Search NASA⌕ Search

SEARCH · Search NASA

Results for “vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,225 records · Page 68
All sourcesNASA NTRSDOE OSTI
DOE OSTI2026

Toward a standardization of cryostructure and cryogenic soil structure terminology for the field description of permafrost‐affected soils

This paper establishes standardized terminology and field documentation protocols for cryostructures and cryogenic soil structures in permafrost‐affected soils and provides brief guidance on descriptions of ground ice morphology and ice volume estimates. We consolidate permafrost terminology from Russian and North American literature, clarify long‐standing ambiguities, and provide explicit guidelines that align with US Department of Agriculture‐Natural Resources Conservation Service soil description standards. Our scheme makes critical distinctions between cryostructure, the distribution of ice within soil, and cryogenic soil structure, the morphological structure of soil resulting from ice formation. The scheme organizes cryostructures into three main categories: non‐segregated ice, visible segregated ice, and ice matrices. We introduce standardized codes and parameters for field descriptions of ice and soil that enable machine‐readable data collection compatible with existing soil information systems. This standardization will significantly enhance the integration of field observations into landscape‐scale assessments of permafrost stability, infrastructure vulnerability, and ecosystem response to permafrost thaw, addressing an urgent need for quantitative data to inform modeling and decision‐making in rapidly changing Arctic and subarctic environments.

Andersen, Megan L. [University of Minnesota, Saint↗
DOE OSTI2017

APT malware static trace analysis through bigrams and graph edit distance

Research and business organizations are vulnerable to attack by malware, particularly advanced persistent threat malware tailored for a specific target. Malware identification is made more difficult because samples can be subtly altered to avoid detection by methods that check for an identical match to known code. Different versions of an original piece of malware form a malware family. And when new malicious software is identified, reverse engineers seek to identify its origin and purpose. Knowing whether new malware is from a known family or a previously unobserved family aids the efficiency of reverse engineers. Furthermore, this article presents a three-stage method to classify new malware into a family by comparing its similarity to existing static traces, and assigning it to the most similar family. First, a fast filtering method creates a shortlist of samples with some similarity to the new malware, using a simple bigram comparison of the instructions. The second stage takes the call graph view of the shortlisted static traces and uses simulated annealing to estimate the graph edit distance, a measure of dissimilarity between graphs. Finally, a random forest classifier combines the previous two results to predict the family to which a new sample belongs. Our paper also considers how to detect when malware is from a new family.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

How to Host An Effective Data Competition: Statistical Advice for Competition Design and Analysis

Data competitions rely on real-time leaderboards to rank competitor entries and stimulate algorithm improvement. While such competitions have become quite popular and prevalent, particularly in supervised learning formats, their implementations by the host are highly variable. Without careful planning, a supervised learning competition is vulnerable to overfitting, where the winning solutions are so closely tuned to the particular set of provided data that they cannot generalize to the underlying problem of interest to the host. This paper outlines some important considerations for strategically designing relevant and informative data sets to maximize the learning outcome from hosting a competition based on our experience. It also describes a postcompetition analysis that enables robust and efficient assessment of the strengths and weaknesses of solutions from different competitors, as well as greater understanding of the regions of the input space that are well-solved. The postcompetition analysis, which complements the leaderboard, uses exploratory data analysis and generalized linear models (GLMs). The GLMs not only expand the range of results we can explore, they also provide more detailed analysis of individual subquestions including similarities and differences between algorithms across different types of scenarios, universally easy or hard regions of the input space, and different learning objectives. When coupled with a strategically planned data generation approach, the methods provide richer and more informative summaries to enhance the interpretation of results beyond just the rankings on the leaderboard. The methods are illustrated with a recently completed competition to evaluate algorithms capable of detecting, identifying, and locating radioactive materials in an urban environment.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Oxygen Vacancy Introduction to Increase the Capacity and Voltage Retention in Li‐Excess Cathode Materials

Li‐rich rocksalt oxides are promising cathode materials for lithium‐ion batteries due to their large capacity and energy density, and their ability to use earth‐abundant elements. The excess Li in the rocksalt, needed to achieve good Li transport, reduces the theoretical transition metal redox capacity and introduces a labile oxygen state, both of which lead to increased oxygen oxidation and concomitant capacity loss with cycling. Herein, it is demonstrated that substituting the labile oxygen in Li‐rich cation‐disordered rocksalt materials with a vacancy is an effective strategy to inhibit oxygen oxidation. It is found that the oxygen vacancy in cation‐disordered lithium manganese oxide favors high Li coordination thereby reducing the concentration of unhybridized oxygen states, while increasing the theoretical Mn capacity. It is shown that in the vacancy‐containing compound, synthesized by ball milling, the Mn valence is lowered to less than +3, providing access to more than 300 mAh g −1 capacity from the Mn 2+ /Mn 4+ redox reservoir. The increased transition metal redox and decreased O oxidation are found to improve the capacity and voltage retention, indicating that oxygen vacancy creation to remove the most vulnerable oxygen ions and reduce transition metal valence provides a new opportunity for the design of high‐performance Li‐rich rocksalt cathodes.

