Search NASA⌕ Search

SEARCH · Search NASA

Results for “Detection and Defense”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Edge ML for CAN bus intrusion detection in AVs

Autonomous Vehicles (AVs) are revolutionizing transportation, but their reliance on interconnected cyber-physical systems exposes them to unprecedented cybersecurity risks. This study addresses the critical challenge of detecting real-time cyber intrusions in self-driving vehicles by leveraging a dataset from the Udacity self-driving car project. We simulate four high-impact attack vectors, Denial of Service (DoS), spoofing, replay, and fuzzy attacks, by injecting noise into spatial features (e.g., bounding box coordinates) to replicate adversarial scenarios. We develop and evaluate two lightweight neural network architectures (NN-1 and NN-2) alongside a logistic regression baseline (LG-1) for intrusion detection. The models achieve exceptional performance, with NN-2 attaining an AUC score of 93.15% and 93.15% accuracy, demonstrating their suitability for edge deployment in AV environments. Through explainable AI techniques, we uncover unique forensic fingerprints of each attack type, such as spatial corruption in fuzzy attacks and temporal anomalies in replay attacks, offering actionable insights for feature engineering and proactive defense. Visual analytics, including confusion matrices, ROC curves, and feature importance plots, validate the models' robustness and interpretability. This research sets a new benchmark for AV cybersecurity, delivering a scalable, field-ready toolkit for Original Equipment Manufacturers (OEMs) and policymakers. By aligning intrusion fingerprints with SAE J3061 automotive security standards, we provide a pathway for integrating machine learning into safety-critical AV systems. Our findings underscore the urgent need for security-by-design AI, ensuring that AVs not only drive autonomously but also defend autonomously. This work bridges the gap between theoretical cybersecurity and life-preserving engineering, offering a leap toward safer, more secure autonomous transportation.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Hybrid Attack Graph Generation with Graph Convolutional Deep-Q Learning

Critical infrastructures such as power grids have become increasingly complex, connected, and vulnerable to adverse scenarios, including cyber and physical attacks and faults. Effective risk mitigation for such cyber-physical energy systems (CPES), requires preemptive knowledge of likely adversarial attack scenarios. Hybrid Attack Graph (HAG) is a structured way to represent an adversarial scenario as an attack sequence using a threat model. However, the scarcity of documented attack sequences hinders analysts and CPES planners’ ability to identify credible attack scenarios for a given CPES. We propose a data-driven Graph Convolutional Deep-Q Network (GCDQ) to address this data challenge through generating HAGs. By leveraging limited real-world observations from the MITRE ATT&CK knowledge base, our GCDQ model synthesizes realistic graphs with the targeted attribute of minimum detectability via reinforcement learning. This generative model is the first step in creating a tool to substantially boost the attack sequence dataset and enhance the performance of CPS defense-related tasks by providing insights into likely attack sequences with given attributes.

deep learning, artificial intelligence↗
DOE OSTI2024

Achieving Cyber-Resilience for Power Systems using a Learning, Model-Assisted Blockchain Framework

The secure integration and management of distributed energy resources (DER) and power aggregators in the electric grid requires secure communications and a physics-aware Command and Control (C2) strategy. A Blockchain (BC)-based overlay network was developed to provide a security layer for the existing power grid network that mitigates risks in current and legacy network and C2 protocols. By integrating a Model-Assisted Machine Learning (MAML) framework with a Secure Blockchain Overlay Network (SBON) a defense-in-depth strategy was achieved. In our approach, the MAML framework leveraged a smart contract framework to gather network data and learn the dynamics of DER to develop detection strategies for attacks targeting sensors and actuators used by DER. The MAML framework learned dynamical systems models for individual DERs to detect sensor attacks. For DER we utilized a Digital Twin (DT) to accelerate the learning process for a model resistant to stealthy attacks. The project created DT for PV inverters and BESS. The DTs were coupled with a model-assisted, data-driven learning of DER behavior. Specifically, we evaluated architectures for model-based learning with model-free fine-tuning. Additionally, differential privacy techniques were used to obfuscate data, while still allowing the computation of attack detection results based on obfuscated data. The SBON developed leverages a private permissioned blockchain network orchestrated with the Hyperledger Fabric framework. To connect the cyber world, which orchestrates the blockchain fabric, and the physical world where the power network resides, we developed a system implementation to enable the secure interaction of the physical world and the abstracted blockchain.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Results From Invoking Artificial Neural Networks to Measure Insider Threat Detection & Mitigation

