Search NASA⌕ Search

SEARCH · Search NASA

Results for “threat analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2019

The IEC 61850 Sampled Measured Values Protocol: Analysis, Threat Identification, and Feasibility of Using NN Forecasters to Detect Spoofed Packets

The operation of the smart grid is anticipated to rely profoundly on distributed microprocessor-based control. Therefore, interoperability standards are needed to address the heterogeneous nature of the smart grid data. Since the IEC 61850 emerged as a wide-spread interoperability standard widely accepted by the industry, the Sampled Measured Values method has been used to communicate digitized voltage and current measurements. Realizing that current and voltage measurements (i.e., feedback measurements) are necessary for reliable and secure noperation of the power grid, firstly, this manuscript provides a detailed analysis of the Sampled Measured Values protocol emphasizing its advantages, then, it identifies vulnerabilities in this protocol and explains the cyber threats associated to these vulnerabilities. Secondly, current efforts to mitigate these vulnerabilities are outlined and the feasibility of using neural network forecasters to detect spoofed sampled values is investigated. It was shown that although such forecasters have high spoofed data detection accuracy, they are prone to the accumulation of forecasting error. Accordingly, this paper also proposes an algorithm to detect the accumulation of the forecasting error based on lightweight statistical indicators. The effectiveness of the proposed methods is experimentally verified in a laboratory-scale smart grid testbed.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Review of Design Elements within Power Infrastructure Cyber–Physical Test Beds as Threat Analysis Environments

Cyber–physical systems (CPSs) are an integral part of modern society; thus, enhancing these systems’ reliability and resilience is paramount. Cyber–physical testbeds (CPTs) are a safe way to test and explore the interplay between the cyber and physical domains and to cost-effectively enhance the reliability and resilience of CPSs. Here a review of CPT elements, broken down into physical components (simulators, emulators, and physical hardware), soft components (communication protocols, network timing protocols), and user interfaces (visualization-dashboard design considerations) is presented. Various methods used to validate CPS performance are reviewed and evaluated for potential applications in CPT performance validation. Last, initial simulated results for a CPT design, based on the IEEE 33 bus system, are presented, along with a brief discussion on how model-based testing and fault–injection-based testing (using scaling and ramp-type attacks) may be used to help validate CPT performance.

14 SOLAR ENERGY↗
DOE OSTI2026

NASA analysis of space mission options for the 2025 planetary defense conference hypothetical asteroid impact threat scenario

The 2025 Planetary Defense Conference (PDC) hypothetical asteroid impact threat exercise is being conducted in coordination with the United Nations-endorsed Space Mission Planning Advisory Group (SMPAG), exercising SMPAG's processes for assessing space mission options and communicating to decision makers. Here, in this paper, we describe the work performed by our NASA-led team and present the results we contributed to the SMPAG effort for the exercise. Our NASA-led team assessed mission options for asteroid reconnaissance (flyby and rendezvous), deflection, and robust disruption using several viable techniques: kinetic impactors, ion beam deflection, and nuclear explosive devices. Our simulations and analyses considered how much change-in-velocity an asteroid can tolerate before fragmentation onset, and we worked towards establishing requirements for robustly disrupting an asteroid. Heuristics informed by the simulation results are incorporated into optimization of deflection and disruption mission campaign options. Finally, we make some observations about useful generalizations from these results with potential applicability to any planetary defense scenario.

Asteroid deflection↗
DOE OSTI2022

Cyber Threat Landscape for Distribution Systems

INL cyber analysts will present an overview of the current threat landscape for distribution systems. We will begin with examples of known attacks that have occurred recently to motivate the threat analysis and mitigation discussed in the remainder of the presentation. Examples may include the attacks affecting wind plants in Europe in Spring 2022, ransomware attacks on city utilities and commercial distribution systems, and advanced persistent threats (APTs) including the attacks on Ukrainian electric system in 2015 and 2016, as well as more recent evidence of other APT activity. We will present the end-to-end attack paths and discuss the various attacker skills, financing, motivations, and access that contributed to these attacks. In the second part of this presentation, we will discuss mitigating the cyber threats for distribution systems. We will discuss recent publicly disclosed vulnerabilities and explain their relevant context for distribution system security. Likely attacks to affect distribution systems, such as denial-of-service (DoS), ransomware, edge-device compromise, and advanced persistent threats (APTs) will be described. In addition to an overview of these kinds of attacks, we will provide examples of the various ways in which these attacks can start and what systems they can affect. Simple, cost-effective counter-measures to these attacks will be discussed and we will emphasize how these mitigations can reduce threats when properly applied and maintained.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Retrieval Augmented Generation for Robust Cyber Defense

