Search NASA⌕ Search

SEARCH · Search NASA

Results for “Activity detect”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Active Detection for Exposing Intelligent Attacks in Control Systems

In this paper, we consider approaches for detecting integrity attacks carried out by intelligent and resourceful adversaries in control systems. Passive detection techniques are often incorporated to identify malicious behavior. Here, the defender utilizes finely-tuned algorithms to process information and make a binary decision, whether the system is healthy or under attack. We demonstrate that passive detection can be ineffective against adversaries with model knowledge and access to a set of input/output channels. We then propose active detection as a tool to detect attacks. In active detection, the defender leverages degrees of freedom he has in the system to detect the adversary. Specifically, the defender will introduce a physical secret kept hidden from the adversary, which can be utilized to authenticate the dynamics. In this regard, we carefully review two approaches for active detection: physical watermarking at the control input, and a moving target approach for generating system dynamics. We examine practical considerations for implementing these technologies and discuss future research directions.

25 ENERGY STORAGE↗

Malicious Cyber Activity Detection using Zigzag Persistence

In this study we synthesize zigzag persistence from topological data analysis with autoencoder-based approaches to detect malicious cyber activity, and derive analytic insights. Cybersecurity aims to safeguard computers, networks, and servers from various forms of malicious attacks, including network damage, data theft, and activity monitoring. We focus on the cybersecurity domain and investigate the detection of malicious activity using log data. We consider the dynamics of the log data and explore the changing topology of a hypergraph representation of this data to gain insights into the underlying activity. These hypergraphs capture complex interactions between processes, together with their temporal information. To study the changing topology we use zigzag persistence, which captures how topological features persist at multiple dimensions over time. We observe that this detects malicious activity in a cyber data set. To automate this detection we implement an autoencoder trained on a vectorization of the resulting zigzag persistence barcodes. Our experimental results demonstrate the effectiveness of the autoencoder in detecting malicious activity. Overall, this study highlights the potential of zigzag persistence and its combination with temporal hypergraphs for analyzing cybersecurity log data and detecting malicious behavior.

hypergraphs, temporal hypergraph, topological data↗

An Active Detection Scheme for Sensor Spoofing in Grid-tied PV Systems

In this paper an active detection scheme for sensor spoofing (manipulated externally via a cyber attack) in grid-tied PV systems is discussed. The core of the proposed active detection scheme is to introduce a private (secret) watermarking signal into the control inputs of the DC-DC converter and DC-AC inverter stages to detect any malicious spoofing (manipulation) of voltage/current sensor measurements controlling both the DC-DC converter maximum power point tracking (MPPT) stage and the DC-AC inverter of the grid-tied PV system. Several types of possible spoofing mechanisms (attack models) are discussed. The proposed sensor spoofing attack detector system consists of injecting a small magnitude of digital watermarking signal (DWS) and conduct three statistical watermark tests on the reported sensor measurements to determine if a) the proposed system is healthy and operating as expected b) if sensor signals were spoofed (manipulated) externally or c) if a particular sensor is malfunctioning due to a faulty hardware. It is shown via extensive simulations that the proposed DWS approach is robust in detecting malicious external manipulation of sensors controlling the grid tied PV system. A testing platform is currently under development and the experimental results will be discussed in the conference presentation.

Ibrahim, Hasan↗

Evaluation of Minimum Detectable Activities for Stack Sample Analyses

The Rad-NESHAP program takes samples at major point sources to track how much of select nuclides are being emitted out of the stack. Samples are taken at the site where the radiological operations are being performed. The samples are then sent to analytical laboratories for analysis to determine what nuclides exist in the sample. However, due to the sensitivity of the instruments, false positives are often reported. To reduce the number of false positives, the results reported from the analytical labs are compared to set detection limits. Anything below the set detection limit is considered part of the background while anything above the limit is considered a positive hit. Therefore, the detection limit must be set low enough that any false negatives do not result in a significant dose missed at the end of the year but high enough that there are not enough false positives to skew the annual dose being reported. All detection limits listed in this section for the analyses below were designed to meet the stated equivalent emissions rate and subsequent off-site doses. These minimum detectable activities (MDAs) were developed in the 1990s and documented in the memo cited for each analysis below. These limits and memos are all currently referenced in the Quality Assurance Project Plan (QAPP) for the Rad-NESHAP Compliance Task, which is being updated to a Project Implementation Plan (PIP) concurrently with this document. As part of this update process, the original MDAs defined in this section needed to be verified that they were still conservative and meet the off-site dose levels stated.

