Search NASA⌕ Search

SEARCH · Search NASA

Results for “Reverse Engineering”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

Binary Analysis with Architecture and Code Section Detection using Supervised Machine Learning

When presented with an unknown binary, which may or may not be complete, having the ability to determine information about it is critical to future reverse engineering, particularly in discovering the binary’s intended use and potentially malicious nature. This paper details techniques to both identify the machine architecture of the binary, as well as to locate the important code segments within the file. This identification of unknown binaries makes use of a technique called byte histogram in addition to various machine learning (ML) techniques, which we call “What is it Binary” or WiiBin. Benefits of byte histograms reflect the simplicity of calculation and do not rely on file headers or metadata, allowing for acceptable results when only a small portion of the original file is available. Utilizing WiiBin, we were able to accurately (>80%) determine the architecture of test binaries with as little as a 20% contagious portion of the file present. We were also able to determine the location of code sections within a binary by utilizing the WiiBin framework. Ultimately, the more information that can be gleaned from a binary file, the easier it is to successfully reverse engineer.

99 GENERAL AND MISCELLANEOUS↗

Transition metal vacancy and position engineering enables reversible anionic redox reaction for sodium storage

Triggering the anionic redox reaction is an effective approach to boost the capacity of layered transition metal (TM) oxides. However, the irreversible oxygen release and structural deterioration at high voltage remain conundrums. Herein, a strategy for Mg ion and vacancy dual doping with partial TM ions pinned in the Na layers is developed to improve both the reversibility of anionic redox reaction and structural stability of layered oxides. Both the Mg ions and vacancies (□) are contained in the TM layers, while partial Mn ions (~1.1%) occupy the Na-sites. The introduced Mg ions combined with vacancies not only create abundant nonbonding O 2p orbitals in favor of high oxygen redox capacity, but also suppress the voltage decay originated from Na–O–□ configuration. The Mn ions pinned in the Na layers act as “rivets” to restrain the slab gliding at extreme de-sodiated state and thereby inhibit the generation of cracks. The positive electrode, Na 0.67 Mn 0.011 [Mg 0.1 □ 0.07 Mn 0.83 ]O 2 , delivers an enhanced discharge capacity and decent cyclability. This study provides insights into the construction of stable layered oxide positive electrode with highly reversible anionic redox reaction for sodium storage.

Cai, Congcong [Wuhan Univ. of Technology (China)]↗

An empirical investigation of organic software product lines

Abstract Software product line engineering is a best practice for managing reuse in families of software systems that is increasingly being applied to novel and emerging domains. In this work we investigate the use of software product line engineering in one of these new domains, synthetic biology. In synthetic biology living organisms are programmed to perform new functions or improve existing functions. These programs are designed and constructed using small building blocks made out of DNA. We conjecture that there are families of products that consist of common and variable DNA parts, and we can leverage product line engineering to help synthetic biologists build, evolve, and reuse DNA parts. In this paper we perform an investigation of domain engineering that leverages an open-source repository of more than 45,000 reusable DNA parts. We show the feasibility of these new types of product line models by identifying features and related artifacts in up to 93.5% of products, and that there is indeed both commonality and variability. We then construct feature models for four commonly engineered functions leading to product lines ranging from 10 to 7.5 × 10 20 products. In a case study we demonstrate how we can use the feature models to help guide new experimentation in aspects of application engineering. Finally, in an empirical study we demonstrate the effectiveness and efficiency of automated reverse engineering on both complete and incomplete sets of products. In the process of these studies, we highlight key challenges and uncovered limitations of existing SPL techniques and tools which provide a roadmap for making SPL engineering applicable to new and emerging domains.

97 MATHEMATICS AND COMPUTING↗

CAN-D: A Modular Four-Step Pipeline for Comprehensively Decoding Controller Area Network Data

