Search NASA⌕ Search

SEARCH · Search NASA

Results for “Vulnerability Management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Contrast and Predictability of Island‐Scale El Niño Influences on Hawaii Wave Climate

Abstract The El Niño‐Southern Oscillation (ENSO) influences ocean wave activity across the Pacific, but its effects on island shores are modulated by local weather and selective sheltering of multi‐modal seas. Utilizing 41 years of high‐resolution wave hindcasts, we decipher the season‐ and locality‐dependent connections between ENSO and wave patterns around the Hawaiian Islands. The north and west‐facing shores, exposed to energetic northwest swells during boreal winters, experience the most pronounced ENSO‐related variability, with increased high‐surf activity during El Niño years. While the year‐round trade wind waves exhibit moderate correlation with ENSO, the basin‐wide climate influence is masked by locally accelerated trade winds in channels and around large headlands. The remarkable global‐to‐local pathway through the high‐resolution hindcast enables development of an ENSO‐based semi‐empirical wave model to statistically describe and predict severe wave conditions on vulnerable shores with potential application in coastal risk management and hazard mitigation for Pacific Islands and beyond.

Zhao, Sen [Department of Atmospheric Sciences Scho↗

How extreme rainfall and failing dams unleashed the Derna flood disaster

On September 11, 2023, Storm Daniel unleashed unprecedented rainfall over the Wadi Derna watershed, triggering one of the most devastating floods in modern history, striking Derna, a coastal city in Libya. This study reconstructs the disaster using an integrated modeling approach that combines satellite imagery, hydrologic, hydraulic, and geotechnical simulations, machine learning, eyewitness accounts, and digital elevation data to assess the impact of cascading dam failures. Our findings reveal that the region’s dams, even if structurally sound, would have provided minimal protection against the extreme runoff. However, their failure unleashed a destructive surge wave, amplifying the disaster’s magnitude and devastation. Here, we show that the collapse of aging flood control infrastructures, compounded by inadequate risk assessment and emergency preparedness, dramatically escalated the disaster’s impact. Our findings underscore the urgent need for systematic dam safety evaluations, enhanced flood forecasting, and adaptive risk management strategies that address climate extremes and infrastructure vulnerabilities.

Hydrology↗

SIGHT: Stacked Integration of Geospatial Hierarchical Typologies for Inferring Building Characteristics

Building characteristics are often absent in building stock datasets, particularly in regions most vulnerable to climate change and requiring effective disaster management strategies. Traditional machine learning approaches, while widely used to predict building attributes, typically neglect the spatial context of the data, leading to less accurate and reliable outcomes. To address these challenges, this paper introduces a novel algorithm, the Stacked Integration of Geospatial Hierarchical Typologies. This algorithm adapts a meta-learning framework to incorporate geospatial context into the predictive modeling process. We demonstrate the utility of the algorithm through two primary use cases: building use type classification and building height prediction. The algorithm consistently achieved or exceeded a 0.94 macro average F1 score across five geographically distinct countries for building use type classification. For building height prediction, it accurately predicted heights with a root mean square error of 3.01 in a comprehensive study using roughly 3.6 million buildings in Japan. These results underscore the benefits of integrating spatial hierarchies into machine learning models, enhancing both predictive accuracy and reliability in geospatial modeling. This work introduces a new algorithm to address the pervasive data sparsity issue in existing building stock datasets.

Adams, Daniel [ORNL] (ORCID:0000000196950577)↗

Examples of Mission-driven Data Science from Jefferson Lab and ACES

This presentation details mission-driven data science initiatives at Jefferson Lab and the Joint Institute for Advanced Computing on Environmental Studies (ACES). JLab, a U.S. Department of Energy Office of Science national laboratory, operates the Continuous Electron Beam Accelerator Facility (CEBAF), and is the lead institute for the new High Performance Data Facility (HPDF) Hub. The Joint Institute for ACES brings together interdisciplinary teams in health informatics, climate modeling, computer science, and physics to address environmental challenges, including flood modeling. The Hampton Roads region, particularly Norfolk and Virginia Beach, faces increasing flood risks, motivating the need for rapid, reliable, and risk-aware decision support. ACES’s flooding work has a focus on uncertainty quantification (UQ) and machine learning (ML) for coastal flood management. The work is motivated by the increasing vulnerability of communities such as Norfolk and Virginia Beach, Virginia, to frequent coastal flooding events, and the need for rapid, reliable decision support. The research develops computationally efficient ML surrogate models to forecast water levels and flooding risk. A central theme is the quantification and calibration of predictive uncertainty, especially for out-of-distribution (OOD) scenarios, using techniques such as Monte Carlo Dropout, Deep Ensembles, Gaussian Processes, and Deep Quantile Regression (DQR). The study demonstrates that distance-aware UQ is critical for reliable scientific AI, particularly in high-dimensional, safety-critical, and real-time applications.