2019 MDA↗

Testing Minimum Detectable Activity of Whole-Body Counting System in the Presence of Interfering Factors

The recently updated technical standard for the Department of Energy Laboratory Accreditation Program (DOELAP) may soon require accredited laboratories to empirically verify the estimated minimum detectable activity (MDA) for the nuclides of interest measured by in-vivo detection systems. The Radiation Protection Sample Diagnostics (RPSD) program is the SNL on-site DOELAP accredited laboratory that provides in-vivo measurements of ingested gamma-emitting nuclides (or to prove the lack of significant ingested gamma-emitting nuclides) for the internal dosimetry program administered by Radiation Protection Dosimetry Program (RPDP). Currently, the main nuclides of concern for RPDP include cesium-137 and cobalt-60 as specified in the Statement of Work between the two programs. Historically, MDAs for the RPSD whole-body counting system (WBC) were calculated annually as a-priori values by averaging the critical levels (LC) of any twelve subjects with undetected Co-60 and Cs-137 and assuming MDA is twice the decision level. The purpose of this technical basis document is to evaluate the method and process that validates the a-priori MDA of the RPSD WBC.

61 RADIATION PROTECTION AND DOSIMETRY↗

Investigation of Archived Gamma Data to Report Minimum Detectable Activities for Gamma-Emitting Radionuclides in Groundwater Samples

Los Alamos National Laboratory (LANL) has performed gamma analyses on ground water samples from the Nevada National Security Site (NNSS) (previously known as the Nevada Test Site or NTS) for the last 50 years. During that time, LANL has reported all of the detected radionuclides in various reports, letters and publications. However, until recently, no minimum detectable activities (MDAs) for undetected radionuclides of interest have been reported. In fact, most gamma emitting radionuclides were not detected in groundwater samples above their respective MDAs, and the MDAs can be used to define upper -bound activities for these radionuclides in the groundwater samples.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Investigation of Coincidence Counting for Improving Minimal Detectable Activity of 110m Ag in Single Particle Gamma Analysis

Post-irradiation examination (PIE) of fuel particles from the fourth Advanced Gas Reactor Fuel Development and Qualification (AGR) Program irradiation (AGR-5/6/7) is being performed at Oak Ridge National Laboratory (ORNL). Tristructural isotropic (TRISO)-coated particles and associated compacts for the AGR-5/6/7 experiment fabricated by BWX Technologies Nuclear Operations Group were formed into a graphite matrix compact and irradiated at the Advanced Test Reactor at Idaho National Laboratory. At ORNL, particles are deconsolidated from the graphite matrix compact and individually scanned for emitted gamma rays with the Irradiated Microsphere Gamma Analyzer (IMGA). The IMGA system comprises a single high purity germanium (HPGe) detector, an automated particle handling vacuum system, and an ORTEC DSPEC-50 digital spectrometer for gamma ray analysis. IMGA quantifies gamma ray-emitting fission product inventories of individual TRISO particles, and these inventories can be compared with the measured average inventories per particle and radionuclide inventories predicted by AGR-5/6/7 physics calculations to determine if a particle experienced radionuclide release. Details on IMGA data collection methods can be found in the literature. The TRISO particle’s SiC layer provides structural support, as well as a barrier for fission product release during irradiation or subsequent safety testing. A weakened or compromised SiC layer can be identified by the release of radionuclides, such as 137 Cs, which is detected by IMGA. However, select radionuclides, such as 90 Sr, 110 mAg, and 154 Eu have been shown to migrate through an intact SiC layer. Measurement of the radionuclide 110 mAg is significant as its release has been shown to be particularly sensitive to in-reactor conditions (e.g., temperature) with broad variable particle to-particle release behaviors observed within a single compact. As such, 110 mAg activity is often used for particle selection for comprehensive PIE as bounding 110 mAg retention particles are hypothesized to represent limits in particle behaviors within a compact. As TRISO particle fuel PIE activities continue over time, IMGA measurements of the 110 mAg inventory are eventually hindered because of its relatively short half-life (~250 days). As the fuel ages from its end of irradiation (EOI) date, the measurement uncertainty and minimum detectable activity (MDA) of 110m Ag increase because the detector background continuum begins to dominate. For particles from the second AGR irradiation experiment (AGR-2), the 110m Ag MDA was above 20% of the calculated average particle inventory after approximately five half-lives, and 110m Ag activity was no longer measurable with IMGA after approximately seven half-lives. Therefore, coincidence counting approaches have been explored to determine feasibility of leveraging new approaches to overcome limitations associated with increasing MDA over time.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Methods of expressing and detecting activity of expansin in plant cells

A method of expressing heterologous expansin in a plant cell is provided where a nucleic acid molecule encoding expansin is introduced into the plant cell and in an embodiment is operably linked to a promoter preferentially expressing in the seed tissue of the plant, and in another embodiment is linked to a promoter preferentially expressing in the embryo tissue of the seed. An embodiment provides the nucleic acid molecule is operably linked to a second nucleic acid molecule that directs expression to the endoplasmic reticulum, vacuole or cell wall. Plants and plant parts expressing expansin are provided. An assay for detection of expansin activity is also provided.