Controller area networks (CANs) are a broadcast protocol for real-time communication of critical vehicle subsystems. Original equipment manufacturers of passenger vehicles hold secret their mappings of CAN data to vehicle signals, and these definitions vary according to make, model, and year. Without these mappings, the wealth of real-time vehicle information hidden in the CAN packets is uninterpretable, severely impeding vehicle-related research, including CAN cybersecurity and privacy studies, aftermarket tuning, efficiency and performance monitoring, and fault diagnosis to name a few. Guided by the four-part CAN signal definition, we present CAN-D (CAN-Decoder), a modular, four-step pipeline for identifying each signal's boundaries (start bit and length), endianness (byte ordering), signedness (bit-to-integer encoding), and by leveraging diagnostic standards, augmenting a subset of the extracted signals with meaningful, physical interpretation. En route to CAN-D, we provide a comprehensive review of the CAN signal reverse engineering research. All previous methods ignore endianness and signedness, rendering them incapable of decoding many standard CAN signal definitions. Incorporating endianness grows the search space from 128 to 4.72E21 signal tokenizations and introduces a web of changing dependencies. In response, we formulate, formally analyze, and provide an efficient solution to an optimization problem, allowing identification of the optimal set of signal boundaries and byte orderings. In addition, we provide two novel, state-of-the-art signal boundary classifiers—both of which are superior to previous approaches in precision and recall in three different test scenarios—and the first signedness classification algorithm, which exhibits a $>$ 97% F-score. Altogether, CAN-D is the only solution with the potential to extract any CAN signal that is also the state of the art. In evaluation on 10 vehicles of different makes, CAN-D's average $\ell ^1$ error is five times better (81% less) than all previous methods and exhibits lower average error, even when considering only signals that meet prior methods’ assumptions. Finally, CAN-D is implemented in lightweight hardware, allowing for an on-board diagnostic (OBD-II) plugin for real-time in-vehicle CAN decoding.

42 ENGINEERING↗

Development and Engineering Design in Support of "Rover Ranch": A K-12 Outreach Software Project

A continuation of the initial development started in the summer of 1999, the body of work performed in support of 'ROVer Ranch' Project during the present fellowship dealt with the concrete concept implementation and resolution of the related issues. The original work performed last summer focused on the initial examination and articulation of the concept treatment strategy, audience and market analysis for the learning technologies software. The presented work focused on finalizing the set of parts to be made available for building an AERCam Sprint type robot and on defining, testing and implementing process necessary to convert the design engineering files to VRML files. Through reverse engineering, an initial set of mission critical systems was designed for beta testing in schools. The files were created in ProEngineer, exported to VRML 1.0 and converted to VRML 97 (VRML 2.0) for final integration in the software. Attributes for each part were assigned using an in-house developed JAVA based program. The final set of attributes for each system, their mutual interaction and the identification of the relevant ones to be tracked, still remain to be decided.

Pascali, Raresh↗

Structure and Interactions of HIV-1 gp41 CHR-NHR Reverse Hairpin Constructs Reveal Molecular Determinants of Antiviral Activity

Engineered reverse hairpin constructs containing a partial C-heptad repeat (CHR) sequence followed by a short loop and full-length N-heptad repeat (NHR) were previously shown to form trimers in solution and to be nanomolar inhibitors of HIV-1 Env mediated fusion. Their target is the in situ gp41 fusion intermediate, and they have similar potency to other previously reported NHR trimers. However, their design implies that the NHR is partially covered by CHR, which would be expected to limit potency. An exposed hydrophobic pocket in the folded structure may be sufficient to confer the observed potency, or they may exist in a partially unfolded state exposing full length NHR. Here, in this study, we examined their structure by crystallography, CD and fluorescence, establishing that the proteins are folded hairpins both in crystal form and in solution. We examined unfolding in the milieu of the fusion reaction by conducting experiments in the presence of a membrane mimetic solvent and by engineering a disulfide bond into the structure to prevent partial unfolding. We further examined the role of the hydrophobic pocket, using a hairpin-small molecule adduct that occluded the pocket, as confirmed by X-ray footprinting. The results demonstrated that the NHR region nominally covered by CHR in the engineered constructs and the hydrophobic pocket region that is exposed by design were both essential for nanomolar potency and that interaction with membrane is likely to play a role in promoting the required inhibitor structure. The design concepts can be applied to other Class 1 viral fusion proteins.

