Search NASA⌕ Search

SEARCH · Search NASA

Results for “Infrastructure vulnerability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Consequence-Driven Cybersecurity for High-Power Electric Vehicle Charging Infrastructure

Cybersecurity of high-power charging infrastructure for electric vehicles (EVs) is critical to the safety, reliability, and consumer confidence in this publicly accessible technology. Cybersecurity vulnerabilities in high-power EV charging infrastructure may also present risks to broader transportation and energy-infrastructure systems. Here, this paper details a methodology used to analyze and prioritize high-consequence events that could result from cybersecurity sabotage to high-power charging infrastructure. The highest prioritized events are evaluated under laboratory conditions for the severity of impact and the complexity of cybersecurity manipulation. Mitigation solutions and strategies are presented to secure the vulnerabilities that potentially lead to high-consequence events. These mitigations can be immediately implemented by industry or executed during the design stage.

25 ENERGY STORAGE↗

Hydrogen embrittlement and mechanical response of 304L steel with ZrC additions

While stainless steels are widely used for hydrogen storage infrastructure, they can still be vulnerable to hydrogen embrittlement justifying the need to further improve their hydrogen resiliency. Here, we investigate the potential for transition metal carbide additions to improve the hydrogen compatibility of austenitic stainless steels. ZrC nanoparticles were dispersed in contents of 0.01–10 wt% in 304 L stainless steel powder, mixed via high energy ball milling, and subsequently consolidated using direct current sintering. To assess hydrogen compatibility, the tensile properties of similarly processed 304 L without ZrC nanoparticles were compared to 304 L with the ZrC additions; both materials were evaluated prior to and after hydrogen exposure (non-charged and H-precharged, respectively). Depending upon the ZrC phase fraction, the yield strengths varied from ∼325 to 560 MPa in the non-charged condition and from ∼375 to 550 MPa in the H-precharged condition. Strain at failure varied from ∼5 to 90 % and from ∼5 to 35 % in the non-charged and hydrogen-precharged conditions, respectively. Results from stress-strain profiles demonstrate limited efficacy of ZrC as a method to mitigate hydrogen embrittlement entirely but does demonstrate the potency of ZrC inclusions as strengthening addition to 304 L alloys without a loss of ductility.

08 HYDROGEN↗

Equity-Centered Engagement Through Climate Resilience Policy in Massachusetts

Communities who experience disproportionate climate change impacts tend to be excluded from resilience planning (Vale, 2014). Those efforts typically follow top-down processes within established governance practices that are inaccessible to marginalized folks and reinforce inequalities (Malloy & Ashcraft, 2020; Adger, 2003). Such participatory planning processes may offer the public little opportunity to influence the process itself or the outcomes (Smith & McDonough, 2001). They might ignore important public values or alternative ways of knowing which can be critical assets in resilience (Few et al., 2007). Designing communities for climate action and resilience means creating opportunities for everyone to meaningfully shape those decisions and experience related benefits. Having the opportunity to shape one’s community is necessary for human flourishing (Allen, 2016). Resilience planning that shifts power into communities and focuses on social vulnerability can affect how people survive and thrive in a climate changed world. The Massachusetts Municipal Vulnerability Preparedness (MVP) 2.0 program is an attempt to change the status quo in resilience planning by bringing new voices into decision-making power, recognizing their labor, addressing root causes of vulnerability, and investing in social infrastructure. It aspires to build capacity for equity-focused community engagement within teams of municipal staff and community liaisons, and ultimately build social capital and community cohesion. My mixed methods research investigates implementation of this state grant program in several western Massachusetts towns. I am using document review, participant observation, and interviews to understand the MVP 2.0 process as written, how different towns navigate it, and how individuals make sense of their experiences in it. I seek to understand how those experiences explain relationships between engagement approaches, mediating factors, and process outcomes. I am interested in the conditions that allow for community empowerment and how a model like MVP 2.0 can shift conditions that hold systems in place. In a practical sense, our findings will help municipalities reflect on their work during MVP 2.0 and plan for future community engagement. They may be informative for designing future iterations of the MVP program and for other municipalities, offices of community engagement, and practitioners. The findings will also contribute to the participation, resilience, and climate justice literatures, by adding perspectives on equity-centered resilience and community engagement approaches in smaller towns and rural settings. References: Adger, W. N. (2003). Social capital, collective action, and adaptation to climate change. Economic Geography, 79, 387-404. Allen, D. (2016). Toward a connected society. Our compelling interests: The value of diversity for democracy and a prosperous society, 71-105. Few, R., Brown, K., & Tompkins, E. L. (2007). Public participation and climate change adaptation: avoiding the illusion of inclusion. Climate Policy, 7(1), 46–59. Malloy, J. T., & Ashcraft, C. M. (2020). A framework for implementing socially just climate adaptation. Climatic Change, 160(1), 1–14. Smith, P. D., & McDonough, M. H. (2001). Beyond public participation: Fairness in natural resource decision making. Society & natural resources, 14(3), 239-249. Vale, L. J. (2014). The politics of resilient cities: whose resilience and whose city? Building Research & Information, 42(2), 191–201.

