Search NASA⌕ Search

SEARCH · Search NASA

Results for “threat modeling”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Countering Weapons of Mass Destruction (CWMD) Zero Trust Framework: CWMD Zero Trust Principles Model

The research focuses on the critical need for enhanced cybersecurity within the Countering Weapons of Mass Destruction (CWMD) Office, specifically targeting Chemical, Biological, Radiological, and Nuclear devices. Traditional perimeter-based security models are insufficient against modern cyber threats, prompting a shift toward Zero Trust principles (ZTP) that emphasize continuous verification and stringent security for all devices. Federal directives mandate the adoption of Zero Trust (ZT) across agencies, supported by guidelines from National Institute of Standards and Technology (NIST), U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA), U.S. Department of Defense (DoD) and National Security Agency (NSA). The research involved mapping ZT guidance from these agencies to develop tailored CWMD ZTP. The study identified gaps and areas for improvement, including clear transitional guidance from traditional to ZT architectures and the focus on explicit cross cutting capabilities. Design improvements are recommended to ensure increased comprehensive protection and resilience against sophisticated cyber threats for Chemical, Biological, Radiological, and Nuclear (CBRN) devices. Collaborative efforts among federal agencies are essential for the successful deployment of an optimized ZT guidance.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2023

Northern Hemisphere Snow Drought in Earth System Model Simulations and ERA5‐Land Data in 1980–2014

Abstract Low snow levels over the past few decades and predictions of a low‐to‐no snow future have spurred research into snow droughts, which pose a threat to water security and management. Systematic data‐model comparisons of snow drought have been lacking, hindering our understanding of the drivers of snow drought in the past. To address this gap, we analyzed snow drought events using standardized snow water equivalent index derived from monthly results of four numerical experiments using the E3SM Land Model (ELM) and ERA5‐Land data during the period of 1980–2014. Additionally, we compared snow drought duration calculated from models with those from the ERA5‐Land data during selected El Niño‐Southern Oscillation (ENSO) years. The numerical experiments were conducted with ELM driven by two prescribed atmospheric forcings, and with the coupled land‐atmosphere configuration of E3SM with and without plant hydraulics scheme feedback. Analysis reveals that 20%–30% of snow droughts occur due to factors other than above‐normal temperature and low snowfall, such as low soil moisture, warm soil temperature, and low relative humidity, etc., especially in high latitudes (50° North). Furthermore, our study highlights the exacerbating effect of ENSO events on snow drought conditions in various regions, despite some discrepancies between model and ERA5‐Land results. We also identified limitations of the coupled land‐atmosphere models in our current configuration in capturing the spatial patterns of snow droughts. This study underscores the challenge of predicting and mitigating snow drought and the need for a comprehensive understanding of the factors contributing to snow drought.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Evaluating simplifications of subsurface process representations for field-scale permafrost hydrology models

Abstract. Permafrost degradation within a warming climate poses a significant environmental threat through both the permafrost carbon feedback and damage to human communities and infrastructure. Understanding this threat relies on better understanding and numerical representation of thermo-hydrological permafrost processes and the subsequent accurate prediction of permafrost dynamics. All models include simplified assumptions, implying a tradeoff between model complexity and prediction accuracy. The main purpose of this work is to investigate this tradeoff when applying the following commonly made assumptions: (1) assuming equal density of ice and liquid water in frozen soil, (2) neglecting the effect of cryosuction in unsaturated freezing soil, and (3) neglecting advective heat transport during soil freezing and thaw. This study designed a set of 62 numerical experiments using the Advanced Terrestrial Simulator (ATS v1.2) to evaluate the effects of these choices on permafrost hydrological outputs, including both integrated and pointwise quantities. Simulations were conducted under different climate conditions and soil properties from three different sites in both column- and hillslope-scale configurations. Results showed that amongst the three physical assumptions, soil cryosuction is the most crucial yet commonly ignored process. Neglecting cryosuction, on average, can cause 10 %–20 % error in predicting evaporation, 50 %–60 % error in discharge, 10 %–30 % error in thaw depth, and 10 %–30 % error in soil temperature at 1 m beneath the surface. The prediction error for subsurface temperature and water saturation is more obvious at hillslope scales due to the presence of lateral flux. By comparison, using equal ice–liquid density has a minor impact on most hydrological metrics of interest but significantly affects soil water saturation with an averaged 5 %–15 % error. Neglecting advective heat transport presents the least error, 5 % or even much lower, in most metrics of interest for a large-scale Arctic tundra system without apparent influence caused by localized groundwater flow, and it can decrease the simulation time at hillslope scales by 40 %–80 %. By challenging these commonly made assumptions, this work provides permafrost hydrology scientists an important context for understanding the underlying physical processes, including allowing modelers to better choose the appropriate process representation for a given modeling experiment.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