59 BASIC BIOLOGICAL SCIENCES↗

Engineering and evolution of Yarrowia lipolytica for producing lipids from lignocellulosic hydrolysates

Yarrowia lipolytica, an oleaginous yeast, shows promise for industrial fermentation due to its robust acetyl-CoA flux and well-developed genetic engineering tools. However, its lack of an active xylose metabolism restricts the conversion of cellulosic sugars to valuable products. To address this, metabolic engineering, and adaptive laboratory evolution (ALE) were applied to the Y. lipolytica PO1f strain, resulting in an efficient xylose-assimilating strain (XEV). Whole-genome sequencing (WGS) of the XEV followed by reverse engineering revealed that the amplification of the heterologous oxidoreductase pathway and a mutation in the GTPase-activating protein gene (YALI0B12100g) might be the primary reasons for improved xylose assimilation in the XEV strain. When a sorghum hydrolysate was used, the XEV strain showed superior xylose consumption and lipid production compared to its parental strain (X123). This study advances our understanding of xylose metabolism in Y. lipolytica and proposes effective metabolic engineering strategies for optimizing lignocellulosic hydrolysates.

60 APPLIED LIFE SCIENCES↗

Laboratory evolution reveals the metabolic and regulatory basis of ethylene glycol metabolism by Pseudomonas putida KT2440

Pollution from ethylene glycol, and plastics containing this monomer, represent a significant environmental problem. The investigation of its microbial metabolism therefore provides insights into the environmental fate of this pollutant, but also enables its utilization as a carbon source for microbial biotechnology. Here, we reveal the genomic and metabolic basis of ethylene glycol metabolism in Pseudomonas putida KT2440. Although this strain cannot grow on ethylene glycol as sole carbon source, it can be used to generate growth-enhancing reducing equivalents upon co-feeding with acetate. Mutants that utilize ethylene glycol as sole carbon source were isolated through adaptive laboratory evolution. Genomic analysis of these mutants revealed a central role of the transcriptional regulator GclR, which represses the glyoxylate carboligase pathway as part of a larger metabolic context of purine and allantoin metabolism. Secondary mutations in a transcriptional regulator encoded by PP_2046 and a porin encoded by PP_2662 further improved growth on ethylene glycol in evolved strains, likely by balancing fluxes through the initial oxidations of ethylene glycol to glyoxylate. With this knowledge we reverse engineered an ethylene glycol utilizing strain and thus, revealed the metabolic and regulatory basis that are essential for efficient ethylene glycol metabolism in P. putida KT2440.

09 BIOMASS FUELS↗

RanCompute: Computational Security in Embedded Devices via Random Input and Output Encodings

An embedded device in an insecure environment is subject to additional security risk through capture and reverse-engineering by a capable adversary. If this device contains a microchip performing sensitive computations, capture of the chip may leak functionality to an adversary. In this paper we propose a novel method in which we randomly encode the input operands and the outputs of a computation, thus not revealing the arithmetic operations being performed. The operations are sequenced in a graph representing the overall application. Once the initialization values are overwritten and lost, the results of these computations are indecipherable by the device performing the calculations as well as by any adversary. The result is transmitted back to a secure server which has stored the initialization values and so can decode the results which appear random to the adversary.

Embedded computing↗

Solution of the Navier-Stokes equations for flow within a 2-D thrust reversing nozzle

Implicit numerical procedures have been developed to solve the Reynold's Averaged Navier-Stokes equations for the flowfield within a two-dimensional thrust reversing engine nozzle. The procedures have been tested on four different thrust reverser nozzle geometries with both fixed and moving walls. The results have compared well with available experimental data.

Maccormack, R. W.↗

Analysis of the flow field generated near an aircraft engine operating in reverse thrust

A computer solution is developed to the exhaust gas reingestion problem for aircraft operating in the reverse thrust mode on a crosswind-free runway. The computer program determines the location of the inlet flow pattern, whether the exhaust efflux lies within the inlet flow pattern or not, and if so, the approximate time before the reversed flow reaches the engine inlet. The program is written so that the user is free to select discrete runway speeds or to study the entire aircraft deceleration process for both the far field and cross-ingestion problems. While developed with STOL applications in mind, the solution is equally applicable to conventional designs. The inlet and reversed jet flow fields involved in the problem are assumed to be noninteracting. The nacelle model used in determining the inlet flow field is generated using an iterative solution to the Neuman problem from potential flow theory while the reversed jet flow field is adapted using an empirical correlation from the literature. Sample results obtained using the program are included.

Ledwith, W. A., Jr.↗

Myths and realities: Defining re-engineering for a large organization

This paper describes the background and results of three studies concerning software reverse engineering, re-engineering, and reuse (R3) hosted by the Internal Revenue Service in 1991 and 1992. The situation at the Internal Revenue--aging, piecemeal computer systems and outdated technology maintained by a large staff--is familiar to many institutions, especially among management information systems. The IRS is distinctive for the sheer magnitude and diversity of its problems; the country's tax records are processed using assembly language and COBOL and spread across tape and network DBMS files. How do we proceed with replacing legacy systems? The three software re-engineering studies looked at methods, CASE tool support, and performed a prototype project using re-engineering methods and tools. During the course of these projects, we discovered critical issues broader than the mechanical definitions of methods and tool technology.

