SEARCH · Search NASA

Results for “Infrastructure vulnerability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

All sources NASA NTRS DOE OSTI

DOE OSTI2025

SCEPTRE: A Cyber-Physical Emulation Capability

Cyber-physical systems form a critical but vulnerable backbone to US critical infrastructure. Recent high-profile cyber-attacks have shown the need for increased assessment and hardening of these systems. However, such assessments and investigations into advanced technologies to harden these systems is difficult due to their operational nature. Instead, modeling of these systems is heavily leveraged. Investigation into these complex systems and their potential cascading failures requires comprehensive modeling of both the cyber and physical components of the system. This paper introduces SCEPTRE, an emulation capability to address this need.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

NASA NTRS2004

Wireless Channel Characterization in the Airport Surface Environment

Given the anticipated increase in air traffic in the coming years, modernization of the National Airspace System (NAS) is a necessity. Part of this modernization effort will include updating current communication, navigation, and surveillance (CNS) systems to deal with the increased traffic as well as developing advanced CNS technologies for the systems. An example of such technology is the integrated CNS (ICNS) network being developed by the Advanced CNS Architecture and Systems Technology (ACAST) group for use in the airport surface environment. The ICNS network would be used to convey voice/data between users in a secure and reliable manner. The current surface system only supports voice and does so through an obsolete physical infrastructure. The old system is vulnerable to outages and costly to maintain. The proposed ICNS network will include a wireless radio link. To ensure optimal performance, a thorough and accurate characterization of the channel across which the link would operate is necessary. The channel is the path the signal takes from the transmitter to the receiver and is prone to various forms of interference. Channel characterization involves a combination of analysis, simulation, and measurement. My work this summer was divided into four tasks. The first task required compiling and reviewing reference material that dealt with the characterization and modeling of aeronautical channels. The second task involved developing a systematic approach that could be used to group airports into classes, e.g. small airfields, medium airports, large open airports, large cluttered airports, etc. The third task consisted of implementing computer simulations of existing channel models. The fourth task entailed measuring possible interference sources in the airport surface environment via a spectrum analyzer.

Neville, Joshua T.↗

NASA NTRS2018

An Overview of Science Challenges Pertaining to our Understanding of Extreme Geomagnetically Induced Currents

Vulnerability of man-made infrastructure to Earth-directed space weather events is a serious concern for today's technology-dependent society. Space weather-driven geomagnetically induced currents (GICs) can disrupt operation of extended electrically conducting technological systems. The threat of adverse impacts on critical technological infrastructure, like power grids, oil and gas pipelines, and communication networks, has sparked renewed interest in extreme space weather. Because extreme space weather events have low occurrence rate but potentially high impact, this presents a major challenge for our understanding of extreme GIC activity. In this chapter, we discuss some of the key science challenges pertaining to our understanding of extreme events. In addition, we present an overview of GICs including highlights of severe impacts over the last 80 years and recent U.S. Federal actions relevant to this community.

Ngwira, Chigomezyo M.↗

DOE OSTI2024

Overview and Commentary on Applying the Coordinated Vulnerability Disclosure Process to Photovoltaic System Devices

The rapid expansion of photovoltaic (PV) systems, particularly inverters, has introduced new cybersecurity challenges that threaten both local operations as well as the broader electrical grid’s stability. PV inverters, integrated into critical energy infrastructure are potential targets for cyber attacks due to vulnerabilities in firmware, remote access systems, and communication protocols. The Coordinated Vulnerability Disclosure (CVD) process, as defined by the Cybersecurity and Infrastructure Security Agency (CISA), provides a framework for identifying, reporting, and addressing these vulnerabilities in a transparent and collaborative manner. This report outlines the CVD process as it applies to PV systems, detailing the roles of key stakeholders, such as manufacturers, grid operators, and security researchers. The report also highlights specific challenges in managing vulnerabilities for new and legacy PV systems, which includes those introduced by insecure communications and third-party supply chain components. By adhering to the CVD process, the PV industry can mitigate cybersecurity risks, ensure regulatory compliance, and maintain consumer trust, while safeguarding the operational resilience of the energy grid. Ultimately, the effective coordination of vulnerability management is crucial for securing the future of PV systems within the critical electric grid infrastructure landscape.

