Search NASA⌕ Search

SEARCH · Search NASA

Results for “Vulnerability Management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

A guide to the BRAIN Initiative Cell Census Network data ecosystem

Characterizing cellular diversity at different levels of biological organization and across data modalities is a prerequisite to understanding the function of cell types in the brain. Classification of neurons is also essential to manipulate cell types in controlled ways and to understand their variation and vulnerability in brain disorders. The BRAIN Initiative Cell Census Network (BICCN) is an integrated network of data-generating centers, data archives, and data standards developers, with the goal of systematic multimodal brain cell type profiling and characterization. Emphasis of the BICCN is on the whole mouse brain with demonstration of prototype feasibility for human and nonhuman primate (NHP) brains. Here, we provide a guide to the cellular and spatial approaches employed by the BICCN, and to accessing and using these data and extensive resources, including the BRAIN Cell Data Center (BCDC), which serves to manage and integrate data across the ecosystem. We illustrate the power of the BICCN data ecosystem through vignettes highlighting several BICCN analysis and visualization tools. Finally, we present emerging standards that have been developed or adopted toward Findable, Accessible, Interoperable, and Reusable (FAIR) neuroscience. The combined BICCN ecosystem provides a comprehensive resource for the exploration and analysis of cell types in the brain.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2021

Water Microgrids: A Primer for Facility Managers

A water microgrid is similar in concept to an energy microgrid, which the U.S. Department of Energy defines as “a local energy grid with control capability, which means it can disconnect from the traditional grid and operate autonomously.” Similarly, a water microgrid is a local water system that supplies, treats, and distributes water, with the primary objective to meet mission critical water demands during a disruption of the primary supply. A water microgrid has the capability to operate independently of an existing primary water system and includes a layer of sensing capability that provides the necessary monitoring and controls to operate the water microgrid. A water microgrid may offer a viable solution for a site to address resilience gaps identified through the resilience planning process. For example, a site may not have adequate and redundant water supply to meet mission critical demands with vulnerabilities in the operating systems. A water microgrid provides the ability to island the water system from the primary water supply to satisfy water demand requirements throughout an outage or disruption.

42 ENGINEERING↗
DOE OSTI2023

An Inventory of AI-ready Benchmark Data for US Fires, Heatwaves, and Droughts

Extreme weather events, including fires, heatwaves, and droughts, have significant impacts on earth, environmental, and energy systems. Mechanistic and predictive understanding, as well as probabilistic risk assessment of these extreme weather events, are crucial for detecting, planning for, and responding to these extremes. Records of extreme weather events provide an important data source for understanding present and future extremes, but the existing data needs preprocessing before it can be used for analysis. Moreover, there are many nonstandard metrics defining the levels of severity or impacts of extremes. In this study, we compile a comprehensive benchmark data inventory of extreme weather events, including fires, heatwaves, and droughts. The dataset covers the period from 2001 to 2020 with a daily temporal resolution and a spatial resolution of 0.5°×0.5° (~55km×55km) over the continental United States (CONUS), and a spatial resolution of 1km × 1km over the Pacific Northwest (PNW) region, together with the co-located and relevant meteorological variables. By exploring and summarizing the spatial and temporal patterns of these extremes in various forms of marginal, conditional, and joint probability distributions, we gain a better understanding of the characteristics of climate extremes. The resulting AI/ML-ready data products can be readily applied to ML-based research, fostering and encouraging AI/ML research in the field of extreme weather. This study can contribute significantly to the advancement of extreme weather research, aiding researchers, policymakers, and practitioners in developing improved preparedness and response strategies to protect communities and ecosystems from the adverse impacts of extreme weather events. Usage Notes We presented a long term (2001-2020) and comprehensive data inventory of historical extreme events with daily temporal resolution covering the separate spatial extents of CONUS (0.5°×0.5°) and PNW(1km×1km) for various applications and studies. The dataset with 0.5°×0.5° resolution for CONUS can be used to help build more accurate climate models for the entire CONUS, which can help in understanding long-term climate trends, including changes in the frequency and intensity of extreme events, predicting future extreme events as well as understanding the implications of extreme events on society and the environment. The data can also be applied for risk accessment of the extremes. For example, ML/AI models can be developed to predict wildfire risk or forecast HWs by analyzing historical weather data, and past fires or heateave , allowing for early warnings and risk mitigation strategies. Using this dataset, AI-driven risk assessment models can also be built to identify vulnerable energy and utilities infrastructure, imrpove grid resilience and suggest adaptations to withstand extreme weather events. The high-resolution 1km×1km dataset ove PNW are advantageous for real-time, localized and detailed applications. It can enhance the accuracy of early warning systems for extreme weather events, helping authorities and communities prepare for and respond to disasters more effectively. For example, ML models can be developed to provide localized HW predictions for specific neighborhoods or cities, enabling residents and local emergency services to take targeted actions; the assessment of drought severity in specific communities or watersheds within the PNW can help local authorities manage water resources more effectively.

