Search NASA⌕ Search

SEARCH · Search NASA

Results for “vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Security Vulnerability Profiles of NASA Mission Software: Empirical Analysis of Security Related Bug Reports

NASA develops, runs, and maintains software systems for which security is of vital importance. Therefore, it is becoming an imperative to develop secure systems and extend the current software assurance capabilities to cover information assurance and cybersecurity concerns of NASA missions. The results presented in this report are based on the information provided in the issue tracking systems of one ground mission and one flight mission. The extracted data were used to create three datasets: Ground mission IVV issues, Flight mission IVV issues, and Flight mission Developers issues. In each dataset, we identified the software bugs that are security related and classified them in specific security classes. This information was then used to create the security vulnerability profiles (i.e., to determine how, why, where, and when the security vulnerabilities were introduced) and explore the existence of common trends. The main findings of our work include:- Code related security issues dominated both the Ground and Flight mission IVV security issues, with 95 and 92, respectively. Therefore, enforcing secure coding practices and verification and validation focused on coding errors would be cost effective ways to improve mission's security. (Flight mission Developers issues dataset did not contain data in the Issue Category.)- In both the Ground and Flight mission IVV issues datasets, the majority of security issues (i.e., 91 and 85, respectively) were introduced in the Implementation phase. In most cases, the phase in which the issues were found was the same as the phase in which they were introduced. The most security related issues of the Flight mission Developers issues dataset were found during Code Implementation, Build Integration, and Build Verification; the data on the phase in which these issues were introduced were not available for this dataset.- The location of security related issues, as the location of software issues in general, followed the Pareto principle. Specifically, for all three datasets, from 86 to 88 the security related issues were located in two to four subsystems.- The severity levels of most security issues were moderate, in all three datasets.- Out of 21 primary security classes, five dominated: Exception Management, Memory Access, Other, Risky Values, and Unused Entities. Together, these classes contributed from around 80 to 90 of all security issues in each dataset. This again proves the Pareto principle of uneven distribution of security issues, in this case across CWE classes, and supports the fact that addressing these dominant security classes provides the most cost efficient way to improve missions' security. The findings presented in this report uncovered the security vulnerability profiles and identified the common trends and dominant classes of security issues, which in turn can be used to select the most efficient secure design and coding best practices compiled by the part of the SARP project team associated with the NASA's Johnson Space Center. In addition, these findings provide valuable input to the NASA IVV initiative aimed at identification of the two 25 CWEs of ground and flight missions.

vulnerability↗

Youngstown and Warren Disasters: Mapping Flood Susceptibility, Vulnerability, and Risk and Tree Canopy Coverage in Northern Ohio to Inform Stormwater Management and Flood Mitigation Efforts

Both pluvial and fluvial flooding events pose direct challenges on urban infrastructure and communities across the United States. Heavy rainfall events oversaturate the ground, overflow waterbodies, and overwhelm stormwater infrastructure. Vulnerable areas receive heavy damage from flooding events due to physical factors like increased impervious surfaces, poor stormwater systems, and limited greenspaces. These vulnerable neighborhoods are comprised of aging populations, minority communities, and lower income levels. Lack of data in these communities have made it difficult to implement policymaking and flood mitigation strategies. Using the Urban Flood Risk Mitigation model (InVEST) and the PlanetScope satellite constellation, the team visualized historical flooding and tree canopy coverage as a measure of flood susceptibility. The team also used the Arc-Malstrom model to provide further insight into where flooding accumulates via surface elevation depressions in the study area. To validate these models, the team explored the spatial variation of rainfall events using NASA’s Integrated Multi-satellite Retrievals for Global Precipitation Measurement (GPM IMERG). The resulting maps highlight areas surrounding the cities of Youngstown and Warren as being the most flood susceptible and socially vulnerable, while the city centers contain the lowest tree canopy coverage. The DEVELOP team collaborated with the Environmental Collaborative of Ohio (ECO) to create products for end users within the City of Warren’s Water Pollution Control Department, the Eastgate Regional Council of Governments and the Healthy Community Partnership of Mahoning Valley. These products help identify target areas for preventative flood mitigation measures as well as areas ideal for green infrastructure intervention.

