Search NASA⌕ Search

SEARCH · Search NASA

Results for “Infrastructure vulnerability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
DOE OSTI2026

Assessing Energy Infrastructure Devices for Vulnerabilities

Industrial control systems prove to be vital to the health and security of the nation in our critical infrastructure. Critical infrastructure includes the most foundational systems to support modern civilization which includes water and wastewater systems, communications, and the electricity we use to name a few sectors. However, these devices' overall composition remains largely unknown and are untested from a cyber security perspective. As part of the Cyber Testing for Resilient Industrial Control Systems (CyTRICS) program, I analyzed one such energy infrastructure device to better understand how it functions, what hardware and software components are present within it, and assess it for security vulnerabilities. To achieve this, I reverse engineered binary files using Ghidra to understand system functionality and learned more about how to collaborate with other researchers on a shared Ghidra project. I learned more about how web sockets function and how to interact with them through Python to test if they are secure or not. This work led me to assess possible vulnerabilities in this device and provide a better understanding of its composition and function, which are essential to INL's mission of securing our nation's energy infrastructure.

99 - GENERAL AND MISCELLANEOUS↗
DOE OSTI2026

Hardware Aware Mitigation of Timing Side-Channel Vulnerabilities in Critical Infrastructure Software

Program runtime/timing attacks exploit variations in a program’s execution times to extract sensitive information from the program (e.g. encryption keys, sensitive variable data, intellectual property). State-of-the-art solutions to runtime sidechannel attacks attempt to balance the execution time of the sensitive code for different control flow paths to eliminate the timing leakage. However, during the mitigation process, most techniques do not consider the underlying hardware/device on which the target program is supposed to run on. This can lead to over-fixing (unnecessary extra operations), under-fixing (not solving the imbalance properly), and even failures. We propose DISARM, a joint hardware-software methodology (unlike any existing solution) for mitigating runtime side-channel vulnerabilities that utilizes timing values from real embedded devices to generate targeted software fixes. We implement DISARM to support C/C++/Java source codes and validate it across 22 standard benchmarks. DISARM outperforms state-of-the-art solutions such as PENDULUM and DifFuzzAR in terms of execution time overhead (up to −46%), code size overhead (up to −10%), and correctness (no failures) on five different embedded/edge devices.

Suha, Tasneem [University of Maine]↗
DOE OSTI2026

Strategic Energy Plan: City of Key West, Florida

This Strategic Energy Plan for the city of Key West, Florida—developed through the U.S. Department of Energy’s Energy Technology Innovation Partnership Project (ETIPP)—outlines a comprehensive strategy to advance the city’s energy vision: to improve energy efficiency and independence using local energy resources to foster long-term resilience. To guide this effort, the plan is structured around four focus areas: • Energy efficiency: Reduce overall energy consumption and utility costs across municipal, residential, and commercial buildings. • Local energy generation: Increase the share of energy produced from local sources to enhance energy independence. • Resilience: Strengthen critical infrastructure and community preparedness for flooding, hurricanes, and other natural weather hazards. • Electric transportation: Support the addition of new electric vehicles (EVs) and develop reliable charging infrastructure to reduce reliance on imported fuels. ETIPP provides strategic energy planning, technical assistance, and direct funding to U.S. coastal, remote, and island communities to improve energy resilience. Key West was part of ETIPP’s fourth cohort. As a low-lying island community vulnerable to infrastructure damage due to natural weather hazards, Key West seeks to reduce its dependence on external energy and build long-term sustainability. The Strategic Energy Plan identifies specific challenges, sets clear goals, and proposes actionable opportunities with implementation timelines and key stakeholders. A baseline assessment reveals significant energy consumption in both city-owned and residential/commercial buildings, limited local energy generation, and an early-stage EV market with vulnerable charging infrastructure. The proposed solutions emphasize a multifaceted approach, leveraging both established and innovative technologies, while addressing financial, technical, and community engagement challenges. The baseline assessment provided a snapshot of current energy conditions in Key West, evidencing key challenges and opportunities across the city’s energy priorities. Building on the baseline assessment and extensive input from city staff, local stakeholders, and community partners, a set of targeted opportunities was identified to address Key West’s energy goals. Each was evaluated in terms of its potential benefits, key implementation steps, associated challenges and mitigation strategies, and the city departments and stakeholders best positioned to lead or support progress.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2024