Lin, Xinming↗
DOE OSTI2024

Pinus ponderosa physiology data from the 2023 girdling manipulation field experiment at Game Ridge, Missoula County, Montana, USA

This dataset contains physiology data on Pinus ponderosa saplings, including: leaf water potential (MPa, megapascals), leaf osmotic potential (MPa, megapascals), leaf pressure potential (MPa, megapascals), leaf relative water content (% saturated mass), as well as soluble sugars (% dry mass),starch (% dry mass), and total nonstructural carbohydrates (% dry mass) found in branch phloem and xylem. Data files and data dictionary(ies) are uploaded as .csv files and .xlsx files. The Users Guide is a .pdf file. Location data can be found in the Google Earth file GameRidge_SitePlotCoordinates.kmz.kml included here. These datasets were collected for Plant Carbohydrate Depletion, Mycorrhizal Networks, and Vulnerability to Drought: An Experimental Test in the Field. This experiment examined the interdependency between plant hydraulics and carbohydrate availability and sought to develop ways to incorporate interactions with below ground symbiotic organisms to better model and quantify forest response to drought.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2024

Mapping Support for Targeted Critical Minerals Exploration and Extraction

The United States’ dependency on imported minerals poses significant risks to economic stability and national security due to potential supply disruptions. Recognizing the strategic importance of critical minerals, the Department of Energy (DOE) emphasizes the need for a secure and resilient supply chain to support emissions reduction, technology development, and capitalization on clean energy opportunities. The DOE’s Office of Manufacturing and Energy Supply Chains (MESC), in collaboration with the Office of Policy (OP), addresses these vulnerabilities by focusing on upstream domestic critical minerals production, balancing extraction with social and environmental goals, including conservation, environmental justice, and respect for Tribal sovereignty. This report showcases a collaborative effort involving Idaho National Laboratory (INL), Argonne National Laboratory (Argonne), National Renewable Energy Laboratory (NREL), and the U.S. Geological Survey (USGS) to map mineral development potential along with key social and environmental datasets. A geographical information system (GIS)-based web map application was developed as a preliminary tool for environmental analysis, integrating 158 geospatial data layers such as critical habitat, land ownership, economic indicators, and environmental concerns. Data were sourced from agencies like the Bureau of Land Management (BLM) and USGS and processed using GIS technology to enhance visualization and analysis. The proposed analysis framework categorizes areas into high, mid, and low concern based on withdrawn lands, special status species, the Economic Development Capacity Index (EDCI) Mining Composite Index, and the Climate and Economic Justice Screening Tool (CEJST). While the application provides broad visualizations, it is not a substitute for detailed environmental reviews required under the National Environmental Policy Act (NEPA). Users must conduct further analyses and engage with tribal entities and other stakeholders for comprehensive planning. A case study of the Idaho Cobalt Belt (ICB) in Lemhi County, Idaho, has been provided in the report to illustrate the tool's practical use. This report introduces a GIS application and framework to support stakeholders in identifying and prioritizing areas for critical mineral exploration, promoting secure supply chains, and advancing the nation's energy independence through responsible resource stewardship.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2026

