Search NASA⌕ Search

SEARCH · Search NASA

Results for “Risk assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

Airport Risk Assessment Model (ARAM)

The Airport Risk Assessment Model (ARAM) model automatically determines the optimal allocation of limited security resources to minimize total risk to the airport. At the same time, the model adds an element of randomness to the, reducing the predictability of asset schedules and further increasing countermeasure effectiveness.

Brigantic, Robert↗

Dynamic risk assessment for geologic CO 2 sequestration

At a geologic CO 2 sequestration (GCS) site, geologic uncertainty usually leads to large uncertainty in the predictions of properties that influence metrics for leakage risk assessment, such as CO 2 saturations and pressures in potentially leaky wellbores, CO 2 /brine leakage rates, and leakage consequences such as changes in drinking water quality in groundwater aquifers. The large uncertainty in these risk-related system properties and risk metrics can lead to over-conservative risk management decisions to ensure safe operations of GCS sites. The objective of this work is to develop a novel approach based on dynamic risk assessment to effectively reduce the uncertainty in the predicted risk-related system properties and risk metrics. We demonstrate our framework for dynamic risk assessment on two case studies: a 3D synthetic example and a synthetic field example based on the Rock Springs Uplift (RSU) storage site in Wyoming, USA. Results show that the U.S. National Risk Assessment Partnership’s Open Source Integrated Assessment Model (NRAP-Open-IAM) coupled with a conformance evaluation can be used to effectively quantify and reduce the uncertainty in the predictions of risk-related system properties and risk metrics in GCS.

58 GEOSCIENCES↗

Integrating risk assessment methods for carbon storage: A case study for the quest carbon capture and storage facility

This paper documents how tools developed by the National Risk Assessment Partnership (NRAP) complement the Bowtie risk assessment approach through the demonstration of a risk-based Area of Review (AoR) determination for the Quest Carbon Capture and Storage (CCS) facility near Edmonton, Alberta with the NRAP Open-Source Integrated Assessment Model (NRAP Open-IAM). The Bowtie risk assessment for the Quest CCS site was developed by Shell Canada Ltd., who operates the asset on behalf of the Athabasca Oil Sand Project — a joint venture, owned by Canadian Natural Resources Ltd, Chevron Canada and Shell Canada Ltd. The Quest Bowtie treats site risk comprehensively – considering a large set of technical and project risks (e.g., operational risks, above ground infrastructure, public perception, etc.). NRAP tools, methods, and analyses are focused on quantitative assessment of subsurface technical risks. NRAP-Open-IAM was used to evaluate potential groundwater impacts at the Quest site, i.e., a sufficient change above background groundwater quality levels to be measurable, should CO 2 and/or brine leak from the reservoir via a faulty and/or compromised wellbore. Our results show there is a low potential for groundwater impact and support a further reduction (from ~460 to 100 km 2 ) to the established AoR for the Quest site. Integrating both approaches early in the site characterization period could significantly benefit commercial-scale projects by drastically reducing the region over which leakage risks (e.g., legacy wells) need to be evaluated, i.e., the AoR. This is especially true for brownfield sites, which could contain hundreds to thousands of legacy wells. Further, basing monitoring network design on those regions where impacts are most likely to occur has the potential to facilitate more efficient deployment of monitoring technologies and improve the likelihood of detecting a leak should one occur.

58 GEOSCIENCES↗

An Integrated Framework for Risk Assessment of Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants: Methodology Refinement and Exploration