In cybersecurity, the ability to efficiently analyze and respond to vulnerabilities, weaknesses, attack patterns, and threat tactics is critical for effective defense strategies. With the increasing complexity and volume of cybersecurity data, traditional methods of querying and retrieving information are often inadequate. To address this challenge, we implemented Retrieval-Augmented Generation (RAG) systems—CyRAG and GraphCyRAG—that integrate large language models (LLMs) with both structured data from relational databases and knowledge graphs such as Neo4j. CyRAG is designed to handle structured data, focusing on CVE (Common Vulnerabilities and Exposures) and CWE (Common Weakness Enumeration) entities to generate accurate and context-rich responses. In contrast, GraphCyRAG leverages Neo4j knowledge graphs to retrieve interconnected information from CVE, CWE, CAPEC (Common Attack Pattern Enumeration and Classification), and ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) datasets. By utilizing Neo4j’s graph-based framework, GraphCyRAG enables deeper traversal of relationships between vulnerabilities and attack patterns, providing cybersecurity analysts with more comprehensive insights into potential attack vectors and mitigation strategies. Our preliminary results demonstrate that integrating knowledge graphs with RAG significantly enhances both the accuracy and depth of threat analysis, allowing for the retrieval of dynamic, real-time data and the generation of contextually aware responses. This approach helps analysts uncover hidden relationships between cyber entities, predict exploit paths, and prioritize mitigation efforts effectively. The integration of RAG with cybersecurity knowledge graphs represents a significant advancement in cybersecurity threat intelligence, enabling more informed decision-making and stronger defense strategies.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Internship Presentation: Integrating Safety and Cybersecurity: Security-by-Design with SOWT Analysis for Reactor Testing

This study covers leveraging reactor testing facilities that are primarily designed with a focus on safety to enhance cybersecurity testing. By incorporating reactor security-by-design with reactor safety-by-design principles and adopting defense-in-depth strategies that emphasize both safety and security, the research evaluates applicable cyber tools, models, and solutions. This includes simulating specific cyber-attack scenarios using reactor simulators and performing SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis to improve the cybersecurity of reactor systems.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗
DOE OSTI2024

CloudZero Phase 2 Technical Report

Expand upon the successful Phase 1 net zero cloud test proof of concept by moving actual OT systems to the cloud and proving cloud feasibility to support various OT technologies such as IoT, Machine Learning, etc. Explore threat analysis when these technologies are moved to the cloud. A detailed analysis in NREL ARIES Cyber Range will be used to conduct deeper analysis of cloud suitability to support OT and net zero system operations in a higher fidelity representative environment. Outputs will identify, quantify, and document the results and cyber security risks associated with the move of these OT technologies in a formal delivered report. Programmatic Benefits: Identify cloud integration challenges for energy systems characterize the cloud threat space, contribute to policy and standards discussions, empower the sector to change their cloud culture where appropriate.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2016

Preliminary Exploration of Encounter During Transit Across Southern Africa

Los Alamos National Laboratory (LANL) is utilizing the Probability Effectiveness Methodology (PEM) tools, particularly the Pathway Analysis, Threat Response and Interdiction Options Tool (PATRIOT) to support the DNDO Architecture and Planning Directorate’s (APD) development of a multi-region terrorist risk assessment tool. The effort is divided into three stages. The first stage is an exploration of what can be done with PATRIOT essentially as is, to characterize encounter rate during transit across a single selected region. The second stage is to develop, condition, and implement required modifications to the data and conduct analysis to generate a well-founded assessment of the transit reliability across that selected region, and to identify any issues in the process. The final stage is to extend the work to a full multi-region global model. This document provides the results of the first stage, namely preliminary explorations with PATRIOT to assess the transit reliability across the region of southern Africa.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

EMP Coupling to a Straight Conductor Above Ground: Transmission Line Formulation Based on Electromagnetic Reciprocity

A simple model for coupling of an electromagnetic plane wave incident on a conductor above ground has been developed using reciprocity theory, providing some advantages as compared to the conventional transmission line approach. The model is developed using a semi-infinitely long single conductor above a lossy ground plane and connected by an arbitrary load impedance to a vertical grounding conductor. This configuration corresponds to the worst-case wave coupling, because it leads to a line induced current larger than in the cases of finite and multiconductor lines. A frequency-domain Thévenin equivalent model is developed to relate the incident wave amplitude to the voltage across a generic load, connected at any point on the vertical conductor. The application to the threat analysis of a high-altitude electromagnetic pulse impact on a power transmission line is discussed by considering the time-domain solution (via inverse Fourier transform) for an incident EMP fast-rise transient (E1) waveshape, following the standard IEC specifications. For typical high-voltage power line load impedances, it is shown that voltage magnitudes in the MV range can be induced across the line termination, in the case of a wave with a near-grazing incidence angle and with wave vector aligned along the horizontal conductor.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2026

Eev (enrich Enforce Validate) With Cpefinder

This code is designed to take an existing STIX bundle with vulnerability data and enrich it with additional potential vulnerabilities to provide further insight during threat analysis. It also acts as a launch platform for other enrichments tools. The additional tools include, WAVgraph and STIXEnforcer.