Modeling Framework for Data Center

This chapter highlights the critical need for advanced modeling of data centers due to their rapidly increasing energy consumption and impact on grid reliability. Driven by the demand for AI applications, data centers are projected to consume a significant portion of US energy by 2028, putting stress on an already challenged power grid. The chapter emphasizes the importance of "fast" time-scale models to understand the dynamic interactions between data centers and the grid, especially given the rapid power fluctuations of AI workloads. It outlines a modeling framework that includes both offline and real-time EMT domain simulations, detailing the necessary representations for various components like utility interfaces, transformers, IT loads, UPS, cooling loads, Battery Energy Storage Systems (BESS), generators, protection systems, and higher-level control systems. While standard simulation tools like PSCAD offer basic models, custom development is often required to accurately capture the unique and fast-changing behaviors of modern data centers. The chapter also discusses key metrics and test cases for validating these models, focusing on transient load responses, protection relay coordination, and demand flexibility. Finally, it addresses the challenges of modeling large-scale data centers, such as computational complexity and the trade-off between model fidelity and practicality, suggesting hybrid modeling approaches as a solution. The overarching goal is to create a robust framework that helps assess data center impacts on grid stability, identify vulnerabilities, and inform the development of standards for reliable integration of these large loads into the bulk power system.

25 ENERGY STORAGE↗
DOE OSTI2021

Bridge Seismic Screening Tool (BSST), Version 2.0

The Regional Resiliency Assessment Program (RRAP) is a cooperative assessment of specific critical infrastructure within a designated geographic area and a regional analysis of the surrounding infrastructure that addresses a range of infrastructure resilience issues that could have regionally and nationally significant consequences. In 2018, DHS’s Cybersecurity and Infrastructure Security Agency (CISA) sponsored the Oregon Transportation Systems RRAP project in coordination with the Office of the Governor (under the oversight of the state resilience officer), the Oregon Office of Emergency Management (OEM), the Oregon Department of Transportation (ODOT), and other regional stakeholders (CISA 2021). This project focuses on assessing the impacts of a Cascadia Subduction Zone (CSZ) earthquake on state transportation systems and, in particular, how those impacts may affect the ability of emergency response efforts to move supplies into the region. The intended outcome of this analysis is the prioritization of transportation routes and modes for additional planning, investment, hardening, or other activities to enhance their resilience—and therefore, to enhance their ability to support response and recovery efforts following a CSZ earthquake. An important part of this transportation system-level assessment has been to assess the seismic vulnerability of the state highway system. In doing so, the RRAP project team used the Bridge Seismic Screening Tool (BSST) to assess, at a system-level, the potential impacts that a CSZ earthquake could have on state highway bridges (Bergerson et al. 2019).1 Argonne National Laboratory (Argonne), in collaboration with the Washington State Department of Transportation (WSDOT), originally developed the BSST as part of the 2017 Washington State Transportation Systems RRAP project, a sister project to the 2018 Oregon Transportation Systems RRAP project. Argonne updated the BSST during this more recent project in Oregon based on feedback from stakeholders and subject matter experts (SMEs) on the original version of the tool. The first step in the BSST is to assess the seismic vulnerability of roadway bridges following a CSZ earthquake to determine a projected or potential damage state. Damage states then help determine approximate reopening times for bridge crossings.2 This document provides details on the BSST methodology, the implementation of that tool to analyze the projected damage incurred in a CSZ earthquake scenario, and the determination of corresponding reopening times of interstate, state highway, and local bridges following such an event.