This report documents activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2023 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective, and secure DI&C technologies for digital upgrades/designs. A risk assessment-informed framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk informed capability to quantitatively estimate the safety margin obtained from plant modernization, especially for safety-related DI&C systems, (2) support and supplement existing risk informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of safety-related DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals, the LWRS-developed framework provides a means to address relevant technical issues by: (1) defining a risk informed analysis process for DI&C upgrade that integrates hazard analysis, reliability analysis, and consequence analysis, (2) applying risk informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development and deployment of advanced DI&C technologies in nuclear power plants (NPPs). Adding diversity within a system or components is the primary means to eliminate and mitigate CCFs, but diversity also increases system complexity and may not address all sources of systematic failures. Optimization of diversity and redundancy applications for the safety-critical DI&C systems remains a challenge. To deal with the technical issues in addressing potential software CCFs in safety-related DI&C systems of NPPs and supporting relevant design optimization, the proposed framework provides: (a) A best-estimate, risk informed capability to address new technical digital issues quantitatively, focusing on software CCFs in safety-related DI&C systems of NPPs; (b) A common and a modularized platform for DI&C designers, software developers, cybersecurity analysts, and plant engineers to predict and prevent risk in the early design stage of DI&C systems; (c) Technical bases and risk informed insights to assist users address the risk informed alternatives for evaluation of CCFs in safety-related DI&C systems of NPPs; and (d) A risk informed tool that offers a capability of design architecture evaluation of various DI&C systems to support system design decisions in diversity and redundancy applications. The research and development efforts of this project in FY 2023 are focused on refining current methods on software CCF modeling and estimation and exploring additional innovative approaches to risk assessment of DI&C systems to enable a more comprehensive and complete assessment of various safety-related DI&C design architectures. The primary audience of this report are DI&C designers, engineers, and probabilistic risk assessment (PRA) practitioners. This includes stakeholders, such as the nuclear utilities and regulators who consider the deployment and upgrade of DI&C systems, DI&C software developers and reviewers, and cybersecurity specialists. It should be noted that all the analyses are performed for the demonstration of the methodology, not for the evaluation of an actual digital control system. Results are obtained based on limited design information and testing data.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Quantitative Risk Assessment for Fuel Cell Electric Bus Hydrogen Storage and Refueling Facility

It is necessary to understand the safety implications and risk mitigation options for fuel cell electric bus fleet deployment, especially for related facilities responsible for operations such as production, storage, compression, and dispensing of hydrogen for use by the buses. In this report, we present a quantitative risk assessment for a potential fuel cell electric bus fleet that was motivated by efforts to improve resilience at the Portland International Airport but can be applicable to a range of hydrogen case studies and use cases. We estimated risk for a facility that produces, stores, compresses, and dispenses hydrogen for the fleet of buses, with a focus on individual risk to people in terms of annual frequency of fatality. We considered the frequency of hydrogen leaks that could result in harmful physical outcomes like jet fires or explosions, and the consequences of those outcomes for people. We created customized fault trees to calculate the frequencies of different sizes of leaks and event sequence diagrams to calculate ignition probabilities for the various leak sizes. We also leveraged the HyRAM+ toolkit to use these inputs to calculate overall risk for the facility, which we separated into one section responsible for producing, storing, and compressing hydrogen, and one section responsible for dispensing the hydrogen to the buses. We found that the dispensing area seemed to have a higher risk than the production/storage/compression area of the facility, largely because of the inclusion of a component with a high leak frequency (the heat exchanger used to cool the hydrogen before entering the vehicle, to prevent overheating and expansion of hydrogen in the onboard tank). For the example production and refueling facility we evaluated and the data we used for the analysis, the leak frequency had a larger impact on the risk differences between the two sections on the facility, compared to the physical outcome consequence, which was slightly different due to the varying fuel conditions, but not substantially different. Actions can be taken to prevent these hazards (e.g., lowering leak frequencies in system components) or to mitigate the consequences if they do occur (e.g., installing barriers to protect people if ignition events occur). The choice of which actions to take depends not only on safety considerations but also on space, time, staffing, feasibility, and financial constraints. Therefore, the quantitative risk assessment approach can help understand relative risk contributions from different components, leak sizes, consequences, and human actions, to prioritize risk reduction strategies and balance these parameters. The outcomes of this report may be useful for a variety of stakeholders working in the hydrogen, transportation, vehicle, and aviation sector, including those responsible for aspects like facility design, operations, and regulations. There is not a single value of risk that determines whether a hypothetical system is “safe” or not. The insights about risk mitigations may be leveraged, and the quantitative risk assessment approach can be applied to other case studies to understand risk priorities and contributions specific to different FCEB and hydrogen facility uses.