Yin, Sandra↗

A Comparative Study of Direct and Indirect Additive Manufacturing Approaches for the Production of a Wind Energy Component

Additive manufacturing (AM) was developed in the 1980s to create three-dimensional prototypes through layer-wise approaches to fabrication. Since then, these approaches have seen improvements in both materials and processing technologies. To date, there are now 7 types of additive manufacturing processes and hundreds of materials, which can be directly printed – going directly from digital design to fabricated components. In this project, Oak Ridge National Laboratory (ORNL), Vestas Wind Systems, and The National Renewable Energy Laboratory (NREL) collaborated to evaluate the effectiveness of state-of-the-art large-scale AM processes in the production of a structural component for use in a wind turbine nacelle, through both direct and indirect manufacturing approaches. Here, experienced AM design engineers detail techniques for AM design, including topology optimization (TO), support minimization, reverse engineering, and techniques for mitigating poor interlaminar performance. Fabrication of the components is presented, including printing parameters and postprocessing, and followed with full-scale component testing by a 3rd party testing laboratory. To evaluate the potential of the developed approaches, a complete techno-economic analysis is provided which evaluates the cost of these techniques given current and near to long-term projections of AM system capabilities.

17 WIND ENERGY↗

Automated Reconstruction of Control Logic for Programmable Logic Controller Forensics

This paper presents Similo, an automated scalable framework for control logic forensics in industrial control systems. Similo is designed to investigate denial of engineering operations (DEO) attacks, recently demonstrated to hide malicious control logic in a programmable logic controller (PLC) at field sites from an engineering software (at control center). The network traffic (if captured) contains substantial evidence to investigate DEO attacks including manipulation of control logic. Laddis, a state-of-the-art forensic approach for DEO attacks, is a binary-logic decompiler for the Allen-Bradley’s RSLogix engineering software and MicroLogix 1400 PLC. It is developed with extensive manual reverse engineering effort of the underlying proprietary network protocol and the binary control logic. Unfortunately, Laddis is not scalable and requires similar efforts to extend on other engineering software/PLCs. The proposed solution, Similo, is based on the observation that engineering software of different vendors are equipped with decompilers. Similo is a virtual-PLC framework that integrates the decompilers with their respective (previously-captured) ICS network traffic of control logic. It recovers the binary logic into a high-level source code (of the programming languages defined by IEC 61131-3 standard) automatically. Similo can work with both proprietary/open protocols without requiring protocol specifications and the binary formats of control logic. Thus, it is scalable to different ICS vendors. We evaluate Similo on three PLCs of two ICS vendors, i.e. MicroLogix 1400, MicroLogix 1100, and Modicon M221. These PLCs support proprietary protocols and the control logics written in two programming languages: Ladder Logic and Instruction List. The evaluation results show that Similo can accurately reconstruct a control logic from an ICS network traffic and can be used to investigate the DEO attacks effectively.

Ali qasim, Syed↗

High Pressure Reverse Flow APS Engine

A design and test demonstration effort was undertaken to evaluate the concept of the reverse flow engine for the APS engine application. The 1500 lb (6672 N) thrust engine was designed to operate on gaseous hydrogen and gaseous oxygen propellants at a mixture ratio of 4 and to achieve the objective performance of 435 sec (4266 Nsec/kg) specific impulse. Superimposed durability requirements called for a million-cycle capability with 50 hours duration. The program was undertaken as a series of tasks including the initial preliminary design, design of critical test components and finally, the design and demonstration of an altitude engine which could be used interchangeably to examine operating parameters as well as to demonstrate the capability of the concept. The program results are reported with data to indicate that all of the program objectives were met or exceeded within the course of testing on the program. The analysis effort undertaken is also reported in detail and supplemented with test data in some cases where prior definitions could not be made. The results are contained of these analyses as well as the test results conducted throughout the course of the program. Finally, the test data and analytical results were combined to allow recommendations for a flight weight design. This preliminary design effort is also detailed.

Senneff, J. M.↗