InVEST Urban Flood Risk Mitigation Model↗

Improving Tornado Casualty Predictions in the US With Population Exposure Data and A Modified Social Vulnerability Index

Tornadoes are frequent and widespread events that often account for hundreds of injuries and fatalities, and millions of dollars in damages. Multiple studies have analyzed tornado climatology and associated exposure; however, fewer have focused on predicting fatalities and injuries by coupling geospatial data on tornado characteristics and underlying social and economic vulnerability. In this study, we test the ability of negative binomial regression models to predict tornado-induced injuries and fatalities by coupling data on physical characteristics of tornadoes, exposure of populations, and underlying social vulnerability. We also present a modified spatially weighted social vulnerability index SVI* wt . We used 10-year (2005-2014) tornado data over the continental United States for this analysis. The results of this study indicate that the tornado length, magnitude and nocturnality seem to be the major hazard-related indicators of fatalities (McFadden’s Pseudo- R 2 ranged from 0.01-0.12). Population exposure and SVI* wt are positive and statistically significant in predicting tornado related fatalities and injuries (Pseudo R 2 of 0.11-0.18). Although combining SVI* wt with hazard variables does not substantially improve model fit when compared to adding population exposure, combining SVI* wt , hazard and exposure results in better predictions of both injuries and fatalities (Pseudo R 2 of 0.17) and is also an improvement on previous similar studies.

disaster↗

Climate Vulnerability Assessment and Resilience Planning for Idaho National Laboratory

Idaho National Laboratory’s (INL’s) mission is to discover, demonstrate, and secure innovative nuclear energy solutions, other clean energy options, and critical infrastructure. This INL’s Climate Vulnerability Assessment and Resilience Plan (VARP) was developed to enable and sustain that mission while ensuring the viability of operations considering expected climate change impacts. The VARP was developed according to the narrative requirements from the “Vulnerability Assessment and Resilience Planning Guidance, Version 1.2” document issued in February 2022. A prescribed process was used to identify mission-critical systems and components, determine historical and expected climate impacts, and develop resilient solutions. Experts from across INL, including operations staff, researchers, and climate scientists supplied input to the process. Analyses of climate modeling sources revealed that under scenarios of higher and lower greenhouse gas emissions (Representative Concentration Pathway (RCP) 4.5 and RCP 8.5), INL anticipates an increase in climate hazards, including drought, heat waves, wildfire, and precipitation. Increased frequency and duration of climatic hazards forecasts high impacts on certain mission-critical asset and infrastructure types. Utilizing the VARP Risk Assessment Tool, projected high climate hazard impacts across multiple asset and infrastructure types at the INL include energy generation and distribution systems, Site buildings, specialized or mission-critical equipment, and transportation and fleet infrastructure. Some of these mission-critical asset and infrastructure types maintain high adaptive capacity to climatic changes; however, others may need additional adaptive capacity to withstand increased frequency and duration of climate hazards. INL identified close to 300 resilient solutions that were consolidated into 11 solution categories to be tracked in the Department of Energy Sustainability Dashboard. The identified solutions are a starting point for future project development and analysis. These data are intended to inform decision makers on climate issues and potential solutions across INL and associated communities. The VARP is not intended to be a budget tool or project decision document on its own, but rather one of many tools used by decision makers to establish resilient priorities. This initial document provides the framework and foundation to resilient solutions. In the coming years, each solution needs to be fully developed, costed, and prioritized based on mission-critical risk and funding priorities.

54 ENVIRONMENTAL SCIENCES↗

Vulnerability of mineral-organic associations in the rhizosphere

The majority of soil carbon (C) is stored in organic matter associated with reactive minerals. These mineral-organic associations (MOAs) inhibit microbial and enzymatic access to organic matter, suggesting that organic C within MOAs is resistant to decomposition. However, plant roots and rhizosphere microbes are known to transform minerals through dissolution and exchange reactions, implying that MOAs in the rhizosphere can be dynamic. Here we identify key drivers, mechanisms, and controls of MOA disruption in the rhizosphere and present a new conceptual framework for the vulnerability of soil C within MOAs. We introduce a vulnerability spectrum that highlights how MOAs characteristic of certain ecosystems are particularly susceptible to specific root-driven disruption mechanisms. This vulnerability spectrum provides a framework for critically assessing the importance of MOA disruption mechanisms at the ecosystem scale. Comprehensive representation of not only root-driven MOA formation, but also disruption, will improve model projections of soil C-climate feedbacks and guide the development of more effective soil C management strategies.