14 SOLAR ENERGY↗

DOE OSTI2025

Cybersecurity Considerations for Hydrogen Infrastructure in Airport Environments

This report explores key cybersecurity concerns and best practices within environments that serve as reference points for the development of hydrogen fueling infrastructure for aviation. This cybersecurity analysis leverages prior NREL studies: 1) hydrogen fueling station component validation to identify vulnerabilities and failure events documented in physical equipment, and 2) electric aircraft charging infrastructure analysis to explore primary cybersecurity vulnerabilities. It reviews the criticality of digitized technologies in sustaining hydrogen fuel production, storage, and fueling systems, noting cybersecurity concerns that are universal to power systems and industrial control systems in general. In considering cybersecurity vulnerabilities within a future landscape of hydrogen energy for aviation applications, a reference architecture was intended to reveal the points of connection between assets and the potential sensors that are vulnerable to manipulation in the event of compromised access or communication within a SCADA system. A generalized reference architecture can help stakeholders, engineers, or strategists understand connections, criticalities, and standard practices when it comes to designing and planning for new systems. There are several gaps to account for in assessing the future of hydrogen production, storage, and fueling for aviation. Engaging stakeholders, including aircraft manufacturers, electric utilities, site property owners, and local communities, will inform decision-making around site structure, operations, and resources for future hydrogen fueling infrastructure to understand operational needs and cybersecurity awareness. Cybersecurity mitigation strategy must consider physical attack vectors that emerge with the integration of hydrogen systems into existing airport security requirements. The cybersecurity risk assessment contained in this report is an entry point into potential future granular-level analyses to be conducted as part of hazard and risk assessments for safe aviation hydrogen infrastructure, determining how the scale of hydrogen fuel infrastructure for aviation impacts the volume of cyber attack vectors, and what, if any, are the vulnerabilities associated with different types of on-board hydrogen systems. In this nascent development phase, assessing how best to integrate cybersecurity practices into an evolving U.S. aviation landscape provides critical insights into building increased awareness and stakeholder engagement to support a cyber-resilient infrastructure.

08 HYDROGEN↗

NASA NTRS2024

Kentucky Disasters: Multi-Hazard Approach to Mapping Flood Susceptibility and Vulnerability in Kentucky

Flooding is the most common and costly natural disaster in Kentucky, with major flood events in 2022 and 2023 highlighting the need for flood risk assessment. In partnership with the National Weather Service Jackson and Paducah Forecast Offices and the Kentucky Climate Center, we mapped flood risk in Kentucky using a multi-hazard approach that considered two dimensions of risk: flood susceptibility based on a weighted combination of seven physical factors and flood vulnerability based on 13 socioeconomic and infrastructure factors. We additionally analyzed NASA Soil Moisture Active Passive (SMAP) observations of surface soil moisture to explore the utility of SMAP observations for future analysis of flood risk. By analyzing flood susceptibility, we found that with equal rainfall, western Kentucky generally displays a higher propensity to flood than eastern Kentucky. In contrast, our flood vulnerability analysis indicated that more vulnerable areas were generally concentrated in the eastern part of the state. Through a combined perspective, our flood risk analysis identified much of the state as having moderate degrees of flood susceptibility and vulnerability. Our parallel analysis of antecedent soil moisture found that SMAP soil moisture levels were variable in the months leading up to each flood event but were drier than normal in the month prior to the 2023 event, as shown by negative soil moisture anomalies. These results were limited by challenges with weighting input parameters and a lack of validation but overall demonstrate the feasibility of using GIS and Earth observations for mapping flood risk and soil moisture.

analytic hierarchy process↗

DOE OSTI2022

Social vulnerability and power loss mitigation: A case study of Puerto Rico

The increasing occurrence of extreme weather events urges us to reevaluate the resiliency and vulnerability aspects of our most critical infrastructures — such as power grids — as their failures result in both economic loss and severe human hardship. Seen through the lens of alleviating human suffering, it is crucial to be able to identify critical system components of the infrastructure for targeted hardening given resource constraints. This effort is of particular importance in islanded areas such as Puerto Rico where hurricanes are frequent and resources are limited, and where the spatially diverse effects of power loss on human suffering are all the more severe. Recent studies on evaluating infrastructure networks during extreme weather events have taken a simulation based approach that incorporates a variety of component models, such as weather realizations, topological network models, fragility models, and power flow models to estimate expected loss of service. Here, in this work, we expand such a Component Based Event Simulation (CBES) methodology proposed in the literature and integrate it with a social vulnerability modeling component. This paradigm-advancing approach of synthesizing the cutting edge capability of power network modeling and the social impacts of the power transmission network failure is demonstrated for the island of Puerto Rico. Our work exemplifies the efficacy of this integrated modeling framework in developing a decision metric for targeted transmission line hardening.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