Congruity of genomic and epidemiological data in modelling of local cholera outbreaks

Cholera continues to be a global health threat. Understanding how cholera spreads between locations is fundamental to the rational, evidence-based design of intervention and control efforts. Traditionally, cholera transmission models have used cholera case-count data. More recently, whole-genome sequence data have qualitatively described cholera transmission. Integrating these data streams may provide much more accurate models of cholera spread; however, no systematic analyses have been performed so far to compare traditional case-count models to the phylodynamic models from genomic data for cholera transmission. Here, we use high-fidelity case-count and whole-genome sequencing data from the 1991 to 1998 cholera epidemic in Argentina to directly compare the epidemiological model parameters estimated from these two data sources. We find that phylodynamic methods applied to cholera genomics data provide comparable estimates that are in line with established methods. Our methodology represents a critical step in building a framework for integrating case-count and genomic data sources for cholera epidemiology and other bacterial pathogens.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2023

Comparison of Supervised and Un-Supervised Machine Learning Algorithms for Threat Detection and Scintillator Performance for Radiation Portal Monitoring

Following the events of September 11, 2001, international border crossing have been equipped with radiation portal monitors (RPMs) to identify illicit radioactive material. Polyvinyl toluene (PVT) scintillators are commonly used due to their low cost and reasonable maintainability, however they offer low spectral resolution. Despite the fact that over twenty years has transpired since this event, radioisotopes are still typically identified by hand-crafted classification algorithms, e.g., total counts or energy windowing, and exhibit relatively poor performance in detecting threats at the low false alarm rates required to support the stream of commerce. While some improvement to performance has been realized via the use of supervised machine learning, these classification algorithms typically utilize simulations in lieu of real data due to the sparsity of data for one or more classes. Accordingly, the performance of these algorithms is somewhat less than optimal when examining experiments or simulations with model mismatch. Consequently, in this work, we examine the application of a number of unsupervised machine learning, anomaly detection based algorithms, to circumvent the inverse crime when analyzing spectroscopy data for RPMs. We also compare anomaly detection results with those obtained via the use of supervised classification detection ML algorithms when model mismatch is introduced between the simulated threat items utilized for training/testing. Finally, we compared the performance of the PVT scintillators to those obtained with higher resolution detectors using both anomaly detection and supervised classification algorithms.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2026

Understanding Subseasonal Moisture Recycling from Extreme MCSs Using a Land–Atmosphere Coupled Water Tracer Model

Extreme precipitation events often produce severe flooding and pose significant threats to our society. However, their subseasonal impacts on the terrestrial and atmospheric systems are not well understood. Here, we use a new land–atmosphere coupled water tracer tool embedded in the Weather Research and Forecasting (WRF) Model to “tag” precipitation produced by a series of extreme mesoscale convective systems (MCSs) in May 2015 over the southern Great Plains to reveal their contributions to different terrestrial water storages and moisture recycling during May–July. During May, we find that precipitation from earlier MCSs can contribute to 20%–50% of total evapotranspiration (ET) in later May and contribute ∼10% of local precipitation for later MCSs. After May, the water “tagged” to preceding May MCS events has the most active contribution to moisture recycling during the first 5 days in June, but this contribution diminishes quickly afterward. Both periods indicate a quick turnover of tagged precipitation, which may be representative of the southern Great Plains region. The quick turnover is closely associated with the direct evaporation from the soil surface due to the predominant shrubland and grassland coverage over this region. Over some forested areas, however, the tracer-ET flux is dominated by transpiration that stably supplies a small fraction (<1%) of moisture to the atmosphere throughout June and July. In conclusion, the tracer-contributed plume (through evaporation and transpiration) in atmospheric moisture can extend 500–700 km downstream between May and July, highlighting the far-reaching contribution to moisture recycling and precipitation from the tagged MCS events in the southern Great Plains.