54 ENVIRONMENTAL SCIENCES↗

High-resolution mountain topography can inform global snow vulnerability estimates

Snow is changing globally. Computationally intensive snow reanalysis products and downscaled climate model projections allow for the estimation of historical and projected changes in snow over ∼4–10 km resolutions, but these resolutions are coarse relative to the scales needed for water supply and flood planning. Fine-scale digital elevation models (DEMs) are widely available but are underutilized to make first-order assessments of snow vulnerability. Here, we leverage DEMs at a 7.5 arc s (∼250 m) resolution, combining these with historical freezing level height estimates from ERA-5 to derive estimates of changes in the snow-receiving area (SRA) and its variability across global mountain ranges. Results show estimated SRA declines in 29% (1.9 million km2) of the global mountain area from 1982–2020; 66% of the mountainous areas had no change over the historical period. At +1.5 °C of warming relative to the pre-industrial control, global mountain SRA would decline by 9.5% (1.0 million km2) relative to recent conditions. This loss would be approximately doubled with +2 °C of warming. In a +4 °C warming scenario, an additional 34% (3.6 million km2) of SRA would be lost beyond the +2 °C case. Across individual mountain ranges, SRA losses can occur nonlinearly with warming, with some locations that have historically had relatively minor SRA losses at risk of substantially larger losses in warmer climates. Analysis using coarser-resolution DEMs can underestimate or overestimate SRA and its rate of loss, with the largest impacts in relatively warm, low-elevation mountain ranges. Results of this work provide estimates of projected loss in SRA at policy-relevant warming levels; inform the resolutions needed for process-based snow modeling; identify snow vulnerability hotspots; and provide a new integrated approach to snow vulnerability assessment that is achievable at global scales and highlights potential nonlinearities from recent trends to a variety of future warming scenarios.

climate, mountains↗

Toward Quantifying Vulnerabilities in Critical Infrastructure Systems

Modern society is increasingly dependent on the stability of a complex system of interdependent infrastructure sectors. Vulnerability in critical infrastructures (CIs) is defined as a measure of system susceptibility to threat scenarios. Quantifying vulnerability in CIs has not been adequately addressed in the literature. This paper presents ongoing research on how the authors model CIs as network-based models and propose a set of metrics to quantify vulnerability in CI systems. The size and complexity of the CIs make this a challenging task. These metrics could be used for planning and efficient decision-making during extreme events.

Devineni, Pravallika↗

Historical Power Outages of the United States and the Social Vulnerability Index

Several works have been documented in the literature to study the societal effect of power outages and to analyze their correlation with the Social Vulnerability Index (SVI). Because the SVI is calculated based on the summed rank of multiple vulnerability factors for environmental hazards, it can include factors irrelevant to power outages caused by extreme events. This work performs a detailed correlation analysis for social vulnerability and power outages by considering different SVI themes (e.g., socioeconomic status, household composition, racial and ethnic minority status, and housing and transportation) and power outages with and without a threshold for extreme weather events. Although there is some relation between specific themes and aspects of power outages and the SVI in the results, there is no strong distinction between power outage durations and low vs. high SVI values. These results point to the need for further research that grounds the specific factors and methods used to develop SVI and related indices to energy services and power systems disruptions.

Bhusal, Narayan↗

A Machine Learning-Based Vulnerability Analysis for Cascading Failures of Integrated Power-Gas Systems

This article proposes a cascading failure simulation (CFS) method and a hybrid machine learning method for vulnerability analysis of integrated power-gas systems (IPGSs). The CFS method is designed to study the propagating process of cascading failures between the two systems, generating data for machine learning with initial states randomly sampled. The proposed method considers generator and gas well ramping, transmission line and gas pipeline tripping, island issue handling and load shedding strategies. Then, a hybrid machine learning model with a combined random forest (RF) classification and regression algorithms is proposed to investigate the impact of random initial states on the vulnerability metrics of IPGSs. Extensive case studies are carried out on three test IPGSs to verify the proposed models and algorithms. Simulation results show that the proposed models and algorithms can achieve high accuracy for the vulnerability analysis of IPGSs.

