Search NASA⌕ Search

SEARCH · Search NASA

Results for “reconstruction attacks”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Securing Federated Learning Against Active Reconstruction Attacks

Federated Learning (FL) has amassed notable attention for its ability to preserve user privacy while emphasizing the retainment of model training efficiency. Due to this potential, FL has been integrated in many domains, such as healthcare, finance, law, and industrial engineering, where data cannot be easily exchanged due to sensitive information and strict privacy laws. However, current research has indicated that FL protocols are easily compromised by active data reconstruction attacks employed by actively dishonest servers. The malicious modification of global model parameters allows an actively dishonest server to obtain a direct copy of users’ private data via gradient inversion. Here, this class of attacks is highly underexplored and continues to be a major challenge due to the intense threat model. In this paper, we propose OASIS as a scalable and modality-agnostic defense based on data augmentation that counteracts active data reconstruction attacks while preserving model performance. To generalize our defense, we uncover the intuition behind gradient inversion that enables these attacks and theoretically establish the conditions by which the defense can be considered robust regardless of attack design. From this, we formulate our defense with data augmentation that illustrates its ability to undermine the attack principle. We evaluate OASIS on five real-world datasets–two image-based (ImageNet and CIFAR100) and three text-based (Wikitext, Stack Overflow, and Shakespeare)–which span diverse uses cases such as vision tasks and language modeling. Comprehensive evaluations on these datasets exhibit the efficacy of OASIS and highlight its feasibility as a solution.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Position-Enhanced Gradient Attack (PEGA) on Medical Language Models

Federated Learning (FL) enables collaborative training of language models on sensitive clinical notes without sharing the data. However, this paradigm is vulnerable to gradient inversion attacks that can reconstruct private data from shared gradients. We find that state-of-the-art attacks are less effective in the medical domain, failing to overcome the unique challenges posed by its specialized vocabulary and unstructured format. To address this, we introduce the Position-Enhanced Gradient Attack (PEGA), a novel attack that makes gradients position-aware by optimizing token and position embeddings simultaneously. PEGA employs two key innovations: a periodic sorting of positional embeddings to resolve token order ambiguity and a late-stage embedding replacement strategy to correct hard-to-recover critical tokens. To evaluate the leakage of sensitive data more directly, we also propose the Unified PHI-Recall (UPHI), a new metric measuring the recovery of Protected Health Information. Experiments on the MIMIC-III dataset show that PEGA significantly outperforms leading attacks like TAG and LAMP, particularly in its ability to reconstruct identifiable patient information, exposing a more severe and nuanced privacy risk in federated medical NLP.

Xu, Nuo [University of Minnesota]↗
NASA NTRS1985

Angle-of-attack estimation for analysis of CAT encounters

Recent studies of clear-air turbulence (CAT) encounters involving wide-body airliners have been based upon flight-path wind estimates made by analyzing digital flight-data-recorder (DFDR) records and radar records. Such estimates require a time history of the aircraft angle of attack, a record that is not usually included in the DFDR measurement set. This paper describes a method for reconstructing angle of attack that utilizes available flight record and aircraft-specific information associated with an aerodynamic model of the lift coefficient. Results from two wide-body incidents in which vane measurements of angle of attack were recorded show good agreement between measured and calculated time histories. This research has been performed in cooperation with the National Transportation Safety Board to provide a better understanding of the CAT phenomenon.

Bach, R. E., Jr.↗
NASA NTRSDate not supplied

Progress on Inverse Estimation Technique of Non-Linear Pitch Damping Coefficient Curves Using Free-Flight CFD Generated Trajectories