58 GEOSCIENCES↗
DOE OSTI2025

Advancing Urban Water Resilience: Coproducing Knowledge through Civic–Academic Global Partnerships on Water and Climate

As extreme weather events become more pronounced, the vulnerabilities associated with the urban water supply and wastewater systems in megacities are intensified in multiple interconnected dimensions. These multifaceted water challenges can benefit from enhanced cross-sectoral collaboration and sharing of critical knowledge, which are essential for sustainable and adaptive water governance frameworks. In this context, the Megacity Alliance for Water and Climate (MAWAC)–Europe and North America Region (ENAR) Working Group convened a workshop in March 2023, followed by a subsequent workshop in London, United Kingdom, from 11 to 13 September 2024. These workshops aimed to investigate and devise solutions for the cascading hazards with water systems. The solutions examined various aspects focused on climate adaptation and mitigation, stormwater management, and the governance of water and wastewater systems. Additionally, discussions highlighted the importance of community engagement, economic considerations, equity, and effective communication in addressing these pressing challenges. Over the course of 3 days, experts from academia, government agencies, and industry engaged in meaningful discussions on digital modeling for integrated water management, climate-informed urban planning, and public–private–academic partnerships (Fig. 1). Case studies from cities such as New York, Los Angeles, London, Paris, and Chicago highlighted innovative governance strategies for managing water and wastewater systems, promoting water reuse, planning infrastructure, and fostering stakeholder-driven and stakeholder-informed adaptation. The workshop participants emphasized the need for data-driven decision-making, scalable governance models, and knowledge-sharing networks to enhance urban water governance for sustainability and resilience. This workshop report presents the key takeaways from the 3-day convening, providing a roadmap for integrating scientific research, policy frameworks, and emerging technologies to address water challenges faced by megacities.

Hydrologic models↗
DOE OSTI2025

Accelerating Resilience of the Community through Holistic Engagement and use of Renewables (ARCHER) Planning Framework

The primary objective of the Accelerating Resilience of the Community through Holistic Engagement and Use of Renewables (ARCHER) initiative was to identify and incorporate the unique variations in energy burden, social vulnerability, living conditions, and access to essential services that differ across communities. By accounting for these localized factors—down to the neighborhood level—the project supports more targeted and effective investments in community resilience. The framework seeks to establish practical planning guidance, methods, and performance measures for community energy resilience, integrate community-level and electric utility system resilience planning, and assess its effectiveness through comparison with conventional and operational planning approaches. A key component of the project was its data exchange platform, which is used to evaluate and demonstrate the tools, methodologies, and planning approaches developed through ARCHER. This open-source platform enables developers and vendors of distribution and outage management systems to build upon the research by incorporating its concepts into their own tools and workflows. This capability is enabled by the transparent availability of data, functional requirements, and the underlying information model. The project yielded several important insights. First, meaningful engagement with communities is essential to achieving comprehensive resilience outcomes. Second, resilience planning is most effective when electric grid considerations and broader community needs are addressed in a coordinated manner. Third, the use of platforms that allow for real-time input from communities can enhance utility responsiveness during restoration activities. Fourth, a structured and systematic planning approach can successfully translate ARCHER concepts into practice. Fifth, the development of an integrated metric that reflects both grid performance and community impacts provides a more holistic basis for evaluating resilience. Finally, incorporating community engagement and equity considerations into grid operations is critical, particularly during severe weather events that result in extended outages.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Autonomous Tools for Attack Surface Reduction (Final Report)

