Search NASA⌕ Search

SEARCH · Search NASA

Results for “intrusion”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

Enhancing Automotive Intrusion Detection Through Multi-Modal Fusion: A CAN FD-LiDAR Approach

As vehicles become smarter and more autonomous, they increasingly depend on advanced sensors and communication technologies to operate securely. However, such growing dependence on technology—whether it’s CAN (Controller Area Network) for internal communication or LiDAR (Light Detection and Ranging) for sensing the world around them—also expands the attack surface for the types of cyber attacks. Traditional intrusion detection systems (IDS) typically monitor these systems in isolation, limiting their ability to detect sophisticated, crosssystem attacks. To address this, we propose a multi-modal fusion approach that combines real-world CAN FD signals (from the HCRL dataset) with LiDAR features (from the nuScenes dataset) to enhance attack detection. Our method employs a twostage ensemble approach. Calibrated XGBoost and LightGBM models initially process CAN FD (Fuzzing Data) and LiDAR data independently, detecting timing anomalies and space abnormalities. They are subsequently logarithmically combined with a logistic regression meta-model along with 17 engineered features capturing cross-modal behavior, prediction conflicts, and nonlinear interactions. This approach achieves an AUC of 0.87 and an F1-score of 0.82, surpassing single-modality baselines and early fusion methods, at merely 2 ms inference latency. Compared with deep learning competitors, it is 3 times more efficient, providing a lightweight, interpretable, and real time solution to automotive cybersecurity.

97 MATHEMATICS AND COMPUTING↗

A Deep Generative Model for Non-Intrusive Identification of EV Charging Profiles

The proliferation of electric vehicles (EVs) brings environmental benefits and technical challenges to power grids. An identification algorithm which can accurately extract individual EV charging profiles out of widely available smart meter measurements has attracted great interests. This paper proposes a non-intrusive identification framework for EV charging profile extraction, which is driven by deep generative models (DGM). First, the proposed DGM is designed as a representation layer embedded into the Markov process and used to model the joint probability distribution of available time-series data. A novel contribution is to approximate posterior distributions by neural networks whose parameters are obtained by variational inference and supervised learning. Second, the EV charging status is inferred from the DGM via dynamic programming. Lastly, the desired EV charging profile can be reconstructed by the rated power of EV models and inferred status. Compared with the benchmark Hidden Markov Models, the proposed framework can better handle noise in data with less computational complexity and better overall accuracy performances with smaller recall. The proposed framework is validated by numerical experiments on the Pecan Street dataset.

33 ADVANCED PROPULSION SYSTEMS↗

Assessing Anomaly-Based Intrusion Detection Configurations for Industrial Control Systems

To reduce cost and ease maintenance, industrial control systems (ICS) have adopted Ethernetbased interconnections that integrate operational technology (OT) systems with information technology (IT) networks. This integration has made these critical systems vulnerable to attack. Security solutions tailored to ICS environments are an active area of research. Anomalybased network intrusion detection systems are well-suited for these environments. Often these systems must be optimized for their specific environment. In prior work, we introduced a method for assessing the impact of various anomaly-based network IDS settings on security. This paper reviews the experimental outcomes when we applied our method to a full-scale ICS test bed using actual attacks. Our method provides new and valuable data to operators enabling more informed decisions about IDS configurations.

Gillen, Rob↗

IViz-OT (Intrusion Detection Visualizer for Operational Technology Network) [SWR-22-63]

The Visualizer dashboard provides grid operator highly-trusted alarming environment for an ongoing or potential cyber-attack based on system anomalies and network-based verification. Once anomalies are detected by the IDS tool (HIDES, NREL SWR-19-65), this platform stores the signatures or alert logs that are generated by the intrusion detector, lays out the detailed summary of the possible alerts, and maps these attacks with high-level scenarios. These scenarios are later combined to define a final event using a decision tree approach and a final report is generated out of this tool for further forensic analysis. It also supports authentication and authorization to support roles-based access control (RBAC) for users and a group of people.