Callaham, Shannon↗

Equity-Centered Engagement Through Climate Resilience Policy in Massachusetts

Resilience efforts tend to reinforce injustices. Communities who experience disproportionate climate impacts are often excluded from resilience planning, and those plans do not typically address root causes of social vulnerability. More transformational approaches to resilience would shift decision-making power into communities and affect how people survive and thrive in a climate changing world. The Massachusetts Municipal Vulnerability Preparedness (MVP) 2.0 program is an attempt to change the status quo in resilience planning by bringing new voices into decision-making power, recognizing their labor, addressing root causes of vulnerability, and investing in social infrastructure. It aims to build capacity for equity-focused community engagement within teams of municipal staff and community liaisons, and ultimately build community cohesion. My mixed methods research investigates implementation of this state grant program in several Massachusetts towns. I am using document review, participant observation, and interviews to understand the MVP 2.0 process as written, how different municipalities navigate it, and how individuals make sense of their experiences in it. I seek to understand how those experiences explain relationships between engagement approaches, mediating factors, and process outcomes. I am interested in the conditions that allow for community empowerment and how a model like MVP 2.0 can shift conditions that hold systems in place. In a practical sense, my empirical results will help municipalities reflect on their work during MVP 2.0 and plan for future community engagement. They may be informative for designing future iterations of the MVP program and for other municipalities, offices of community engagement, and practitioners. The findings will also contribute to the participation, resilience, and climate justice literatures, by adding perspectives on equity-centered resilience and community engagement approaches in smaller towns and rural settings.

Callaham, Shannon↗

Equity-Centered Engagement Through Climate Resilience Policy in Massachusetts

Communities who experience disproportionate climate change impacts tend to be excluded from resilience planning. Those efforts typically follow top-down processes within established governance practices that are inaccessible to marginalized folks and reinforce inequalities. Regenerating the commons includes creating opportunities for everyone to meaningfully shape community resilience decisions and experience related benefits. Resilience planning that shifts power into communities and focuses on social vulnerability can affect how people survive and thrive in a climate changed world. The Massachusetts Municipal Vulnerability Preparedness (MVP) 2.0 program is an attempt to change the status quo in resilience planning by bringing new voices into decision-making power, recognizing their labor, addressing root causes of vulnerability, and investing in social infrastructure. It aspires to build capacity for equity-focused community engagement within teams of municipal staff and community liaisons, and ultimately build social capital and community cohesion. My research investigates implementation of this state grant program in several western Massachusetts towns. I am using document review, participant observation, and interviews to understand the MVP 2.0 process as written, how different towns navigate it, and how individuals make sense of their experiences in it. I seek to understand how those experiences explain relationships between engagement approaches, mediating factors, and process outcomes. I am interested in the conditions that allow for community empowerment and how a model like MVP 2.0 can shift conditions that hold systems in place. In a practical sense, our findings will help municipalities reflect on their work during MVP 2.0 and plan for future community engagement. They may be informative for designing future iterations of the MVP program and for other municipalities or offices of community engagement. The findings will also contribute to the participation, resilience, and climate justice literatures, by adding perspectives on equity-centered resilience and community engagement approaches in smaller towns and rural settings.

