Search NASA⌕ Search

SEARCH · Search NASA

Results for “Attack Tree”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
NASA NTRS2021

CubeSAT Security Attack Tree Analysis

Once a novelty, small satellites, often referred to as CubeSats, have become important tools for a variety of space activities ranging from exploration to defense. Their relative affordability and short development timeline have made them attractive options to complement larger space vehicles, conduct reconnaissance and other finite tasks. The specialized nature of many CubeSat missions do not make their security any less important as their missions could easily be matters of national security. This paper demonstrates the use of attack tree analysis to assess vulnerabilities of a CubeSat. First, we abstract and build an architectural model of an operational CubeSat. We then create a series of attack trees for the abstracted architecture to illustrate a series of potential attack vectors for small satellites. We conclude by discussing some strategies that could be employed to improve CubeSat resilience.

Santangelo, Andrew↗
DOE OSTI2022

Model-Based Diagnostics and Mitigation of Cyber Threats

The report summarizes key tasks performed to develop a toolkit for detecting cyber-attack events in instrumentation and control (I&C) systems of nuclear power plants. The toolkit connects the state-of-the-art GPWR Simulator with the RELAP5 code providing best-estimate nuclear steam supply system (NSSS) analyses, via the application programming interface (API), and allows users to introduce potential cyber-attack scenarios into power plant operational simulation. This summary for the project reflects topical reports submitted during the project as well as a journal paper published in 2022. The focus areas of the summary include: (1) modeling I&C systems for the AP1000 Generation III+ nuclear plant and GPWR simulator, (2) simulation and monitoring of plant response to cyber-attack events, (3) API structure for the toolkit interfacing the GPWR simulator and RELAP5 code, and (4) restructuring of the three-loop NSSS software of GPWR to model the two-loop AP1000 structure. Discussed in some details are (a) the attack tree analysis assessing the susceptibility of the AP1000 I&C system, resulting in reactor trips, in terms of the attack possibility and component sensitivity and (b) realistic estimation of the time to steam generator trip due to cyber-intrusions in the GPWR Simulator. Finally, sample demonstrations of the cyber-security tool kit, in the form of the GPWR-RELAP5 API, are summarized.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2018

When managers forage for pests: Implementing the functional response in pest management

In this work, we explore how the functional response framework can be implemented in pest management. Here, managers take the role of predators foraging on pests and facing monetary costs for survey and control in a spatial domain where the pest distribution and control strategy do not have to be random. To investigate this framework quantitatively, we simulated various management processes on different pest spatial distributions using a spatially-explicit individual-based model and Monte-Carlo simulations, and also confirmed some of the results analytically. By graphing the number of pests controlled versus pest density, we obtained management functional response curves. Whether the management functional response was shaped like a type I, type II or type III functional response depended on the management costs and the search area. Yet, the management spatial strategy and the pest spatial distribution had little effect on the functional response. We applied our model to the management of mountain pine beetle epidemic in Cypress Hills, Saskatchewan, Canada, with simulations matching the real number of attacked trees controlled by managers. We showed how to make an analogy between functional responses in predator–prey interactions and in human–pest interactions and thereby, apply insights from the functional response framework to pest management.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS1972

Post-analysis report on Chesapeake Bay data processing

The additional processing performed on data collected over the Rhode River Test Site and Forestry Site in November 1970 is reported. The techniques and procedures used to obtain the processed results are described. Thermal data collected over three approximately parallel lines of the site were contoured, and the results color coded, for the purpose of delineating important scene constituents and to identify trees attacked by pine bark beetles. Contouring work and histogram preparation are reviewed and the important conclusions from the spectral analysis and recognition computer (SPARC) signature extension work are summarized. The SPARC setup and processing records are presented and recommendations are made for future data collection over the site.