Advances on differentiating between malicious intent and natural “organizational evolution” to explain observed anomalies in operational workplace patterns suggest benefit from evaluating collective behaviors observed in the facilities to improve insider threat detection and mitigation (ITDM). Advances in artificial neural networks (ANN) provide more robust pathways for capturing, analyzing, and collating disparate data signals into quantitative descriptions of operational workplace patterns. In response, a joint study by Sandia National Laboratories and the University of Texas at Austin explored the effectiveness of commercial artificial neural network (ANN) software to improve ITDM. Overall, this research demonstrates the benefit of learning patterns of organizational behaviors, detecting off-normal (or anomalous) deviations from these patterns, and alerting when certain types, frequencies, or quantities of deviations emerge for improving ITDM. Evaluating nearly 33,000 access control data points and over 1,600 intrusion sensor data points collected over a nearly twelve-month period, this study's results demonstrated the ANN could recognize operational patterns at the Nuclear Engineering Teaching Laboratory (NETL) and detect off-normal behaviors—suggesting that ANNs can be used to support a data-analytic approach to ITDM. Several representative experiments were conducted to further evaluate these conclusions, with the resultant insights supporting collective behavior-based analytical approaches to quantitatively describe insider threat detection and mitigation.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

Machine Learning Using Open Data Sources for Detection of Nuclear Proliferation Activities (U)

In FY2020, Savannah River National Laboratory (SRNL) in collaboration with the Sanghani Center for Artificial Intelligence and Data Analytics (SCAIDA) at Virginia Polytechnic Institute and State University (VT) and funded by the Department of Energy’s (DOE) Defense Nuclear Nonproliferation Research and Development, began developing a demonstration prototype system that uses multiple machine learning and data analytic methods on large-scale open data sources to identify new, developing, and/or undeclared nuclear programs. Using the announcement in May 2018 of the proposed Savannah River Plutonium Processing Facility (SRPPF) as a test subject, the goal of this 2-year project is to forecast the SRPPF using only data prior to May 2018. The project work is split into a preliminary prototype development for the first year with an initial evaluation of viability followed by the second year of development to create an integrated prototype system and more extensive performance evaluation. This report documents the results of the preliminary-phase tasks.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2026

The role of source geometry and atmospheric propagation in global bolide infrasound detectability

Global infrasound monitoring provides a persistent means of detecting energetic bolide atmospheric entries, complementing optical observations and extending coverage over remote regions. We present a global assessment of the physical factors governing bolide infrasound detectability by correlating 623 bolide events reported by the Center for Near-Earth Object Studies between 2007 and 2025 with waveform data from the International Monitoring System. We identify 311 events with confirmed infrasound detections, corresponding to a detection rate of approximately 50%, substantially higher than inferred from earlier surveys, reflecting both the maturation of the global infrasound network and advances in automated, multi-frequency array processing. Analysis of flight parameters shows that infrasound detectability is selective rather than uniform across the bolide population. Detected events are preferentially associated with steeper entry angles and lower-altitude energy deposition, while shallow, high-altitude trajectories are less consistently observed. Very high-energy events remain detectable regardless of geometry, but for the more common lower-energy regime, observability depends on specific combinations of entry parameters and propagation conditions. This geometric dependence persists across comparable energy ranges and atmospheric conditions, indicating that entry angle exerts a primary control on detectability, with energy and propagation acting as secondary modulating factors. Furthermore, these results provide new physical constraints on bolide-atmosphere interactions and improve interpretation of global infrasound observations for planetary defense and atmospheric-entry studies.

Bolides↗
DOE OSTI2023

How Dynamic Time Warping Can Assist Conventional Cross-correlation

Waveform cross-correlation is a sensitive phase-matched filtering technique that can detect seismic events for nuclear explosion monitoring. However, there are outstanding challenges with correlation detectors, most notably a direct dependence on the completeness of the waveform template library. To ameliorate these challenges, we investigate how dynamic time warping (DTW) may make waveform correlation more robust. DTW analyzes the differences between two time series and attempts to “warp” one time series relative to another in a recursive manner. We apply DTW to synthetic earthquake and recorded explosion templates to expand the capability of correlation detectors. We explore what conditions (e.g., source, station distance, frequency bands) and/or DTW algorithms generate stronger correlation scores. We show that DTW performs well on noisy signals and can dramatically improve the cross-correlation coefficient between a template and data-stream waveform. We conclude with recommendations on how to utilize DTW in nuclear monitoring detection.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2020

The Grey Zone Test Range Integrated Urban Simulation Environment

Sandia National Laboratories is part of the government test and evaluation team for the Defense Advanced Research Projects Agency Collection and Monitoring via Planning for Active Situational Scenarios program. The program is designed to better understand competition in the area between peace and conventional conflict when adversary actions are subtle and difficult to detect. For the purposes of test and evaluation, Sandia conducted a range of activities for the program: creation of the Grey Zone Test Range; design of the data stream for a user experiment conducted with U.S. Indo-Pacific Command; design, implementation, and execution of the formal evaluation; and analysis and summary of the evaluation results. This report details Sandia's activities and provides additional information on the Grey Zone Test Range urban simulation environment developed to evaluate the performer technologies.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2022