Atmosphere-land interaction↗
DOE OSTI2025

Ethical considerations in infectious disease modelling for public health policy: the case of school closures

Mathematical models of infectious diseases are frequently used as a tool to support public health policy and decisions around the implementation of interventions such as school closures. However, most publications on policy-relevant modelling lack an ethical framework and do not explicitly consider the ethical implications of the work. This creates a risk that the unintended consequences of interventions are overlooked or that models are used to justify decisions that are inconsistent with public health ethics. In this article, we focus on the case study of school closures as a commonly modelled intervention against pandemic influenza, COVID-19 and other infectious disease threats. We briefly review some of the key concepts in public health ethics and describe approaches to modelling the effects of school closures. We then identify a series of ethical considerations involved in modelling school closures. These include accounting for population heterogeneity and inequalities; including a diversity of viewpoints and expertise in model design; considering the distribution of benefits and harms; and model transparency and contextualization. Furthermore, we conclude with some recommendations to ensure that policy-relevant modelling is consistent with some key ethics values.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Impacts of photovoltaic solar energy on soil carbon: A global systematic review and framework

Globally, solar energy is anticipated to be the primary source of electricity as early as 2050, and the greatest additions in capacity are currently in the form of large, ground-mounted photovoltaic solar energy facilities (GPVs). Growing interest lies in understanding and anticipating opportunities to increase soil carbon sequestration across the footprint and perimeter of both conventional and multi-use GPVs (e.g., ecovoltaics, agrivoltaics, and rangevolatics), especially as operators increasingly deputize as land managers. To date, studies on the relationship between soils and PV solar energy are limited to unique, localized sites. This study employed a systematic review to (i) identify a global corpus of 18 studies on interactions between GPVs and soils, (ii) collect and characterize 113 soil and soil-related experimental variables interacting with GPVs from this corpus, and (iii) synthesize trends among these experimental variables. Next, this study combined data from the systematic review with an iterative, knowledge co-production approach to produce a conceptual model for the study of soil and GPV interactions that applies to multiple installation types, scales, and contexts where GPVs are deployed, and identified research opportunities, threats, and priorities. This study's baseline understanding, conceptual model, and co-produced knowledge confer unique insight into the feasibility of combining soil carbon sequestration with the climate change mitigation potential of PV solar energy.

agrivoltaics↗
DOE OSTI2022

Locus coeruleus catecholamines link neuroticism and vulnerability to tau pathology in aging

Higher neuroticism is a risk factor for Alzheimer's disease (AD), and is implicated in disordered stress responses. The locus coeruleus (LC)-catecholamine system is activated during perceived threat and is a centerpiece of developing models of the pathophysiology of AD, as it is the first brain region to develop abnormal tau. We examined relationships among the "Big 5" personality traits, LC catecholamine synthesis capacity measured with [ 18 F]Fluoro-m-tyrosine PET, and tau burden measured with [ 18 F]Flortaucipir PET in cognitively normal older adults (n = 47). β-amyloid (Aβ) status was determined using [ 11 C]Pittsburgh compound B PET (n = 14 Aβ positive). Lower LC catecholamine synthesis capacity was associated with higher neuroticism, more depressive symptoms as measured by the Geriatric Depression Scale, and higher amygdala tau-PET binding. Exploratory analyses with other personality traits revealed that low trait conscientiousness was also related to both lower LC catecholamine synthesis capacity, and more depressive symptoms. A significant indirect path linked both high neuroticism and low conscientiousness to greater amygdala tau burden via their mutual association with low LC catecholamine synthesis capacity. Together, these findings reveal LC catecholamine synthesis capacity to be a promising marker of affective health and pathology burden in aging, and identifies candidate neurobiological mechanisms for the effect of personality on increased vulnerability to dementia.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2022

Large Divergence in Tropical Hydrological Projections Caused by Model Spread in Vegetation Responses to Elevated CO 2

Increasing atmospheric CO 2 and associated global warming are expected to alter the global hydrological cycle, thereby posing widespread threats to freshwater availability. However, future hydrological projections differ greatly between models, particularly over the tropical regions. The large difference between model projections directly limits policy planning efforts, and the responsible modeling processes remain unclear. Here, we identify the primary processes accounting for model differences in tropical hydrological changes using multiple CO 2 sensitivity experiments in the Coupled Model Intercomparison Project. We show that differences in projected changes to tropical evapotranspiration, precipitation, and surface water availability mainly arise from model representations of vegetation cover and stomatal conductance responses to elevated CO 2 and associated changes in atmospheric moisture and circulation. Atmospheric responses to sea surface warming contribute additionally to the divergence in hydrological projections. Given the importance of vegetation responses to elevated CO 2 and associated atmosphere feedbacks, our results underscore the need to improve representations of the vegetation physiological response to rising CO 2 and its coupling to the atmosphere, to provide reliable tropical hydrological projections.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Project: Corbomite - Product: ConsoleWorks REACT