Singh, Vivek Kumar↗

Wind Energy Intrusion Detection System

SAND2022-14659 O The Wind Energy Intrusion Detection System uses a human-machine interface (HMI) to parse results and analyze for anomalies. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Johnson, Jay↗

How Moist and Dry Intrusions Control the Local Hydrologic Cycle in Present and Future Climates

Models disagree on the magnitude of the intensification of hydrologic cycle extremes under climate change. Changes in these extremes are expected to scale with the Clausius-Clapeyron relation but may locally diverge due to the uncertain response of the atmospheric general circulation. Recent work has identified that the circulation contribution (the “dynamic” component) is the largest contributor to uncertainty in changes in hydrologic cycle extremes. In this work, we develop an exact budget for changes in wet and dry extremes based on changes in the associated moist and dry intrusions behind those extremes. We decompose changes into four contributors: thermodynamic, low-level convergence, anomalous meridional moisture advection, and zonal wave activity convergence. In analyzing these changes, we show that low-level convergence is the main dynamic contributor to the tropical and subtropical annual response, consistent with weakening of the Hadley circulation, and we show that anomalous meridional moisture advection is the primary dynamic contributor annually for the extratropics, consistent with storm track changes. We achieve a clean separation between dynamic and thermodynamic contributions through an empirical scaling between extremes and their associated wave activities, showing again that shifting storm tracks and expanding subtropics are critical to the dynamic response of the transient hydrologic cycle. We infer that changes in the large-scale circulation are predominantly responsible for the annual, dynamic response of hydrologic cycle extremes and therefore an important contributor to uncertainty in future projections.

Hydrological cycle, hydrological extremes, dynamic↗

Distributed fiber sensor and machine learning data analytics for pipeline protection against extrinsic intrusions and intrinsic corrosions

This paper presents an integrated technical framework to protect pipelines against both malicious intrusions and piping degradation using a distributed fiber sensing technology and artificial intelligence. A distributed acoustic sensing (DAS) system based on phase-sensitive optical time-domain reflectometry (φ-OTDR) was used to detect acoustic wave propagation and scattering along pipeline structures consisting of straight piping and sharp bend elbow. Signal to noise ratio of the DAS system was enhanced by femtosecond induced artificial Rayleigh scattering centers. Data harnessed by the DAS system were analyzed by neural network-based machine learning algorithms. The system identified with over 85% accuracy in various external impact events, and over 94% accuracy for defect identification through supervised learning and 71% accuracy through unsupervised learning.

Peng, Zhaoqiang↗

Time-Based CAN Intrusion Detection Benchmark

Modern vehicles are complex cyber-physical systems made of hundreds of electronic control units (ECUs) that communicate over controller area networks (CANs). This inherited complexity has expanded the CAN attack surface by the injection of malicious messages that vary their time-based characteristics. To detect these malicious messages, time-based intrusion detection systems (IDS) have been proposed. However, time-based IDS are usually trained and tested on low-fidelity datasets with unrealistic labeled attacks. This makes difficult the task of evaluating, comparing, and validating IDS. Here we detail and benchmark four time-based IDS in a dataset with real and advanced attacks. We found that methods with strong assumptions regarding the distribution of inter-arrival times have lower performance than distribution agnostic based methods. In particular, distribution agnostic based methods outperform distribution based methods at least on $55\%$ in area under the precision-recall (AUC-PR) curve. Our results expand the body of knowledge of CAN time-based IDS by providing details of these methods and reporting their results when tested on datasets with real and advanced attacks. We describe limitations, open challenges, and how lessons learnt from this research can inform the design of deployable time-based IDS in modern vehicles.

Blevins, Deborah↗

Warm air intrusions reaching the MOSAiC expedition in April 2020—The YOPP targeted observing period (TOP)

In the spring period of the Multidisciplinary drifting Observatory for the Study of Arctic Climate (MOSAiC) expedition, an initiative was in place to increase the radiosounding frequency during warm air intrusions in the Atlantic Arctic sector. Two episodes with increased surface temperatures were captured during April 12–22, 2020, during a targeted observing period (TOP). The large-scale circulation efficiently guided the pulses of warm air into the Arctic and the observed surface temperature increased from -30°C to near melting conditions marking the transition to spring, as the temperatures did not return to values below -20°C. Back-trajectory analysis identifies 3 pathways for the transport. For the first temperature maximum, the circulation guided the airmass over the Atlantic to the northern Norwegian coast and then to the MOSAiC site. The second pathway was from the south, and it passed over the Greenland ice sheet and arrived at the observational site as a warm but dry airmass due to precipitation on the windward side. The third pathway was along the Greenland coast and the arriving airmass was both warm and moist. The back trajectories originating from pressure levels between 700 and 900 hPa line up vertically, which is somewhat surprising in this dynamically active environment. The processes acting along the trajectory originating from 800 hPa at the MOSAIC site are analyzed. Vertical profiles and surface energy exchange are presented to depict the airmass transformation based on ERA5 reanalysis fields. The TOP could be used for model evaluation and Lagrangian model studies to improve the representation of the small-scale physical processes that are important for airmass transformation. A comparison between MOSAiC observations and ERA5 reanalysis demonstrates challenges in the representation of small-scale processes, such as turbulence and the contributions to various terms of the surface energy budget, that are often misrepresented in numerical weather prediction and climate models.