Callaham, Shannon↗

SCEPTRE: A Cyber-Physical Emulation Capability

Cyber-physical systems form a critical but vulnerable backbone to US critical infrastructure. Recent high-profile cyber-attacks have shown the need for increased assessment and hardening of these systems. However, such assessments and investigations into advanced technologies to harden these systems is difficult due to their operational nature. Instead, modeling of these systems is heavily leveraged. Investigation into these complex systems and their potential cascading failures requires comprehensive modeling of both the cyber and physical components of the system. This paper introduces SCEPTRE, an emulation capability to address this need.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Overview and Commentary on Applying the Coordinated Vulnerability Disclosure Process to Photovoltaic System Devices

The rapid expansion of photovoltaic (PV) systems, particularly inverters, has introduced new cybersecurity challenges that threaten both local operations as well as the broader electrical grid’s stability. PV inverters, integrated into critical energy infrastructure are potential targets for cyber attacks due to vulnerabilities in firmware, remote access systems, and communication protocols. The Coordinated Vulnerability Disclosure (CVD) process, as defined by the Cybersecurity and Infrastructure Security Agency (CISA), provides a framework for identifying, reporting, and addressing these vulnerabilities in a transparent and collaborative manner. This report outlines the CVD process as it applies to PV systems, detailing the roles of key stakeholders, such as manufacturers, grid operators, and security researchers. The report also highlights specific challenges in managing vulnerabilities for new and legacy PV systems, which includes those introduced by insecure communications and third-party supply chain components. By adhering to the CVD process, the PV industry can mitigate cybersecurity risks, ensure regulatory compliance, and maintain consumer trust, while safeguarding the operational resilience of the energy grid. Ultimately, the effective coordination of vulnerability management is crucial for securing the future of PV systems within the critical electric grid infrastructure landscape.

14 SOLAR ENERGY↗

Cybersecurity Considerations for Hydrogen Infrastructure in Airport Environments

This report explores key cybersecurity concerns and best practices within environments that serve as reference points for the development of hydrogen fueling infrastructure for aviation. This cybersecurity analysis leverages prior NREL studies: 1) hydrogen fueling station component validation to identify vulnerabilities and failure events documented in physical equipment, and 2) electric aircraft charging infrastructure analysis to explore primary cybersecurity vulnerabilities. It reviews the criticality of digitized technologies in sustaining hydrogen fuel production, storage, and fueling systems, noting cybersecurity concerns that are universal to power systems and industrial control systems in general. In considering cybersecurity vulnerabilities within a future landscape of hydrogen energy for aviation applications, a reference architecture was intended to reveal the points of connection between assets and the potential sensors that are vulnerable to manipulation in the event of compromised access or communication within a SCADA system. A generalized reference architecture can help stakeholders, engineers, or strategists understand connections, criticalities, and standard practices when it comes to designing and planning for new systems. There are several gaps to account for in assessing the future of hydrogen production, storage, and fueling for aviation. Engaging stakeholders, including aircraft manufacturers, electric utilities, site property owners, and local communities, will inform decision-making around site structure, operations, and resources for future hydrogen fueling infrastructure to understand operational needs and cybersecurity awareness. Cybersecurity mitigation strategy must consider physical attack vectors that emerge with the integration of hydrogen systems into existing airport security requirements. The cybersecurity risk assessment contained in this report is an entry point into potential future granular-level analyses to be conducted as part of hazard and risk assessments for safe aviation hydrogen infrastructure, determining how the scale of hydrogen fuel infrastructure for aviation impacts the volume of cyber attack vectors, and what, if any, are the vulnerabilities associated with different types of on-board hydrogen systems. In this nascent development phase, assessing how best to integrate cybersecurity practices into an evolving U.S. aviation landscape provides critical insights into building increased awareness and stakeholder engagement to support a cyber-resilient infrastructure.