TDi Technologies presents ConsoleWorks REACT, an advanced platform designed to tackle the complexities of cyber and operational risk assessment. This comprehensive solution goes beyond asset-focused approaches by considering the impact of both assets and people have on the security and operation of critical infrastructure, specifically targeting preventing gird mis-operation by evaluating real-time human interaction or commands with critical assets. The hypothesis suggests that by integrating the assessment of user commands into the overall risk assessment process, organizations can make more informed decisions, prioritize resources effectively, and respond promptly to potential threats. This hypothesis forms the basis for the development of a proactive and holistic risk management approach that is more comprehensive and context aware than traditional models which only look at assets, patch levels, configuration and threat intel by collecting that information off the network vs directly from the asset, human, and human interaction all in real-time. ConsoleWorks' unique man-in-the-middle architecture is a key feature that sets it apart in the cybersecurity landscape. This architecture enables the real-time observation, enforcement, and commands or interaction risk transparency of user interaction with critical infrastructure to be risk mitigated and audited as they are aggregated with device and human risk factors for a more comprehensive risk threat score across a device or group of devices. This architecture allows ConsoleWorks to act as a secure intermediary between users and critical assets, monitoring all interactions and ensuring that only authorized commands are sent to the asset to be executed. This not only enhances security but also provides a comprehensive audit trail of all user activities, contributing to compliance efforts and facilitating incident investigation and risk management. By integrating this unique architecture with our comprehensive risk assessment methodology, ConsoleWorks REACT provides a powerful solution for managing cyber and operational risks, enabling organizations to maintain a robust security posture and effectively mitigate potential threats. To that end, the primary objective of this project was to research and develop a robust solution that enables the energy industry to mitigate the risks associated with human actions that can compromise the security or operations of assets critical to energy delivery, generation, transmission and operation. ConsoleWorks REACT plays a pivotal role in achieving this goal by leveraging its unique capabilities to monitor and track all user activity. Through its Zero Trust approach, which emphasizes continuous verification, the platform ensures secure access to assets and serves as the centralized human response and notification platform for addressing cyber and operational issues.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Small Particle Aerosol Exposure of African Green Monkeys to MERS-CoV as a Model for Highly Pathogenic Coronavirus Infection

Emerging coronaviruses are a global public health threat because of the potential for person-to-person transmission and high mortality rates. Middle East respiratory syndrome coronavirus (MERS-CoV) emerged in 2012, causing lethal respiratory disease in $\gg$35% of cases. Primate models of coronavirus disease are needed to support development of therapeutics, but few models exist that recapitulate severe disease. For initial development of a MERS-CoV primate model, 12 African green monkeys were exposed to 10 3 , 10 4 , or 10 5 PFU target doses of aerosolized MERS-CoV. We observed a dose-dependent increase of respiratory disease signs, although all 12 monkeys survived for the 28-day duration of the study. This study describes dosedependent effects of MERS-CoV infection of primates and uses a route of infection with potential relevance to MERSCoV transmission. Aerosol exposure of African green monkeys might provide a platform approach for the development of primate models of novel coronavirus diseases.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2022

Detecting Coastal Wetland Degradation by Combining Remote Sensing and Hydrologic Modeling

Sea-level rise and climate change stresses pose increasing threats to coastal wetlands that are vital to wildlife habitats, carbon sequestration, water supply, and other ecosystem services with global significance. However, existing studies are limited in individual sites, and large-scale mapping of coastal wetland degradation patterns over a long period is rare. Our study developed a new framework to detect spatial and temporal patterns of coastal wetland degradation by analyzing fine-scale, long-term remotely sensed Normalized Difference Vegetation Index (NDVI) data. Then, this framework was tested to track the degradation of coastal wetlands at the Alligator River National Wildlife Refuge (ARNWR) in North Carolina, United States, during the period from 1995 to 2019. We identified six types of coastal wetland degradation in the study area. Most of the detected degradation was located within 2 km from the shoreline and occurred in the past five years. Further, we used a state-of-the-art coastal hydrologic model, PIHM-Wetland, to investigate key hydrologic processes/variables that control the coastal wetland degradation. The temporal and spatial distributions of simulated coastal flooding and saltwater intrusion confirmed the location and timing of wetland degradation detected by remote sensing. The combined method also quantified the possible critical thresholds of water tables for wetland degradation. The remote sensing–hydrologic model integrated scheme proposed in this study provides a new tool for detecting and understanding coastal wetland degradation mechanisms. Our study approach can also be extended to other coastal wetland regions to understand how climate change and sea-level rise impact wetland transformations.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Model-based Cyber-attack Detection for Voltage Source Converters in Island Microgrids