24 POWER TRANSMISSION AND DISTRIBUTION↗

The xylem of anisohydric Quercus alba L. is more vulnerable to embolism than isohydric codominants

Abstract The coordination of plant leaf water potential (Ψ L ) regulation and xylem vulnerability to embolism is fundamental for understanding the tradeoffs between carbon uptake and risk of hydraulic damage. There is a general consensus that trees with vulnerable xylem more conservatively regulate Ψ L than plants with resistant xylem. We evaluated if this paradigm applied to three important eastern US temperate tree species, Quercus alba L., Acer saccharum Marsh. and Liriodendron tulipifera L., by synthesizing 1600 Ψ L observations, 122 xylem embolism curves and xylem anatomical measurements across 10 forests spanning pronounced hydroclimatological gradients and ages. We found that, unexpectedly, the species with the most vulnerable xylem ( Q. alba ) regulated Ψ L less strictly than the other species. This relationship was found across all sites, such that coordination among traits was largely unaffected by climate and stand age. Quercus species are perceived to be among the most drought tolerant temperate US forest species; however, our results suggest their relatively loose Ψ L regulation in response to hydrologic stress occurs with a substantial hydraulic cost that may expose them to novel risks in a more drought‐prone future.

Benson, Michael C.↗

Dataset for: Electric Vulnerability Index: Targeted Energy Storage Implementation Metric

Uninterrupted access to electricity is critical to the safety and security of American households. More frequent and extreme emergency events increase outages across the country, disproportionately impacting vulnerable communities that experience the most frequent and longest outages, are most sensitive to the loss of electric power, and have the least capacity to adapt to these conditions. This study devises a metric, the Electric Vulnerability Index (EVI), and validates this metric against the 2021 Winter Storm Uri in Texas. Though not ubiquitous, similar trends were observed between adjacent areas with higher EVI and those with higher outage rates from this storm. EVI is offered as a viable approach to quantify a population’s vulnerability to electric outages and maps that index across the continental United States to aid policymakers, advocates, and energy system stakeholders in the targeted deployment of resilience solutions, such as energy storage, to communities most in need. This dataset includes the geopackage file containing all relevant attributes used to generate the maps used in the accompanying paper.

Kerby, Jessica [Pacific Northwest National Laborat↗

Electrical alternans during rest and exercise as predictors of vulnerability to ventricular arrhythmias

This investigation was performed to evaluate the feasibility of detecting repolarization alternans with the heart rate elevated with a bicycle exercise protocol. Sensitive spectral signal-processing techniques are able to detect beat-to-beat alternation of the amplitude of the T wave, which is not visible on standard electrocardiogram. Previous animal and human investigations using atrial or ventricular pacing have demonstrated that T-wave alternans is a marker of vulnerability to ventricular arrhythmias. Using a spectral analysis technique incorporating noise reduction signal-processing software, we evaluated electrical alternans at rest and with the heart rate elevated during a bicycle exercise protocol. In this study we defined optimal criteria for electrical alternans to separate patients from those without inducible arrhythmias. Alternans and signal-averaged electrocardiographic results were compared with the results of vulnerability to ventricular arrhythmias as defined by induction of sustained ventricular tachycardia or fibrillation at electrophysiologic evaluation. In 27 patients alternans recorded at rest and with exercise had a sensitivity of 89%, specificity of 75%, and overall clinical accuracy of 80% (p <0.003). In this patient population the signal-averaged electrocardiogram was not a significant predictor of arrhythmia vulnerability. This is the first study to report that repolarization alternans can be detected with heart rate elevated with a bicycle exercise protocol. Alternans measured using this technique is an accurate predictor of arrhythmia inducibility.

