Search NASA⌕ Search

SEARCH · Search NASA

Results for “packet analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Securing Inverter Communication: Proactive Intrusion Detection and Mitigation System to Tap, Analyze, and Act

The electric grid has undergone rapid, revolutionary changes in recent years; from the addition of advanced smart technologies to the growing penetration of distributed energy resources (DERs) to increased interconnectivity and communications. However, these added communications, access interfaces, and third-party software to enable autonomous control schemes and interconnectivity also expand the attack surface of the grid. To address the gap of DER cybersecurity and secure the grid-edge to motivate a holistic, defense-in-depth approach, a proactive intrusion detection and mitigation system (PIDMS) device was developed to secure PV smart inverter communications. The PIDMS was developed as a distributed, flexible bump-in-the-wire (BITW) solution for protecting PV smart inverter communications. Both cyber (network traffic) and physical (power system measurements) are processed using network intrusion monitoring tools and custom machinelearning algorithms for deep packet analysis and cyber-physical event correlation. The PIDMS not only detects abnormal events but also deploys mitigations to limit or eliminate system impact; the PIDMS communicates with peer PIDMSs at different locations using the MQTT protocol for increased situational awareness and alerting. The details of the PIDMS methodology and prototype development are detailed in this report as well as the evaluation results within a cyber-physical emulation environment and subsequent industry feedback.

14 SOLAR ENERGY↗
DOE OSTI2023

Nonresonant coherent amplitude transfer in attosecond four-wave-mixing spectroscopy

Attosecond four-wave mixing (FWM) spectroscopy using an extreme ultraviolet (XUV) pulse and two noncollinear near-infrared (NIR) pulses is employed to measure Rydberg wave packet dynamics resulting from XUV excitation of a 3s electron in atomic argon into a series of autoionizing 3s –1 np Rydberg states ~29 eV. The emitted signals from individual Rydberg states exhibit oscillatory structure and persist well beyond the expected lifetimes of the emitting Rydberg states. These results reflect substantial contributions of longer-lived Rydberg states to the FWM emission signals of each individually detected state. A wave packet decomposition analysis reveals that coherent amplitude transfer occurs predominantly from photoexcited 3s –1 (n + 1) p states to the observed 3s –1 np Rydberg states. The experimental observations are reproduced by time-dependent Schrödinger equation simulations using electronic structure and transition moment calculations. Finally, the theory highlights that coherent amplitude transfer is driven nonresonantly to the 3s –1 np states by the NIR light through 3s –1 (n + 1)s and 3s –1 (n – 1)d dark states during the FWM process.

74 ATOMIC AND MOLECULAR PHYSICS↗
DOE OSTI2021

An Overview of the Usefulness of Machine Learning Techniques on Network Packet Data

Understanding the health and behavior of a computer network allows for better network efficiency and security. We present an overview of various machine learning techniques for classifying network packet data via packet metadata. While some classical machine learning approaches achieve reasonable results, the most accurate classification can be achieved with deep learning. On the four data sets studied herein, a basic deep learning model achieved at or near 100\% classification accuracy. We also propose a method for determining variable importance as a means for potential transfer learning applications to classifying yet unseen network packet data.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Simultaneous Observation of Ion-scale Wave Packets with Opposite Polarizations and Their Implications on the Generation Region in the Inner Heliosphere

This paper reports a dispersion analysis of two wave packets simultaneously observed near the local proton gyrofrequency by the Parker Solar Probe. The observed wave event exhibits clear two-banded wave packets both propagating along the magnetic field, characterized by left-handed (L-mode) and right-handed (R-mode) polarizations simultaneously. By incorporating the Doppler shift effect into a linear dispersion analysis, we find two possible scenarios that explain these simultaneous opposite polarizations: (1) Two inherently L-mode waves in the plasma frame, propagate parallel and antiparallel to the solar wind velocity, with similar wave frequencies and wave numbers. The polarization of the antiparallel propagating wave reverses as it moves sunward in the plasma frame while still comoving with the solar wind in the stationary frame. This reversal manifests the polarization of the wave as an R-mode in the spacecraft frame. (2) Simultaneous L-mode and R-mode waves propagate parallel to the solar wind velocity, with different wave frequencies and wave numbers. Concurrent proton observations during the wave event reveal a dominant anisotropic ($T$⟂/$T$ ∥ > 1) core distribution with a drifting beam population. Estimation of the linear growth rate for both L-mode and R-mode waves suggests that both scenarios are plausible, indicating that the observation is near the wave-generation region. We explore the potential impact of these simultaneous waves on solar wind heating and scattering effects, hypothesizing that such waves might enhance efficiency compared to waves with a single wave packet, contingent upon the statistical significance of such waves.