Thomson, F.↗
NASA NTRS1972

Thermal contouring of forestry data: Wallops Island

The contouring of 8-13.5 micrometer thermal data collected over a forestry site in Virginia is described. The data were collected at an altitude of 1000 ft above terrain on November 4, 1970. The site was covered on three approximately parallel lines. The purpose of the contouring was to attempt to delineate pine trees attacked by southern pine bark beetle, and to map other important terrain categories. Special processing steps were required to achieve the correct aspect ratio of the thermal data. The reference for the correction procedure was color infrared photography. Data form and quality are given, processing steps are outlined, a brief interpretation of results is given, and conclusion are presented.

Thomson, F.↗
NASA NTRS2016

Mission-centric cyber security assessment of critical systems

We present a novel model-based, mission-centric approach to perform cyber security assessments for evaluating the impact of low-level cyber events on high-level mission objectives.We demonstrate the benefits of our approach using a system model and attack trees specific to the command-and-control system of a spacecraft. Specifically, we demonstrate how our approach enables a decision-maker to assess the security posture of the system, identify necessary mitigations and prioritize their deployment.

Tan, Kymie↗
DOE OSTI2022

Cyber risk assessment and investment optimization using game theory and ML-based anomaly detection and mitigation for wide-area control in smart grids

The electric power grid is increasingly becoming susceptible to cyber attacks that exploit vulnerabilities in the smart grid control, information, and physical layers. Successful cyber attacks can have catastrophic impacts on the social and economic well-being of any nation all over the globe. It has, thus, become imperative to secure the smart grid against such adversarial actions to ensure stable, secure, and reliable operation of the grid. The existing research and industry practices prove to be inadequate in terms of providing pragmatic and effective defense methodologies and measures for long-term cybersecurity planning and real-time cybersecurity for grid operation. For example, existing works lack models that incorporate uncertain behavior of cyber-attackers and pragmatic defense measures for cyber risk assessment and cybersecurity investment optimization which often provide unreliable and strictly qualitative solutions to these problems. At the same time, with the growing number of cyber incidents in the grid, there still exists a need to develop attack-resilient algorithms for wide-area monitoring, protection, and control (WAMPAC) applications like the wide-area voltage control systems (WAVCS) for Flexible AC Transmissions Systems (FACTS) that lack in scalable and feasible solutions from the cybersecurity perspective. This dissertation proposes novel models and methodologies for: (1) Cybersecurity planning, and (2) Cybersecurity for system operation. The cybersecurity planning is achieved through cyber risk assessment and cybersecurity resource investment optimization for long-term cybersecurity of the grid using game theory and attack-defense trees. Cybersecurity for system operation consists of development of cyber anomaly detection and mitigation algorithms for flexible AC transmission system (FACTS) controller-based wide-area voltage control systems (WAVCS) using machine learning (ML), and software defined networking-based moving target defense network routing for achieving real-time cyber-physical security for grid operations. This is followed by hardware-in-the-loop (HIL) implementation and evaluation of these attack prevention, detection, and mitigation algorithms and methodologies showcasing their feasibility in a close to real-world environment. For cybersecurity planning, a novel approach involving a combination of game theory and attack defense trees (ADT) for optimal cybersecurity resource allocation in the smart grid is proposed. This methodology involves modeling of the cyber-physical smart grid substations as ADTs, defining attacker costs, defense costs, and attack probabilities for attack access points. Using game theoretical formulation, optimal defense strategies for the defender of the system to invest cybersecurity resources in the grid are obtained. Additionally, a game-theoretic framework is developed for quantitative cyber-physical risk assessment of the grid under a dynamically changing cyber threat space and uncertain behavior of cyber attackers which is further used to optimize investments in the smart grid's cybersecurity resources. The attacker, defender, and the smart grid system are modeled while incorporating attacker-stochasticity and federal guidelines for smart grid cybersecurity. This allows quantification of threat, vulnerabilities, and attack impact of the grid for quantitative risk assessment. The defender's budget to invest in the security resources in the grid is optimized based on the strategies leading to minimum system risk. The evaluation of the proposed solutions highlight the feasibility for practical implementation of these methodologies and algorithms in the smart grid, while taking the federal requirements and guidelines for smart grid security into consideration. For achieving cybersecurity for system operation, attack prevention, detection, and mitigation algorithms and methodologies are developed specifically for FACTS-based WAVCS. Anomaly detection and mitigation in the WAVCS are achieved using algorithms based on machine learning which involves offline training and testing of ML models with CPS datasets incorporating physics-based features that allow accurate distinction between system faults and cyber attacks. For attack prevention, a methodology based on software defined network (SDN)-based moving target defense (MTD) network routing is proposed that enables prevention of Denial of Service (DoS) type attacks on the smart grid communication system. Subsequently, these methodologies and algorithms are implemented and evaluated on an HIL testbed that allows for real-time attack prevention, detection, and mitigation of emulated cyber attacks on the WAVCS in a close to real-world environment. The results show highly accurate and efficient performance of the implemented algorithms and methodologies with the smart grid system operating within the NERC's system operation limits even in the presence of DoS and data integrity cyber attacks. This work opens up future research opportunities in other directions such as (1) Expanding cybersecurity planning methodologies to real-time cyber contingency analysis with different game formulations; and (2) Applying the cybersecurity for system operation algorithms to broader categories of wide-area control applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