54 ENVIRONMENTAL SCIENCES↗

Patch-level CO2 and CH4 fluxes and porewater concentrations in experimental wetlands, 5 and 10 PPT saltwater intrusion simulations, Louisiana 2023-2024

This dataset containes carbon dioxide (CO2) and methane (CH4) flux measurements collected from wetland vegetation patches dominated by Typha domingensis and Panicum hemitomon to assess greenhouse gas flux responses to experimental saltwater intrusion (SWI) pulses. Measurements were conducted before, during, and after simulated SWI events at target salinities of approximately 5 parts per thousand (ppt) with durations of 6, 10, and 17 days and 10 ppt with a duration of 48 days, alongside a control wetland (with no salinity added, flood manipulation only). These data were generated to evaluate how the magnitude and duration of SWI alter wetland carbon exchange and related biogeochemical and plant responses. This data package includes flux measurements from the wetland surface (i.e, soil/water surface and enclosed vegetation) and from the soil/water surface only; porewater and surface water concentrations of CO2 and CH4; salinity, pH, electrical conductivity collected in porewater (at 5, 10, and 20 cm soil depths) and in surface water; soil redox potential; leaf spectral indices, leaf vapor pressure deficit, stomatal conductance; water level, salinity, and photosynthetically active radiation; and aboveground biomass.

EARTH SCIENCE > AGRICULTURE > SOILS > SOIL RESPIRA↗

AmeriFlux US-EvM Everglades Saltwater intrusion marsh

This is the AmeriFlux version of the carbon flux data for the site US-EvM Everglades Saltwater intrusion marsh. Site Description - This is a site in Southeaster Florida that is experience an ecosystem state shift caused by saltwater flooding. We are seeing sawgrass mortality and mangrove invasion

Starr, Gregory↗

Non-Intrusive Measurements Using Femtosecond Laser in Atmospheric Pressure Plasma Jet

Femto-second (fs) lasers offer state-of-the art non-intrusive diagnostic capabilities in plasma flow environments. The diagnostics in plasma flows using a fs-laser that are relevant to this proposal include Two-photon Absorption Laser Induced Fluorescence (TALIF) for measuring the number density of an atomic species, and Femto-second Laser Electronic Excitation Tagging (FLEET) for performing velocity measurements in plasma flows. Various aspects of these diagnostics using fs-lasers are still an active domain of research. The TALIF technique has been used to measure the number density of atomic species in various plasma flow environments like atmospheric pressure plasma jet (APPJ) and arc-jet flows. This technique utilizes a fs-laser to excite an atomic species and the subsequent relaxation process through fluorescence is recorded to make measurements. A narrow band-pass filter is used to isolate the fluorescence signal that is in the infra-red regime. However, broad-band background emissions can potentially pass through the filter and induce noise in the TALIF signal. Particularly, arc-jet plasma flows inherently contain background emissions. In such plasma flow environments, in addition to the filter, the background-subtraction technique will play an important role in reducing the noise that is induced in the number density measurements using TALIF. The proposed research focuses on evaluating the effectiveness of a background-subtraction technique by measuring atomic oxygen using a femtosecond (fs) TALIF in APPJ with induced background emissions and comparing measurements obtained without inducing the emissions. Therefore, by quantifying the changes in the signal-to-noise ratio caused by a background-subtraction technique applied for APPJ, it will enable a better understanding of the uncertainties in the background subtracted fs-TALIF measurements for arc-jet plasma flows. In addition to this, FLEET will be used to obtain velocity in the APPJ, and the impact of background emissions will be analyzed. Under this effort, the experimenters and research personnel will gain the technical know-how in the operational and theoretical aspects of the advanced fs-laser-based diagnostic techniques. The knowledge gained in this process will then also directly be applied to a separate ONR funded project at the Aerodynamics Research Center (ARC), UT Arlington, related to arc-jet flow characterization.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Air Exchange Rate Impact on Activity Equilibrium Factors and Inhalation Fractional Equilibrium Factors for Rn, Xe, Kr, Ar, Ne, and Their Progeny in Vapor Intrusion, Risk, and Dose Models