Baltimore Energy & Infrastructure: Assessing Urban Heat Vulnerability in Baltimore Neighborhoods to Inform Transportation Resiliency Planning Efforts

Across the world, climate change is altering cities and their local climate systems. Following global trends of rising mean temperatures, Baltimore, Maryland is projected to experience more frequent extreme heat events. Exacerbated by Urban Heat Island (UHI) effects, residents of the city face high temperatures from limited tree canopy, highly paved and impervious surfaces, limited air flow, and high concentrations of localized emissions. Urban heat is dispersed asymmetrically, with historically marginalized populations experiencing disproportionately severe heat. Recognizing the impacts of extreme urban heat, the Maryland Transit Administration (MTA) collaborated with us, the Spring 2024 Goddard Energy and Infrastructure NASA DEVELOP team to assess urban impacts of MTA users and assets and explore opportunities to enhance resiliency planning. We evaluated the feasibility of NASA Earth observations (EOs) in visualizing heat vulnerability in Baltimore City and County. We mapped UHI and extreme heat using remote sensing observations, tailored a Heat Priority Score (HPS) to analyze heat data in tandem with socioeconomic data from American Community Survey (ACS), and utilized SOlar and LongWave Environmental Irradiance Geometry (SOLWEIG) model to estimate MTA riders’ thermal comfort. NASA EOs served to quantify the distribution and severity of extreme heat at the block group level, which was found to correlate with a lack of vegetation and presence of densely built-up surroundings. The HPS revealed that extreme heat events most negatively impact communities that exhibit social vulnerability through indicators such as age, race, and income. These findings will inform neighborhood resiliency plans for the MTA that can be incorporated into their Adaptation Resiliency Toolbox (ART).

Baltimore,↗
DOE OSTI2022

CyTRICS: Vulnerability Analysis Tailored for Critical Infrastructure

Society and modern life are dependent on critical infrastructure that is composed of expensive, special purpose devices that have long life cycles and may be in use for decades before being replaced. There are an abundance of organizations and individuals doing vulnerability analysis on a variety of systems, but what makes the Cyber Testing for Resilient Industrial Control Systems (CyTRICS) program unique and valuable is its strategic focus on high-priority critical infrastructure, close partnership with vendors, and ability to leverage bills of materials (BOMs) to identify and relate vulnerabilities to affected systems. Creating a bill of materials is a formal way of understanding and documenting the components of a system, including everything from integrated circuits to operating systems to third-party libraries. This is beneficial for connecting known vulnerabilities to affected devices, since vulnerabilities in a specific component are often not mapped to all systems that use that vulnerable component. Additionally, CyTRICS finds novel vulnerabilities through its vulnerability testing process and works closely with vendor partners to provide vulnerability reports so that affected systems can be patched in a timely manner. This presentation will describe the interrelated technical processes CyTRICS uses to create bills of materials and conduct vulnerability analysis.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

A holistic cyber-physical security protocol for authenticating the provenance and integrity of structural health monitoring imagery data

Modern infrastructure systems, such as bridges, dams, power generation stations, and buildings increasingly have an intrinsic cyber-physical nature to them. Infrastructure now commonly, includes actuators, network connections, sensors, control systems, and computational resources. It is of increasing concern that modern infrastructure is vulnerable to cyber-attacks that can damage both the cyber and physical nature of the infrastructure. To date, the physical and cyber health of infrastructure has been considered separately. However, the increasing concerns associated with the cyber-physical security of infrastructure coupled with the emergence of 5G networks made using components that are not universally considered trustworthy, and the emergence of techniques for creating deepfakes and adversarial examples suggests the time has come to begin considering cyber health and structural health with a more holistic approach. In this work, a protocol is developed for ensuring the imagery data captured by a structural health monitoring system can be unambiguously attributed to legitimate sensors associated with the structural health monitoring system. A computer vision approach based on the idea of mutual information is then presented to detect damage in an image. This work presents the protocol for authenticating the provenance of imager data and demonstrates that this protocol does not have overly adverse effects when used with the mutual information-based technique for detecting damage in the resulting imagery data.