The role of height–driven constraints and compensations on tree vulnerability to drought

Frequent observations of higher mortality in larger trees than in smaller ones during droughts have sparked an increasing interest in size–dependent drought–induced mortality. However, the underlying physiological mechanisms are not well understood, with height–associated hydraulic constraints often being implied as the potential mechanism driving increased drought vulnerability. Here we performed a quantitative synthesis on how key traits that drive plant water and carbon economy change with tree height within species and assessed the implications that the different constraints and compensations may have on the interacting mechanisms (hydraulic failure, carbon starvation and/or biotic–agent attacks) affecting tree vulnerability to drought. While xylem tension increases with tree height, taller trees present a range of structural and functional adjustments, including more efficient water use and transport and greater water uptake and storage capacity, that mitigate the path–length–associated drop in water potential. These adaptations allow taller trees to withstand episodic water stress. Conclusive evidence for height–dependent increased vulnerability to hydraulic failure and carbon starvation, and their coupling to defence mechanisms and pest and pathogen dynamics, is still lacking. Further research is needed, particularly at the intraspecific level, to ascertain the specific conditions and thresholds above which height hinders tree survival under drought.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Structure of Lipopolysaccharide from Liberibacter crescens Is Low Molecular Weight and Offers Insight into Candidatus Liberibacter Biology

Huanglongbing (HLB) disease, also known as citrus greening disease, was first reported in the US in 2005. Since then, the disease has decimated the citrus industry in Florida, resulting in billions of dollars in crop losses and the destruction of thousands of acres of citrus groves. The causative agent of citrus greening disease is the phloem limited pathogen Candidatus Liberibacter asiaticus. As it has not been cultured, very little is known about the structural biology of the organism. Liberibacter are part of the Rhizobiaceae family, which includes nitrogen-fixing symbionts of legumes as well as the Agrobacterium plant pathogens. To better understand the Liberibacter genus, a closely related culturable bacterium (Liberibacter crescens or Lcr) has attracted attention as a model organism for structural and functional genomics of Liberibacters. Given that the structure of lipopolysaccharides (LPS) from Gram-negative bacteria plays a crucial role in mediating host-pathogen interactions, we sought to characterize the LPS from Lcr. We found that the major lipid A component of the LPS consisted of a pentaacylated molecule with a β-6-GlcN disaccharide backbone lacking phosphate. The polysaccharide portion of the LPS was unusual compared to previously described members of the Rhizobiaceae family in that it contained ribofuranosyl residues. The LPS structure presented here allows us to extrapolate known LPS structure/function relationships to members of the Liberibacter genus which cannot yet be cultured. It also offers insights into the biology of the organism and how they manage to effectively attack citrus trees.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2021

Evaluating cyber-risk in synchrophasor systems

Technology related to evaluating cyber-risk for synchrophasor systems is disclosed. In one example of the disclosed technology, a method includes generating an event tree model of a timing-attack on a synchrophasor system architecture. The event tree model can be based on locations and types of timing-attacks, an attack likelihood, vulnerabilities and detectability along a scenario path, and consequences of the timing-attack. A cyber-risk score of the synchrophasor system architecture can be determined using the event tree model. The synchrophasor system architecture can be adapted in response to the cyber-risk score.