Characterization of entry vehicle pitch damping coefficient curves is crucial to ensure appropriate re-entry and overall mission success. The pitch damping coefficient (C_(m_q )+C_(m_α ̇ )) is used to encapsulate the oscillatory growth or decay of a body during a trajectory. The inverse estimation technique utilizes an existing Free-Flight CFD (FF-CFD) dataset and wraps a reconstruction algorithm in an optimizer. The reconstruction integrates the planar equations of motion derived by Schoenenberger, Queen [1] using Python’s scipy.integrate.solve_ivp. The optimizer’s objective function is the normalized 𝐿2 residual of the angle of attack peaks between the reconstructed trajectory and the original data produced with FF-CFD. Inclusion of the peak times in this residual calculation allows for simultaneous optimization of the pitch moment coefficient, C_(m_α ). This residual equation is shown below in Eq. 1. The optimizer scipy.optimize.minimize was used with the gradient-based Powell method for the analysis presented, however the differential evolution method was investigated as means of comparison, and was found to produce marginally lower residual values with prohibitively longer run times. Further, the pitch damping curve is found by fitting a cubic interpolation function to a set of (α, (C_(m_q )+C_(m_α ̇ ))) control points, where the α points are held constant and the (C_(m_q )+C_(m_α ̇ )) values are the optimized parameters. The pitch moment curve uses a linear interpolation between the minimum and maximum α in the dataset. FF-CFD generated trajectories using the Dragonfly capsule geometry with the Genesis ballistic range model parameters were simulated and used for this analysis. These FF-CFD trajectories simulate planar motion, as restricted by the reconstructing the equations of motion, of three different cases: 1-DoF (free-to-pitch), 2-DoF (free-to-pitch and heave), and 3-DoF (free-to-pitch, heave, and decelerate). Pitch damping coefficient curves generated using this inverse estimation curve technique with FF-CFD 1-DoF Dragonfly data are found in Fig. 1. Preliminary results reconstructing ballistic range shots using these FF-CFD derived predictions of the pitch damping curve (Fig. 1) are shown in Fig. 2. It should be noted that the ballistic range shot used a Genesis model whereas the FF-CFD data used a Dragonfly geometry, however these geometries are similar.

entry↗
NASA NTRS1965

Wind tunnels

Supersonic wind tunnel test data, angle of attack envelope computations, and accelerometer package for reconstructing density profile of unknown atmosphere

ACCELEROMETER↗
DOE OSTI2026

3D reconstruction and neural rendering for adversarial machine learning

While evasion attacks on computer vision systems have been widely studied, creating attacks that remain effective under significant changes in viewpoint continues to be challenging. Traditional approaches often rely on affine transformations of images, but these approaches degrade at larger perspective shifts and often produce unrealistic or ineffective perturbations. Recent methods use differentiable renderers to improve viewpoint robustness, but they typically depend on manually constructed 3D models. We introduce a semi-automated pipeline that generates physically printable and perspective-invariant adversarial patches using only a small set of 2D images. Our method integrates 3D reconstruction, neural rendering, adversarial patch optimization, and an object detection victim model into a unified workflow. We use 2D Gaussian Splatting for high fidelity mesh reconstruction and FlexPara for surface parameterization that produces texture maps suitable for patch editing. Together, these components form a fully differentiable pipeline in PyTorch3D that links texture modification to model outputs, enabling efficient optimization of patches that remain effective across many viewpoints. The complete process, from image capture to patch printing and physical evaluation, can be completed within a few hours. We demonstrate the effectiveness of the resulting patches through attacks on the YOLOv8 object detection model and discuss remaining challenges and opportunities for improving robustness and scalability.

Singhvi, Vivaan [ORNL] (ORCID:0009000586288221)↗
NASA NTRSDate not supplied

Attitude Reconstruction of Free-Flight CFD Generated Trajectories Using Non-Linear Pitch Damping Coefficient Curves

Attitude history reconstruction of Free-flight CFD generated trajectories with non-linear pitch damping coefficient curves is investigated. Free-flight CFD simulations of the capsule shape used for the Genesis sample return mission and the upcoming Dragonfly mission to Titan are conducted for 1-, 2-, and 3-degree-of-freedom cases. Two different data reduction methodologies are employed to derive a pitch damping curve as a function of instantaneous angle of attack. These curves are then used to reconstruct the attitude history of the body which is compared to the raw simulation results. While both data reduction methods produce pitch damping curves that can generally reconstruct the motion seen in the Free-flight simulations, it is found that optimization of the pitch damping curve using an inverse estimation process yields superior and more generalizable results. Further refinement of this technique could allow pitch damping curves derived using CFD to serve as a capability complementary to existing techniques for dynamic stability characterization.

entry↗
NASA NTRSDate not supplied

Attitude Reconstruction of Free-Flight CFD Generated Trajectories Using Non-Linear Pitch Damping Coefficient Curves