MARSAME Radiological Release Report for Metal Items from TA 53, Set 20

EPC-ES has evaluated the survey results for metal items from the Los Alamos Neutron Science Center (LANSCE) and found that the metal items described in Table 1 of this report (identified by RP Tracking Numbers) meet the criteria for unrestricted release under DOE Order 458.1 Radiation Protection of the Public and the Environment (DOE 2020) and can be recycled. This conclusion is based on the known history of the metal items and on radiation survey data (see the completed RP-Form-031 LANSCE Metals Clearance Log for each item). None of the items in this report are located within radiological areas. Therefore, the items are considered unencumbered and are not subject to the moratorium suspension on metal recycling from Department of Energy facilities. Additionally, LANL has determined that there is no practical opportunity for internal DOE reuse or recycling of this metal. Process knowledge indicates that these metal items were unlikely to ever be in direct contact with the beam and thus are unlikely to have become activated. Surface contamination measurements (both total and removable) showed either no detectable radioactivity or activity levels within the range of background. All measurements for volumetric contamination were indistinguishable from background based on calculated decision limits. Additionally, all gamma isotopic surveys conducted for defense-in-depth showed no identifiable gamma radiation from beam activation.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

MARSAME Radiological Release Report for Metal Items from Technical Area 53, Set 26

Environmental Protection and Compliance, Environmental Stewardship Group (EPC-ES) has evaluated the survey results for metal items from the Los Alamos Neutron Science Center (LANSCE) at Technical Area 53 (TA-53) and found that the metal items described in Table 1 of this report (identified by Radiation Protection [RP] Tracking Numbers) meet the criteria for unrestricted release under Department of Energy (DOE) Order 458.1 Chg 4, Radiation Protection of the Public and the Environment (DOE 2020) and can be recycled. This conclusion is based on the known history of the metal items and radiation survey data. None of the items in this report are located within radiological areas. Therefore, the items are considered unencumbered and are not subject to the moratorium suspension on metal recycling from DOE facilities. Additionally, Los Alamos National Laboratory (LANL) has determined that there is no practical opportunity for internal DOE reuse of this metal. Process knowledge indicates that these metal items were unlikely to ever be in direct contact with the beam and thus are unlikely to have become activated. Surface contamination measurements (both total and removable) showed either no detectable radioactivity or activity levels within the range of background. All measurements for volumetric contamination were indistinguishable from background based on calculated decision limits. Additionally, all gamma isotopic surveys conducted for defense-in depth showed no identifiable gamma radiation from beam activation.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

MARSAME Radiological Release Report for Metal Items from Technical Area 53, Set 28

Environmental Protection and Compliance, Environmental Stewardship Group (EPC-ES) has evaluated the survey results for metal items from the Los Alamos Neutron Science Center (LANSCE) at Technical Area 53 (TA-53) and found that the metal items described in Table 1 of this report (identified by Radiation Protection [RP] Tracking Numbers) meet the criteria for unrestricted release under Department of Energy (DOE) Order 458.1 Chg 4, Radiation Protection of the Public and the Environment (DOE 2020) and can be recycled. This conclusion is based on the known history of the metal items and radiation survey data (see the completed RP-Form-031 LANSCE Metals Clearance Log [LANL 2021a] for each item in Attachment 1). Process knowledge indicates that items were released from radiological areas, including radiation areas, prior to the implementation of the 2000 metals moratorium. Therefore, the items are considered unencumbered and are not subject to the moratorium suspension on metal recycling from DOE facilities. Additionally, Los Alamos National Laboratory (LANL) has determined that there is no practical opportunity for internal DOE reuse of this metal. Process knowledge indicates that these metal items were unlikely to ever be in direct contact with the beam and thus are unlikely to have become activated. Surface contamination measurements (both total and removable) showed either no detectable radioactivity or activity levels within the range of background. All measurements for volumetric contamination were indistinguishable from background based on calculated decision limits. Additionally, all gamma isotopic surveys conducted for defense-in depth showed no identifiable gamma radiation from beam activation.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2022

MARSAME Radiological Release Report for Metal Items from TA 53, Set 22

EPC-ES has evaluated the survey results for metal items from the Los Alamos Neutron Science Center (LANSCE) and found that the metal items described in Table 1 of this report (identified by RP Tracking Numbers) meet the criteria for unrestricted release under DOE Order458.1 Radiation Protection of the Public and the Environment (DOE 2020) and can be recycled. This conclusion is based on the known history of the metal items and on radiation survey data (see the completed RP-Form-031 LANSCE Metals Clearance Log [LANL 2021a] for each item). None of the items in this report are located within radiological areas. Therefore, the items are considered unencumbered and are not subject to the moratorium suspension on metal recycling from Department of Energy facilities. Additionally, LANL has determined that there is no practical opportunity for internal DOE reuse or recycling of this metal. Process knowledge indicates that these metal items were unlikely to ever bein direct contact with the beam and thus are unlikely to have become activated. Surface contamination measurements (both total and removable) showed either no detectable radioactivity or activity levels within the range of background. All measurements for volumetric contamination were indistinguishable from background based on calculated decision limits. Additionally, all gamma isotopic surveys conducted for defense-in-depth showed no identifiable gamma radiation from beam activation.