Pal, Seemita↗
DOE OSTI2021

Risk-informed autonomous adaptive cyber controllers

Technology related to risk-informed autonomous adaptive cyber controllers is disclosed. In one example of the disclosed technology, a method includes generating probabilities of a cyber-attack occurring along an attack surface of a network. The probabilities can be generated using sensor and operational data of a network as inputs to an attack graph. The risk scores can be determined using a plurality of fault trees and the generated probabilities from the attack graph. The respective risk scores can correspond to respective nodes of an event tree. The event tree and the determined risk scores can be used to determine risk estimates for a plurality of configurations of the network. The risk estimates for the plurality of configurations of the network can be used to reconfigure the network to reduce a risk from the cyber-attack.

Veeramany, Arun↗
DOE OSTI2022

Automatic DDoS Attack Detection on SDNs: Preprint

Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks pose a serious threat to computing networks - especially to critical systems within the U.S. electrical grid. As attack mechanisms have increased in complexity and variety, more sophisticated detection mechanisms have become necessary to ensure network security. This paper explores the use of artificial intelligence to automate the process of detection and mitigation of DoS and DDoS attacks within the framework of Software-Defined Networking (SDN), to a high degree. Machine learning algorithms are trained to recognize DoS and DDoS attacks and are deployed in real-time to mitigate malicious network traffic. The results show a well-tuned gradient-boosted decision tree detecting DoS and DDoS attacks, as well as initial successful mitigation of attacks within an SDN framework.

cyber detection↗
NASA NTRS2016

Climate-Induced Mortality of Siberian Pine and Fir in the Lake Baikal Watershed, Siberia

Siberian pine (Pinus sibirica) and fir (Abies sibirica) (so called ''dark needle conifers", DNC) showed decreased radial growth increment within the Lake Baikal watershed since the 1980s with increasing mortality recorded since the year 2000. Tree ring width was strongly correlated with vapor pressure deficit, aridity and root zone moisture. Water stress from droughts made trees more susceptible to insect attacks causing mortality in about 10% of DNC stands within the Lake Baikal watershed. Within Siberia DNC mortality increased in the southern part of the DNC range. Biogeographically, tree mortality was located within the DNC - forest-steppes transition. Tree mortality was significantly correlated with drought and soil moisture anomalies. Within the interior of the DNC range mortality occurred within relief features with high water stress risk (i.e., steep convex south facing slopes with shallow well-drained soils). In general, DNC mortality in Siberia was induced by increased aridity and severe drought (inciting factors) in synergy with biotic attacks (contributing factor). In future climate scenarios with predicted increase in aridity DNC could be eliminated from the southern part of its current range and will be replaced by drought-resistant conifers and broadleaf species (e.g., Larix sibirica, Pinus silvestris, and Betula pubescence).

Conifer Mortality↗
NASA NTRS2016

Climate-Induced Mortality of Siberian Pine and Fir in the Lake Baikal Watershed, Siberia

Siberian pine (Pinus sibirica) and fir (Abies sibirica) (so called "dark needle conifers", DNC) showed decreased radial growth increment within the Lake Baikal watershed since the 1980s with increasing mortality recorded since the year 2000. Tree ring width was strongly correlated with vapor pressure deficit, aridity and root zone moisture. Water stress from droughts made trees more susceptible to insect attacks causing mortality in about 10% of DNC stands within the Lake Baikal watershed. Within Siberia DNC mortality increased in the southern part of the DNC range. Biogeographically, tree mortality was located within the DNC - forest-steppes transition. Tree mortality was significantly correlated with drought and soil moisture anomalies. Within the interior of the DNC range mortality occurred within relief features with high water stress risk (i.e., steep convex south facing slopes with shallow well-drained soils). In general, DNC mortality in Siberia was induced by increased aridity and severe drought (inciting factors) in synergy with biotic attacks (contributing factor). In future climate scenarios with predicted increase in aridity DNC could be eliminated from the southern part of its current range and will be replaced by drought-resistant conifers and broadleaf species (e.g., Larix sibirica, Pinus silvestris, and Betula pubescence).