With the upgrading of communication and control in microgrids, cyber threats on the power converters are increasing. Here, in this paper, a novel model-based cyber-attack detection methodology is proposed for each voltage source converter in microgrids. The Harmonics State Space Matrix (H-Matrix) is used to build the closed-loop transfer function, providing model-based estimation with the grid voltage and control reference. Then, the space phase model (SPM) is used to calculate residual to detect cyber-attacks in voltage source converter (VSC). As controller and converter parameters are included in the H-matrix, the proposed method also could detect cyber-attacks when voltage fluctuation occurs in the grid. To verify the feasibility of the proposed method, several attacks targeting VSC in an islanded microgrid are simulated in MATLAB. Simulation and detection results are introduced to demonstrate the resilience and feasibility of the proposed method.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Modelling of nanometer scale dust grains in tokamak

Dust poses a serious threat to tokamak operation and safety. It is important to study the behaviour of dust grains under tokamak's discharge conditions, which depends heavily on their size and charge. Existing simulations mainly address issues on dust grains with radii larger than 1 μm, in which case, the drift effect due to electromagnetic fields can be safely ignored. For nanometer scale dust grains, however, the drift effect becomes significant and a new model based on guiding-centre system needs to be established. In this work, the NDS has been done under BOUT++ framework. The simulation contains two parts. Part one, NDS evaluates the charging and ablation processes of the dust grains. In the second part, the guiding-centre orbits of dust particles are tracked in tokamak plasmas, whose parameters are obtained from BOUT++, a highly desirable C++ code package for performing parallel plasma fluid simulations with an arbitrary number of equations in 3D curvilinear coordinates. The orbit of nanodust dynamics is described by guiding centre equations for simplicity, and these equations are numerically solved by conventional fourth-order Runge Kutta method. Simulations provide results such as trajectories and evolutions of dust particles with different sizes and velocities for different tokamak geometries. Results show tungsten dust grains with a radius of a few nanometers launched from outer midplane will oscillate before totally ablated in C-Mod. The oscillation in this case is driven by the ion drag force. Larger Nanodust with a radius of 100 nm, on the contrary, cannot be completely constrained by the electromagnetic field. In conclusion, the high plasma temperature and density in the seperatrix region causes severe dust ablation, resulting in total ablation within several ms.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2020

Evaluating the potential for bird‐habitat models to support biodiversity‐friendly urban planning

Abstract Urban expansion poses a major threat to wildlife populations. Biodiversity‐friendly urban landscapes could deliver benefits for both wildlife and people, by incorporating conservation and ecosystem services objectives. Well‐designed urban developments could also soften the ecological impacts of urbanization. However, delivering urban landscapes that integrate biodiversity requirements effectively remains challenging. Ecological models, designed to predict wildlife population responses to alternative urban designs, could prove effective in supporting the creation of biodiversity‐friendly urban landscapes. Here, we combine national‐scale bird abundance data with high resolution, spatially explicit habitat data to characterize relationships between bird densities and urban landscape form in Britain. From these analyses and cross validation, we evaluate the potential for well‐parameterized, species‐specific models to be used to predict bird densities in novel or modified urban areas. Our analyses indicate that responses of bird abundance to urban habitat are species‐specific and complex, with few variables consistently affecting a large proportion of species. However, contiguous areas of greenspace within urban sites are preferential for accommodating breeding birds, compared to a more fragmented arrangement of multiple, small greenspace patches. In combination, the bird‐habitat relationships identified could successfully predict observed variation in abundance for most bird species considered. Further evaluation of habitat descriptor variables, spatial scales of species' habitat use and analytical modelling approaches may be needed to improve the predictive ability of bird‐habitat models for certain species, particularly waterbirds and those observed less frequently in urban areas. Synthesis and applications . We modelled breeding bird abundance in built‐up areas with respect to the characteristics and contexts of urban environments. While most variables were important for multiple species, responses overall were species‐specific, so simple assemblage metrics, like diversity, will not describe the variation in bird communities well. However, the results illustrate the potential of an evidence‐based, spatially explicit evaluation of urban development impacts on biodiversity, by predicting the consequences for bird numbers. Subject to verification of predictive ability, practitioners can apply the models to compare, for example, land‐sparing and sharing within developments, or to quantify the biodiversity requirements for effective offsetting. This would be facilitated by incorporation into an online tool allowing user‐determined input scenarios.