Jung, HweeKwon↗
DOE OSTI2025

Establishing nationwide power system vulnerability index across US counties using interpretable machine learning

Power outages have become increasingly frequent, intense, and prolonged in the US due to climate change, aging electrical grids, and rising energy demand. However, largely due to the absence of granular spatiotemporal outage data, we lack data-driven evidence and analytics-based metrics to quantify power system vulnerability. This limitation has hindered the ability to effectively evaluate and address vulnerability to power outages in US communities. Here, in this work, we collected ∼179 million power outage records at 15-min intervals across 3022 US contiguous counties (96.15 % of the area) from 2014 to 2023. We developed a power system vulnerability assessment framework based on three dimensions (intensity, frequency, and duration) and applied interpretable machine learning models (XGBoost and SHAP) to compute Power System Vulnerability Index (PSVI) at the county level. Our analysis reveals a consistent increase in power system vulnerability across the US counties over the past decade. We identified 318 counties across 45 states as hotspots for high power system vulnerability, particularly in the West Coast (California and Washington), the East Coast (Florida and the Northeast area), the Great Lakes megalopolis (Chicago-Detroit metropolitan areas), and the Gulf of Mexico (Texas). Our heterogeneity analysis indicates that urban counties and those located along regional transmission boundaries tend to exhibit significantly higher vulnerability. Our results highlight the significance of the proposed PSVI for evaluating the vulnerability of communities to power outages. The findings underscore the widespread and pervasive impact of power outages across the country and offer crucial insights to support infrastructure operators, policymakers, and emergency managers in formulating policies and programs aimed at enhancing the resilience of the US power infrastructure.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Evaluation of Power Transmission Lines Hardening Scenarios Using a Machine Learning Approach

The power transmission infrastructure is vulnerable to extreme weather events, particularly hurricanes and tropical storms. A recent example is the damage caused by Hurricane Maria (H-Maria) in the archipelago of Puerto Rico in September 2017, where major failures in the transmission infrastructure led to a total blackout. Numerous studies have been conducted to examine strategies to strengthen the transmission system, including burying the power lines underground or increasing the frequency of tree trimming. However, few studies focus on the direct hardening of the transmission towers to accomplish an increase in resiliency. This machine learning-based study fills this need by analyzing three direct hardening scenarios and determining the effectiveness of these changes in the context of H-Maria. A methodology for estimating transmission tower damage is presented here in this study as well as an analysis of impact of replacing structures with a high failure rate with more resilient ones. We found the steel self-support-pole to be the best replacement option for the towers with high failure rate. Furthermore, the third hardening scenario, where all wooden poles were replaced, exhibited a maximum reduction in damaged towers in a single line of 66% while lowering the mean number of damaged towers per line by 10%.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Strengthening the Security of Operational Technology: Understanding Contemporary Bill of Materials

