend e3sm_prod with throughput and memory checks

E3SM Project, DOE↗

Ensemble Simulation Techniques and Fast Randomized Algorithms

The major goals of the project were to develop and analyze new ensemble simulation techniques, including trajectory stratification and preconditioned MCMC techniques, as well as develop fast numerical linear algebra techniques closely related to ensemble simulation ideas. The trajectory stratification techniques involve simulating in parallel short trajectory fragments of a Markov process confined to a specific region of space‐time and then patching together the statistics gathered to assemble estimates of very general dynamical properties. We have also developed this approach for rare event simulation and extended the techniques to applications requiring a more general framework (such as electronic structure calculations). The preconditioned MCMC techniques involve simulating multiple Markov chains in parallel and then using information from the ensemble to speed the mixing of each individual chain. The fast randomized linear algebra methods are motivated by the diffusion Monte Carlo technique, but are applicable to finding the dominant eigenvalue of (almost) general matrices. For most non‐negative matrices, the schemes result in an error (compared to the power method) that is constant in the dimension of the problem. For more general matrices, we see a very clear sublinear cost trend in computational tests.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Sequence modeling of higher-order wave modes of quasi-circular, spinning, non-precessing binary black hole mergers

Higher-order gravitational wave modes from quasi-circular, spinning, non-precessing binary-black-hole (BBH) mergers encode rich information about the nonlinear dynamics of strong-field gravity. We present a transformer-based sequence-completion surrogate that, given an early-inspiral segment, forecasts the subsequent late inspiral, merger, and ringdown. The intended applications are (i) patching or completing expensive or interrupted numerical-relativity (NR) simulations and (ii) providing late-time cross-checks and rapid hybridization studies. The training set is built from the NRHybSur3dq8 surrogate, which provides spherical-harmonic modes up to $\ell$ ≤ 4 (excluding (4, 0) and (4,±1), and including (5, 5)) for mass ratios q ≤ 8, dimensionless spin components s$^{z}_{1,2}$ ϵ[–0.8, 0.8], and inclination angles θ ϵ [0, π]. Waveforms are supplied on the interval t ϵ [–5000M, –100 M) and the model autoregressively generates the plus and cross polarizations (h + , h x ) on t ϵ [–100 M, 130M]. Training on the Delta supercomputer with 16 NVIDIA A100 GPUs required ~15 h on more than 14 million hybrid waveforms. Evaluation on a held-out test set of 840,000 samples yields mean and median overlaps of 0.996 and 0.997, respectively, with respect to the surrogate ground truth.

black-hole merger↗

MATEY: multiscale adaptive transformer models for spatiotemporal physical systems

Accurate representation of the multiscale features in spatiotemporal physical systems using vision transformer architectures requires extremely long, computationally prohibitive token sequences. To address this issue, we propose two novel adaptive tokenization schemes that dynamically adjust patch sizes based on local features: one ensures convergent behavior to uniform patch refinement, while the other offers better computational efficiency. Moreover, we present a set of spatiotemporal attention schemes, where the temporal or axial spatial dimensions are decoupled, to evaluate their baseline computational and data efficiencies and to determine whether adaptive tokenization can improve this performance. We assess the performance of the proposed multiscale adaptive model, MATEY, in a sequence of experiments. Compared to a full spatiotemporal attention scheme or a scheme that decouples only the temporal dimension, we find that fully decoupled axial attention is less efficient and expressive, requiring more training time and model parameters to achieve the same accuracy. The experiments on the adaptive tokenization schemes show that, compared to a uniformly refined model, the proposed schemes achieve comparable or improved accuracy at a much lower cost in the tested two-dimensional settings. While the asymptotic analysis suggests the potential for favorable scaling, empirical validation at substantially longer sequence lengths remains to be performed in future work. Finally, we demonstrate in two fine-tuning tasks featuring different physics that models pretrained on PDEBench data outperform the ones trained from scratch, especially in the low data regime with frozen attention.

adaptive tokenization↗

Contributions of vegetation heterogeneity within tower footprint to CO 2 flux estimations through graph neural network modeling