Exposure to the radioactive noble gasses, especially radon, is of high concern and poses a significant risk to humans in an indoor air environment as the second leading cause of lung cancer in the United States. To evaluate and minimize the risks posed by these gasses, it is important to understand their radiological and physical properties. The EPA’s Radon Vapor Intrusion Screening Level (RVISL) calculator calculates indoor air RVISLs based on target working levels (WLs), target excess lifetime cancer risk (ELCR), and annual dose limits for the actinon (Rn-219), thoron (Rn-220), and radon (Rn-222) decay series. The RVISLs are based on inhalation and submersion in gas cloud exposure routes for residential and commercial settings. The RVISLs are analogous to preliminary remediation goals (PRGs) and dose compliance concentrations (DCCs), where the isotope-specific values are in units of activity concentration (activity per unit volume). If the concentration of a parent isotope of radon or its progeny is found to exceed the RVISL, then further action to ensure cleanup of the contaminant may be necessary. In residential and commercial settings, the RVISLs will vary based on the air exchange rate present. The EPA’s Radionuclide PRG and DCC Calculators also assess the risk/dose from noble gases in the air due to household use of water like showering. In this study, a computational method in MATLAB was developed to determine the impact of the air exchange rate on the activity equilibrium factor (A eq ) and the inhalation fractional equilibrium factor (F eq ). Both factors are values that reflect the equilibrium concentrations of progeny to their parent in the air. These factors have a direct impact on the RVISL, PRG, and DCC calculations of WL, ELCR, and annual dose, respectively. This study builds on a previous report that only focused on actinon, thoron, and radon by revisiting the original A eq and F eq calculation methods, as well as including the values for the Rn-207, Rn-209, Rn-210, Rn-211, Rn-215, Rn-216, Rn-217, Rn-218, Rn-223, Ne-24, Ar-42, Ar-43, Ar-44, Kr-74, Kr-75, Kr-76, Kr-77, Kr-88, Kr-89, Xe-120, Xe-121, Xe-122, Xe-123, Xe-135m, and Xe-138 decay chains, which are not currently available in literature. The EPA’s RVISL calculator will be updated to include the new A eq and F eq values for the actinon, thoron, and radon decay chains, while the rest of the calculators will incorporate all the new A eq and F eq values as appropriate.

63 RADIATION, THERMAL, AND OTHER ENVIRON. POLLUTAN↗

Study of The Compression of an Imploding Plasma and the Magnetic- Field Flux Using Advanced, Non-Intrusive, Spectroscopic Techniques

The main motivation of the project was to measure the magnetic field in pulsed power driven plasma compression using advanced non-intrusive spectroscopic techniques. The strength of the project is that it encompasses a combination of laboratory experiments with diagnostics for both the magnetic field and plasma properties and computational modeling. The following issues were addressed: (1) Plasma and magnetic field dynamics, (2) Field compression and diffusion, (3) Energy balance in the system, (4) Onset of instabilities, and (5) Correlation of the plasma and field evolutions with the initial conditions. The unique feature of the research was the use of advanced spectroscopy to measure both the magnetic field and various plasma properties in multiple locations using both side-on and end-on views, simultaneously. The experimental system allowed for imploding different gas mixtures (which facilitated local measurements) and for flexibility in modifying the initial conditions. Two current generators were used with significantly different current rise times (200 ns and 1.6 µs) but at the same current level of 400 kA. The slower pulsed power generator (at rise time 1.6 µs) was based at the Weizmann Institute of Science (WIS) and imploded plasma into which an axial magnetic field (up to 1 T) was initially embedded. The faster current rise time generator (at rise time 200 ns) based at University of California San Diego (UCSD) was used for plasma parameter studies initially, with collaborative efforts we successfully implemented the advanced spectroscopy techniques at UC San Diego. One graduate student (Nick Aybar) and a postdoctoral scholar (Maylis Dozeries) were trained. They both are based at the Lawrence Livermore National Laboratory now.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Commercialization of a Non-Intrusive Optical (NIO) Technology to Measure Heliostat Optical Errors in Utility-Scale Concentrating Solar Power Plants: Final TCF Report