79 ASTRONOMY AND ASTROPHYSICS↗
DOE OSTI2026

Vulcan-Forge: Architecture and Design of a Multi-Modal Forensic Analysis Plugin for CALDERA

Forge and VULCAN together describe an open-architecture cybersecurity analysis ecosystem that unifies forensic artifact processing, detection engineering, and vulnerability intelligence within integrated platforms. Forge operates as a plugin for MITRE CALDERA, ingesting diverse evidence formats—including EVTX, PCAP/PCAPNG, CSV, JSON, YAML, XML, binaries, and archives—to construct a unified artifact graph enriched with severity scoring, TLP classification, and audit trails. It provides subsystems for artifact parsing, streaming structured-data visualization, NetworkMiner-based packet inspection, PE/.NET binary analysis, and LLM-assisted triage and rule generation, with outputs validated against CCCS-YARA and pySigma schemas. VULCAN complements this by serving as a cybersecurity analyst platform that integrates a Neo4j knowledge graph, Qdrant vector retrieval, SSVC-based triage, and a local LLM to deliver CVE intelligence and forensic analysis through a multi-source ingest pipeline drawing from NVD, CISA KEV, EPSS, MITRE ATT&CK, and CAPEC. Together, they bridge structured threat intelligence with automated forensic analysis and detection workflows.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Spread Spectrum Symbol Detection With Blind Interference Suppression in FBMC-SS

Recent works have demonstrated Filter Bank Multicarrier Spread Spectrum (FBMC-SS) to be a robust communication scheme in the presence of high-power interferers. Existing FBMC-SS symbol detector designs based on analysis filter banks (AFB) suggest using an optimal combining scheme to suppress the interferers, necessitating some noise/interference power estimation method. In this paper, we introduce a symbol detector with blind interference suppression by extending a recently developed packet detection method. We then provide an analysis to show that the existing AFB-based symbol detector and the one proposed in this paper are equivalent in typical usage scenarios. A fully-fledged receiver design is proposed utilizing this symbol detector, with specifics presented for estimation of the channel impulse response and carrier frequency offset (CFO). We also outline a method of iterating upon the channel and CFO estimations to improve the quality of both parameters. Moreover, a modification to allow improved performance of the symbol detector at high SNR is provided. Finally, simulated performance results are presented to corroborate these findings and demonstrate the efficiency of this receiver design.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

DEEP CELLULAR RECURRENT NEURAL ARCHITECTURE FOR EFFICIENT MULTIDIMENSIONAL TIME-SERIES DATA PROCESSING

Efficient processing of time series data is a fundamental yet challenging problem in pattern recognition. Though recent developments in machine learning and deep learning have enabled remarkable improvements in processing large scale datasets in many application domains, most are designed and regulated to handle inputs that are static in time. Many real-world data, such as in biomedical, surveillance and security, financial, manufacturing and engineering applications, are rarely static in time, and demand models able to recognize patterns in both space and time. Current machine learning (ML) and deep learning (DL) models adapted for time series processing tend to grow in complexity and size to accommodate the additional dimensionality of time. Specifically, the biologically inspired learning based models known as artificial neural networks that have shown extraordinary success in pattern recognition, tend to grow prohibitively large and cumbersome in the presence of large scale multi-dimensional time series biomedical data such as EEG. Consequently, this work aims to develop representative ML and DL models for robust and efficient large scale time series processing. First, we design a novel ML pipeline with efficient feature engineering to process a large scale multi-channel scalp EEG dataset for automated detection of epileptic seizures. With the use of a sophisticated yet computationally efficient time-frequency analysis technique known as harmonic wavelet packet transform and an efficient self-similarity computation based on fractal dimension, we achieve state-of-the-art performance for automated seizure detection in EEG data. Subsequently, we investigate the development of a novel efficient deep recurrent learning model for large scale time series processing. For this, we first study the functionality and training of a biologically inspired neural network architecture known as cellular simultaneous recurrent neural network (CSRN). We obtain a generalization of this network for multiple topological image processing tasks and investigate the learning efficacy of the complex cellular architecture using several state-of-the?art training methods. Finally, we develop a novel deep cellular recurrent neural network (CDRNN) architecture based on the biologically inspired distributed processing used in CSRN for processing time series data. The proposed DCRNN leverages the cellular recurrent architecture to promote extensive weight sharing and efficient, individualized, synchronous processing of multi-source time series data. Experiments on a large scale multi-channel scalp EEG, and a machine fault detection dataset show that the proposed DCRNN offers state-of-the-art recognition performance while using substantially fewer trainable recurrent units.