08 HYDROGEN↗

Social vulnerability and power loss mitigation: A case study of Puerto Rico

The increasing occurrence of extreme weather events urges us to reevaluate the resiliency and vulnerability aspects of our most critical infrastructures — such as power grids — as their failures result in both economic loss and severe human hardship. Seen through the lens of alleviating human suffering, it is crucial to be able to identify critical system components of the infrastructure for targeted hardening given resource constraints. This effort is of particular importance in islanded areas such as Puerto Rico where hurricanes are frequent and resources are limited, and where the spatially diverse effects of power loss on human suffering are all the more severe. Recent studies on evaluating infrastructure networks during extreme weather events have taken a simulation based approach that incorporates a variety of component models, such as weather realizations, topological network models, fragility models, and power flow models to estimate expected loss of service. Here, in this work, we expand such a Component Based Event Simulation (CBES) methodology proposed in the literature and integrate it with a social vulnerability modeling component. This paradigm-advancing approach of synthesizing the cutting edge capability of power network modeling and the social impacts of the power transmission network failure is demonstrated for the island of Puerto Rico. Our work exemplifies the efficacy of this integrated modeling framework in developing a decision metric for targeted transmission line hardening.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Addressing Consequence within Operational Risk (O.T. Gagnon III) 9-18-2024

Addressing Consequence within Operational Risk: Why threats and security are just not that important! When dealing with cyber or physical risk within any critical infrastructure (CI) environment, don’t concern yourself with vulnerabilities and threats, at least not at first! Also, don’t be overly fixated on “securing the systems” within the organization. The endeavor of tackling operational risk focused on consequences in any critical infrastructure environment to include the complex Aviation ecosystem is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure environment in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure environment as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space. When it comes to cyber risks, before an organization can consider vulnerabilities within and threats to its operations, it must first have a solid understanding of the consequences existing inside its infrastructure environment. Idaho National Lab’s Consequence-Driven, Cyber-Informed Engineering is offered as an example of this approach to effective and efficient cyber risk mitigation.

99 GENERAL AND MISCELLANEOUS↗

Heat Vulnerability Index Development and Mapping

Extreme heat is one of the leading causes of weather-related deaths in the U.S. Exposure to extreme heat will be exacerbated due to global climate change. It is thus crucial to design a key performance indicator, heat vulnerability index (HVI), to represent overall heat risk which can help identify susceptible regions and sub-populations in cities in the face of heatwaves. Most existing HVI tools only consider outdoor heat exposure. This paper developed an HVI web map tool incorporating both the outdoor and the indoor heat exposure, as well as population sensitivity and adaptation capability across census tracts in the city of Fresno, California. The tool can assist the planning of infrastructure and resources to reduce residents’ vulnerability to extreme heat events.

Xu, Yujie↗

Review of Electric Vehicle Charger Cybersecurity Vulnerabilities, Potential Impacts, and Defenses

Worldwide growth in electric vehicle use is prompting new installations of private and public electric vehicle supply equipment (EVSE). EVSE devices support the electrification of the transportation industry but also represent a linchpin for power systems and transportation infrastructures. Cybersecurity researchers have recently identified several vulnerabilities that exist in EVSE devices, communications to electric vehicles (EVs), and upstream services, such as EVSE vendor cloud services, third party systems, and grid operators. The potential impact of attacks on these systems stretches from localized, relatively minor effects to long-term national disruptions. Fortunately, there is a strong and expanding collection of information technology (IT) and operational technology (OT) cybersecurity best practices that may be applied to the EVSE environment to secure this equipment. In this paper, we survey publicly disclosed EVSE vulnerabilities, the impact of EV charger cyberattacks, and proposed security protections for EV charging technologies.