25 ENERGY STORAGE↗
DOE OSTI2019

Estimation of full-field, full-order experimental modal model of cable vibration from digital video measurements with physics-guided unsupervised machine learning and computer vision

Cables are critical components for a variety of structures such as stay cables and suspenders of cable-stayed bridges and suspension bridges. When in operational service, they are vulnerable to cumulative fatigue damage induced by dynamic loads (e.g., the cyclic vehicle loads and wind excitation). To accurately analyze and predict their dynamics behaviors and performance that could be spatially local and temporal transient, it is essential to perform high-resolution vibration measurements, from which their dynamics properties are identified and, subsequently, a high spatial resolution, full-modal-order dynamics model of cable vibration can be established. In this study, we develop a physics-guided, unsupervised machine learning-based video processing approach that can blindly and efficiently extract the full-field (as many points as the pixel number of the video frame) modal parameters of cable vibration using only the video of an operating (output-only) cable. In particular, by incorporating the physics of cable vibration (taut string model), a novel automated modal motion filtering method is proposed to enable autonomous identification of full-order (as many modes as possible) dynamic parameters, including those weakly excited modes that used to be challenging to identify in operational modal analysis. Therefore, a full-field, full-order modal model of cable vibration is established by the proposed method. Furthermore, this new approach provides a low-cost and noncontact technique to estimate the cable tension using only the video of the vibrating cable where the fundamental frequency is automatically and efficiently estimated to compute the cable tension according to the taut string equation. Laboratory experiments on a bench-scale cable are conducted to validate the developed approach.

42 ENGINEERING↗
DOE OSTI2019

Estimation of full-field dynamic strains from digital video measurements of output-only beam structures by video motion processing and modal superposition

Strain is an necessary quantity to characterize local structural behaviors and directly correlates with structural damage initiation and development that is within local regions. Strain measurement at high spatial resolution (density) locations is thus required to characterize local structural behaviors and detect potential local damage. Traditional contact-type strain gauges are mostly discrete point-wise sensors that can only be placed in a limited number of positions. Distributed optical fiber sensing techniques can measure strains at spatially dense measurement points, but their instrumentation is a time- and labor-intensive process associated with the issue of the fragility of fibers. Noncontact optical measurement techniques, such as a family of interferometry techniques using laser beams (e.g., laser Doppler vibrometers), can provide vibration measurement at high density spatial points without the need to install sensors on the structure. Yet, these measurement devices are active sensing methods that are relatively expensive and vulnerable to ambient motion. Photogrammetry is an alternative noncontact optical measurement method using (passive) white-light imaging of digital video cameras that are relatively low-cost, agile, and provides simultaneous measurements at high spatial density locations where every pixel becomes a measurement point. Among others, digital image correlation can achieve full-field deformation measurements and subsequently estimate the full-field strains. However, it is computationally extensive. This research develops a new efficient approach to estimate the full-field (as many measurement points as the pixel number of the video frame on the structure) dynamic strains at high-spatial (pixel)-resolution/density location points from the digital video measurement of output-only vibrating structures. The developed approach is based on phase-based video motion estimation and modal superposition of structural dynamic response. Moreover, the method is augmented by a high-fidelity finite element model, which is updated with the full-field experimental modal parameters “blindly” identified from the video measurement of the output-only structure. Laboratory experiments are conducted to validate the method on a bench-scale cantilever beam structure. Results demonstrate that the full-field dynamic strain estimated by the developed approach from the video measurement of the output-only vibrating beam match very well those directly measured by the strain gauges (at discrete measurement points). Some factors associated with the effectiveness of the method are experimentally studied and discussed.