Addressing Consequence within Operational Risk (O.T. Gagnon III) 9-18-2024

Addressing Consequence within Operational Risk: Why threats and security are just not that important! When dealing with cyber or physical risk within any critical infrastructure (CI) environment, don’t concern yourself with vulnerabilities and threats, at least not at first! Also, don’t be overly fixated on “securing the systems” within the organization. The endeavor of tackling operational risk focused on consequences in any critical infrastructure environment to include the complex Aviation ecosystem is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure environment in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure environment as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space. When it comes to cyber risks, before an organization can consider vulnerabilities within and threats to its operations, it must first have a solid understanding of the consequences existing inside its infrastructure environment. Idaho National Lab’s Consequence-Driven, Cyber-Informed Engineering is offered as an example of this approach to effective and efficient cyber risk mitigation.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2021

Heat Vulnerability Index Development and Mapping

Extreme heat is one of the leading causes of weather-related deaths in the U.S. Exposure to extreme heat will be exacerbated due to global climate change. It is thus crucial to design a key performance indicator, heat vulnerability index (HVI), to represent overall heat risk which can help identify susceptible regions and sub-populations in cities in the face of heatwaves. Most existing HVI tools only consider outdoor heat exposure. This paper developed an HVI web map tool incorporating both the outdoor and the indoor heat exposure, as well as population sensitivity and adaptation capability across census tracts in the city of Fresno, California. The tool can assist the planning of infrastructure and resources to reduce residents’ vulnerability to extreme heat events.

Xu, Yujie↗

DOE OSTI2022

Review of Electric Vehicle Charger Cybersecurity Vulnerabilities, Potential Impacts, and Defenses

Worldwide growth in electric vehicle use is prompting new installations of private and public electric vehicle supply equipment (EVSE). EVSE devices support the electrification of the transportation industry but also represent a linchpin for power systems and transportation infrastructures. Cybersecurity researchers have recently identified several vulnerabilities that exist in EVSE devices, communications to electric vehicles (EVs), and upstream services, such as EVSE vendor cloud services, third party systems, and grid operators. The potential impact of attacks on these systems stretches from localized, relatively minor effects to long-term national disruptions. Fortunately, there is a strong and expanding collection of information technology (IT) and operational technology (OT) cybersecurity best practices that may be applied to the EVSE environment to secure this equipment. In this paper, we survey publicly disclosed EVSE vulnerabilities, the impact of EV charger cyberattacks, and proposed security protections for EV charging technologies.

33 ADVANCED PROPULSION SYSTEMS↗

DOE OSTI2024

Architecture Design for Remote Operation of Microreactors: Poster

The nuclear sector is pursuing a number of advanced reactor concepts, one of which is the microreactor, an advanced reactor characterized by a power output of less than 20 MWth. These reactors are intended for use in applications where traditional power solutions are economically or logistically impractical. One key feature required for the successful deployment of microreactors is a remote operation capability, which can dramatically cut staffing expenses by eliminating the need for licensed operators to be present at the site of each reactor and instead concentrate in a centrally located operations center. In moving to a remote operations framework for nuclear reactors, the number of potential attack surfaces for a cyber adversary looking to cause harm or disruption increases. Therefore, a robust cybersecurity architecture is required to mitigate these potential vulnerabilities. This paper explores the functional infrastructure, security, and communication requirements to adapt remote operations to nuclear applications. It then presents a reference architecture for remote operations of microreactors that applies best practices in cybersecurity and remote communications in the context of a digital twin remote operation system.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2021

FLC Award: QED: Quantum Ensured Defense of the Smart Electric Grid

A reliable electric power supply is crucial for modern day life as well as national security, economic productivity, and life-and-death essentials. During the COVID pandemic, internet and cell communications became a “must-have” for government and business operations, education, and communicating COVID testing for vaccine information. Loss of electric power quickly leads to human health and national security emergencies. When a major winter storm hit Texas in mid-February 2021, the system was overwhelmed and over 4M people lost power. Although this crisis arose from an unprecedented weather event - not a cyberattack - it serves as a vivid illustration of the impact power disruption can have on our American way of life. The recent cyberattack on the Colonial Oil Pipeline also provides a stark reminder that infrastructure supporting our daily lives has vulnerabilities.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2022

Satellite Enveloped with STITCHED Engineering Sensors for Detection of Approaching Objects