Attitude history reconstruction of Free-flight CFD generated trajectories with non-linear pitch damping coefficient curves is investigated. Free-flight CFD simulations of the capsule shape used for the Genesis sample return mission and the upcoming Dragonfly mission to Titan are conducted for 1-, 2-, and 3-degree-of-freedom cases. Two different data reduction methodologies are employed to derive a pitch damping curve as a function of instantaneous angle of attack. These curves are then used to reconstruct the attitude history of the body which is compared to the raw simulation results. While both data reduction methods produce pitch damping curves that can generally reconstruct the motion seen in the Free-flight simulations, it is found that optimization of the pitch damping curve using an inverse estimation process yields superior and more generalizable results. Further refinement of this technique could allow pitch damping curves derived using CFD to serve as a capability complementary to existing techniques for dynamic stability characterization.

entry↗
NASA NTRS2013

Trajectory Reconstruction and Uncertainty Analysis Using Mars Science Laboratory Pre-Flight Scale Model Aeroballistic Testing

As part of the Mars Science Laboratory (MSL) trajectory reconstruction effort at NASA Langley Research Center, free-flight aeroballistic experiments of instrumented MSL scale models was conducted at Aberdeen Proving Ground in Maryland. The models carried an inertial measurement unit (IMU) and a flush air data system (FADS) similar to the MSL Entry Atmospheric Data System (MEADS) that provided data types similar to those from the MSL entry. Multiple sources of redundant data were available, including tracking radar and on-board magnetometers. These experimental data enabled the testing and validation of the various tools and methodologies that will be used for MSL trajectory reconstruction. The aerodynamic parameters Mach number, angle of attack, and sideslip angle were estimated using minimum variance with a priori to combine the pressure data and pre-flight computational fluid dynamics (CFD) data. Both linear and non-linear pressure model terms were also estimated for each pressure transducer as a measure of the errors introduced by CFD and transducer calibration. Parameter uncertainties were estimated using a "consider parameters" approach.

Lugo, Rafael A.↗
NASA NTRS2013

Aerodynamic Stability and Performance of Next-Generation Parachutes for Mars Descent

The Low Density Supersonic Decelerator Project is developing a next-generation supersonic parachute for use on future Mars missions. In order to determine the new parachute configuration, a wind tunnel test was conducted at the National Full-scale Aerodynamics Complex 80- by 120-foot Wind Tunnel at the NASA Ames Research Center. The goal of the wind tunnel test was to quantitatively determine the aerodynamic stability and performance of various canopy configurations in order to help select the design to be flown on the Supersonic Flight Dynamics tests. Parachute configurations included the diskgap- band, ringsail, and ringsail-variant designs referred to as a disksail and starsail. During the wind tunnel test, digital cameras captured synchronized image streams of the parachute from three directions. Stereo hotogrammetric processing was performed on the image data to track the position of the vent of the canopy throughout each run. The position data were processed to determine the geometric angular history of the parachute, which were then used to calculate the total angle of attack and its derivatives at each instant in time. Static and dynamic moment coefficients were extracted from these data using a parameter estimation method involving the one-dimensional equation of motion for a rotation of parachute. The coefficients were calculated over all of the available canopy states to reconstruct moment coefficient curves as a function of total angle of attack. From the stability curves, useful metrics such as the trim total angle of attack and pitch stiffness at the trim angle could be determined. These stability metrics were assessed in the context of the parachute's drag load and geometric porosity. While there was generally an inverse relationship between the drag load and the stability of the canopy, the data showed that it was possible to obtain similar stability properties as the disk-gap-band with slightly higher drag loads by appropriately tailoring the geometric porosity distribution.

Low Density Supersonic Decelerator (LDSD)↗
DOE OSTI2025

Deploying Adversarial Attacks in Super-Resolution Models

Reliable super-resolution methods are crucial for applications like remote sensing, grid resilience and disaster impact analysis, and standoff biometrics. These methods infuse additional high-frequency information into reconstructions, allowing for better contextualization and image intelligence. However, super-resolution models can also introduce hallucinations or other unseen vulnerabilities that could be exploited by an adversary. This is further compounded by the prominence of deep learning in these models, as models are often blindly applied on out-of-distribution images. In this work, we implement adversarial attacks in common open-source super-resolution models and examine their impact on reconstructions and downstream classification tasks. We find that an adversarially trained super-resolution model can produce high-quality reconstructions that degrade downstream classifications. Moreover, these attacks do not require access to low-resolution imagery or class labels at inference time. These results demonstrate the vulnerability of super-resolution methods to malicious actors and motivates the development of a detector for super-resolution adversarial attacks. Further exploration of adversarial attacks in this domain is required to ensure trustworthiness and robustness of super-resolution models for national security applications.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
NASA NTRS1990