47 OTHER INSTRUMENTATION↗
DOE OSTI2015

Interdisciplinary research in climate and energy sciences

Due to the complex nature of climate change, interdisciplinary research approaches involving knowledge and skills from a broad range of disciplines have been adopted for studying changes in the climate system as well as strategies for mitigating climate change (i.e., greenhouse gas emissions reductions) and adapting to its impacts on society and natural systems. Harnessing of renewable energy sources to replace fossil fuels is widely regarded as a long-term mitigation strategy that requires the synthesis of knowledge from engineering, technology, and natural and social sciences. In this study, we examine how the adoption of interdisciplinary approaches has evolved over time and in different geographic regions. We conducted a comprehensive literature survey using an evaluation matrix of keywords, in combination with a word cloud analysis, to evaluate the spatiotemporal dynamics of scholarly discourse about interdisciplinary approaches to climate change and renewable energy research and development (R&D). Publications that discuss interdisciplinary approaches to climate change and renewable energy have substantially increased over the last 60 years; it appears, however, that the nature, timing, and focus of these publications vary across countries and through time. Over the most recent three decades, the country-level contribution to interdisciplinary research for climate change has become more evenly distributed, but this was not true for renewable energy research, which remained dominated by the United Sates and a few other major economies. The research topics have also evolved: Water resource management was emphasized from 1990s to 2000s, policy and adaptation were emphasized from the 2000s to 2010 – 2013, while vulnerability became prominent during the most recent years (2010 – 2013). Lastly, our analysis indicates that the rate of growth of interdisciplinary research for renewable energy lags behind that for climate change, possibly because knowledge emanating from climate change science has motivated the subsequent upswing in renewable energy R&D.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Pincers with diverse donors and their interconversion: application to Ni(II)

Abstract A pincer ligand composed of a pyridine with ortho positions substituted by a bulky phosphine arm and a pyrazole arm (PNNH) is installed on nickel(II) to yield the diamagnetic planar complex [(PNNH)NiCl]Cl. The chloride anion can be replaced by BPh 4 − by a metathesis. The acidic pyrazole proton can be removed with LiN(SiMe 3 ) 2 to yield the square planar neutral molecule (PNN − )NiCl. The coordinated chloride can be metathetically replaced by azide to yield diamagnetic (PNN − )Ni(N 3 ). To evaluate changing the phosphine donor for a phosphine sulfide, the corresponding pincer ligand SPNNH was synthesized and installed on NiBr 2 . The reduced steric bulk from the more distant phosphorous keeps both halides coordinated in the paramagnetic molecular species (SPNNH)NiBr 2 . Several attempts to dehydrobrominate this species result in synthesis and characterization of two unexpected products. One effort revealed that the electrophilic character of P(V) leaves the phosphorus atom in (SPNNH)NiBr 2 vulnerable to nucleophilic attack, resulting in a P/C cleavage product which was characterized.

Cabelof, Alyssa C.↗
DOE OSTI2019

Overshadow PLC to Detect Remote Control-Logic Injection Attacks

Programmable logic controllers (PLCs) in industrial control systems (ICS) are vulnerable to remote control logic injection attacks. Attackers target the control logic of a PLC to manipulate the behavior of a physical process such as nuclear plants, power grids, and gas pipelines. Control logic attacks have been studied extensively in the literature, including hiding the transfer of a control logic over the network from both packet header-based signatures, and deep packet inspection. For instance, these attacks transfer a control logic code as data, into small fragments (one-byte per packet), that are further padded with noise data. To detect control logic in ICS network traffic, this paper presents Shade, a novel shadow memory technique that observes the network traffic to maintain a local copy of the current state of a PLC memory. To analyze the memory contents, Shade employs a classification algorithm with 42 unique features categorized into five types at different semantic levels of a control logic code, such as number of rungs, number of consecutive decompiled instructions, and n-grams. We then evaluate Shade against control logic injection attacks on two PLCs, Modicon M221 and MicroLogix 1400 from two ICS vendors, Schneider electric and Allen-Bradley, respectively. The evaluation results show that Shade can detect an attack instance (i.e., identifying at least one attack packet during the transfer of a malicious control logic) accurately without any false alarms.

Yoo, Hyunguk↗
DOE OSTI2022

Resilient Hierarchical Networked Control Systems: Secure Controls for Critical Locations and at Edge

Integration of information and communication technology (ICT) offers new opportunities in improving the management and operation of critical infrastructures such as power systems as it allows connection of different sensors and control components via a communication network, leading to the so-called networked control systems (NCS). However, the use of open and pervasive ICT such as the Internet or wireless communication technologies comes at a price of making NCS vulnerable to cyber intrusions/attacks which may cause physical damage. Here, this chapter presents control algorithms to ensure resilient and safe operation of NCS under unknown cyberattacks. Specifically, a variant of dynamic watermarking strategies is presented by embedding encoding/decoding components of chaotic signals into the NCS for secure control for critical locations where the measurement/control signals are transmitted to/from the control center via a communication network. In addition, resilient cooperative control algorithms are discussed to ensure safe operation at edge of the NCS which consists of a large number of distributed controllable devices. Several numerical examples are provided to illustrate the proposed control strategies.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2022