08 HYDROGEN↗

Hazards and Probabilistic Risk Assessments of a Light-Water Reactor Coupled with Industrial Facilities

This report provides a roadmap and toolkit for site-specific risk assessments across a broad range of industrial customers co-located with nuclear power plants (NPPs). This report builds upon the body of work sponsored by the Department of Energy (DOE) Light-Water Reactor Sustainability (LWRS) Flexible Plant Operation and Generation Pathway that presented hazards assessment and generic probabilistic risk assessments (PRAs) for the addition of a heat extraction system (HES) to light-water reactors co-located with hydrogen production facilities. The report expands the hazards assessments to include other industrial facilities: an oil refinery, a methanol plant, a synthetic fuel (synfuel) plant, the production of synthetic gas (syngas) as part of the methanol and synfuel plants, and wood pulp and paper mills. All these facilities are specified through industrial process and requirements research performed by national laboratories, universities, and interaction with industry. Many of the processes used in this report are pre-conceptual designs to use for decarbonization of the current technology facilities. A process of failure modes and effects analysis (what can go wrong) and accidentology (what has historically gone wrong) was used to determine the hazards presented to the NPP by the addition of the HES and the industrial customer. Chemical properties of feedstocks and products are summarized as part of the hazards assessment. Example analysis procedures are provided for each of the hazard types identified. These deterministic analyses can be used to assess adherence to licensing criteria. They can also be used to meet other safety goals like protection of the public, workers, or industrial facility equipment. The probabilistic analysis consisted of three sizes of HESs modeled in a PRA to assess the impact on the initiating events (IE) and results of the PRA. The PRA results conclude that the resulting increases in IE frequencies are below the limits required for small changes to existing NPPs under 10 CFR 50.59.

08 HYDROGEN↗

MRCI Subtask 2.4/2.5: Regional/Subregional Analysis and Risk Assessment Final Technical Summary Report

The objective of the Midwest Regional Carbon Initiative (MRCI) project is to implement a collaborative Regional Initiative (RI) to accelerate the deployment of carbon capture, and storage (CCS) in the Midwest-Northeastern quadrant of the United States. This report is a Technical Summary report describing work performed on Tasks 2.4 (Conducting Regional/Subregional Analysis) and 2.5 (Assessing and Managing Risk) during the MRCI project. In Task 2.4, detailed numerical reservoir simulation models were developed for selected carbon storage (CS) systems identified under Task 2.1 (Battelle, 2021a) in the MRCI study area. The objective of Task 2.4 is to demonstrate a dynamic modeling methodology for evaluating the suitability of the (selected) CS systems in the MRCI region for hosting a commercial-scale storage project. In this study, CO2 injectivity was evaluated for different CS systems with an annual injection rate of 1 million metric tonnes (MMT) of CO2 considered as the minimum requirement for a commercial scale project. The objective of Task 2.5 is to assess key risks associated with storing CO2 in the different CS systems across the MRCI region and to demonstrate a method(s) for assessing these risks that may be used by developers of future CO2 storage projects in the region. The risk analysis was limited to evaluating two types of leakage risks (i.e., wellbore leakage, flow across unfractured caprock) at three modeled sites considered in Task 2.4.

MRCI,Report,Summary,Technical Challenges,dynamic m↗

Human Health Risk Assessment for Improper Landfill Disposal of End-of-Life CdTe PV

