Search NASA⌕ Search

SEARCH · Search NASA

Results for “Vulnerability Management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
NASA NTRS2011

Predicting Fire Season Severity in South America Using Sea Surface Temperature Anomalies

Fires in South America cause forest degradation and contribute to carbon emissions associated with land use change. Here we investigated the relationship between year-to-year changes in satellite-derived estimates of fire activity in South America and sea surface temperature (SST) anomalies. We found that the Oceanic Ni o Index (ONI) was correlated with interannual fire activity in the eastern Amazon whereas the Atlantic Multidecadal Oscillation (AMO) index was more closely linked with fires in the southern and southwestern Amazon. Combining these two climate indices, we developed an empirical model that predicted regional annual fire season severity (FSS) with 3-5 month lead times. Our approach provides the foundation for an early warning system for forecasting the vulnerability of Amazon forests to fires, thus enabling more effective management with benefits for mitigation of greenhouse gas and air pollutant emissions.

Chen, Yang↗
NASA NTRS2011

Safety-Critical Partitioned Software Architecture: A Partitioned Software Architecture for Robotic

The flight software on virtually every mission currently managed by JPL has several major flaws that make it vulnerable to potentially fatal software defects. Many of these problems can be addressed by recently developed partitioned operating systems (OS). JPL has avoided adopting a partitioned operating system on its flight missions, primarily because doing so would require significant changes in flight software design, and the risks associated with changes of that magnitude cannot be accepted by an active flight project. The choice of a partitioned OS can have a dramatic effect on the overall system and software architecture, allowing for realization of benefits far beyond the concerns typically associated with the choice of OS. Specifically, we believe that a partitioned operating system, when coupled with an appropriate architecture, can provide a strong infrastructure for developing systems for which reusability, modifiability, testability, and reliability are essential qualities. By adopting a partitioned OS, projects can gain benefits throughout the entire development lifecycle, from requirements and design, all the way to implementation, testing, and operations.

(Avionics Application Standard Software Interface ↗
NASA NTRS2011

Forecasting Fire Season Severity in South America Using Sea Surface Temperature Anomalies

Fires in South America cause forest degradation and contribute to carbon emissions associated with land use change. We investigated the relationship between year-to-year changes in fire activity in South America and sea surface temperatures. We found that the Oceanic Ni o Index was correlated with interannual fire activity in the eastern Amazon, whereas the Atlantic Multidecadal Oscillation index was more closely linked with fires in the southern and southwestern Amazon. Combining these two climate indices, we developed an empirical model to forecast regional fire season severity with lead times of 3 to 5 months. Our approach may contribute to the development of an early warning system for anticipating the vulnerability of Amazon forests to fires, thus enabling more effective management with benefits for climate and air quality.

Chen, Yang↗
NASA NTRS2012

Dust Hazard Management in the Outer Solar System

Most robotic missions to the outer solar system must grapple with the hazards posed by the dusty rings of the gas giants. Early assessments of these hazards led simply to ring avoidance due to insufficient data and high uncertainties on the dust population present in such rings. Recent approaches, principal among them the Cassini dust hazard management strategy, provide useful results from detailed modeling of spacecraft vulnerabilities and dust hazard regions, which along with the range of mission trajectories are used to to assess the risks posed by each passage through a zone of potential hazard. This paper shows the general approach used to implement the analysis for Cassini, with recommendations for future outer planet missions.

mission hazards↗
DOE OSTI2023

Software Bill of Materials in the Nuclear Industry

Nuclear power plants (NPP) have thousands of digital assets throughout their facility. Typically, NPPs have asset and configuration management programs that capture the make, model, and version of a component. This information, however, usually only includes first- or second-tier components and does not capture the complete enumeration of software components and their dependencies within operational technology (OT) equipment. As seen with recent cyberattacks, this level of detail is insufficient for identifying if and where an exploitable vulnerability exists within a facility. A software bill of materials (SBOM) provides this detailed enumeration. Further, integrating SBOMs with vulnerability data sources and vulnerability attestation reports can provide improved awareness leading to better cyber risk management and incident response. Preferably, SBOMs are provided by the supplier; however, when an NPP already owns a device, it is less likely they will have a supplier provided-SBOM. Fortunately, SBOMs can be generated on installed digital assets. This paper provides an introduction to the U.S. Department of Energy Office of Nuclear Energy paper titled “Towards Software Bill of Materials in the Nuclear Industry,” which describes the SBOM ecosystem and provides a suggested approach to methodically and seamlessly integrate an SBOM program in an NPP.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2024

Digital Tools for the Preventive Conservation of Built Heritage: The Church of Santa Ana in Seville