The evolution of cyber-physical infrastructure has made its security more challenging. The last few years have witnessed a convergence of hardware and software segments in various domains, including operational technology (OT) which is responsible for carrying out critical tasks such as monitoring and controlling power grids, nuclear plants, transportation, and emergency services. Both hardware and software encapsulate numerous open source and proprietary subcomponents, making it crucial for end-users to understand the composition of the products they are using. For example, wind turbines incorporate thousands of lines of code (software) used for the turbine's design, planning, operation, and analytics in addition to the numerous hardware subcomponents that construct it. Due to the highly complex nature of software and hardware, knowledge of the components and subcomponents is required to mitigate cyber vulnerabilities and defend against cyberattacks. There has also been a transformation from a traditional linear supply chain into a global, dynamic, diverse, and interconnected system. The digitization of the supply chain makes it easier to find and exploit vulnerabilities. Critical infrastructures (e.g., power grids, oil, natural gas, water, and wastewater) rely on OT to function, and if the OT is compromised, equipment damage and potential interruption of services could result. A significant security measure to protect OT systems from disruption is to develop a supply chain bill of materials (BoM) corresponding to the software and hardware used in OT, along with attestations amongst vendors and asset owners. A supply chain BoM is a proactive way to understand the inherent vulnerabilities in the system and mitigate them in advance of being exploited. BoMs bolster the trust placed in the digital infrastructure and enhance software supply chain security by sustaining the management of component obsolescence and compliance, along with the seclusion of unsafe segments of a specific product. Adopting BoM tools is becoming increasingly important across various government sectors, as evidenced by the recent U.S. executive order on cybersecurity (NIST 2021). This paper aims to classify BoMs based on structure, functionality, component type, and architecture. The work also discusses case studies to further highlight the benefits of BoMs. In addition, it identifies missing pieces in existing BoM implementations so that future research may identify bounds on where it could expect to make improvements and directly enable researchers to identify promising areas for exploration. Further, the authors provide valuable recommendations to tool developers, researchers, and standardizing organizations (policymakers), additionally benefitting critical infrastructure owners and government executives. This aids in paving a path for future work, thereby, providing suggestions to determine a tool for consumers that best suit their needs.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Scenario Generation for Built Environment Decision Support under Uncertainty: Case Studies of Airflow Modeling and Climate-Resilient Infrastructure System Design

When confronted with unforeseen challenges, practicing informed decision making is crucial for enhancing resilience in the built environment. While scan-to-building information modeling (BIM) is a well-established approach for creating detailed digital representations of physical assets, its application in assessing and improving infrastructure resilience remains underexplored. This study addresses this gap by proposing a novel application of scan-to-BIM, namely, scan-to-BIM-to-digital twin (S-BIM-DT) workflow. By integrating reality capture and digital twin technologies, this workflow creates continuously updated and accurate digital representations of physical assets, enabling the generation of various scenarios. Unlike traditional methods, the S BIM-DT workflow facilitates continuous model refinement, supporting informed resilience strategies. By combining these technologies into a cohesive process, the workflow facilitates decision making under uncertainty, enabling stakeholders to evaluate and respond to various scenarios effectively. We demonstrate the implementation of the S-BIM-DT workflow through two use cases that highlight its capability to enhance resilience at different scales. The first use case involves the Combined Transportation, Emergency, and Communications Center (CTECC) in Austin, Texas. BIM-enriched computational fluid dynamics (CFD) modeling simulates airflow and develops alternative scenarios for optimizing the heating, ventilation, and air conditioning (HVAC) systems. This approach enhances resilience against airborne health threats in a postCOVID context. The second use case focuses on designated areas within Beaumont, Texas, as part of the Southeast Texas Urban Integrated Field Laboratory (SETx-UIFL) research. By developing inundation maps to assess extreme weather events, this modeling aids in preparedness efforts and informs the development of climate-resilient infrastructure in vulnerable neighborhoods. Results indicate that the S-BIM-DT workflow effectively generates scenarios that enhance resilience in the built environment by facilitating informed decision making. Furthermore, this study serves as a bridge between advanced scan-to-BIM methodologies and the practical strategies needed to improve built infrastructure resilience.

Built environment↗
DOE OSTI2023

Local and utility-wide cost allocations for a more equitable wildfire-resilient distribution grid

Climate-induced extreme weather conditions make electricity infrastructure more vulnerable. They increase the risk of power-line-ignited wildfires which can, in turn, jeopardize electric power delivery. Here, leveraging machine learning, we show that lower-income communities in California not only have lower fractions of power distribution lines undergrounded, but overhead lines and poles in their neighbourhoods are also more vulnerable to wildfires. Should they bear the cost of undergrounding fire-prone lines themselves, they would have to pay a disproportionately higher cost per household. We propose a cost allocation scheme with an income threshold below which the cost is borne by utility-wide ratepayers and above which the cost is borne locally. This scheme can not only minimize the average of undergrounding costs per household as a share of income, but also homogenize such cost–income ratios across communities. Furthermore, our research demonstrates the opportunity to appropriately integrate existing policies to make electricity infrastructure affordable, equitable and reliable amidst climate change.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Quick Talk: Resilient Communities, Maryland