McSpadden, Diana [Thomas Jefferson National Accele↗

The implementation of fail-operative functions in integrated digital avionics systems

System architectures which incorporate fail operative flight guidance functions within a total integrated avionics complex are described. It is shown that the mixture of flight critical and nonflight critical functions within a common computer complex is an efficient solution to the integration of navigation, guidance, flight control, display, and flight management. Interfacing subsystems retain autonomous capability to avoid vulnerability to total avionics system shutdown as a result of only a few failures.

Osoer, S. S.↗

We Don't Need Any Stinking AFSRB!

Flight Test supports four needs: a) Management approval to proceed; b) Establish a record of accountability; c) Inject expert insight into the risk management process; and d) Mitigate the human factors vulnerabilities associated with small group teaming and project ownership.

Henwood, Barton↗

SWARM: Reimagining scientific workflow management systems in a distributed world

Modern scientific workflows process massive amounts of data from diverse instruments and sensors, leveraging geographically distributed, heterogeneous compute and storage resources—from leadership-class systems to edge devices—connected by high-performance networks. The diversity of resources introduces challenges in harnessing their full potential, with resilience issues arising across applications, system software, networks, storage, and hardware. Today, workflow management systems (WMS) coordinate the execution of computation and data management tasks across target resources. However, WMS’s centralized nature makes them vulnerable to faults and scalability issues that may result in failures of entire computational campaigns. In conclusion, this paper introduces a novel agentic framework for workflow management, fully distributing and decentralizing the WMS functions and modeling them as swarm intelligence agents infused with advanced artificial intelligence solutions and traditional distributed computing algorithms that can make coordinated decisions in the presence of failures of the underlying cyberinfrastructure.

Swarm intelligence↗

Eastern Washington Disasters: Integrating NASA Earth Observations to Analyze Spatiotemporal Distributions of Lightning-Caused Wildfires in Eastern Washington

According to the Washington Department of Natural Resources, roughly 36% of large fires in the state since 2010 were caused by lightning. General trends also show a greater increase in the number of lightning-ignited fires over the last three decades. The NASA DEVELOP Eastern Washington Disasters team partnered with The Nature Conservancy’s Washington Chapter to analyze the relationship between lightning strikes and wildfire events in Eastern Washington, with an emphasis on Kittitas and Yakima Counties. Using the International Space Station Lightning Imaging Sensor, the Landsat 5 Thematic Mapper and Landsat 8 Operational Land Imager vegetation moisture index, and Washington Department of Natural Resources historical fire data, the team generated a lightning-caused fire vulnerability index for 2001-2019. Climatology maps of lightning, wildfire, and vegetation moisture of the study area, along with an Esri ArcGIS StoryMap, further communicated project findings. The project results demonstrated that spatiotemporal patterns of lightning-ignited wildfires in Eastern Washington can be useful to inform land management practices and better predict areas that may be more vulnerable to these events.

Disasters↗

Eastern Washington Disasters: Integrating NASA Earth Observations to Analyze Spatiotemporal Distributions of Lightning-Caused Wildfires in Eastern Washington

According to the Washington Department of Natural Resources, roughly 36% of large fires in the statesince 2010 were caused by lightning. General trends also show a greater increase in the number of lightning-ignited fires over the last three decades. The NASA DEVELOP Eastern Washington Disasters team partnered with The Nature Conservancy’s Washington Chapter to analyze the relationship between lightning strikes and wildfire events in Eastern Washington, with an emphasis on Kittitas and Yakima Counties. Using the International Space Station Lightning Imaging Sensor, the Landsat 5 Thematic Mapper and Landsat 8 Operational Land Imager vegetation moisture index, and Washington Department of Natural Resources historical fire data, the team generated a lightning-caused fire vulnerability index for 2001-2019. Climatology maps of lightning, wildfire, and vegetation moisture of the study area, along with an Esri ArcGIS StoryMap, further communicated project findings. The project results demonstrated that spatiotemporal patterns of lightning-ignited wildfires in Eastern Washington can be useful to inform land management practices and better predict areas that may be more vulnerable to these events.