Historic Building Information Modelling (HBIM) plays a pivotal role in heritage conservation endeavours, offering a robust framework for digitally documenting existing structures and supporting conservation practices. However, HBIM’s efficacy hinges upon the implementation of case-specific approaches to address the requirements and resources of each individual asset and context. This paper defines a flexible and generalisable workflow that encompasses various aspects (i.e., documentation, surveying, vulnerability assessment) to support risk-informed decision making in heritage management tailored to the peculiar conservation needs of the structure. This methodology includes an initial investigation covering historical data collection, metric and condition surveys and non-destructive testing. The second stage includes Finite Element Method (FEM) modelling and structural analysis. All data generated and processed are managed in a multi-purpose HBIM model. The methodology is tested on a relevant case study, namely, the church of Santa Ana in Seville, chosen for its historical significance, intricacy and susceptibility to seismic action. The defined level of detail of the HBIM model is sufficient to inform the structural analysis, being balanced by a more accurate representation of the alterations, through linked orthophotos and a comprehensive list of alphanumerical parameters. This ensures an adequate level of information, optimising the trade-off between model complexity, investigation time requirements, computational burden and reliability in the decision-making process. Field testing and FEM analysis provide valuable insight into the main sources of vulnerability in the building, including the connection between the tower and nave and the slenderness of the columns.

Chaves, Estefanía↗
NASA NTRS2022

Environmental Justice Needs Assessment for Disasters: Assessing the Landscape and Capacity of Organizations & Communities Working Towards Environmental Justice with Potential to Use NASA Earth Observations to Support Equitable Disaster Management and Risk Reduction

Natural disasters pose an increasing risk to communities worldwide. Marginalized populations, in particular, experience compounding vulnerabilities that contribute to unequal burdens of natural hazards as a result of systemic inequality stemming from historical disenfranchisement, disinvestment, and discriminatory policies such as racial redlining. This project connected with community organizations working at the intersection of environmental justice (EJ) and natural disaster management throughout the United States, to assess how NASA DEVELOP can leverage geospatial science to advance EJ efforts. Our team conducted a landscape analysis, which included a literature review, annotated bibliography, and identification of organizations working in EJ and disasters. We engaged EJ organizations in discussions to understand their current resources, challenges, and geospatial needs to inform how DEVELOP and NASA Applied Sciences can support their EJ and disaster work. Findings were compiled in a synthesis report and visualized in an ArcGIS StoryMap to showcase the work of EJ organizations, provide geospatial resources for them to explore, and provide examples of how remote sensing can be utilized in EJ and disasters work. The knowledge gained and end products created support the integration of EJ in future DEVELOP projects, and the expanded use of Earth observations by communities in support of a more just tomorrow.

Julianne Liu↗
DOE OSTI2022

Increasing risk of cascading hazards in the central Himalayas

Cascading hazards are becoming more prevalent in the central Himalayas. Primary hazards (e.g., earthquakes, avalanches, and landslides) often trigger secondary hazards (e.g., landslide dam, debris flow, and flooding), compounding the risks to human settlements, infrastructures, and ecosystems. Risk management strategies are commonly tailored to a single hazard, leaving human and natural systems vulnerable to cascading hazards. In this commentary, we characterize diverse natural hazards in the central Himalayas, including their cascading mechanisms and potential impacts. A scientifically sound understanding of the cascading hazards, underlying mechanisms, and appropriate tools to account for the compounding risks are crucial to informing the design of risk management strategies. Here, we also discuss the need for an integrated modeling framework, reliable prediction and early warning system, and sustainable disaster mitigation and adaptation strategies.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Analyzing the Effects of Cyberattacks on Distribution System State Estimation

Key components of power systems—such as energy management systems, automatic generation control, and state estimation—are under serious vulnerability from cyberattacks. Cyber threats in electric grids have increased significantly because of the increased interconnectivity of supervisory control and data acquisition systems and public network infrastructure. As the penetration level of distributed energy resources increases, it is imperative to employ system-monitoring techniques such as state estimation for the reliable operation of distribution systems. Recently, multiple methods have been developed that exploit the low rank property of distribution system state matrix and are robust to bad data, such as matrix completion. This paper analyzes the impact of various realistic cyberattack scenarios on matrix completion. Realistic cyberattack scenarios are converted into data corruption models that are used in an extensive simulation of a custom IEEE 123-bus system.