Exploring the Spatial Relationship Between Demographic Indicators and the Built Environment of a City

In addition to global and regional drivers of urbanization, neighborhood development in urban areas across the United States has been shown to be influenced by various local socio-economic factors. These factors, despite varying across socio-economic groups, have large implications regarding a population’s vulnerability to extreme climate events, including heat waves resulting in adverse health impacts. Additionally, the demographics of an urban area can shape its infrastructural characteristics, causing different populations groups to face varying levels of risks and benefits. As a result, the urban morphology and socio-economic characteristics of a city are deeply intertwined; however, their interactions on a finer scale are not yet fully understood. This research aims to better understand the relationships between various socio-economic factors and the built environment of a city, considering variability in building types, and temperature patterns. This research focuses on the city of Las Vegas, NV, and uses spatial data analysis to understand the correlation between of socio-economic characteristics, building morphology, building characteristics, and temperature data to understand the correlation between these various factors. Results of these research shows there is a distinct pattern of clustering of socio-economic characteristics with the city and there is a distinct correlation between age and cost, socio-economic characteristics, and locations of high heat distribution within the city.

Singh, Ridhima↗
DOE OSTI2023

Transferable Adversarial Attack on 3D Object Tracking in Point Cloud

3D point cloud object tracking has recently witnessed considerable progress relying on deep learning. Such progress, however, mainly focuses on improving tracking accuracy. The risk, especially considering that deep neural network is vulnerable to adversarial perturbations, of a tracker being attacked is often neglected and rarely explored. In order to attract attentions to this potential risk and facilitate the study of robustness in point cloud tracking, we introduce a novel transferable attack network (TAN) to deceive 3D point cloud tracking. Specifically, TAN consists of a 3D adversarial generator, which is trained with a carefully designed multi-fold drift (MFD) loss. The MFD loss considers three common grounds, including classification, intermediate feature and angle drifts, across different 3D point cloud tracking frameworks for perturbation generation, leading to high transferability of TAN for attack. In our extensive experiments, we demonstrate the proposed TAN is able to not only drastically degrade the victim 3D point cloud tracker, \ie, P2B, but also effectively deceive other unseen state-of-the-art approaches such as BAT and M^2Track, posing a new threat to 3D point cloud tracking.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Formally Verified ZTA Requirements for OT/ICS Environments with Isabelle/HOL

The clean energy transformation includes the integration of distributed energy resources with the power grid, which has led to a substantial increase in the complexity of power grids infrastructure and the underlying operational technology environment. Power grids infrastructure represents an operational technology environment that has become a system of systems, integrating heterogeneous devices which are both software-and hardware-intensive; as a result, there are increasing demands to exploit advances in the commodity of software-hardware infrastructures to improve energy systems requirements such as cybersecurity and resilience. In such a setting, system requirements at different levels mix, which leads to vulnerabilities and undesirable outcomes. The use of formal methods to characterize and prove system requirements removes ambiguity, increases automation, and provides high levels of assurance and reliability. In this paper, we contribute a methodology and a framework for the system-level verification of zero trust architecture requirements in operational technology environments. We define a formal specification for the core functionalities of operational technology environments, the corresponding invariants, and security proofs. Of particular note is our modular approach for the formal verification of asynchronous interactions in operational technology environments. The formal specification and the proofs have been mechanized using the interactive theorem proving environment Isabelle/HOL.

formal methods↗
DOE OSTI2024

Soil Organic Matter Dynamics in the Critical Zone

Soil is the thin, vital layer of Earth’s surface that forms the foundation of the Critical Zone and sustains life. This chapter explores the intricate dynamics of soil organic matter within the critical zone, focusing on three key thematic areas: deep soil organic matter, wildfire organic matter interactions, and organic matter erosion. Soil organic matter, although a small fraction of soil mass, plays a crucial role in soil function and ecosystem stability. The complexity of soil organic matter arises from its diverse chemical composition and interactions with minerals, which influence its persistence in the environment. This chapter begins by examining deep soil organic matter, which constitutes a significant portion of global carbon storage. We discuss how deep soil organic matter, typically isolated from surface processes, may become vulnerable to decomposition and carbon release due to disturbances. Next, we explore the impacts of fire on soil organic matter, particularly the formation and stability of pyrolyzed organic matter. The decomposition of pyrolyzer organic matter is influenced by its chemical composition and the surrounding environmental conditions, with implications for carbon cycling and soil fertility in post-fire ecosystems. Finally, the chapter addresses the role of erosion in soil organic matter dynamics. Erosion, accelerated by human activities, redistributes soil organic matter across landscapes, affecting its turnover and the broader biogeochemical cycles. We consider how micro-topographic features and erosion processes interact to influence soil OM stability and carbon sequestration. By synthesizing recent advances in these areas, this chapter provides a comprehensive overview of the complex and dynamic nature of soil organic matter in the critical zone, highlighting its importance in understanding the critical zone in the face of environmental change.