Net ecosystem exchange of CO 2 (Fc) measured directly by eddy covariance towers is based on various assumptions, including large, flat and homogenous land cover type. In reality, often a tower site is not large enough for flux measurements, and landscapes consist of patches of different land cover types within the flux footprint. In addition, some portions of fluxes are contributed by different cover types when a footprint exceeds the size of the target ecosystem. The contributions of non-dominant patches to Fc are often ignored. Here, in this study, we propose a novel integrated modeling framework that combines random forest (RF) and XGBoost with a residual correction module based on a deep graph convolutional network (DeeperGCN) to simulate Fc for seven flux measurement sites in southwest Michigan. High-resolution remote sensing vegetation indices, soil properties, meteorological variables, and footprint-weighted spatial features were used as model inputs at three spatial resolutions (10 m, 20 m, 30 m), and their importance in predicting Fc with DeeperGCN was assessed. We found that residual correction using DeeperGCN significantly improved prediction accuracy, with the R 2 increasing from 0.9098 to 0.9479 for RF and from 0.9235 to 0.9433 for XGBoost. At site level, the maximum improvement in R 2 reached 0.1617. Paired t-tests confirmed that these improvements were statistically significant (p < 0.05). Among all predictors, leaf area index and incoming shortwave radiation emerged as the dominant drivers of spatial residual variation, followed by precipitation, relative humidity, and selected vegetation indices. The 20 m resolution yielded the best balance between model performance and computational efficiency. In conclusion, our modeling framework effectively captures both spatial heterogeneity and nonlinear interactions, offering a robust solution for spatially explicit flux modeling in structurally diverse ecosystems beyond the study sites.

footprint model↗

Atomistic modeling of interface strengthening in Al-Si eutectic alloys

Al-Si cast alloys are usually composed of α-Al and Al-Si eutectic. Si flakes and Al matrix generally hold cube-on-cube orientation relationship with the primary interface (111) Al ∥(111) Si . Extensive experimental studies demonstrated that Si flakes cannot significantly improve mechanical properties of Al-Si cast alloys. We hypothesize that the weak strengthening effect associated with Si flakes might be attributed to thermomechanical properties of Al-Si interfaces besides their morphologies. To characterize Al-Si interfaces with a large lattice mismatch (> 30%), we proposed the quasi-coincident site lattice (Q-CSL) as reference lattice, and demonstrated that the Q-CSL Al-Si coherent interface has three characteristic coherent structures, one stable and low energy structure and two metastable and high energy structures. The translation vectors for the same type of coherent Q-CSL structures are consistent with three displacement shift complete (DSC) vectors. The two metastable structures can be obtained by shifting the low energy structure with three partial DSC vectors. Semi-coherent interface is composed of the low energy Q-CSL patches and three sets of interface misfit dislocations with Burgers vectors same as the DSC vectors. Atomistic simulations revealed that Al-Si interface exhibits low shear resistance. Ideal shear strength of the Q-CSL coherent interface is 110 MPa and semi-coherent interface is 20 MPa. The low shear resistance is attributed to the glide of interface misfit dislocations. Al-Si interface also exhibits low formation and migration energies of point defects. Owing to low shear strength and low formation and migration energies of point defects, interface sliding or shear readily happen under mechanical loading or during dislocation-interface interactions. Lattice dislocations can cross slip onto or climb along Al-Si interfaces. These reactions decrease the number of accumulated dislocation loops around Si flakes and promote nucleation and emission of lattice dislocations from Al-Si interfaces to matrix, consequently reduce the repulsive force on approaching dislocations and weaken Si flakes strengthening effect. In situ tension and compression tests in a scanning electron microscope reveal relatively weak strengthening effect due to Si flakes, consistent with the computed dislocation interaction with interfaces and shear behavior of interfaces.

36 MATERIALS SCIENCE↗

Microbial Phosphorus Mobilization Strategies Across a Natural Nutrient Limitation Gradient and Evidence for Linkage With Iron Solubilization Traits