The present work is a continuation of the 2020 IEA PVPS Task 12 Human Health Risk Assessment Methods for PV Part 3: Module Disposal Risks. The 2020 report performed a human health risk assessment (HHRA) for disposal of a cadmium telluride (CdTe) PV module in an unlined landfill, focusing solely on risks from cadmium. This study extends the 2020 HHRA on CdTe PV, analyzing eleven constituent elements: Cd, Se, Te, Cu, Si, Cr(III), Mo, Sn, Zn, Ni, and Al. The present HHRA was performed through two methods: utilization of the U.S. Environmental Protection Agency's (USEPA) Delisting Risk Assessment Software (DRAS V.4.0) on eight exposure pathways for cancer risk and non-cancer hazards; and comparison of exposure point concentrations to federal standards for groundwater, surface water, air, and soil exposure pathways. Cancer risks and non-cancer hazards posed by elemental leaching through all evaluated exposure pathways, using both methods, were found to be several orders of magnitude below USEPA health-protective thresholds. Cadmium exhibited both the highest risks and lowest uncertainty considering data availability on chemical content, leachate, and federal screening levels.

chemicals↗

Human Health Risk Assessment for Improper Landfill Disposal of End-of-Life CdTe Modules

The present work is a continuation of the 2020 IEA PVPS Task 12 Human Health Risk Assessment Methods for PV Part 3: Module Disposal Risks. The 2020 report performed a human health risk assessment (HHRA) for disposal of a cadmium telluride (CdTe) PV module in an unlined landfill, focusing solely on risks from cadmium. This study extends the 2020 HHRA on CdTe PV, analyzing eleven constituent elements: Cd, Se, Te, Cu, Si, Cr(III), Mo, Sn, Zn, Ni, and Al. The present HHRA was performed through two methods: utilization of the U.S. Environmental Protection Agency's (USEPA) Delisting Risk Assessment Software (DRAS V.4.0) on eight exposure pathways for cancer risk and non-cancer hazards; and comparison of exposure point concentrations to federal standards for groundwater, surface water, air, and soil exposure pathways. Cancer risks and non-cancer hazards posed by elemental leaching through all evaluated exposure pathways, using both methods, were found to be several orders of magnitude below USEPA health-protective thresholds. Cadmium exhibited both the highest risks and lowest uncertainty considering data availability on chemical content, leachate, and federal screening levels.

CdTe↗

Expansion of Hazards and Probabilistic Risk Assessments of a Light-Water Reactor Coupled with Electrolysis Hydrogen Production Plants

This report builds upon the body of work sponsored by the Department of Energy (DOE) Light-Water Reactor Sustainability (LWRS) Flexible Power Operation and Generation (FPOG) program that presented generic probabilistic risk assessments (PRAs) for the addition of a heat extraction system (HES) to light-water reactors to support the co-location of a high temperature hydrogen electrolysis facility (HTEF). Probabilistic and deterministic hazards assessments and risk analyses are leveraged throughout this report. Several improvements and new analyses are included in this report. First, higher amounts of detail in the specifications of the generic HTEFs are used to produce scaled results for a 100, 500, and 1000 MW nominal hydrogen production facility. An additional hazard assessment of 1000 kg of hydrogen storage is performed. The facility hazards and footprint are assessed to determine the safe distance required for placement near the nuclear power plant (NPP). Second, specific designs for corresponding HESs for the different levels of support required by the HTEFs are analyzed in the PRA model. Third, a hazards analysis of the specified HTEFs leads not only to effects of the quantified risk assessment for the NPP, but also qualitative hazards assessment for the community. Finally, a seismic analysis and a high winds analysis have each been added to the PRA. The results investigate the applicability of the potential licensing approaches which do not require a full United States (U.S.) Nuclear Regulatory Commission (NRC) licensing review. The PRAs are generic and include listed assumptions. The HTEF design built for this project has further eliminated many conservative assumptions from the prior PRAs in this series. The PRA results indicate that the 10 CFR 50.59 licensing approach is justified due to the minimal increase in initiating event frequencies for all design basis accidents, with none exceeding 7.7%. The PRA results for core damage frequency and large early release frequency support the use of NRC Regulation Guide 1.174 as further risk information that supports a change without a full licensing amendment review. The hazard analyses and PRA confirm the need for engineered blast barriers of storage tanks and the common production header leaving the HTEF. The hazards analyses and PRA also confirm with high confidence that using the assumptions of design in this report that the safety case for licensing an HES addition and an HTEF sited with its unprotected high-pressure stage components 187 meters from the NPP’s transmission towers (the most fragile structure, system, and component) is strong.