The electric power grid is a complex critical infrastructure that forms the lifeline of modern society, and its secure and reliable operation is of paramount importance to national security and economic wellbeing. However, recent findings documented in authoritative sources indicate the threat of cyber-based attacks growing in numbers and sophistication. However, securing the grid against stealthy cyberattacks is a challenging task due to legacy nature of the infrastructure coupled with dynamic nature of threat landscape and ever-growing sophistication of the adversaries. Additionally, the grid’s attack surface continues to grow with the increased dependence on digital communications and control that now extends to each consumer through smart meters and distributed energy resources. Unfortunately, this expansive surface increases the grid’s vulnerability and further exposes critical control systems in both substations and control centers. To respond to this emerging need, we had successfully assembled an interdisciplinary team with academic- industry partnership to successfully conduct research, development, evaluation, demonstration, and commercialization of attack surface reduction tools, whose goal was to significantly reduce the cyber attack surface in the North American power grid. Our proposed project was a synergistic collaborative effort leveraging the synergistic expertise of the team members across power systems, cyber security and CPS security, testbeds, field deployments and demonstration, and successful commercialization. The following are the specific tasks that have been successfully completed two phases (2016-2020). Phase I: Task 1: Developed and implemented a robust Project Management and Data Management Plan, coupled with a well thought out Risk Mitigation Plan. Task 2.1: Developed a comprehensive framework that continually assesses and autonomously reduces the attack surface for the power grid control environment spanning across substations, control center and the SCADA network to significantly reduce the risks of cyber attacks. Task 2.2: Developed attack surface analysis techniques, metrics, and tools that assess the attack surface at multiple levels including the control center, substations, and the SCADA network. Task 2.3: Developed attack surface reduction techniques and tools that dynamically reduce attack surface and hence increase attacker’s cost without interfering in the critical functions of the system. Task 2.4: Prototyped, implemented, and quantitatively evaluated/validated the techniques and tools on a realistic industrial CPS security testbed environment by leveraging the unique resources of the team. Task 3: Developed Commercialization plan to transition the developed tools into power system industry stakeholders for a broader adoption by leveraging the expertise of our industrial members. Phase II: Task 4: Successfully completed field demonstration, verification, and evaluation of the effectiveness of the attack surface analysis and reduction techniques on a realistic utility testbed environment. This also involved the development of realistic scenarios, sound metrics, data sets, evaluation criteria, and documentation. Technology integration & Field demonstration: The project had significantly advanced the state-of-the-art research and practice in improving the cybersecurity of our nation’s power grid infrastructure against cyber threats. In particular, the proposed, designed, and deployed attack surface analysis and reduction algorithms and tools have contributed to significantly reducing the exposure and risk of the devices, substations, and the integrated SCADA/EMS/ DMS grid environment to cyber threat. Strong demonstration and evaluation techniques have verified the feasibility of the developed techniques on realistic cyber-physical testbeds and utility partner's real grid environment, and collaborative research and evaluation of attack surface reduction techniques (for wide-are monitoring and control) within a vendor (GE) EMS platform. The Attack Host Analyzer (AHA) tool that was developed through this project was made available through GitHub.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Modeling nuclear waste disposal in crystalline rocks at the Forsmark and Olkiluoto repository sites – Evaluation of potential thermal–mechanical damage to repository excavations

We conduct coupled thermo-hydro-mechanical modeling of a KBS-3V repository design in crystalline rocks, using data and conditions from the Forsmark in Olkiluoto repository sites in Sweden and Finland. The study focuses on repository performance related to the impact of thermal and hydraulic evolution on the potential for thermal–mechanical damage to underground repository excavations. For the designs and conditions considered at the Forsmark and Olkiluoto repository sites, the simulations show a peak temperature well under the adopted performance target of a 100°C maximum temperature, whereas there is still a high potential for thermal–mechanical damage to the KBS-3V waste deposition holes. The thermal–mechanical damage is much more likely if rock permeability is so low that it delays saturation and swelling of bentonite-clay-based backfill beyond the time for the thermal–mechanical peak, which occurs 50 to 100 years after nuclear waste deposition. We also found that sidewalls of the KBS-3V emplacement tunnels are vulnerable to tensile fracturing due to the combined effect of thermal stressing and backfill swelling. The study highlights a strong interaction between bentonite-based backfill and host rock through capillary suction along with induced rock desaturation. A careful design and selection of the bentonite-clay-based backfill materials for KBS-3V tunnels and deposition holes can facilitate a timely saturation and backfill swelling that in turn can minimize thermal–mechanical damage.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2020

Recent California tree mortality portends future increase in drought-driven forest die-off