41 EE - Solar Energy Technologies Office (EE-4S)↗
DOE OSTI2023

A Framework to Design Consumer-Centric Operational Strategies for Resilience Enhancement

Extreme temperature-related events like heat waves or cold snaps can significantly stress the power distribution grid as electricity demand spikes leading to brownouts or blackouts if not managed properly. In addition, such extreme events can exacerbate inequity, with vulnerable populations (for example, houses with poor insulation, located in non-critical zones, and lack of local resources) at greater risk. There is a growing deployment of distribution systems automation technologies such as advanced metering infrastructure, sensors, and automated control systems to enhance the visibility of the entire distribution grid while meeting resilience objectives. Here, this paper proposes a framework for investigating how automation can improve the distribution system's resilience and ensure customers' health and safety during such extremes. The proposed framework's efficacy will be demonstrated for the Electricity Reliability Council of Texas (ERCOT) during winter storm Uri with varying levels of distribution automation technologies such as feeder isolation using smart switches, remote outage signals using advanced meters, and comfort-aware outage using advanced analytics and communication. Simulation results show that an outage strategy involving advanced grid technology and communication can reduce the occupant exposure to severe cold by 93% and, simultaneously, reduce expected energy not served by 73.2% when compared against feeder isolation.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Cybersecurity for the Operational Technology Environment (CyOTE) (Final Technical Report)

Electric grids have historically been susceptible to both physical attacks and environmental hazards but the implementation of smart grids, remote management, and self-healing networks, has now made the grid vulnerable to cyber attacks. To address risks introduced by routable connectivity, utilities must establish dynamic solutions to identify, protect, detect, respond to, and recover from cyber security threats and vulnerabilities. In response to the evolving threat landscape U.S. Department of Energy-Office of Cybersecurity, Energy Security, and Emergency Response (DOE CESER) initiated the Cybersecurity for the OT Environment (CyOTE) pilot program, a U.S. Department of Energy (DOE) effort designed to leverage U.S. intelligence capabilities to prevent, detect, or mitigate a cyber attack on utility operational technology (OT) networks. As part of the CyOTE pilot, The Southern Company (Southern Company or Southern) researched, evaluated and deployed emerging Commercial off the Shelf (COTS) technologies and cyber security monitoring architectures to provide previously unrealized network visibility and situational awareness through deep packet inspection and data analytics. This Final Scientific/Technical Report documents the objectives, methodology, lessons learned, and results of Southern Company’s participation in the CyOTE pilot from December 2018 to September 2023.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Citizen-Led Community Innovation for Food Energy Water Nexus Resilience

Food-energy-water (FEW) resources are necessary for the function of multiple socio-natural systems. Understanding the synergies and trade-offs in the FEW nexus, and how these interconnections impact earth’s systems, is critical to ensure adequate access to these resources in the future; an essential component for achieving the Sustainable Development Goals (Scanlon et al., 2017). Although, over the last decade, the identification of FEW nexus complexities has increased at a global (IPCC, 2018; D’Orodico et al., 2018), national (Lant et al., 2019), and city scale (Rushforth and Ruddell, 2018), these findings are yet to be adequately translated into ‘on the ground’ action due a lack of technical and political capacity (Weitz et al., 2017). Specifically, local FEW systems have been overlooked in these analyses (Scanlon et al., 2017; Lant et al., 2019), thus leaving small and medium towns vulnerable due to a lack of data and inadequate FEW system management. Building on three years of field-tested FEW nexus research in the Ruddell Lab, we argue that participatory citizen science projects, such as our FEWSION for Community Resilience initiative, can bridge the data-policy gaps that exist within local FEW system management by: 1) providing last mile data on the FEW system, and 2) translating local data into evidence-based solutions at a grassroots level. Thus, we present a broadly applicable framework and call to action for local scale participatory citizen science to solve complex FEW nexus issues at a local, regional, and national scale.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2021

A Survey on Cybersecurity Challenges, Detection, and Mitigation Techniques for the Smart Grid

The world is transitioning from the conventional grid to the smart grid at a rapid pace. Innovation always comes with some flaws; such is the case with a smart grid. One of the major challenges in the smart grid is to protect it from potential cyberattacks. There are millions of sensors continuously sending and receiving data packets over the network, so managing such a gigantic network is the biggest challenge. Any cyberattack can damage the key elements, confidentiality, integrity, and availability of the smart grid. The overall smart grid network is comprised of customers accessing the network, communication network of the smart devices and sensors, and the people managing the network (decision makers); all three of these levels are vulnerable to cyberattacks. In this survey, we explore various threats and vulnerabilities that can affect the key elements of cybersecurity in the smart grid network and then present the security measures to avert those threats and vulnerabilities at three different levels. In addition to that, we suggest techniques to minimize the chances of cyberattack at all three levels.

Tufail, Shahid↗
DOE OSTI2020

Analyzing the Effects of Cyberattacks on Distribution System State Estimation: Preprint

Key components of power systems—such as energy management systems, automatic generation control, and state estimation—are under serious vulnerability from cyber attacks. Cyber threats in electric grids have increased significantly because of the increased interconnectivity of supervisory control and data acquisition systems and public network infrastructure. As the penetration level of distributed energy resources increases, it is imperative to employ system-monitoring techniques such as state estimation for the reliable operation of distribution systems. Recently, multiple methods have been developed that exploit the low rank property of distribution system state matrix and are robust to bad data, such as matrix completion. This paper analyzes the impact of various realistic cyber attack scenarios on matrix completion. Realistic cyber attack scenarios are converted into data corruption models that are used in an extensive simulation of a custom IEEE 123-bus system.