The drone-based Non-Intrusive Optical (NIO) Technology has been developed at NREL to allow for efficient and automated optical characterization of heliostats in Concentrating Solar Power (CSP) plants. For this project, the technology will be developed into a commercial tool package, including software and user-interface (UI), operations manual, and training and support services. The project team will partner with Tietronix to perform market assessment and stakeholder engagement, develop the tool package and business model, and perform data collection and analysis to demonstrate and refine the capabilities for use at a commercial plant. The team will collaborate with a commercial plant to conduct the data collection operations and provide optical error deliverables. The goal of the project is to advance the commercialization of the technology to a stage where a beta version can be demonstrated at additional commercial plants and developed into a licensable product.

14 SOLAR ENERGY↗

Intrusive Uncertainty Quantification and Optimal Experiment Design in the Open-Source Pyomo Ecosystem

This contribution describes ParmEst and Pyomo.DoE, two pillars of the open-source Python-based Pyomo ecosystem for computational optimization with (partial differential) algebraic equation mathematical models. Specifically, ParmEst facilitates intrusive frequentist parameter estimation (PE) and uncertainty quantification (UQ) through built-in features, such as covariance matrix estimation, bootstrapping, and likelihood ratio tests. Complementary, Pyomo.DoE enables optimal experiment design by maximizing various metrics of the Fisher information matrix, such as A-optimality (trace), D-optimality (determinant), E-optimality (minimum eigenvalue), and ME-optimality (condition number). ParmEst and Pyomo.DoE can solve high-dimensional optimization problems by leveraging the model structure and exact derivative information. Finally, we will discuss future opportunities to integrate PE and UQ capabilities with optimization under uncertainty, including robust optimization with non-convex models via PyROS.

97 MATHEMATICS AND COMPUTING↗

Detecting the Presence of Intrusive Drilling in Secure Transport Containers Using Non-Contact Millimeter-Wave Radar

We employ a 77–81 GHz frequency-modulated continuous-wave (FMCW) millimeter-wave radar to sense anomalous vibrations during vehicle transport at highway speeds for the first time. Secure metallic containers can be breached during transport by means of drilling into their sidewalls but detecting a drilling signature is difficult because the large vibrations of transport drown out the small vibrations of drilling. For the first time, we demonstrate that it is possible to use a non-contact millimeter-wave radar sensor to detect this micron-scale intrusive drilling while highway-speed vehicle movement shakes the container. With the millimeter-wave radar monitoring the microdoppler signature of the container’s vibrating walls, we create a novel signal-processing pipeline consisting of range–angle tracking, time–frequency analysis, horizontal stripe image convolution, and principal component analysis to create a robust and powerful detection statistic to alarm if drilling is present. To support this pipeline, we develop a statistical model combining the vibrating container and the random vibrations induced by vehicle movement to explore the robustness of the sensor’s detection capabilities. The presented results strongly support the inclusion of a millimeter-wave radar vibration sensor into a transport security system.

Wagner, Samuel↗

A system identification approach for non-intrusive reduced order modeling of radiation-induced photocurrents

In this study, development of compact photocurrent models is currently dominated by analytical techniques that rely on physical assumptions to render the governing equations solvable in a closed form. Violation of these assumptions can reduce the accuracy of the models and/or limit their scope. In this paper we show that system identification of nonlinear state-space systems can serve as an alternative numerical basis for non-intrusive reduced order modeling of photocurrent effects. To that end we develop a compact gray box photocurrent model (GBPM) by using a state-space representation with a low-dimensional latent state equation that mimics a mathematical model for the response of an idealized class of devices to ionizing radiation. In so doing we obtain a model that learns the dynamics of a quantity of interest directly from its measurements without requiring snapshots of the internal device state or its discretized model, and can be inferred from very small data sets. To demonstrate the approach we train the GBPM using a small experimental data set for a Z5236 Zener diode and a small synthetic data set obtained by simulating a synthetic pn-junction device. We then compare the GBPMs with black box models trained on the same data and show that performance of the latter is limited by the size of the data set, while the former are able to achieve excellent performance in both the reproductive and the predictive regimes.

97 MATHEMATICS AND COMPUTING↗