08 HYDROGEN↗

Development and Demonstration of a Risk Assessment Approach for Approval of a Transportation Package of a Transportable Nuclear Power Plant for Domestic Highway Shipment

The U.S. Department of Defense (DoD) Strategic Capabilities Office (SCO) has tasked PNNL to address the regulatory challenges associated with confirming the safe transport of Transportable Nuclear Power Plants (TNPPs) containing irradiated nuclear fuel. A previous report—Proposed Risk-Informed Regulatory Framework for Approval of Microreactor Transportation Packages (PNNL-31867)—determined that the expected radioactive inventory in the irradiated fuel of a TNPP would likely require shipment in an NRC-approved Type B package (or spent nuclear fuel cask) but that a TNPP “package” is unlikely to meet the entire suite of NRC requirements set forth in Part 71 of Title 10 of the Code of Federal Regulations (CFR) for a Type B package. It was therefore concluded that shipment of this initial TNPP transportation package, as well as possibly others, under existing regulations would likely require NRC approval using the 10 CFR 71.12 (“Specific exemptions”) process that relies on risk-informed decision making supported by quantitative risk assessment (i.e., Probabilistic Risk Assessment).

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

HyRAM+ (Hydrogen Plus Other Alternative Fuels Risk Assessment Models) v.6.1

SAND2025-11565O HyRAM+ (Hydrogen Plus Other Alternative Fuels Risk Assessment Models) is a tool for conducting quantitative risk assessment (QRA) in transportation systems. HyRAM+ contains validated, simplified release behavior models, engineering models, and generic data relevant to hydrogen installations. HyRAM+’s platform integrates models and data to conduct QRA on user-defined hydrogen or other alternative fuel systems. The software will enable the international safety research community to add validated models to the HyRAM+ platform for use in QRAs. HyRAM (hydrogen-only) versions 1.0 to 3.1 were developed by Sandia for the Department of Energy (DOE) Hydrogen and Fuel Cell Technologies Office. The following agencies contributed to the development of HyRAM+ version 4.0 regarding the addition of methane (natural gas) and propane models: the DOE Vehicle Technologies Office and the Department of Transportation Pipeline and Hazardous Material Safety Administration. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Groth, Katrina [Sandia National Lab. (SNL-NM), Alb↗

V-INT: Automated Vulnerability Intelligence and Risk Assessment

The project team, including the University of Arkansas (UA) as the lead, the University of Arkansas at Little Rock (UALR), Network Perception (NP), and Bastazo, has successfully researched, developed, and demonstrated the V-INT toolset, and also integrated it into the commercial products of NP (i.e., NP-View) and Bastazo (i.e., Spartan). The end product is a cybersecurity software tool for energy utilities that can automatically assess the risks of software vulnerabilities in an organization’s assets considering the organization’s firewall policies. It allows security operators to identify the small portion of vulnerabilities that poses true threats to their system (i.e., those that are not protected by firewall policies) and prioritize the mitigation of these vulnerabilities to minimize risks. It also allows security operators to identify the vulnerability-induced attack paths under their organization’s firewall policy, providing effective decision supports for mitigating potential attacks.

97 MATHEMATICS AND COMPUTING↗

System-Level Integration of Modular Language Models for Real-Time Risk Assessment in Third-Party Risk Management Systems

Large enterprises typically rely on dedicated teams to govern and implement security measures throughout their supply chains, ensuring compliance with enterprise security procedures. There is a significant reliance on Third-Party Risk Management (TPRM) platforms, which often require complete, highly structured information from potential vendors. The review and compliance assurance processes are time- and labor intensive, often requiring several rounds of review between the supply chain security risk management teams, business users, and potential vendors, leading to delays in the supply chain processing and consumer experience. Significant challenges in the risk management paradigm include handling unstructured data in various formats and providing real-time feedback to users to reduce the required review time. This paper presents a novel solution to these challenges. A modular multi-step system architecture is proposed using advances in language processing, specifically for unstructured responses and provides real-time feedback (i.e., 3 seconds) so that users can improve their responses before the TPSRM team review. This novel system architecture will increase information accuracy and significantly reduce time and labor during the review process.