Vidyaratne, Lasitha S.↗
DOE OSTI2025

Probing coherent electronic superpositions of singly and doubly excited states of krypton with extreme-ultraviolet four-wave-mixing spectroscopy

Radiative nonlinear four-wave mixing can monitor the evolution of electronic wave packets, providing access to lifetimes and quantifying the light-induced couplings between excited states. In this article, we report the observation of quantum beats in an autoionizing electronic wave packet in krypton, probed using this technique. Analysis of the signal reveals that these beats originate from the contribution of previously unassigned, doubly excited states interacting with singly excited ones. We introduce a minimal theoretical model, based on multichannel quantum-defect theory, which quantitatively reproduces both the wave-packet dynamics and the static spectrum. This work combines a versatile, noncommensurate XUV-IR-based experimental scheme with a tractable model, establishing a powerful approach for the metrology and control of complex, correlated electronic states.

74 ATOMIC AND MOLECULAR PHYSICS↗
DOE OSTI2024

Sequence-Based Anomaly Detection in Critical Infrastructure Networks

United States critical infrastructure faces new cyber threats from adversarial nation-state actors in the form of malware-free attacks. Traditional cybersecurity techniques use rules-based methods to identify indicators of compromise on networks, often missing these sophisticated attacks. Our approach leverages multiple state of the art machine learning models in a pipeline to identify abnormal network events through sequential analysis. We combine both device and packet-level information into individual events to characterize anomalous network actions. The model is trained and tested on real network traffic from the Idaho National Lab High Performance Computing (HPC) with greater than 98% precision. It is capable of flagging malicious tactics used by adversaries in malware-free attacks, severe changes to the network, and abnormal user activity by network devices.

99 - GENERAL AND MISCELLANEOUS↗
DOE OSTI2024

Parametric Instability of Alfvén Waves and Wave Packets in Periodic and Open Systems

The parametric decay instability of Alfvén waves has been widely studied, but few investigations have examined wave packets of finite size and the effect of different boundary conditions on the growth rate. In this paper, we perform a linear analysis of circular and arc-polarized wave trains and wave packets in periodic and open boundary systems in a low- β plasma. We find that both types of wave are 3–5 times more stable in open boundary conditions compared to periodic. Additionally, once the wave packet width ℓ becomes smaller than the system size L , the growth rate decreases nearly with a power law γ ∝ ℓ / L . This study demonstrates that the stability of a pump wave cannot be separated from the laboratory settings, and that the growth rate of daughter waves depends on the conditions downstream and upstream of the pump wave and on the fraction of volume it fills. Our results can explain simulations and experiments of localized Alfvén waves. They also suggest that Alfvénic fluctuations in the solar wind, including sharp impulses known as switchbacks, can be more stable than traditional theory suggests depending on wind conditions.

Alfven waves↗
DOE OSTI2025

Blue Keanu: A Scientific Visualization Tool For Network Data

This software allows the user to visualize complex PCAP-ng files captured from network capture software such as Wireshark. The visualization runs in a GUI window that can be zoomed or moved to areas of interest in a waterfall type display. The user then can see an area of interest that looks different than the typical traffic visually, such as a human interaction or non-repetitive area of data. The program will tell the user the packet number and byte offset of interest for fast analysis of discrete atomic or non-random events. This is particularly useful for visualization of unknown binary format data, such as in PLC or SCADA protocols that may have human or other non-repetitive activity for further analysis, reverse engineering, or fast forensic analysis.