Vegetation tolerance to drought depends on an array of site-specific environmental and plant physiological factors. This tolerance is poorly understood for many forest types despite its importance for predicting and managing vegetation stress. We analyzed the relationships between precipitation variability and forest die-off in California's Sierra Nevada and introduce a new measure of drought tolerance that emphasizes plant access to subsurface moisture buffers. We applied this metric to California's severe 2012-2015 drought, and show that it predicted the patterns of tree mortality. We then examined future climate scenarios, and found that the probability of droughts that lead to widespread die-off increases threefold by the end of the 21st century. Our analysis shows that tree mortality in the Sierra Nevada will likely accelerate in the coming decades and that forests in the Central and Northern Sierra Nevada that largely escaped mortality in 2012-2015 are vulnerable to die-off.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Reducing uncertainty of high-latitude ecosystem models through identification of key parameters

Abstract Climate change is having significant impacts on Earth’s ecosystems and carbon budgets, and in the Arctic may drive a shift from an historic carbon sink to a source. Large uncertainties in terrestrial biosphere models (TBMs) used to forecast Arctic changes demonstrate the challenges of determining the timing and extent of this possible switch. This spread in model predictions can limit the ability of TBMs to guide management and policy decisions. One of the most influential sources of model uncertainty is model parameterization. Parameter uncertainty results in part from a mismatch between available data in databases and model needs. We identify that mismatch for three TBMs, DVM-DOS-TEM, SIPNET and ED2, and four databases with information on Arctic and boreal above- and belowground traits that may be applied to model parametrization. However, focusing solely on such data gaps can introduce biases towards simple models and ignores structural model uncertainty, another main source for model uncertainty. Therefore, we develop a causal loop diagram (CLD) of the Arctic and boreal ecosystem that includes unquantified, and thus unmodeled, processes. We map model parameters to processes in the CLD and assess parameter vulnerability via the internal network structure. One important substructure, feed forward loops (FFLs), describe processes that are linked both directly and indirectly. When the model parameters are data-informed, these indirect processes might be implicitly included in the model, but if not, they have the potential to introduce significant model uncertainty. We find that the parameters describing the impact of local temperature on microbial activity are associated with a particularly high number of FFLs but are not constrained well by existing data. By employing ecological models of varying complexity, databases, and network methods, we identify the key parameters responsible for limited model accuracy. They should be prioritized for future data sampling to reduce model uncertainty.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2025

Systemic Drivers of Electric-Grid-Caused Catastrophic Wildfires: Implications for Resilience in the United States

Wildfires are projected to increase in severity and frequency due to climate change, and the electric grid is both a cause of wildfires and is vulnerable to wildfires. Equipment from the electric grid accounts for 10% of fires burned in California and 3% of fires nationally. Recent catastrophic wildfires, such as the Lahaina Fire, Camp Fire, Marshall Fire, and Smokehouse Creek fires, were all started by electrical equipment and show how devastating these events can be because they threaten lives and structures. Vegetation structure, weather and winds, climate and vegetation response, land use, and human activities all impact the likelihood of severe wildfires. We explore the relationship between the built environment, electric grid infrastructure specifically, and its role in causing catastrophic wildfires to find lessons learned for increasing resilience. Electric grid utility companies currently employ multiple methods to mitigate fire, including (1) early detection, (2) grid hardening, (3) vegetation management, and (4) pre-emptive shutoffs. Utility companies need to consider the conditions for wildfire and the impact that each mitigation strategy has on drivers of wildfire behavior, as a single solution will not be adequate. Utility companies need to work with stakeholders to develop a holistic strategy to reduce ignition likelihood and spread likelihood to reduce catastrophic wildfires and improve resiliency.