99 - GENERAL AND MISCELLANEOUS↗

The Risk Assessment Information System Compendium of Ecological Screening Benchmarks for Chemicals and Radionuclides (2025) (Volume I – Text, Radionuclides for all Media, Chemicals for Air and Biota)

The Risk Assessment Information System Ecological Benchmark Tool compiles screening level benchmark values for assessing potential ecological risks posed by chemical and radionuclide contaminants. Drawing from a wide array of federal, state, and international sources, it consolidates benchmarks across environmental media, including soil, water, sediment, air, and biota, and presents values for a broad range of receptors and exposure pathways. The tool includes both effect-based and no-effect thresholds, with media- and organism-specific guidance derived from peer-reviewed literature and regulatory frameworks. By integrating diverse benchmark types into a unified reference, the tool supports consistent, scientifically grounded evaluations in ecological risk assessments and environmental management practices.

54 ENVIRONMENTAL SCIENCES↗

Availability of state-level climate change projection resources for use in site-level risk assessment

In recent years, incorporating climate change considerations has become an important focus of organizations’ resilience planning and risk assessment efforts, including United States federal agencies. This has led to an increasing demand for higher-resolution and higher-quality climate projection information that is easy to understand for non-expert users. In particular, there is a demand for information about how climate change may affect high-impact, low-frequency (HILF) hazards that are central to risk assessments focused on infrastructure. While national-level resources like the National Climate Assessment provide information on climate impacts for different sectors and regions in the United States, downscaled information with location-specific context is often required for site-level resilience planning. As higher-resolution and higher-quality climate resources continue to be developed at the state level, it is imperative to understand ongoing and planned efforts, as well as key drivers for developing these state-level resources. Based primarily on stakeholder input from climate experts from 31 states, we identify key state-level climate resources, as well as drivers accelerating the development of these resources. We assess the availability of climate change resources, specifically those with information about HILF events that have been developed at the state level and can support users in conducting site-level resilience planning. We identify three key drivers or predictors for the development of climate change resources at the state level: (1) existence of state laws, mandates, Executive Orders, and other state policies, (2) existence of university partnerships; and (3) the makeup of the stakeholder groups (in terms of dominant discipline/expertise) participating in the effort. The diverse state strategies and resources surveyed in this study could support the incorporation of higher-resolution climate information into site-level planning.

54 ENVIRONMENTAL SCIENCES↗

Chemical Impacts of Potential CO2 and Brine Leakage on Groundwater Quality with Quantitative Risk Assessment: A Case Study of the Farnsworth Unit

Potential leakage of reservoir fluids is considered a key risk factor for geologic CO2 sequestration (GCS), with concerns of their chemical impacts on the quality of overlying underground sources of drinking water (USDWs). Effective risk assessment provides useful information to guide GCS activities for protecting USDWs. In this study, we present a quantified risk assessment case study of an active commercial-scale CO2-enhanced oil recovery (CO2-EOR) and sequestration field, the Farnsworth Unit (FWU). Specific objectives of this study include: (1) to quantify potential risks of CO2 and brine leakage to the overlying USDW quality with response surface methodology (RSM); and (2) to identify water chemistry indicators for early detection criteria. Results suggest that trace metals (e.g., arsenic and selenium) are less likely to become a risk due to their adsorption onto clay minerals; no-impact thresholds based on site monitoring data could be a preferable reference for early groundwater quality evaluation; and pH is suggested as an indicator for early detection of a leakage. This study may provide quantitative insight for monitoring strategies on GCS sites to enhance the safety of long-term CO2 sequestration.