Durller, MichaelGeorge↗
DOE OSTI2024

Ultrabroadband two-dimensional electronic spectroscopy in the pump–probe geometry using conventional optics

We report ultrabroadband two-dimensional electronic spectroscopy (2D ES) measurements obtained in the pump–probe geometry using conventional optics. A phase-stabilized Michelson interferometer provides the pump-pulse delay interval,τ 1 , necessary to obtain the excitation-frequency dimension. Spectral resolution of the probe beam provides the detection-frequency dimension,ω 3 . The interferometer incorporates active phase stabilization via a piezo stage and feedback from interference of a continuous-wave reference laser detected in quadrature. To demonstrate the method, we measured a well-characterized laser dye sample and obtained the known peak structure. The vibronic peaks are modulated as a function of the waiting time,τ 2 , by vibrational wave packets. The interferometer simplifies ultrabroadband 2D ES measurements and analysis.

Optics↗
DOE OSTI2024

Wave packet dynamics and control in excited states of molecular nitrogen

Wave packet interferometry with vacuum ultraviolet light has been used to probe a complex region of the electronic spectrum of molecular nitrogen, N 2 . Wave packets of Rydberg and valence states were excited by using double pulses of vacuum ultraviolet (VUV), free-electron-laser (FEL) light. These wave packets were composed of contributions from multiple electronic states with a moderate principal quantum number (n ~ 4-9) and a range of vibrational and rotational quantum numbers. The phase relationship of the two FEL pulses varied in time, but as demonstrated previously, a shot-by-shot analysis allows the spectra to be sorted according to the phase between the two pulses. The wave packets were probed by angle-resolved photoionization using an infrared pulse with a variable delay after the pair of excitation pulses. The photoelectron branching fractions and angular distributions display oscillations that depend on both the time delays and the relative phases of the VUV pulses. The combination of frequency, time delay, and phase selection provides significant control over the ionization process and ultimately improves the ability to analyze and assign complex molecular spectra.

74 ATOMIC AND MOLECULAR PHYSICS↗
DOE OSTI2020

Detecting anomalous packets in network transfers: investigations using PCA, autoencoder and isolation forest in TCP

Large-scale scientific workflows rely heavily on high-performance file transfers. These transfers require strict quality parameters such as guaranteed bandwidth, no packet loss or data duplication. To have successful file transfers, methods such as predetermined thresholds and statistical analysis need to be done to determine abnormal patterns. Network administrators routinely monitor and analyze network data for diagnosing and alleviating these, making decisions based on their experience. However, as networks grow and become complex, monitoring large data files and quickly processing them, makes it improbable to identify errors and rectify these. Abnormal file transfers have been classified by simply setting alert thresholds, via tools such as PerfSonar and TCP statistics (Tstat). This paper investigates the feasibility of unsupervised feature extraction methods for identifying network anomaly patterns with three unsupervised classification methods—principal component analysis, autoencoder and isolation forest. Here, we collect file transfer statistics from two experiment sets—synthetic iPerf generated traffic and 1000 Genome workflow runs, with synthetically introduced anomalies. Our results show that while PCA and a simple autoencoder finds it difficult to detect clusters, the tree-variant isolation forest is able to identify anomalous packets by breaking down TCP traces into tree classes early.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Data transmission by quantum matter wave modulation

Abstract Classical communication schemes exploiting wave modulation are the basis of our information era. Quantum information techniques with photons enable future secure data transfer in the dawn of decoding quantum computers. Here we demonstrate that also matter waves can be applied for secure data transfer. Our technique allows the transmission of a message by a quantum modulation of coherent electrons in a biprism interferometer. The data is encoded in the superposition state by a Wien filter introducing a longitudinal shift between separated matter wave packets. The transmission receiver is a delay line detector performing a dynamic contrast analysis of the fringe pattern. Our method relies on the Aharonov–Bohm effect but does not shift the phase. It is demonstrated that an eavesdropping attack will terminate the data transfer by disturbing the quantum state and introducing decoherence. Furthermore, we discuss the security limitations of the scheme due to the multi-particle aspect and propose the implementation of a key distribution protocol that can prevent active eavesdropping.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2020