Groundswell, Inc., in partnership with the Maryland Energy Administration (MEA), Ayika Solutions, the National Renewable Energy Lab (NREL), and the Baltimore Office of Sustainability, is advancing a vision for resilient, community-centered energy systems in Maryland. This effort aligns with Groundswell's commitment to a clean energy economy that equitably benefits all communities, closing gaps in representation, wages, and access to wealth generation, savings, and local jobs within a diverse energy supply chain. Project Vision and Objectives The project emphasizes "energy resilience," defined as a community’s capacity to anticipate, adapt to, and swiftly recover from power disruptions through inclusive planning and technical solutions. The approach centers on Resilience Hubs—designated community facilities equipped to support residents before, during, and after power-related disruptions. These hubs offer emergency resources, coordinate communications, and deliver essential services while reducing carbon emissions, ultimately enhancing residents' quality of life. Additionally, Resilience Hubs foster social connections, support disaster preparedness, and provide spaces for community programming and everyday use. The goals of Resilient Communities Maryland include: Developing a replicable framework for community energy resilience, applicable beyond Maryland. Defining community-led indicators of social impact and resilience. Establishing equitable decision-making processes in project design and implementation. Informing MEA of practical, community-based resilience strategies to shape future state initiatives. Approach Groundswell and its partners prioritize collaborative engagement with local stakeholders, ensuring that solutions are responsive to each community's unique needs. By integrating feedback from residents, local organizations, and government entities, the team has developed a holistic model for resilience that balances immediate benefits, such as improved emergency response, with long-term gains in social equity and environmental sustainability. Key Outcomes This initiative has produced valuable resources and insights, including: A Community Energy Resilience Framework: Designed to guide other communities in establishing energy resilience strategies tailored to their specific needs. Case Studies: Documenting best practices and lessons learned from pilot projects to serve as models for future resilience efforts. Community-Driven Impact Metrics: Highlighting the positive social impacts that resilience initiatives can bring, such as improved social connectedness and local decision-making power. Recommendations for MEA: Offering evidence-based insights to inform policies and funding opportunities that support resilient energy infrastructure in vulnerable communities. Next Steps Groundswell's final report will detail findings, including the potential for scaling resilience hubs across Maryland and other regions, with a focus on equitable access and community-driven outcomes. This project underscores the importance of aligning energy resilience with social equity, reinforcing community agency, and building systems that withstand and recover from future challenges effectively and sustainably.

14 SOLAR ENERGY↗
DOE OSTI2025

RENEWABLE MARINE-SOURCE INTEGRATED HEAT PUMP FOR SPACE CONDITIONING, WATER HEATING, AND FRESH WATER HARVESTING IN REMOTE COASTAL AND ISLAND COMMUNITIES

US coastal and island communities have vulnerable energy infrastructure and high energy costs, which are exacerbated by climate change. A unique opportunity exists to use thermal energy from year-round mild temperature variations to satisfy the broad energy needs of these communities. The US Department of Energy’s Oak Ridge National Laboratory designed a small-scale marine-source integrated heat pump (MS-IHP) that, as a single appliance, combines space conditioning, dehumidification (including fresh water harvesting from humid air), and water heating for home and commercial building applications in remote coastal and island communities. The unique, innovative features of the MS-IHP offer improved efficiency and substantially reduced costs for space conditioning, dehumidification, and water heating by seamlessly integrating a heat pump, heat pump water heater, and dehumidifier by using a single compressor; optimal year-round space cooling and heating, dehumidification, water harvesting, and water heating; and improved thermal comfort and reliable operation without frosting and defrosting because of the ocean’s warm temperatures and high heat capacity. Preliminary testing was conducted by retrofitting a commercial heat pump, demonstrating an outperformed performance compared with traditional air-source heat pumps. The MS-IHP technology can help decarbonize energy systems in remote coastal and island communities.