Airdata calibration of a high-performance aircraft for measuring atmospheric wind profiles

The research airdata system of an instrumented F-104 aircraft has been calibrated to measure winds aloft in support of the space shuttle wind measurement investigation at the National Aeronautics and Space Administration Ames Research Center Dryden Flight Research Facility. For this investigation, wind measurement accuracies comparable to those obtained from Jimsphere balloons were desired. This required an airdata calibration more accurate than needed for most aircraft research programs. The F-104 aircraft was equipped with a research pilot-static noseboom with integral angle-of-attack and flank angle-of-attack vanes and a ring-laser-gyro inertial reference unit. Tower fly-bys and radar acceleration-decelerations were used to calibrate Mach number and total temperature. Angle of attack and angle of sideslip were calibrated with a trajectory reconstruction technique using a multiple-state linear Kalman filter. The F-104 aircraft and instrumentation configuration, flight test maneuvers, data corrections, calibration techniques, and resulting calibrations and data repeatability are presented. Recommendations for future airdata systems on aircraft used to measure winds aloft are also given.

Haering, Edward A., Jr.↗
NASA NTRS2020

Aerodynamic Parameter Estimation Using Reconstructed Turbulence Measurements

A classical method for reconstructing atmospheric turbulence from onboard measurements of airdata and inertial sensors was improved and implemented for real-time computation. The reconstructed turbulence measurements were then included in a system identification analysis to estimate nondimensional stability and control derivatives in a longitudinal short period model using the maximum likelihood equation-error method in the frequency domain with Fourier-transform data. Flight test results using a subscale transport-type airplane showed that the power spectra for the reconstructed vertical gusts resembled the von Kármán turbulence model. Flight data in moderate and severe turbulence exhibited a decorrelation of the modeling data that increased the accuracy of parameter estimation results using the reconstructed turbulence. In particular, pitch rate and angle-of-attack rate derivatives could both be identified from flight data about straight and level flight without special maneuvers or prior information.

Jared A Grauer↗
NASA NTRS2013

Mars Entry Atmospheric Data System Trajectory Reconstruction Algorithms and Flight Results

The Mars Entry Atmospheric Data System is a part of the Mars Science Laboratory, Entry, Descent, and Landing Instrumentation project. These sensors are a system of seven pressure transducers linked to ports on the entry vehicle forebody to record the pressure distribution during atmospheric entry. These measured surface pressures are used to generate estimates of atmospheric quantities based on modeled surface pressure distributions. Specifically, angle of attack, angle of sideslip, dynamic pressure, Mach number, and freestream atmospheric properties are reconstructed from the measured pressures. Such data allows for the aerodynamics to become decoupled from the assumed atmospheric properties, allowing for enhanced trajectory reconstruction and performance analysis as well as an aerodynamic reconstruction, which has not been possible in past Mars entry reconstructions. This paper provides details of the data processing algorithms that are utilized for this purpose. The data processing algorithms include two approaches that have commonly been utilized in past planetary entry trajectory reconstruction, and a new approach for this application that makes use of the pressure measurements. The paper describes assessments of data quality and preprocessing, and results of the flight data reduction from atmospheric entry, which occurred on August 5th, 2012.

Karlgaard, Christopher D.↗
NASA NTRS1992

Airdata calibration techniques for measuring atmospheric wind profiles

The research airdata system of an instrumented F-104 aircraft has been calibrated to measure winds aloft in support of the Space Shuttle wind measurement investigation at the National Aeronautics and Space Administration Ames Research Center Dryden Flight Research Facility. For this investigation, wind measurement accuracies comparable to those obtained from Jimsphere balloons were desired. This required an airdata calibration more accurate than needed for most aircraft research programs. The F-104 aircraft was equipped with a research pilot-static noseboom with integral angle-of-attack and flank angle-of-attack vanes and a ring-laser-gyro inertial reference unit. Tower fly-bys and radar acceleration-decelerations were used to calibrate Mach number and total temperature. Angle of attack and angle of side slip were calibrated with a trajectory reconstruction technique using a multiple-state linear Kalman filter. The F-104 aircrat and instrumentation configuration, flight test maneuvers, data corrections, calibration techniques, and resulting calibrations and data repeatability are presented. Recommendations for future airdata systems on aircraft used to measure winds aloft are also given.