Plummer, Kate E.↗
DOE OSTI2024

Impacts of Sea‐Level Rise on Coastal Groundwater Table Simulated by an Earth System Model With a Land‐Ocean Coupling Scheme

Abstract Sea‐level rise (SLR) poses a severe threat to the coastal environment through seawater intrusion into freshwater aquifers. The rising groundwater table also exacerbates the risk of pluvial, fluvial, and groundwater flooding in coastal regions. However, current Earth system models (ESMs) commonly ignore the exchanges of water at the land‐ocean interface. To address this gap, we developed a novel land‐ocean hydrologic coupling scheme in a state‐of‐the‐science ESM, the Energy Exascale Earth System Model version 2 (E3SMv2). The new scheme includes the lateral exchange between seawater and groundwater and the vertical infiltration of seawater driven by the SLR‐induced inundation. Simulations were performed with the updated E3SMv2 for the global land‐ocean interface to assess the impacts of SLR on coastal groundwater under a high CO 2 emission scenario. By the middle of this century, seawater infiltration on the inundated areas will be the dominant component in the land‐ocean coupling process, while the lateral subsurface flow exchange will be much smaller. The SLR‐induced seawater infiltration will raise the groundwater levels, enhance evapotranspiration, and increase runoff with distinct spatial patterns globally in the future. Although the coupling process is induced by SLR, we found topography and warming temperature have more control on the coupling impacts, probably due to the relatively modest magnitude of SLR during the selected future period. Overall, our study suggests significant groundwater and seawater exchange at the land‐ocean interface, which needs to be considered in ESMs.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

Emulation and detection of physical faults and cyber-attacks on building energy systems through real-time hardware-in-the-loop experiments

The increasing use of remote or mobile access, integrated wearable technologies, data exchange, and cloud-based data analytics in modern smart buildings is steering the building industry towards open communication technologies. The increased connectivity and accessibility could lead to more cyber-attacks in smart buildings. On the other hand, physical faults (e.g., HVAC -heating, ventilation, and air-conditioning faults) may have similar adverse impacts as those from the cyber-attacks on building energy systems, such as occupant discomfort, energy wastage, and equipment downtime. However, current physical behavior-based anomaly detection methods fail to differentiate between cyber-attacks and physical faults in building energy systems. Moreover, the challenge in collecting real-world threat data with ground truth has led researchers to rely on numerical models with user-defined assumptions, which may not accurately reflect real-world conditions due to the lack of in-situ experimental datasets. To address these challenges and gaps, this paper presents a flexible hardware-in-the-loop (HIL) testbed for generating cyber-attack and physical fault datasets and demonstrating threat detection algorithms in a real building automation system (BAS) environment. This testbed combines hardware (i.e., real BAS with local HVAC controllers and a physical network) with software (i.e., high-fidelity models to represent behaviors of building envelope and HVAC energy systems), enabling emulations of realistic threats. Five HIL experiments, including one baseline without any threats, two with physical faults, and two with cyber-attacks, were conducted to generate datasets containing detailed network traffic and system states. A joint classification framework, incorporating a network analyzer and a physical HVAC fault detector, was proposed to automatically detect cyber-physical abnormalities on BAS at both the network and the physical HVAC levels. The network analyzer comprises a conditional random fields (CRF) based command validator and a statistics-based detection strategy. The fault detector employs a weather and schedule-based pattern matching and feature-based principal component analysis (WPM-FPCA) method. Evaluation of the classification using four metrics from the multi-class confusion matrix revealed an average accuracy of 90.2%, recall of 89.7%, precision of 88.5% and F1-score of 89.2%. Finally, these results demonstrate that the proposed joint classification framework can effectively differentiate between specific types of cyber-attacks (e.g., device reinitialization attack, network Denial-of-Service attack) and physical faults (e.g., air handling unit operational fault, cooling coil valve stuck) in real time for improved building energy management.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