Gao, Zhiming [ORNL] (ORCID:0000000271397995)↗
NASA NTRS2016

Climate Impact and GIS Education Using Realistic Applications of Data.gov Thematic Datasets in a Structured Lesson-Based Workbook

This project created a workbook which teaches Earth Science to undergraduate and graduate students through guided in-class activities and take-home assignments organized around climate topics which use GIS to teach key geospatial analysis techniques and cartography skills. The workbook is structured to the White House's Data.gov climate change themes, which include Coastal Flooding, Ecosystem Vulnerability, Energy Infrastructure, Arctic, Food Resilience, Human Health, Transportation, Tribal Nations, and Water. Each theme provides access to framing questions, associated data, interactive tools, and further reading (e.g. The US Climate Resilience Toolkit and National Climate Assessment). Lessons make use of the respective theme's available resources. The structured thematic approach is designed to encourage independent exploration. The goal is to teach climate concepts and concerns, GIS techniques and approaches, and effective cartographic representation and communication results; and foster a greater awareness of publicly available resources and datasets. To reach more audiences more effectively, a two level approach was used. Level 1 serves as an introductory study and relies on only freely available interactive tools to reach audiences with fewer resources and less familiarity. Level 2 presents a more advanced case study, and focuses on supporting common commercially available tool use and real-world analysis techniques.

Satellite Imagery↗
DOE OSTI2024

Anomaly Detection and Mitigation for Dynamic Frequency Regulation in Hydropower-Battery Systems: Preprint

Hydropower operators and energy storage providers are increasingly interested in participating in frequency regulation services, driven by the incentives offered by independent system operators, such as the Pennsylvania-New Jersey-Maryland Interconnection (PJM), in a competitive electricity market. This transition, however, unfolds against the backdrop of a modernizing and rapidly digitizing power grid, exposing the integrated legacy infrastructure and vulnerable communication networks to a multitude of cybersecurity threats. These evolving threats not only endanger grid operations but also have the potential to trigger cascading disruptions across the broader grid network and influence regulation markets. This work presents an approach for developing an anomaly detection and mitigation system to address cybersecurity challenges during the participation of a hydropower-integrated battery energy storage system (BESS) in a frequency regulation market. The applied anomaly detector utilizes machine learning algorithms to provide detailed classification of cyber-physical events and provide a comprehensive situation awareness to grid operators. Later, the applied mitigation system triggers predefined corrective actions to minimize the impact of data integrity attacks on the regulation market and system stability. We evaluated the proposed approach on a fully active BESS topology using the slow regulation signal (Reg A) coming from the PJM market. Our simulation results reveal that the proposed approach performs well in detecting data integrity attacks within the allocated time frame and also minimizes the system's instability and economic loss during the participation of hydropower and BESS in the regulation market.

battery energy storage system↗
DOE OSTI2024

Commonwealth of the Northern Mariana Islands: Developing a Resilient Power System

The Commonwealth of the Northern Mariana Islands (CNMI) is a chain of 14 islands located in the western Pacifc ocean, roughly 6,000 miles west of the U.S. mainland and 2,000 miles east of China. The economy in CNMI is highly dependent on tourism. CNMI relies on imported petroleum products for both electricity generation and transportation and is consequently sensitive to fluctuations in market prices for fuel. CNMI's aging electricity infrastructure and vulnerability to natural disasters present major challenges and emphasize the territory's need for a more resilient power system.

CNMI↗
DOE OSTI2024

Interdisciplinary Approaches to Cyber-vulnerability Impact Assessment for Energy Critical Infrastructure

As energy infrastructure becomes more interconnected, understanding cybersecurity risks to production systems requires integrating operational and computer security knowledge. We interviewed 18 experts working in the field of energy critical infrastructure to compare what information they find necessary to assess the impact of computer vulnerabilities on energy operational technology. These experts came from two groups: 1) computer security experts and 2) energy sector operations experts. We find that both groups responded similarly for general categories of information and displayed knowledge about both domains, perhaps due to their interdisciplinary work at the same organization. Yet, we found notable differences in the details of their responses and in their stated perceptions of each group’s approaches to impact assessment. Their suggestions for collaboration across domains highlighted how these two groups can work together to help each other secure the energy grid. Our findings inform the development of interdisciplinary security approaches in critical-infrastructure contexts.

97 MATHEMATICS AND COMPUTING↗