33 ADVANCED PROPULSION SYSTEMS↗

Architecture Design for Remote Operation of Microreactors: Poster

The nuclear sector is pursuing a number of advanced reactor concepts, one of which is the microreactor, an advanced reactor characterized by a power output of less than 20 MWth. These reactors are intended for use in applications where traditional power solutions are economically or logistically impractical. One key feature required for the successful deployment of microreactors is a remote operation capability, which can dramatically cut staffing expenses by eliminating the need for licensed operators to be present at the site of each reactor and instead concentrate in a centrally located operations center. In moving to a remote operations framework for nuclear reactors, the number of potential attack surfaces for a cyber adversary looking to cause harm or disruption increases. Therefore, a robust cybersecurity architecture is required to mitigate these potential vulnerabilities. This paper explores the functional infrastructure, security, and communication requirements to adapt remote operations to nuclear applications. It then presents a reference architecture for remote operations of microreactors that applies best practices in cybersecurity and remote communications in the context of a digital twin remote operation system.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

FLC Award: QED: Quantum Ensured Defense of the Smart Electric Grid

A reliable electric power supply is crucial for modern day life as well as national security, economic productivity, and life-and-death essentials. During the COVID pandemic, internet and cell communications became a “must-have” for government and business operations, education, and communicating COVID testing for vaccine information. Loss of electric power quickly leads to human health and national security emergencies. When a major winter storm hit Texas in mid-February 2021, the system was overwhelmed and over 4M people lost power. Although this crisis arose from an unprecedented weather event - not a cyberattack - it serves as a vivid illustration of the impact power disruption can have on our American way of life. The recent cyberattack on the Colonial Oil Pipeline also provides a stark reminder that infrastructure supporting our daily lives has vulnerabilities.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Satellite Enveloped with STITCHED Engineering Sensors for Detection of Approaching Objects

Today as well as tomorrows spaceborne assets impact almost all areas of national and nuclear security. Spaceborne assets can not only collect and disseminate valuable data, well beyond just the visual, but also track terrestrial-based mobile assets in real-time, and active spaceborne platforms potentially pose serious risk to vulnerable earth-based systems and infrastructures. The capability to defend national spaceborne assets from attack/interference is critical for security interests. This effort supports this mission through the cost-effective preeminent detection of approaching threats to our nation’s vital resources, in order to help secure and trust these high-value assets against the threats of tomorrow. This project develops novel fabrication techniques for conformal, low-profile and lightweight leakywave antenna (LWA) detection/imaging systems, which fuses technical embroidery (TE) and laser ablation (LA) processes with LWA design. Technical embroidery is an emerging field in additive textile manufacturing where flexible materials and functionalized fabrics are created for a wide variety of uses and purposes, while laser ablation is the process of removing material from a solid surface by irradiating it with a laser beam. Here, thin, conformal antenna designs are designed, modeled and fabricated using both TE and LA, to create lightweight, flexible and conformal object detection and imaging radars. This novel development ensures our nation’s ability to field advanced lightweight and conformal technologies to protect spaceborne assets.

42 ENGINEERING↗

Mississippi's Strategic Resilience: A multi-systems approach to secure, reliable, and adaptable electric grid infrastructure

Mississippi’s electric grid resilience challenges are linked to an intersection of complex socioeconomic, ecological, technological, historical, and political challenges, exacerbated by increasing severe weather like flooding and tornado events. The state’s legacy of underinvestment in critical energy infrastructure, particularly in rural areas and vulnerable floodplains, have stressed an aging grid, creating long-lasting disruptions in electric service during weather-related outages. Effective emergency management and preparedness is further hampered by a lack of coordination across local, county, and regional scales. Using the TASTI-GRID platform and partnership with Oak Ridge National Laboratory (ORNL), Mississippi is developing a comprehensive regional resilience strategy to overcome energy security and reliability challenges, mitigating the impacts of natural hazards, and positioning Mississippi as a resilient and premier destination for residents, businesses, and economic development.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Exponential Backoff and Its Security Implications for Safety-Critical OT Protocols over TCP/IP Networks