36 MATERIALS SCIENCE↗
DOE OSTI2021

On Self-Security of Grid-Interactive Smart Inverters

The capability to exchange information with utility operators, aggregators, and nearby smart devices can make a grid-interactive inverter an intelligent cyber-physical device. However, the capability of exchanging information can also put the inverters at the risk of insecure operation. In this paper, possible software manipulations into the inverters are studied to understand their vulnerability to cyberattacks. Moreover, the state-of-the-art system-level and device-level cyber-defense measures are discussed, and advantages and drawbacks of each technique are provided. Studies show that a reference model can be implemented in device-level security to effectively examine incoming setpoints for detecting and preventing malicious or harmful actions. This paper particularly underlines the significance of device-level self-security and its advantages for grid-interactive inverters. Finally, recommendations for future studies are provided.

Gursoy, Mehmetcan↗
DOE OSTI2024

Securing Grid-interactive Efficient Buildings (GEB) through Cyber Defense and Resilient System (CYDRES)

The DOE CYDRES project is driven by the urgent need to address critical research gaps in the domain of cyber-physical security of smart buildings, including Grid-interactive Efficient Buildings (GEBs). CYDRES, a real-time advanced building resilient platform, aims to enhance the cyber-attack-immune capabilities of buildings through multi-layered prevention, detection, and adaptation mechanisms. CYDRES consists of five key modules: a multi-layer network analyzer, an Automatic Fault Detection, Diagnosis, and Prognosis (AFDDP) framework, an intelligent mode selector, a cyber-resilient control framework, and a situation awareness platform. The Network Analyzer employs a data-driven framework that includes a protocol state learning tool and a CRF (Conditional Random Field) command validator. In Hardware-In-the-Loop (HIL) testbeds, it achieved 100% detection accuracy with a false alarm rate of 3%, validating its efficacy in identifying selected cyber-attacks. The AFDDP framework leverages pattern matching, PCA (Principal Component Analysis)-based strategies, and a DBN (Dynamic Bayesian Network)-based fault diagnosis approach to pinpoint the causes of physical system abnormalities using Building Automation System (BAS) data. In HIL experiments, the AFDDP module attained a detection accuracy of over 95% with a false alarm rate below 7%. Additionally, the fault detector utilized machine learning (Random Forest) and deep learning (Multi-Layer Perceptron) methods with acoustic sensor data to achieve a 100% fault detection accuracy in Heating, Ventilation, and Air-Conditioning (HVAC) equipment. The Mode Selector offered real-time impact analysis, allowing immediate actions to protect BASs in the face of emerging threats. The cyber-resilient control framework included an adaptive Model Predictive Control (MPC) and a measurement compensator, reducing temperature violations by up to 94% and improving the total demand flexibility by up to 70% in HIL experiments. Such HIL experiments covered a cyber-attack case and a physical fault case, showcasing CYDRES’ efficiency in maintaining operational continuity during threats. The situation awareness platform in Grafana enhanced real-time threat detection and response visualization, augmenting the operational awareness for building operators. CYDRES demonstrated high technical effectiveness in various test scenarios, particularly in HIL environments. The project's phased development approach ensured efficient use of resources, highlighting its practical feasibility and readiness for commercialization. By enhancing the security and resilience of building operations, CYDRES represents a significant advance in mitigating risks associated with cyber-physical systems, thereby enhancing public confidence in the safety of modern building infrastructure. Future directions for the project include expanding testing protocols, refining AFDDP methodologies, exploring more comprehensive resilient control strategies, and testing in real commercial buildings.

42 ENGINEERING↗
DOE OSTI2020

MAD using INRAD and Radiography [Slides]

We have previously evaluated Intrinsic Radiation Detection Algorithms from vendors for the Department of Homeland Security. These algorithms have limited spectra capability due to both the relatively low spectral content of the signal due to the use of PVT in the Radiation Portal detectors as well as relatively simple algorithms which are based on energy windowing and other simple algorithms to perform classification of Special Nuclear Material. Current detection algorithms are suceptible to nuissance alarms due to Naturally Occuring Radiation (NORM) and variations in background suppression. In this work, we propose to fuse the intrinsic radiation and radiographic data in conjunction with well-established machine learning algorithms to developed enhanced Threat Object detection capability.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