Today as well as tomorrows spaceborne assets impact almost all areas of national and nuclear security. Spaceborne assets can not only collect and disseminate valuable data, well beyond just the visual, but also track terrestrial-based mobile assets in real-time, and active spaceborne platforms potentially pose serious risk to vulnerable earth-based systems and infrastructures. The capability to defend national spaceborne assets from attack/interference is critical for security interests. This effort supports this mission through the cost-effective preeminent detection of approaching threats to our nation’s vital resources, in order to help secure and trust these high-value assets against the threats of tomorrow. This project develops novel fabrication techniques for conformal, low-profile and lightweight leakywave antenna (LWA) detection/imaging systems, which fuses technical embroidery (TE) and laser ablation (LA) processes with LWA design. Technical embroidery is an emerging field in additive textile manufacturing where flexible materials and functionalized fabrics are created for a wide variety of uses and purposes, while laser ablation is the process of removing material from a solid surface by irradiating it with a laser beam. Here, thin, conformal antenna designs are designed, modeled and fabricated using both TE and LA, to create lightweight, flexible and conformal object detection and imaging radars. This novel development ensures our nation’s ability to field advanced lightweight and conformal technologies to protect spaceborne assets.

42 ENGINEERING↗

DOE OSTI2025

Mississippi's Strategic Resilience: A multi-systems approach to secure, reliable, and adaptable electric grid infrastructure

Mississippi’s electric grid resilience challenges are linked to an intersection of complex socioeconomic, ecological, technological, historical, and political challenges, exacerbated by increasing severe weather like flooding and tornado events. The state’s legacy of underinvestment in critical energy infrastructure, particularly in rural areas and vulnerable floodplains, have stressed an aging grid, creating long-lasting disruptions in electric service during weather-related outages. Effective emergency management and preparedness is further hampered by a lack of coordination across local, county, and regional scales. Using the TASTI-GRID platform and partnership with Oak Ridge National Laboratory (ORNL), Mississippi is developing a comprehensive regional resilience strategy to overcome energy security and reliability challenges, mitigating the impacts of natural hazards, and positioning Mississippi as a resilient and premier destination for residents, businesses, and economic development.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2025

Exponential Backoff and Its Security Implications for Safety-Critical OT Protocols over TCP/IP Networks

The convergence of Operational Technology (OT) and Information Technology (IT) networks has become increasingly prevalent with the growth of Industrial Internet of Things (IIoT) applications. This shift, while enabling enhanced automation, remote monitoring, and data sharing, also introduces new challenges related to communication latency and cybersecurity. Oftentimes, legacy OT protocols were adapted to the TCP/IP stack without an extensive review of the ramifications to their robustness, performance, or safety objectives. To further accommodate the IT/OT convergence, protocol gateways were introduced to facilitate the migration from serial protocols to TCP/IP protocol stacks within modern IT/OT infrastructure. However, they often introduce additional vulnerabilities by exposing traditionally isolated protocols to external threats. This study investigates the security and reliability implications of migrating serial protocols to TCP/IP stacks and the impact of protocol gateways, utilizing two widely used OT protocols: Modbus TCP and DNP3. Our protocol analysis finds a significant safety-critical vulnerability resulting from this migration, and our subsequent tests clearly demonstrate its presence and impact. A multi-tiered testbed, consisting of both physical and emulated components, is used to evaluate protocol performance and the effects of device-specific implementation flaws. Through this analysis of specifications and behaviors during communication interruptions, we identify critical differences in fault handling and the impact on time-sensitive data delivery. The findings highlight how reliance on lower-level IT protocols can undermine OT system resilience, and they inform the development of mitigation strategies to enhance the robustness of industrial communication networks.

DNP3↗

DOE OSTI2026

Stakeholder-guided holistic, Adaptive Framework for enhancing community Energy Resilience (SAFER) (Final Technical Report)