Beckman, BryanR [Idaho National Laboratory (INL), ↗
DOE OSTI2018

Wide Bandgap Semiconductor Opportunities in Power Electronics

The report objective is to explore the Wide Bandgap (WBG) Power Electronics (PE) market, applications, and potential energy savings in order to identify key areas where further resources and investments of the U.S. Department of Energy’s Office of Energy Efficiency and Renewable Energy (DOE EERE) would have the most impact on U.S. competiveness. After considering the current market, several potential near-term application areas were identified as having significant market and energy savings potential with respect to clean energy applications: (1) data centers (uninterruptible power supplies and server power supplies); (2) renewable energy generation (photovoltaic-solar and wind); (3) motor drives (industrial, commercial and residential); (4) rail traction; and, (5) hybrid and electric vehicles (traction and charging). After the initial explorative analyses, it became clear that, SiC, not GaN, would be the principal WBG power device material for the chosen markets in the near future. Therefore, while GaN is discussed when appropriate, this report focuses on SiC devices, other WBG applications (e.g., solid-state transformers, combined heat and power, medical, and wireless power), the GaN market, and GaN specific applications (e.g., LiDAR, 5G) will be explored at a later date. In addition to the market, supply and value chain analyses addressed in Section 1 of this report, a SWOT (Strength, Weakness, Opportunity, Threat) analysis and potential energy savings analysis was conducted for each application area to identify the major potential WBG application area(s) with a U.S. competitiveness opportunity in the future.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2021

Cybersecurity for Grid Connected eXtreme Fast Charging (XFC) Station (CyberX) (Final Scientific/Technical Report)

This report summarizes the activities conducted under the DOE VTO funded project DE- EE0008451, where ABB Inc. (ABB), in collaboration with Idaho National Laboratory (INL), APS Global (APS), and XOS Trucks (XOS) pursued the development of a cyber-resilient extreme fast charging (XFC) management system. This project entitled Cybersecurity for Grid Connected eXtreme Fast Charging (XFC) Station (CyberX) focuses on a resilient architecture for smart charging EV Supply Equipment (EVSE) device control and Coordinated Anomaly Detection System (CADS) features that can be added at the charging site depot level to increase cybersecurity. The project was split into two budget periods focused first on developing the threat model and resilient control concepts and second on testing, improving, and validating those developed resilient control algorithms and features with a focus on key vulnerabilities identified during the threat assessment portion of the project. During the first budget period of the CyberX project, the ABB led team focused on activities to identify, model, and quantitatively prioritize high-impact attack scenarios with potential cyber-physical effects while also modeling and developing concepts for a resilient control system that could securely address integration of DERs and other resources with EV charging. Development of the security focused XFC management system (XMS) was accomplished first by offline simulation using a developed XFC station or depot with 480V input level and simulating measurement inputs to monitoring and control systems in concept development. A representative distribution grid model was developed supporting an EV charging site model with BESS and 6 general EV charging models. These EV charging models allowed multiple configurations of charging level, multiple connected protection and measurement devices, and simulation function to show general compromise of EV, BESS, and protection features based on parallel threat analysis. During the second budget period, the EV site and supporting systems model was developed in more detail and converted from offline model to real-time to real-time with EV charging hardware in the loop (HIL). The resilient control architecture developed as concept in the first part of the project was further tested and validated for integration of local energy resources and XFC charging station site equipment while maintaining cybersecure operating principles. The proposed resilient architecture for smart charging and cybersecurity features consists of two main concepts developed and tested within the project. The first concept is an XFC management system (XMS) consisting of a hardware gateway, software platform, and Supervisory Control and Data Acquisition (SCADA) or Distribution Management System integration components. The second concept is a Coordinated Anomaly Detection System (CADS) which forms a primarily software-related subsystem of the total CyberX solution focused on monitoring system measurements, estimation of measurement states, and predicting current at the utility point of interaction based on machine learning for anomaly detection.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2023

Guanajuato Policy Options for Land Transportation Greenhouse Gas Reduction [Slides]

NREL consulted the Mexican state of Guanajuato to help them identify and prioritize policies that are specifically applicable to their land transportation system and help them meet their greenhouse gas (GHG) reduction goals. Three focus groups were held across Guanajuato to get the input from a wide variety of users of the transportation system. These focus groups performed a SWOT (strengths, weaknesses, opportunities and threats) analysis of Guanajuato's transportation system and logged the policy goals of participants. NREL then developed a menu of policy options that have been used successfully in relevant countries and prioritized these policies based on the weighted input from stakeholder groups. The most applicable policies were a paid parking strategy, regional transit master plan, and expanded bike and pedestrian infrastructure. Case studies of these three policies, plus a few more, were then presented to inform Guanajuato of how these policies could successfully be implemented. Finally, the GHG reductions for five of the most applicable policies were estimated to reduce emissions from Guanajuato's land transportation system nearly 40% below business-as-usual emissions by 2050.

24 POWER TRANSMISSION AND DISTRIBUTION↗