59 BASIC BIOLOGICAL SCIENCES↗

Multiplexed Toxin Activity Detection

There is a need for field forward biothreat detection methods for highly lethal marine toxins, such as conotoxins, to protect the warfighter and civilians in contested environments. These toxins arise from harmful algal blooms which impact the warfighter, pets, and civilians. The need for detection platforms that can be fielded on drones or unmanned vehicles is paramount to successful biothreat detection to serve as an early warning system for those impacted in these environments.

59 BASIC BIOLOGICAL SCIENCES↗

X-ray detected active galactic nuclei in dwarf galaxies at 0 < z < 1

We present a sample of accreting supermassive black holes (SMBHs) in dwarf galaxies at z<1. We identify dwarf galaxies in the NEWFIRM Medium Band Survey with stellar masses of M{sub ⋆}<3×10{sup 9} M{sub ⊙} that have spectroscopic redshifts from the DEEP2 survey and lie within the region covered by deep (flux limit of ∼5×10{sup −17}--6×10{sup −16} erg cm{sup −2} s{sup −1}) archival Chandra X-ray data. From our sample of 605 dwarf galaxies, 10 exhibit X-ray emission consistent with that arising from active galactic nucleus (AGN) activity. If black-hole mass scales roughly with stellar mass, then we expect that these AGNs are powered by SMBHs with masses of ∼10{sup 5}--10{sup 6} M{sub ⊙} and typical Eddington ratios of ∼5%. Furthermore, we find an AGN fraction consistent with extrapolations of other searches of ∼0.6%--3% for 10{sup 9} M{sub ⊙}⩽M{sub ⋆}⩽3×10{sup 9} M{sub ⊙} and 0.1<z<0.6. Our AGN fraction is in good agreement with a semi-analytic model, suggesting that, as we search larger volumes, we may use comparisons between observed AGN fractions and models to understand seeding mechanisms in the early universe.

79 ASTRONOMY AND ASTROPHYSICS↗

Malicious activity detection in a memory

A method and apparatus for monitoring a volatile memory in a computer system. Samples of compressed data from locations in the volatile memory in the computer system are read. Data in the volatile memory is reconstructed using the samples of compressed data. The data is an image of the volatile memory. The image enables determining whether an undesired process is present in the volatile memory.

Wheeler, Jason W.↗

A cell-based Papain-like Protease (PLpro) activity assay for rapid detection of active SARS-CoV-2 infections and antivirals

Severe acute respiratory syndrome coronavirus 2 (SARS-CoV-2) and its variants are a continuous threat to human life. An urgent need remains for simple and fast tests that reliably detect active infections with SARS-CoV-2 and its variants in the early stage of infection. Here we introduce a simple and rapid activity-based diagnostic (ABDx) test that identifies SARS-CoV-2 infections by measuring the activity of a viral enzyme, Papain-Like protease (PLpro). The test system consists of a peptide that fluoresces when cleaved by SARS PLpro that is active in crude, unprocessed lysates from human tongue scrapes and saliva. Test results are obtained in 30 minutes or less using widely available fluorescence plate readers, or a battery-operated portable instrument for on-site testing. Proof-of-concept was obtained in a study on clinical specimens collected from patients with COVID-19 like symptoms who tested positive (n = 10) or negative (n = 10) with LIAT RT-PCR using nasal mid turbinate swabs. When saliva from these patients was tested with in-house endpoint RT-PCR, 17 were positive and only 5 specimens were negative, of which 2 became positive when tested 5 days later. PLpro activity correlated in 17 of these cases (3 out of 3 negatives and 14 out of 16 positives, with one invalid specimen). Despite the small number of samples, the agreement was significant (p value = 0.01). Two false negatives were detected, one from a sample with a late Ct value of 35 in diagnostic RT-PCR, indicating that an active infection was no longer present. The PLpro assay is easily scalable and expected to detect all viable SARS-CoV-2 variants, making it attractive as a screening and surveillance tool. Additionally, we show feasibility of the platform as a new homogeneous phenotypic assay for rapid screening of SARS-CoV-2 antiviral drugs and neutralizing antibodies.