Disasters↗

Keweenaw Bay Water Resources: Turbidity Data Decision Support for Shoreline Assessment and Management in Lake Superior's Keweenaw Bay

Community Concerns: Keweenaw Bay is vulnerable to flooding and erosion, which threaten wetland restoration projects that provide a critical habitat for wildlife and fish. Erosion and flooding threaten the loss of public beaches and shoreline, coastal infrastructure, and impacts to coastal highways, which has driven shoreline armoring projects. Our goals were to first, produce a seasonal turbidity analysis to understand the sediment redistribution patterns in the bay during snow melt and rainy seasons to provide insight into coastal sediment dynamics. KBIC has completed an Environmental Protection Agency (EPA) - funded project titled "Long-Term Coastal Dynamic Collaborative for Tribal Resiliency" which has thus far produced detailed shoreline maps of the area. The NASA DEVELOP project is taking place in between phase 1 and 2 of the EPA-funded project.

Khaim Syed-Raza↗

Security Vulnerability Profiles of Mission Critical Software: Empirical Analysis of Security Related Bug Reports

While some prior research work exists on characteristics of software faults (i.e., bugs) and failures, very little work has been published on analysis of software applications vulnerabilities. This paper aims to contribute towards filling that gap by presenting an empirical investigation of application vulnerabilities. The results are based on data extracted from issue tracking systems of two NASA missions. These data were organized in three datasets: Ground mission IVV issues, Flight mission IVV issues, and Flight mission Developers issues. In each dataset, we identified security related software bugs and classified them in specific vulnerability classes. Then, we created the security vulnerability profiles, i.e., determined where and when the security vulnerabilities were introduced and what were the dominating vulnerabilities classes. Our main findings include: (1) In IVV issues datasets the majority of vulnerabilities were code related and were introduced in the Implementation phase. (2) For all datasets, around 90 of the vulnerabilities were located in two to four subsystems. (3) Out of 21 primary classes, five dominated: Exception Management, Memory Access, Other, Risky Values, and Unused Entities. Together, they contributed from 80 to 90 of vulnerabilities in each dataset.

Goseva-Popstojanova, Katerina↗

Lac du Flambeau - Climate Change Resilience Initiative (Final Report)

The goals of this project were to create a comprehensive Environmental Resiliency Plan and to increase the capacity of all Lac du Flambeau Tribal Program Managers to incorporate environmental impact thinking into the everyday management of their departments. Environmental Resiliency Planning utilized current Tribal documents, which include the Integrated Resource Management Plan (IRMP), the Lac du Flambeau Tribal Emergency Management Plan (EMP), and the Lac du Flambeau Strategic Energy Plan, as guidance throughout the process. A vulnerability assessment initiated our technical process and allowed us to identify, quantify, and prioritize (or rank) the vulnerabilities in our system. This set the stage for a reduction and resilience plan as well as providing insight for revisions of existing management plans such as the Energy and Integrated Resources Management Plans

54 ENVIRONMENTAL SCIENCES↗

RADAMS: Resilient and adaptive alert and attention management strategy against Informational Denial-of-Service (IDoS) attacks

Attacks exploiting human attentional vulnerability have posed severe threats to cybersecurity. In this work, we identify and formally define a new type of proactive attentional attacks called Informational Denial-of-Service (IDoS) attacks that generate a large volume of feint attacks to overload human operators and hide real attacks among feints. Here, we incorporate human factors (e.g., levels of expertise, stress, and efficiency) and empirical psychological results (e.g., the Yerkes-Dodson law and the sunk cost fallacy) to model the operators’ attention dynamics and their decision-making processes along with the real-time alert monitoring and inspection. To assist human operators in dismissing the feints and escalating the real attacks timely and accurately, we develop a Resilient and Adaptive Data-driven alert and Attention Management Strategy (RADAMS) that de-emphasizes alerts selectively based on the abstracted category labels of the alerts. RADAMS uses reinforcement learning to achieve a customized and transferable design for various human operators and evolving IDoS attacks. The integrated modeling and theoretical analysis lead to the Product Principle of Attention (PPoA), fundamental limits, and the tradeoff among crucial human and economic factors. Experimental results corroborate that the proposed strategy outperforms the default strategy and can reduce the IDoS risk by as much as 20%. Besides, the strategy is resilient to large variations of costs, attack frequencies, and human attention capacities. We have recognized interesting phenomena such as attentional risk equivalency, attacker’s dilemma, and the half-truth optimal attack strategy.