Viacheslav I Kharuk↗
DOE OSTI2022

Evaluation of Joint Cyber/Safety Risk in Nuclear Power Systems

This report presents an analysis of the Emergency Core Cooling System (ECCS) for a generic Boiling Water Reactor (BWR)-4 NPP. The Electric Power Research Institute (EPRI) developed Hazards and Consequences Analysis for Digital Systems (HAZCADS) process is applied to the ECCS and its subsystems to identify unsafe control actions (UCAs) which act as possible cyber events of concern. The analysis is performed for two design basis events: Small-break Loss of Coolant Accident (SLOCA) and general transients (TRANS), such as unintended reactor trip. In previous work, HAZCADS UCAs were combined with other cyber-attack analysis to develop a risk-informed approach; however, this was for a single system. This report explores advanced systems engineering modeling approaches to model the interactions between digital assets across multiple systems which may be targeted by cyber adversaries. The complex and interdependent design of digital systems has the potential to introduce emergent cyber properties that are generally not covered by hazard analyses nor formal nuclear Probabilistic Risk Assessment (PRA). The R&D and supporting analysis presented here explores approaches to predict and manage how interdependent system properties effect risk. To show the potential impact of a successful cyber-attack to formal PRA event tree probabilities, HAZCADS analysis was also used. HAZCADS was also used to model the automatic depressurization system (ADS) automatic actuation. This analysis extended to an integrated system analysis for common-cause failure (CCF). In this aspect, the HAZCADS analysis continued by analyzing plant design details for system connectivity in support of critical plant functions. A dependency matrix was developed to depict the integrated functionality of the interconnected systems. Areas of potential CCF are indicated. Future work could include adversary attack development to show how CCF could be caused, resulting in PRA events. Across the multiple systems that comprise the ECCS, the analysis shows that the change in such probabilities was very different between systems. This indicates that some systems have a larger potential risk impact from successful cyber-attack or digital failure, which indicates a need for these systems to have a higher priority for design and defensive measures. Furthermore, we were able to establish that a risk analysis using any arbitrary threat model establishes an ordering of components with regard to cyber-risk. This ordering can be used to influence the overall system design with an eye to lowering risk, or as a way to understand real-time risk to operational systems based on a current threat landscape. Expert knowledge of both the analysis process and the system being analyzed is required to perform a HAZCADS analysis. The need for a tiered risk analysis is demonstrated by the results of this report.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2024

Local carbon reserves are insufficient for phloem terpene induction during drought in Pinus edulis in response to bark beetle–associated fungi

Stomatal closure during drought inhibits carbon uptake and may reduce a tree's defensive capacity. Limited carbon availability during drought may increase a tree's mortality risk, particularly if drought constrains trees' capacity to rapidly produce defenses during biotic attack. We parameterized a new model of conifer defense using physiological data on carbon reserves and chemical defenses before and after a simulated bark beetle attack in mature Pinus edulis under experimental drought. Attack was simulated using inoculations with a consistent bluestain fungus (Ophiostoma sp.) of Ips confusus, the main bark beetle colonizing this tree, to induce a defensive response. Trees with more carbon reserves produced more defenses but measured phloem carbon reserves only accounted for c. 23% of the induced defensive response. Our model predicted universal mortality if local reserves alone supported defense production, suggesting substantial remobilization and transport of stored resin or carbon reserves to the inoculation site. Our results show that de novo terpene synthesis represents only a fraction of the total measured phloem terpenes in P. edulis following fungal inoculation. Without direct attribution of phloem terpene concentrations to available carbon, many studies may be overestimating the scale and importance of de novo terpene synthesis in a tree's induced defense response.

59 BASIC BIOLOGICAL SCIENCES↗