Real-time Intrusion Detection for High-bandwidth Research Networks using Unsupervised Deep Learning

Nowadays, data generated by large-scale scientific experiments are on the scale of petabytes per month. These data are transferred through dedicated high-bandwidth networks across distributed collaboration sites for processing, storage, and analysis. Like general purpose networks, research networks experience attacks. However, monitoring traffic in such high-bandwidth network environments is challenging with conventional deep packet inspection (DPI)- based network intrusion detection systems (NIDS). Recently, machine learning (ML) algorithms have shown potential in detecting anomalous patterns with better generalizability and faster speed. Compared to the general purpose networks, traffic movement in research network is less volatile and more likely to benefit from the ML-based anomaly analysis. We present ThunderSecure, an efficient AI-powered system for detecting anomalies in 100G research networks. ThunderSecure implements a high-throughput packet processing infrastructure using multi-cores and GPUs. It takes time-series statistics from a variety of network measurements and uses 2D Convolutional Neural Network (CNN) to explore both spatial and temporal dependencies in network data stream. Patterns of science data traffic are learned with a one-class neural network, which blends an Adversarial Autoencoder (AAE) with Gaussian mixture density estimation. Testing traffic flows exhibiting significant deviations from the learned baseline of normality are marked as anomalies. We trained ThunderSecure on hundreds of billions of science data packets recorded from a 100G research network at Fermi National Accelerator Laboratory. The detection performance was evaluated on traffic captured from the same research network days and weeks after the training with different types of attack flows injected. To the best of our knowledge, this is the first ML work in the area of network anomaly detection that has been validated on such extreme scale datasets. Results show that ThunderSecure can recognize science data traffic that are captured long after the training and make nearly certain detection on those with anomalous flows injected, even in the case when the anomaly-to-normal mixing ratio is 0.1%.

Gong, Qian↗
DOE OSTI2026

MAS-CCD: New technique for measuring low-level charge content based on the multiple amplifier architecture

Low-noise detectors are a key technology for the next generation of astronomical instruments aimed at spectroscopy of faint objects and the search for exoplanets. In this context, the multiple-amplifier sensing charge-coupled device (MAS-CCD) emerges as a promising technology for future scientific instruments. A critical parameter affecting the performance of these devices is spurious charge, produced by the clocking of the gates. Its measurement is typically challenging with existing methods. In practice, the optimization of this parameter often relies on empirical procedures that require significant time and careful consideration of the trade-off with full-well capacity. In this work, we present a new technique to estimate spurious charge based on covariance analysis of the output amplifiers of the MAS-CCD, which measures the same charge packet in different amplifiers at different times. The method enables fast and precise measurements of spurious charge under operating conditions where conventional approaches are difficult to apply. We develop the theoretical framework of the method and validate the model through simulations. The results demonstrate the feasibility of this approach and suggest that it could serve as a basis for reliable large-scale characterization of sensor performance.

Gamero, Miqueas E. [Buenos Aires, CONICET; Fermila↗
DOE OSTI2022

Theory of the magnetothermal instability in coronal plasma flows

The theory of the magnetothermal instability (MTI) is revisited through the lens of the stability of uniform systems. The linear stability analysis includes flow advection and Nernst transport. The instability criteria derived distinguish between the convective and the absolute nature of the perturbation growth. It is proven that, in the region where the Nernst and plasma blowoff velocities cancel, the MTI can be absolute and wave-packet perturbations grow in situ. This instability is mediated by the internal feedback between the Biermann battery and Righi–Leduc terms. Here, the analysis is extended to derive the dispersion relation for short-wavelength perturbations developing in nonuniform profiles with the application to coronal plasmas. It is found that the condition for MTI requires the net B-field convection velocity to be small at the isothermal sonic section, and the plasma conditions in this section govern the dynamics of the instability. Analysis of hydro-equivalent implosions suggests that unstable perturbations undergo more e-foldings of growth in larger-size targets.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