The convergence of Operational Technology (OT) and Information Technology (IT) networks has become increasingly prevalent with the growth of Industrial Internet of Things (IIoT) applications. This shift, while enabling enhanced automation, remote monitoring, and data sharing, also introduces new challenges related to communication latency and cybersecurity. Oftentimes, legacy OT protocols were adapted to the TCP/IP stack without an extensive review of the ramifications to their robustness, performance, or safety objectives. To further accommodate the IT/OT convergence, protocol gateways were introduced to facilitate the migration from serial protocols to TCP/IP protocol stacks within modern IT/OT infrastructure. However, they often introduce additional vulnerabilities by exposing traditionally isolated protocols to external threats. This study investigates the security and reliability implications of migrating serial protocols to TCP/IP stacks and the impact of protocol gateways, utilizing two widely used OT protocols: Modbus TCP and DNP3. Our protocol analysis finds a significant safety-critical vulnerability resulting from this migration, and our subsequent tests clearly demonstrate its presence and impact. A multi-tiered testbed, consisting of both physical and emulated components, is used to evaluate protocol performance and the effects of device-specific implementation flaws. Through this analysis of specifications and behaviors during communication interruptions, we identify critical differences in fault handling and the impact on time-sensitive data delivery. The findings highlight how reliance on lower-level IT protocols can undermine OT system resilience, and they inform the development of mitigation strategies to enhance the robustness of industrial communication networks.

DNP3↗

Stakeholder-guided holistic, Adaptive Framework for enhancing community Energy Resilience (SAFER) (Final Technical Report)

The Stakeholder-guided holistic, Adaptive Framework for enhancing community Energy Resilience (SAFER) project advances resilience science and engineering by addressing challenges in rural Kansas communities where aging infrastructure, extreme weather, and socioeconomic disparities heighten vulnerability to energy disruptions. Traditional approaches often focus on technical performance while overlooking community concerns and priorities. SAFER responds by integrating community perspectives with advanced analytical frameworks to create a holistic model for measuring and improving resilience. Project objectives included developing novel resilience metrics, advancing modeling frameworks that capture interdependencies across infrastructures, and embedding community-centric indicators directly into planning processes for distributed energy resources. The key technical innovations included the creation of self-organizing map (SOM)-based indices for objective resilience quantification, hetero-functional graph theory (HFGT) models linking power, water, transportation, and community assets, and graph neural network (GNN) tools for identifying critical nodes in complex systems. Community-centric energy planning was demonstrated through optimal siting and sizing of (photovoltaic) PV and battery storage, ensuring resilience enhancements also addressed energy burden and energy insecurity. SAFER engaged community partners in Dodge City and Ford County through surveys, focus groups, and workshops, generating more than 600 responses that established baseline measures of energy burden, financial insecurity, and willingness-to-pay to avoid outages. This data, organized in terms of a community capitals framework, informed the development of weighted reliability indices that better reflect community costs than traditional utility metrics. SAFER’s GNN-based critical node identification framework identified expert-labelled critical nodes with over 99% accuracy, while also uncovering additional functionalities essential for proactive resilience planning. The project’s models demonstrated that optimal PV and storage deployment could improve resilience indices by over 11 percent, with dispatch strategies further enhancing outcomes, confirming both the technical effectiveness and economic feasibility of these approaches. Through its combined emphasis on rigorous modeling, community-focused planning, and community engagement, SAFER advances the state of resilience research while delivering direct benefits to rural communities. The project provides tools, guidelines, and resilience heatmaps that help utilities, local governments, and residents better anticipate disruptions, prioritize investments, and strengthen the capacity to withstand and recover from energy-related hazards. Furthermore, the developed HFG and GNN frameworks are designed for transferability, allowing them to be adapted for resilience planning in other communities with minimal retraining. This inductive learning capability provides a scalable pathway to extend the SAFER project’s impact. Thus, creating a foundation for a nationally applicable model of infrastructure resilience. Additionally, the HFG can also be extended to include other FEMA community lifelines.

14 SOLAR ENERGY↗