Moreland, Kimber↗
DOE OSTI2025

Security Assessment of an LBP16-Protocol-Based Computer Numerical Control Machine

Subtractive manufacturing systems, specifically, computer numerical control machines, have revolutionized the manufacturing industry. Computer numerical control machining is the preferred method for producing finished parts due to its efficiency, speed and suitability for high-volume production. Securing computer numerical control machines is a priority. Compromises or disruptions of these machines can result in significant downtime, loss of productivity and financial loss. This study examines the vulnerabilities and risks associated with computer numerical control machines, in particular, systems utilizing the LBP16 protocol for controller-machine communications. The study reveals that an adversary can execute cyber-physical attacks such as sabotage and denial of service. The potential security threats emphasize the importance of implementing robust security measures to mitigate the cyber risks to computer numerical control machines.

Forihat, Yahya [Virginia Commonwealth University, ↗
DOE OSTI2025

Automated Programmable Logic Controller Memory Forensics Using RGB Image Analysis and Deep Learning

The introduction of Industry 4.0 and Internet-based technologies has enhanced industrial control system operations but have inadvertently increased their vulnerabilities to cyber attacks. When an industrial control system is compromised, security analysts need to identify the root cause quickly to start the recovery process and develop mitigation strategies. Memory forensics is critical in the incident analysis process to ascertain what occurred. Approaches for analyzing the persistent memory in industrial control devices are limited and almost nonexistent for volatile memory. This chapter proposes an automated methodology for programmable logic controller memory dump analysis using computer vision and deep learning techniques. The methodology converts the sequences of bytes in a programmable logic controller memory dump to red-green-blue pixels and employs a deep learning model that learns the underlying patterns and features of pre-labeled forensic artifacts in images and segments them into distinct regions. The trained model is employed to automatically segment new memory images and identify forensic artifacts. Evaluation of the methodology on a Schneider Electric Modicon M221 programmable logic controller under code injection and code modification attacks demonstrates its ability to detect attack artifacts in memory dumps.

Asmar Awad, Rima [ORNL] (ORCID:0000000233407742)↗
DOE OSTI2016

Investigating the Relationship between Need for Cognition and Skill in Ethical Hackers

As technology gets more complex and increasingly connected, there is an increasing concern with cyber security. There is also a growing demand for cyber security professionals. Unfortunately there currently are not enough skilled professionals to meet that demand. In order to prepare the next generation of cyber security professionals to meet this demand, we need to understand what characteristics make skilled cyber security professionals. For this work, we focus on professionals who take an offensive approach to cyber security, so called ethical hackers. These hackers utilize many of the same skills that the adversaries that we defend against would use, with the goal of identifying vulnerabilities and address them before they are exploited by adversaries. A commonly held belief among ethical hackers is that hackers must possess exceptional curiosity and problem solving skills in order to be successful. Curiosity is has been studied extensively in psychology, but there is no consensus on what it is and how to measure it. Further, many existing inventories for assessing curiosity are targeted at measuring curiosity in children. Although there isn’t an accepted standard to assess curiosity in adults, a related construct, called Need for Cognition (may capture what is meant when people speak of curiosity. The Need for Cognition scale also captures the tendency toward preferring complex problems (which correlates with good problem solving skills), which may provide insight into what make skilled hackers. In addition to the Need for Cognition, we used a structured interview to assess hacker skill. Hackers rated their own skill on a scale from one to ten on a predefined list of hacker skills. They were then asked to rate a peer who they felt was most skilled in each of the skills. They were asked to rate two peers for each skill, one that they worked with directly and one person that was the most skilled in the field (these could be known by reputation only). The hypothesis is that hackers have a higher than average (i.e., compared to non-hackers) Need for cognition and that Need for Cognition will be positively correlated with self-reported and peer reported skill. We interviewed 20 cyber security researchers who specialize in offensive approaches. Based on the responses to the hacker skill inventory, we generated a self-reported skill score for each participant. We also developed a peer-rating for each participant based on the number of times each individual that was interviewed was named as the most skilled in a particular area. The results indicate that the sample of ethical hackers has a high Need for Cognition and that Need for cognition was related to both self-reported skill and peer-reported skill. The results are discussed in the context of training and recruitment of cyber security professionals.

99 GENERAL AND MISCELLANEOUS↗