Microorganisms have evolved several mechanisms to mobilize and mineralize occluded and insoluble phosphorus (P), thereby promoting plant growth in terrestrial ecosystems. However, the linkages between microbial P-solubilization traits and the preponderance of insoluble P in natural ecosystems are not well known. We tested the P solubilization traits of hundreds of culturable bacteria representative of the rhizosphere from a natural gradient where P concentration and bioavailability decline as soil becomes progressively more weathered. Aluminum, iron phosphate and organic P (phytate) were expected to dominate in more weathered soils. A defined cultivation medium with these chemical forms of P was used for isolation. A combination of soil chemical, spectroscopic analyses and 16S rRNA gene sequencing were used to understand the in situ ability for solubilization of these predominant forms of P. Locations with more occluded and organic P harbored the greatest abundance of P-mobilizing microorganisms, especially Burkholderiaceae ( Caballeronia and Paraburkholderia spp.). Nearly all bacteria utilized aluminum phosphate, however fewer could subsist on iron phosphate (FePO 4 ) or phytate. Microorganisms isolated from phytic acid were also most effective at solubilizing FePO 4 , suggesting that phytate solubilization may be linked to the ability to solubilize Fe. Significantly, we observed Fe to be co-located with P in organic patches in soil. Siderophore addition in lab experiments reinstated phytase mediated P-solubilization from Fe-phytate complexes. Taken together, these results indicate that metal-organic-P complex formation may limit enzymatic P solubilization from phytate in soil. Additionally, the linked traits of phytase and siderophore production were mostly restricted to specific clades within the Burkholderiaceae . We propose that Fe complexation of organic P (e.g., phytate) represents a major constraint on P turnover and availability in acidic soils, as only a limited subset of bacteria appear to possess the traits required to access this persistent pool of soil P.

59 BASIC BIOLOGICAL SCIENCES↗

Assessing Heterogeneity of Surface Water Temperature Following Stream Restoration and a High-Intensity Fire from Thermal Imagery

Thermal heterogeneity of rivers is essential to support freshwater biodiversity. Salmon behaviorally thermoregulate by moving from patches of warm water to cold water. When implementing river restoration projects, it is essential to monitor changes in temperature and thermal heterogeneity through time to assess the impacts to a river’s thermal regime. Lightweight sensors that record both thermal infrared (TIR) and multispectral data carried via unoccupied aircraft systems (UASs) present an opportunity to monitor temperature variations at high spatial (<0.5 m) and temporal resolution, facilitating the detection of the small patches of varying temperatures salmon require. Here, we present methods to classify and filter visible wetted area, including a novel procedure to measure canopy cover, and extract and correct radiant surface water temperature to evaluate changes in the variability of stream temperature pre- and post-restoration followed by a high-intensity fire in a section of the river corridor of the South Fork McKenzie River, Oregon. We used a simple linear model to correct the TIR data by imaging a water bath where the temperature increased from 9.5 to 33.4 °C. The resulting model reduced the mean absolute error from 1.62 to 0.35 °C. We applied this correction to TIR-measured temperatures of wetted cells classified using NDWI imagery acquired in the field. We found warmer conditions (+2.6 °C) after restoration (p < 0.001) and median absolute deviation for pre-restoration (0.30) to be less than both that of post-restoration (0.85) and post-fire (0.79) orthomosaics. In addition, there was statistically significant evidence to support the hypothesis of shifts in temperature distributions pre- and post-restoration (KS test 2009 vs. 2019, p < 0.001, D = 0.99; KS test 2019 vs. 2021, p < 0.001, D = 0.10). Moreover, we used a Generalized Additive Model (GAM) that included spatial and environmental predictors (i.e., canopy cover calculated from multispectral NDVI and photogrammetrically derived digital elevation model) to model TIR temperature from a transect along the main river channel. This model explained 89% of the deviance, and the predictor variables showed statistical significance. Collectively, our study underscored the potential of a multispectral/TIR sensor to assess thermal heterogeneity in large and complex river systems.

Barker, Matthew I. (ORCID:0000000252864930)↗

CMB-S4: Foreground-cleaning Pipeline Comparison for Measuring Primordial Gravitational Waves

We compare multiple foreground-cleaning pipelines for estimating the tensor-to-scalar ratio, r, using simulated maps of the planned CMB-S4 experiment within the context of the South Pole Deep Patch. To evaluate robustness, we analyze bias and uncertainty on r across various foreground suites using map-based simulations. The foreground-cleaning methods include: a parametric maximum likelihood approach applied to auto- and cross-power spectra between frequency maps; a map-based parametric maximum-likelihood method; and a harmonic-space internal linear combination using frequency maps. We summarize the conceptual basis of each method to highlight their similarities and differences. To better probe the impact of foreground residuals, we implement an iterative internal delensing step, leveraging a map-based pipeline to generate a lensing B-mode template from the large aperture telescope frequency maps. Our results show that the performance of the three approaches is comparable for simple and intermediate-complexity foregrounds, with σ(r) ranging from 3–5 ×10 −4 . However, biases at the 1σ–2σ level appear when analyzing more complex forms of foreground emission. By extending the baseline pipelines to marginalize over foreground residuals, we demonstrate that contamination can be reduced to within statistical uncertainties, albeit with a pipeline-dependent impact on σ(r), which translates to a detection significance between 2σ and 4σ for an input value of r = 0.003. These findings suggest varying levels of maturity among the tested pipelines, with the auto- and cross-spectra-based approach demonstrating the best stability and overall performance. Moreover, given the extremely low noise levels, mutual validation of independent foreground-cleaning pipelines is essential to ensure the robustness of any potential detection.