Clinical Trial↗

NASA's Research in Aircraft Vulnerability Mitigation

Since its inception in 1958, the National Aeronautics and Space Administration s (NASA) role in civil aeronautics has been to develop high-risk, high-payoff technologies to meet critical national aviation challenges. Following the events of Sept. 11, 2001, NASA recognized that it now shared the responsibility for improving homeland security. The NASA Strategic Plan was modified to include requirements to enable a more secure air transportation system by investing in technologies and collaborating with other agencies, industry, and academia. NASA is conducting research to develop and advance innovative and commercially viable technologies that will reduce the vulnerability of aircraft to threats or hostile actions, and identify and inform users of potential vulnerabilities in a timely manner. Presented in this paper are research plans and preliminary status for mitigating the effects of damage due to direct attacks on civil transport aircraft. The NASA approach to mitigation includes: preventing loss of an aircraft due to a hit from man-portable air defense systems; developing fuel system technologies that prevent or minimize in-flight vulnerability to small arms or other projectiles; providing protection from electromagnetic energy attacks by detecting directed energy threats to aircraft and on/off-board systems; and minimizing the damage due to high-energy attacks (explosions and fire) by developing advanced lightweight, damage-resistant composites and structural concepts. An approach to preventing aircraft from being used as weapons of mass destruction will also be discussed.

Allen, Cheryl L.↗

Scalable Asset Discovery, Vulnerability Scanning, and Penetration Testing for Remote Sites and Wireless Spectrums Utilizing an Embedded Linux Plug - PwniPlug and the Raspberry Pi B+ as a Sample Pen Test

All devices attached to the NASA KSC network are subject to security vulnerability scanning and/or penetration testing. In today's changing environment, vulnerable and/or unprotected systems can easily be overlooked. Systems that are not properly managed can become a potential threat to the operational integrity of our systems and networks. This includes all NASA (internal and external) information systems within NASA KSC Internet Protocol (IP) address space, and NASA KSC facilities. The Office of the Chief Information Officer (OCIO) recommends that all NASA Centers and information systems be subject to penetration testing on a regular interval in accordance with the guidelines identified by the National Institute of Standards and Technology (NIST). (ITS-HBK-2810.04-02A) Protecting information and equipment at NASA is an area of increasing concern. In addition to the CPU's on the network; Supervisory, Control and Data Acquisition (SCADA) systems are especially vulnerable because these systems have lacked standards, use embedded controllers with little computational power and informal software, are connected to physical processes, have few operators, and are increasingly also being connected to corporate networks. The scope of work is comprised of several individual components which together build upon previous work by Drew Branch, NASA KSC Intern. The Pwn Plug is the selected COTS (Commercial-Off-The-Shelf) device chosen to test simplification of mandatory IT Security tasks. The device will be utilized to provide services to NASA KSC and enable an assessment of infrastructure soundness and regulatory compliance in an efficient, economical, and business responsive manner. The Pwn Plug is designed as a pen testing appliance which provides a hardware platform that can support commercial penetration testing efforts at significantly reduced costs. The expected outcomes are: 1) External Penetration Testing, 2) Social Engineering, 3) Procedural Documentation, 4) Recommended Remediation Action Plan, 5) System Retest & Remediation Attestation and 6) Final Reports, out briefing and Presentation. Due to physical and material constraints beyond intern and mentor control, the project was redefined as a working pen-test scenario. Limitations of lab availability and tools dictated an academic exercise. This report was developed within the scenario guidelines suggested by the project mentor. The guidelines were to be creative in developing a Pen Test program for a client.

Penetration Testing↗

Philadelphia Health & Air Quality: Assessing Land Surface Temperature, Vegetation Cover, and Compounding Vulnerability Factors to Identify High Priority Areas for Cooling Initiatives in Philadelphia, Pennsylvania

Heat is the leading cause of weather-related deaths in the US, with heat-related hospitalizations increasing by 2-5% between 2001-2010. In Philadelphia alone, 137 heat-related deaths were recorded between 2010-2018, while a total of 18 daily temperature records have been set since 2010. Temperature is relatively higher in cities compared to rural areas, a phenomenon known as the urban heat island effect. This effect exaggerates daytime maximum temperatures and nighttime heat retention in urban areas, which increases heat exposure in urban environments and especially impacts vulnerable populations. Vulnerability to heat-related illnesses is determined by a combination of risk factors, such as demographics, socioeconomic status, and preexisting health conditions. This project supported the Philadelphia Department of Public Health and Office of Sustainability by identifying priority areas for cooling interventions, such as heat danger educational outreach and urban tree planting. The team developed heat vulnerability scores for each census tract within Philadelphia. Remotely sensed land surface temperature, normalized difference vegetation index, normalized difference built-up index, normalized difference water index, and albedo data were calculated from Aqua Moderate Resolution Imaging Spectroradiometer and Landsat 8 Operational Land Imager/Thermal Infrared Sensor instruments. These variables were weighted against socioeconomic variables and preexisting health conditions using a principal component analysis. A total of 74 census tracts clustered were identified as high-risk areas for heat-related illnesses. 15 of these census tracts also had very low tree density (lower 20th percentile) and should be targeted for tree planting initiatives. The findings of this project will help target interventions to mitigate heat-related health issues and improve the overall wellness of Philadelphia residents.