58 GEOSCIENCES↗

Cyber risk assessment and investment optimization using game theory and ML-based anomaly detection and mitigation for wide-area control in smart grids

The electric power grid is increasingly becoming susceptible to cyber attacks that exploit vulnerabilities in the smart grid control, information, and physical layers. Successful cyber attacks can have catastrophic impacts on the social and economic well-being of any nation all over the globe. It has, thus, become imperative to secure the smart grid against such adversarial actions to ensure stable, secure, and reliable operation of the grid. The existing research and industry practices prove to be inadequate in terms of providing pragmatic and effective defense methodologies and measures for long-term cybersecurity planning and real-time cybersecurity for grid operation. For example, existing works lack models that incorporate uncertain behavior of cyber-attackers and pragmatic defense measures for cyber risk assessment and cybersecurity investment optimization which often provide unreliable and strictly qualitative solutions to these problems. At the same time, with the growing number of cyber incidents in the grid, there still exists a need to develop attack-resilient algorithms for wide-area monitoring, protection, and control (WAMPAC) applications like the wide-area voltage control systems (WAVCS) for Flexible AC Transmissions Systems (FACTS) that lack in scalable and feasible solutions from the cybersecurity perspective. This dissertation proposes novel models and methodologies for: (1) Cybersecurity planning, and (2) Cybersecurity for system operation. The cybersecurity planning is achieved through cyber risk assessment and cybersecurity resource investment optimization for long-term cybersecurity of the grid using game theory and attack-defense trees. Cybersecurity for system operation consists of development of cyber anomaly detection and mitigation algorithms for flexible AC transmission system (FACTS) controller-based wide-area voltage control systems (WAVCS) using machine learning (ML), and software defined networking-based moving target defense network routing for achieving real-time cyber-physical security for grid operations. This is followed by hardware-in-the-loop (HIL) implementation and evaluation of these attack prevention, detection, and mitigation algorithms and methodologies showcasing their feasibility in a close to real-world environment. For cybersecurity planning, a novel approach involving a combination of game theory and attack defense trees (ADT) for optimal cybersecurity resource allocation in the smart grid is proposed. This methodology involves modeling of the cyber-physical smart grid substations as ADTs, defining attacker costs, defense costs, and attack probabilities for attack access points. Using game theoretical formulation, optimal defense strategies for the defender of the system to invest cybersecurity resources in the grid are obtained. Additionally, a game-theoretic framework is developed for quantitative cyber-physical risk assessment of the grid under a dynamically changing cyber threat space and uncertain behavior of cyber attackers which is further used to optimize investments in the smart grid's cybersecurity resources. The attacker, defender, and the smart grid system are modeled while incorporating attacker-stochasticity and federal guidelines for smart grid cybersecurity. This allows quantification of threat, vulnerabilities, and attack impact of the grid for quantitative risk assessment. The defender's budget to invest in the security resources in the grid is optimized based on the strategies leading to minimum system risk. The evaluation of the proposed solutions highlight the feasibility for practical implementation of these methodologies and algorithms in the smart grid, while taking the federal requirements and guidelines for smart grid security into consideration. For achieving cybersecurity for system operation, attack prevention, detection, and mitigation algorithms and methodologies are developed specifically for FACTS-based WAVCS. Anomaly detection and mitigation in the WAVCS are achieved using algorithms based on machine learning which involves offline training and testing of ML models with CPS datasets incorporating physics-based features that allow accurate distinction between system faults and cyber attacks. For attack prevention, a methodology based on software defined network (SDN)-based moving target defense (MTD) network routing is proposed that enables prevention of Denial of Service (DoS) type attacks on the smart grid communication system. Subsequently, these methodologies and algorithms are implemented and evaluated on an HIL testbed that allows for real-time attack prevention, detection, and mitigation of emulated cyber attacks on the WAVCS in a close to real-world environment. The results show highly accurate and efficient performance of the implemented algorithms and methodologies with the smart grid system operating within the NERC's system operation limits even in the presence of DoS and data integrity cyber attacks. This work opens up future research opportunities in other directions such as (1) Expanding cybersecurity planning methodologies to real-time cyber contingency analysis with different game formulations; and (2) Applying the cybersecurity for system operation algorithms to broader categories of wide-area control applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