astronomy data analysis↗

De Sitter space is sometimes not empty

Multiple lines of evidence suggest that the Hilbert space of an isolated de Sitter universe is one dimensional but can appear larger when probed by a gravitating observer. To test this idea, we compute the von Neumann entropy of a field theory in a two-dimensional de Sitter universe which is entangled in a thermal-like state with the same field theory on a disjoint, asymptotically anti-de Sitter (AdS) black hole. Previously, it was shown that the replica trick for computing the entropy of such entangled gravitating systems requires the inclusion of a non-perturbative effect in quantum gravity — novel wormholes connecting the two spaces. Here we show that: (a) the expected wormholes connecting de Sitter and AdS universes exist, avoiding a no-go theorem via the presence of sources on the AdS boundary; (b) the entanglement entropy vanishes if the nominal entropy of the de Sitter cosmological horizon (S ds = $A^{dS}_{horizon}$/4G N ) is less than the entropy of the AdS black hole horizon (S BH = $A^{AdS}_{horizon}$/4G N ), i.e., S dS < S BH ; (c) the entanglement entropy is finite when S dS > S BH . Thus, the de Sitter Hilbert space is effectively nontrivial only when S dS > S BH . The AdS black hole we introduce can be regarded as an “observer” for de Sitter space. In this sense, our result is a non-perturbative generalization of the recent perturbative argument that the algebra of observables on the de Sitter static patch becomes nontrivial in the presence of an observer.

2D gravity↗

Automation of Vulnerability and Patch Management: Information Extraction, Association, and Optimization

Vulnerability and patch management is an integral part of a robust cybersecurity program, yet it grows increasingly complex due to the sheer amount of data that must be analyzed. Particularly in Operational Technology (OT) environments, analysis must be done manually because of the lack of automated solutions. Additionally, there are many steps in this process, from the initial discovery of the vulnerability to the implementation of its remediation, and each step in the process requires different data in order to be performed effectively. In this work, we provide approaches and strategies to assist operators in industrial or OT environments throughout the vulnerability management cycle. Security advisories provide key information about mitigation strategies, or actions that can be taken when a patch is unavailable or cannot be installed. Details of these strategies are not shared in public vulnerability databases and must be found manually. We approach this problem by designing a solution to automatically identify that information within vendor security advisories and retrieve it for operator use. We start with an approach that requires domain-specific knowledge of certain frequently-seen reference websites. Next, an approach that can work on an arbitrary website but relies on certain keywords. Finally, an approach that uses Natural Language Processing (NLP) methods and does not require specific knowledge or keywords. Each of these approaches is more general than its predecessor; we demonstrate high accuracy for all approaches Advisories also often contain details of affected products in non-standard or natural language formats. While this information can be easily understood when read by an operator, the non-standard format acts as a barrier to effective automation. We provide an approach for the first step in this process: identifying vendors in security advisories and mapping them to a standard framework for representing digital assets and software products. We evaluate five established string similarity algorithms, plus one of our own design that combines string similarity and information theory, on the task of mapping vendors to their corresponding entries in the Common Platform Enumeration (CPE) repository. Our results show that our proposed metric outperforms all others. Due to the constraints on time, finances, and personnel for organizations, Large Language Models (LLMs) may seem like attractive opportunities for security operators to speed up information gathering; however, it is still not clear whether LLMs can handle vulnerability management tasks well. To answer this question, we perform an empirical study of LLMs’ ability to provide consistent, accurate information about vulnerabilities in order to guide organizations in their adoption of LLMs. We observe poor performance for all models tested, suggesting that these models are not well-suited to the consistent retrieval of accurate vulnerability information. Finally, once vulnerabilities have been identified and any additional information has been obtained, operators must decide which remediation actions to implement based on their available resources. This already-complex problem becomes even more so when we consider that a vulnerability may have multiple avenues for remediation. We formulate this scenario as two knapsack problems and provide solutions, which we then compare against several existing strategies for vulnerability prioritization seen in real operational environments.

McClanahan, Kylie↗