60 APPLIED LIFE SCIENCES↗

Special Nuclear Material Detection and Monitoring by Environmental Activation Products Detection

Through a series of measurements with a high purity germanium detector, we have established that the past presence of neutron emitting material can be detected by the decay of activation products in aluminum containers, tungsten shielding, and concrete floors even several days after last exposure. The time since last exposure can also be estimated by the gamma-ray detection rate. These findings may lead to interesting new CONOPS in the detection of illicit SNM or the verification of the absence (or presence) of SNM containing objects in facilities and/or transit even after the material has been removed.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Nanopore Activity Assays for Detection of Biomarker Protease Activity: Design and Testing of Substrates for Both Nanopore Sequencing and PCR-Based Detection Methods

The work performed in this project has demonstrated the ability to construct proteolytic enzyme substrates that are PCR and sequencing-readable reporter molecules. Specifically, the goal was to detect those reporter molecules via PCR and Oxford Nanopore Technologies MinION sequencing methods following exposure to the biomarker protease thrombin. The assay development focused on binding the constructed peptide-oligonucleotide chimera to immobilized streptavidin. The action of thrombin on the peptide portion of the molecule released the oligonucleotide for detection. Detection of protease activity was demonstrated in a concentration-dependent manner using MALDI-MS, RT-PCR and DNA sequencing. Additional steps to remove background release of reporter molecules during the assay was used to improve the difference in detected oligonucleotide reporter following protease activity. Additional steps in assay development will be to (1) test the assay in an appropriate matrix, (2) investigate detection using additional DNA sequencing platforms and (3) demonstrate multiplexed detection of multiple protease markers in a single reaction.

59 BASIC BIOLOGICAL SCIENCES↗

Evolution of archaeal Rib7 and eubacterial RibG reductases in riboflavin biosynthesis: Substrate specificity and cofactor preference

Highlights: • The first archaeal dimeric structures of Methanosarcina mazei Rib7 are reported. • Our studies show the divergences between archaeal and eubacterial Rib7 reductases. • Asp33 together with Arg36, had been evolved to ensure the substrate specificity. • Unexpectedly, an endogenous NADPH cofactor is observed in M. mazei Rib7. • The endogenous NADPH greatly enhances the structural stability of archaeal Rib7. Archaeal/fungal Rib7 and eubacterial RibG possess a reductase domain for ribosyl reduction in the second and third steps, respectively, of riboflavin biosynthesis. These enzymes are specific for an amino and a carbonyl group of the pyrimidine ring, respectively. Here, several crystal structures of Methanosarcina mazei Rib7 are reported at 2.27–1.95 Å resolution, which are the first archaeal dimeric Rib7 structures. Mutational analysis displayed that no detectable activity was observed for the Bacillus subtilis RibG K151A, K151D, and K151E mutants, and the M. mazei Rib7 D33N, D33K, and E156Q variants, while 0.1–0.6% of the activity was detected for the M. mazei Rib7 N9A, S29A, D33A, and D57N variants. Our results suggest that Lys151 in B. subtilis RibG, while Asp33 together with Arg36 in M. mazei Rib7, ensure the specific substrate recognition. Unexpectedly, an endogenous NADPH cofactor is observed in M. mazei Rib7, in which the 2′-phosphate group interacts with Ser88, and Arg91. Replacement of Ser88 with glutamate eliminates the endogenous NADPH binding and switches preference to NADH. The lower melting temperature of ∼10 °C for the S88E and R91A mutants suggests that nature had evolved a tightly bound NADPH to greatly enhance the structural stability of archaeal Rib7.

60 APPLIED LIFE SCIENCES↗

Nucleic Acid-Based Detection Protease Activity

Proteases include clinically relevant markers for clotting disorders, certain cancers as well as toxins. Assays for protease activity often use designed peptides mimicking natural substrates and detection with colorometric and fluorescence-based detection that is difficult to multiplex without expensive and resource demanding instruments. This work demonstrates detection of proteolytic activity using PCR and sequencing-readable reporter molecules. The assay development focused on binding the constructed peptide-oligonucleotide chimera to immobilized streptavidin. Thrombin, an essential component of the clotting cascade, was used as a model system for testing peptide substrate recognition and release of a designed oligonucleotide for detection. Detection of protease activity was demonstrated in a concentration-dependent manner using MALDI-MS, RT-PCR and DNA sequencing.

Wunschel, David S [Pacific Northwest National Labo↗

Information flow for security in control systems

This paper considers the development of information flow analyses to support resilient design and active detection of adversaries in cyber physical systems (CPS). CPS security, though well studied, suffers from fragmentation. In this paper, we consider control systems as an abstraction of CPS. Here, we use information flow analysis, a well established set of methods developed in software security, to obtain a unified framework that captures and extends results in control system security. Specifically, we propose the Kullback Liebler (KL) divergence as a causal measure of information flow, which quantifies the effect of adversarial inputs on sensor outputs. We show that the proposed measure characterizes the resilience of control systems to specific attack strategies by relating the KL divergence to optimal detection. We then relate information flows to stealthy attack scenarios where an adversary can bypass detection. Finally, this article examines active detection mechanisms where a defender intelligently manipulates control inputs or the system itself to elicit information flows from an attacker's malicious behavior. In all previous cases, we demonstrate an ability to investigate and extend existing results through the proposed information flow analyses.

Weerakkody, Sean↗