The Stakeholder-guided holistic, Adaptive Framework for enhancing community Energy Resilience (SAFER) project advances resilience science and engineering by addressing challenges in rural Kansas communities where aging infrastructure, extreme weather, and socioeconomic disparities heighten vulnerability to energy disruptions. Traditional approaches often focus on technical performance while overlooking community concerns and priorities. SAFER responds by integrating community perspectives with advanced analytical frameworks to create a holistic model for measuring and improving resilience. Project objectives included developing novel resilience metrics, advancing modeling frameworks that capture interdependencies across infrastructures, and embedding community-centric indicators directly into planning processes for distributed energy resources. The key technical innovations included the creation of self-organizing map (SOM)-based indices for objective resilience quantification, hetero-functional graph theory (HFGT) models linking power, water, transportation, and community assets, and graph neural network (GNN) tools for identifying critical nodes in complex systems. Community-centric energy planning was demonstrated through optimal siting and sizing of (photovoltaic) PV and battery storage, ensuring resilience enhancements also addressed energy burden and energy insecurity. SAFER engaged community partners in Dodge City and Ford County through surveys, focus groups, and workshops, generating more than 600 responses that established baseline measures of energy burden, financial insecurity, and willingness-to-pay to avoid outages. This data, organized in terms of a community capitals framework, informed the development of weighted reliability indices that better reflect community costs than traditional utility metrics. SAFER’s GNN-based critical node identification framework identified expert-labelled critical nodes with over 99% accuracy, while also uncovering additional functionalities essential for proactive resilience planning. The project’s models demonstrated that optimal PV and storage deployment could improve resilience indices by over 11 percent, with dispatch strategies further enhancing outcomes, confirming both the technical effectiveness and economic feasibility of these approaches. Through its combined emphasis on rigorous modeling, community-focused planning, and community engagement, SAFER advances the state of resilience research while delivering direct benefits to rural communities. The project provides tools, guidelines, and resilience heatmaps that help utilities, local governments, and residents better anticipate disruptions, prioritize investments, and strengthen the capacity to withstand and recover from energy-related hazards. Furthermore, the developed HFG and GNN frameworks are designed for transferability, allowing them to be adapted for resilience planning in other communities with minimal retraining. This inductive learning capability provides a scalable pathway to extend the SAFER project’s impact. Thus, creating a foundation for a nationally applicable model of infrastructure resilience. Additionally, the HFG can also be extended to include other FEMA community lifelines.

14 SOLAR ENERGY↗

DOE OSTI2022

Social-ecological interactions in a disaster context: Puerto Rican farmer households’ food security after Hurricane Maria

Islands are uniquely vulnerable to extreme weather events and food insecurity, and have additional response challenges due to their limited landmasses and economies, isolation, colonial legacies, and high dependence of food imports. Domestic farmers have a key role in producing food for island communities like Puerto Rico, which can safeguard food security when food importation may be challenging. Nevertheless, in the context of disaster, farmers themselves may be vulnerable to food insecurity and unable to contribute to domestic markets. This paper examines Puerto Rican farmers households’ food security in the aftermath of 2017’s Hurricane Maria using a social-ecological lens. Survey data from 405 farmers gathered eight months after Maria, coupled with biophysical data from the hurricane’s impacts (winds, rains, and landslides), were analyzed. Overall, 69% of farmers experienced at least one month of food insecurity in the aftermath of Hurricane Maria, and 38% reported persistent food insecurity (three months or more). A multinomial logistic regression suggests that biophysical impacts, but especially social factors, such as age and constraint access to external sources of support, are linked with persistent food insecurity. This suggests that the biophysical impacts of the hurricane interact with existing infrastructure and social resources to affect farmer vulnerability and the food environment in different ways. Thus, strengthening adaptive capacity in multiple domains can help farmers and vulnerable populations better navigate the disruptions faced during disasters to alleviate food insecurity.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2021

cerf: A Python package to evaluate the feasibility and costs of power plant siting for alternative futures

Long-term electric power sector planning and capacity expansion is a key area of interest to stakeholders across a wide range of organizations because it helps in making informed decisions about investments in infrastructure within the context of potential future vulnerabilities under various natural and human stressors. Future power plant siting costs will depend on a number of factors including the characteristics of the electricity capacity expansion and electricity demand (e.g., fuel mix of future electric power capacity, and the magnitude and geographic distribution of electricity demand growth) as well as the geographic location of power plants. Electricity technology capacity expansion plans modeled to represent alternate future conditions meeting a set of scenario assumptions are traditionally compared against historical trends which may not be consistent with current and future conditions. We present the `cerf` Python package (a.k.a., the Capacity Expansion Regional Feasibility model) which helps evaluate the feasibility and structure of future, scenario-driven electricity capacity expansion plans by siting power plants in areas that have been deemed the least cost option while considering dynamic future conditions. We can use `cerf` to gain insight to research topics such as: 1) under what conditions future projected electricity expansion plans from models such as GCAM-USA are possible to achieve, 2) where and which on-the-ground barriers to siting (e.g., protected areas, cooling water availability) may influence our ability to achieve certain expansions, and 3) how electricity infrastructure build-outs and value may evolve into the future when considering locational marginal pricing (LMP) based on the supply and demand of electricity from a grid operations model.

20 FOSSIL-FUELED POWER PLANTS↗