Haering, Edward A., Jr.↗
DOE OSTI2026

The Double-edged Sword of Data-driven Super-Resolution: Adversarial Super-resolution Models

Data-driven super-resolution (SR) methods are often integrated into imaging pipelines as preprocessing steps to improve downstream tasks such as classification and detection. However, these SR models introduce a previously unexplored attack surface into imaging pipelines. In this paper, we present AdvSR, a framework demonstrating that adversarial behavior can be embedded directly into SR model weights during training, requiring no access to inputs at inference time. Unlike prior attacks that perturb inputs or rely on backdoor triggers, AdvSR operates entirely at the model level. By jointly optimizing for reconstruction quality and targeted adversarial outcomes, AdvSR produces models that appear benign under standard image quality metrics while inducing downstream misclassification. We evaluate AdvSR on three SR architectures (SRCNN, EDSR, SwinIR) paired with a YOLOv11 classifier and demonstrate that AdvSR models can achieve high attack success rates with minimal quality degradation. These findings highlight a new model-level threat for imaging pipelines, with implications for how practitioners source and validate models in safety-critical applications.

Sullivan, Haley [ORNL] (ORCID:0000000274069217)↗
NASA NTRS2006

Anomalistic Disturbance Torques during the Entry Phase of the Mars Exploration Rover Missions: A Telemetry and Mars-Surface Investigation

Shortly after landing on Mars, post-flight analysis of the "Spirit" entry data suggested that the vehicle experienced large, anomalistic oscillations in angle-of-attack starting at about M=6. Similar analysis for "Opportunity " found even larger oscillations starting immediately after maximum dynamic pressure at M=14. Where angles-of-attack of 1-2 degrees were expected from maximum dynamic pressure to drogue deployment, the reconstructions suggested 4 to 9 degrees. The next Mars lander, 2007 Phoenix project, was concerned enough to recommend further exploration of the anomalies. Detailed analysis of "Opportunity" data found significant anomalies in the hypersonic aerodynamic torques. The analysis showed that these torques were essentially fixed in the spinning vehicle. Nearly a year after landing, the "Oportunity" rover took pictures of its aeroshell on the surface, which showed that portions of the aeroshell thermal blanket assembly still remained. This blanket assembly was supposed to burn off very early in the entry. An analysis of the aeroshell photographs led to an estimate of the aerodynamic torques that the remnants could have produced. A comparison of two estimates of the aerodynamic torque perturbations (one extracted from telemetry data and the other from Mars surface photographs) showed exceptional agreement. Trajectory simulations using a simple data derived torque perturbation model provided rigid body motions similar to that observed during the "Opportunity" entry. Therefore, the case of the anomalistic attitude behavior for the "Opportunity" EDL is now considered closed and a suggestion is put forth that a similar event occurred for the "Spirit" entry as well.

Tolson, Robert H.↗
NASA NTRS2014

Mars Entry Atmospheric Data System Modeling, Calibration, and Error Analysis

The Mars Science Laboratory (MSL) Entry, Descent, and Landing Instrumentation (MEDLI)/Mars Entry Atmospheric Data System (MEADS) project installed seven pressure ports through the MSL Phenolic Impregnated Carbon Ablator (PICA) heatshield to measure heatshield surface pressures during entry. These measured surface pressures are used to generate estimates of atmospheric quantities based on modeled surface pressure distributions. In particular, the quantities to be estimated from the MEADS pressure measurements include the dynamic pressure, angle of attack, and angle of sideslip. This report describes the calibration of the pressure transducers utilized to reconstruct the atmospheric data and associated uncertainty models, pressure modeling and uncertainty analysis, and system performance results. The results indicate that the MEADS pressure measurement system hardware meets the project requirements.

Karlgaard, Christopher D.↗