97 MATHEMATICS AND COMPUTING↗

Systemic Risk

Systemic risk is the name given to impacts that spread within and across systems and sectors (e.g. ecosystems, health, infrastructure and the food sector) via the movements of people, goods, capital and information within and across boundaries (e.g. regions, countries and continents). The spread of these impacts can lead to potentially existential consequences and system collapse across a range of time horizons. Globalization contributes to systemic risk affecting people worldwide. The impacts of climate change or COVID-19 show how the challenges of addressing systemic risk go beyond conventional risk management and governance. Critical system interdependencies, amplified by underlying vulnerabilities, highlight that there is a growing need to better understand cascading impacts, systemic risks and the possible political (governance) and societal responses. This includes improving our understanding of the root causes of systemic risk, both biophysical and socio-economic, and related information needs. Addressing contemporary challenges in terms of systemic risk requires integrating different systems perspectives and fostering system thinking, while implementing key intergovernmental agendas, such as the Paris Agreement, the Sendai Framework for Disaster Risk Reduction and the Sustainable Development Goals.

systemic risk↗

A U.S. scientific community review of carbon cycle science gaps and opportunities to better support earth system science and carbon management

Greenhouse gas (GHG) emissions continue to grow, while natural carbon reservoirs are becoming increasingly vulnerable to anthropogenic pressures, climate extremes, and disturbance. These changes are impacting humans, ecosystems, and natural resources worldwide. Tracking and mitigating GHG emissions require a pivot to operational monitoring of regional carbon flux and stock changes. The current GHG observing system is addressing needs at two distinct scales: 1) Local scale (< 1 km), related to anthropogenic point source emissions, and 2) global scales (> 1000 km), related to land and ocean carbon sinks. More focus on intermediate (10–1000 km) scales is needed to more effectively monitor progress in reducing carbon emissions, enhancing removals, and maintaining sinks. Representatives from carbon cycle biomass and flux communities across United States government agencies and academic institutions met in September 2024 to discuss the rationale and scientific context for more effectively implementing an operational system for GHG monitoring in support of urban and national carbon management needs. To guide development of this system, we propose a multi-tiered global spaceborne observing framework for carbon flux and stock, prioritizing: 1) frequent GHG partial columns for carbon emissions and removals; 2) continuous time series and data fusion of biomass from Lidar and Synthetic Aperture Radar (SAR) for carbon stocks, and 3) expanded coverage of tropical, high latitude, and oceanic regions to monitor carbon cycle tipping points and feedbacks. This system should be complemented by expanded surface and airborne networks for oceanic and terrestrial/aquatic ecosystems for calibration, ground truthing, and study of under-sampled regions.

54 ENVIRONMENTAL SCIENCES↗

Energy Management Information Systems Cybersecurity Best Practices

Energy management information systems (EMIS) are a broad and rapidly evolving family of tools that monitor, analyze, and control building energy use and system performance. Critical systems are often integrated with or operate on the same networks as EMIS scope systems, necessitating stable, continuous, and secure communication. When connecting EMIS to building automation and utility control systems, there are also many physical assets that could cause harm to the building and its occupants if a malicious act or human error were introduced. It is imperative to ensure all EMIS scope systems are connected securely to the EMIS and do not open vulnerable pathways to other facility networks and operations. The Federal Energy Management Program (FEMP) promotes best practices for impactful utilization of EMIS at federal facilities. This best practice document is part of a series of fact sheets created to help accelerate the market adoption and use of EMIS in the federal sector. It provides an overview of required EMIS cybersecurity standards for compliance and authority to operate along with additional recommendations.

cybersecurity↗

Energy Management Information Systems Cybersecurity Best Practices

Energy management information systems (EMIS) are a broad and rapidly evolving family of tools that monitor, analyze, and control building energy use and system performance. Critical systems are often integrated with or operate on the same networks as EMIS scope systems, necessitating stable, continuous, and secure communication. When connecting EMIS to building automation and utility control systems, there are also many physical assets that could cause harm to the building and its occupants if a malicious act or human error were introduced. It is imperative to ensure all EMIS scope systems are connected securely to the EMIS and do not open vulnerable pathways to other facility networks and operations. The Federal Energy Management Program (FEMP) promotes best practices for impactful utilization of EMIS at federal facilities. This best practice document is part of a series of fact sheets created to help accelerate the market adoption and use of EMIS in the federal sector. It provides an overview of required EMIS cybersecurity standards for compliance and authority to operate along with additional recommendations.

Cybersecurity↗

Selection for optimal crew performance - Relative impact of selection and training

An empirical study supporting Helmreich's (1986) theoretical work on the distinct manner in which training and selection impact crew coordination is presented. Training is capable of changing attitudes, while selection screens for stable personality characteristics. Training appears least effective for leadership, an area strongly influenced by personality. Selection is least effective for influencing attitudes about personal vulnerability to stress, which appear to be trained in resource management programs. Because personality correlates with attitudes before and after training, it is felt that selection may be necessary even with a leadership-oriented training cirriculum.

Chidester, Thomas R.↗