Eagleston, Holly (ORCID:0000000178175116)↗
DOE OSTI2021

Evaluation of Contact Resistance and Fin Effectiveness of Enhanced, Brazed "Dogbone" Fin and Serpentine Tube Heat Exchangers for Air Conditioning and Heat Pump Applications

The energy consumption due to air conditioning is projected to increase by 1.3 and 4.5 times by 2050 compared to 2010 for members and non-members of the Organization of Economic Coordination and Development (OECD), respectively. Greenhouse Gas (GHG) emissions must be carefully managed to minimize their hazardous contribution to climate change. Air conditioners (AC) and heat pumps (HP) contribute with direct GHG emissions through systemic refrigerant leakage, which consequently degrades the system’s performance and therefore increases its indirect GHG emissions as well. To address this issue, the goals of new systems include minimizing leakage risk, using low global warming potential (GWP) refrigerants such as natural refrigerants, and increasing system efficiency. This paper presents part of the efforts in the development of a brazed “dogbone” fin to continuous serpentine tube heat exchanger (HX) for AC/HP applications. The main advantages of such technology are: 1) The potential to reduce 90% or more of the tube return-bends brazed joints compared to conventional tube-fin heat exchangers, thus minimizing leakage vulnerability, enabling the use of natural refrigerants like Propane and Ammonia that carry other concerning risks of flammability and toxicity ; and 2) The brazed fin to the tube joints should yield very low contact resistance. In order to quantify and estimate the impacts of contact resistance and fin effectiveness, a numerical-experimental study is investigated. The novel enhanced brazed “dog-bone” fin is compared to an equivalent pressure expanded fin. The results showed that the expanded fin has consistently greater effective heat transfer but greater contact resistance as well. Furthermore, the brazed fins have up to 20% lower pressure drop. The trade-off comparison shows that the thermal-hydraulic ratio between the two fins is equivalent for air velocities below 2m/s; for greater velocities, however, the expanded fin is favored since it has less fin efficiency penalty. For HVAC&R applications, the air velocities are typically low which makes the proposed technology competitive and a viable option in the pursuit of refrigerant leakage reduction.

30 DIRECT ENERGY CONVERSION↗
DOE OSTI2022

EFCOG Best Practice HPI for Knowledge Workers ISM-HPI-22-02

This document is a collection of these best practices as determined by team members. This best practice attempts to: Realize opportunities to break the myth where people believe that HPI does not apply to them as they perform no physical work. Recommend options to create an environment that promotes intellectual collaboration and trust, enabling candor and vulnerability. Explain how errors manifest differently from the same human fallibility. Knowledge workers (KW) have errors that take different perspectives to find and mitigate the unique manifestation of these conditions. Help KW identify the critical steps (or risk important steps) in their processes. Reduce risk/consequence from KW errors (limit latent errors as well as finding latent conditions), building resiliency into KW tasks. Mitigation strategies may be different.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2023

Disrupting EV Charging Sessions and Gaining Remote Code Execution with DoS, MITM, and Code Injection Exploits using OCPP 1.6

Open Charge Point Protocol (OCPP) 1.6 is widely used in the electric vehicle (EV) charging industry to communicate between Charging System Management Services (CSMSs) and Electric Vehicle Supply Equipment (EVSE). Unlike OCPP 2.0.1, OCPP 1.6 uses unencrypted websocket communications to exchange information between EVSE devices and an onpremise or cloud-based CSMS. In this work, we demonstrate two machine-in-the-middle (MITM) attacks on OCPP sessions to terminate charging sessions and gain root access to the EVSE equipment via remote code execution (RCE). Second, we demonstrate a malicious firmware update with a code injection payload to compromise an EVSE. Lastly, we demonstrate two methods to prevent availability of the EVSE or CSMS. One of these, originally reported by SaiFlow, prevents traffic to legitimate EVSE equipment using a DoS-like attack on CSMSs by repeatedly connecting and authenticating several CPs with the same identities as the legitimate CP. These vulnerabilities were demonstrated with proof-of-concept exploits in a virtualized Cyber Range at Wright State University and/or with a 350 kW Direct Current Fast Charger (DCFC) at Idaho National Laboratory. The team found that OCPP 1.6 could be protected from these attacks by adding secure shell (SSH) tunnels to the protocol, if upgrading to OCPP 2.0.1 was not an option. Index Terms—Electric vehicle charging, cybersecurity, OCPP, cyberattack, cyber-resilience. INSPEC Accession Number: 23981565

99 GENERAL AND MISCELLANEOUS↗