Health & Air Quality↗

Philadelphia Health & Air Quality: Assessing Land Surface Temperature, Vegetation Cover, and Compounding Vulnerability Factors to Identify High Priority Areas for Cooling Initiatives in Philadelphia, Pennsylvania

Heat is the leading cause of weather-related deaths in the US, with heat-related hospitalizations increasing by 2-5% between 2001-2010. In Philadelphia alone, 137 heat-related deaths were recorded between 2010-2018, while a total of 18 daily temperature records have been set since 2010. Temperature is relatively higher in cities compared to rural areas, a phenomenon known as the urban heat island effect.This effect exaggerates daytime maximum temperatures and nighttime heat retention in urban areas, which increases heat exposure inurban environments and especially impacts vulnerable populations. Vulnerability to heat-related illnesses is determined by a combination of risk factors, such as demographics, socioeconomic status, and preexisting health conditions. This project supported the Philadelphia Department of Public Health and Office of Sustainability by identifying priority areas for cooling interventions, such as heat danger educational outreach and urban tree planting. The team developed heat vulnerability scores for each census tract within Philadelphia. Remotely sensed land surface temperature, normalized difference vegetation index, normalized difference built-up index, normalized difference water index, and albedo data were calculated from Aqua Moderate Resolution Imaging Spectroradiometer and Landsat 8 Operational Land Imager/Thermal Infrared Sensor instruments. These variables were weighted against socioeconomic variables and preexisting health conditions using a principal component analysis. A total of 74 census tracts clustered were identified as high-risk areas for heat-related illnesses. 15 of these census tracts also had very low tree density (lower 20th percentile) and should be targeted for tree planting initiatives. The findings of this project will help target interventions to mitigate heat-related health issues and improve the overall wellness of Philadelphia residents.

Health & Air Quality↗

Yonkers Urban Development: Utilizing NASA Earth Observations to Identify Environmental and Social Drivers of Urban Heat Vulnerability and Model Urban Cooling Interventions in Yonkers, New York

The City of Yonkers, New York, is located directly north of the Bronx in Westchester County and currently hosts a population of nearly 200,000. In response to increasing hot-weather episodes, the risk of heat-related illnesses and mortality is disproportionately affecting neighborhoods in Yonkers historically subjected to race-based housing segregation. NASA DEVELOP collaborated with Groundwork Hudson Valley to determine regions within Yonkers that are experiencing the most intense urban heat island effects, identify and rank sociodemographic and environmental determinants of increasing community-level vulnerability, map these vulnerabilities as a combined vulnerability index, complete a proximity analysis of walkability to local cooling centers and health facility locations, and model potential cooling strategies. The study area consisted of Yonkers, NY and the analyses used data from 2015-2020 (June through August). The project utilized NASA Earth observation products including Landsat 4 and 5 Thematic Mapper (TM), Landsat 7 Enhanced Thematic Mapper Plus (ETM+), Landsat 8 Operational Land Imager (OLI) and Thermal Infrared Sensor (TIRS), Terra Advanced Spaceborne Thermal Emission and Reflection Radiometer (ASTER), and ECOsystem Spaceborne Thermal Radiometer Experiment on Space Station (ECOSTRESS). We assessed the benefits of different heat-mitigation scenarios by utilizing the Integrated Valuation of Ecosystem Services and Tradeoffs (InVEST) urban cooling model. Results from these analyses can be used by Groundwork Hudson Valley, supporting the New York State’s Climate Safe Communities Certifiable Planning Actions, expanding knowledge on the relationship between historic redlining and environmental equity, and informing their Climate Safe Neighborhoods initiative to identify and prioritize mitigation efforts to abate the worst impacts of extreme heat.

Jillian Walechka↗