41 EE - Solar Energy Technologies Office (EE-4S)↗
DOE OSTI2023

Emulation and Adversarial Analysis of EV Charging Networks

In the effort of decarbonization and evolution of the modern electrical grid, electric vehicles (EVs) play a key part to transform the grid. However, due to the rapid adoption of EVs and the demand of the charging infrastructure required to power said EVs, risk of a cyber-attack may impose serious consequences. There is a need to analyze and protect the charging ecosystem infrastructure from cyber threats before it reaches wide-scale deployment. In an effort to secure vehicle to grid (V2G) communications, standardization is necessary for continued reliable system operation. The protocol ISO 15118 outlines controls and practices that should be implemented for secure vehicle to grid (V2G) communications. The standard is gaining momentum for American markets as the demand for EV infrastructure grows. The adoption of ISO 15118 in American markets poses several challenges: the deployment of a public key infrastructure (PKI) as outlined within the standard, interoperability of charging different EVs with chargers from different manufactures using the PKI, and scaling the ecosystem to meet the demand while managing risks. This project was created to understand potential cyber and scaling challenges of PKI for EV infrastructure through utilizing a series of emulated components mapping to what exists in the EV ecosystem today, and the components of the PKI that are under development. The key nodes within the emulation that are under development are: electric vehicle (EV), electric vehicle supply equipment (EVSE), charge network operator (CNO), certificate authority (CA), and online certificate status protocol (OCSP) that must all interact using secure and trusted communications. With these emulated components and utilizing orchestration methods to rapidly deploy and scale the components, the ability to analyze risks of the ecosystem and address gaps before the PKI ecosystem is fully deployed to production should yield a more robust and mature production charging infrastructure. Our approach will use a modular architecture of virtual machines within an orchestration platform and will target scales of 100s, 1000s, and 10,000s of entities interacting. The core research questions trying to be answered with this scope of work are: what are the impacts of a rogue CA, what are the risks of certificate revocation list (CRL) management, what is the value of OCSP stapling, what components are vulnerable to DOS attacks, and what test effective payloads may impact the components.

charging ecosystem↗
NASA NTRS2004

Security engineering: systems engineering of security through the adaptation and application of risk management

Information Technology (IT) Security Risk Management is a critical task in the organization, which must protect its resources and data against the loss of confidentiality, integrity, and availability. As systems become more complex and diverse, and more vulnerabilities are discovered while attacks from intrusions and malicious content increase, it is becoming increasingly difficult to manage IT security. This paper describes an approach to address IT security risk through risk management and mitigation in both the institution and in the project life cycle.

security↗
DOE OSTI2024

Mitigating drought mortality by incorporating topography into variable forest thinning strategies

Abstract Drought-induced productivity reductions and tree mortality have been increasing in recent decades in forests around the globe. Developing adaptation strategies hinges on an adequate understanding of the mechanisms governing the drought vulnerability of forest stands. Prescribed reduction in stand density has been used as a management tool to reduce water stress and wildfire risk, but the processes that modulate fine-scale variations in plant water supply and water demand are largely missing in ecosystem models. We used an ecohydrological model that couples plant hydraulics with groundwater hydrology to examine how within-stand variations in tree spatial arrangements and topography might mitigate forest vulnerability to drought at individual-tree and stand scales. Our results demonstrated thinning generally ameliorated plant hydraulic stress and improved carbon and water fluxes of the remaining trees, although the effectiveness varied by climate and topography. Variable thinning that adjusted thinning intensity based on topography-mediated water availability achieved higher stand productivity and lower mortality risk, compared to evenly-spaced thinning at comparable intensities. The results from numerical experiments provided mechanistic evidence that topography mediates the effectiveness of thinning and highlighted the need for an explicit consideration of within-stand heterogeneity in trees and abiotic environments when designing forest thinning to mitigate drought impacts.

Environmental Sciences & Ecology↗
DOE OSTI2023

Data-driven modeling of municipal water system responses to hydroclimate extremes

Sustainable western US municipal water system (MWS) management depends on quantifying the impacts of supply and demand dynamics on system infrastructure reliability and vulnerability. Systems modeling can replicate the interactions but extensive parameterization, high complexity, and long development cycles present barriers to widespread adoption. To address these challenges, we develop the Machine Learning Water Systems Model (ML-WSM) – a novel application of data-driven modeling for MWS management. We apply the ML-WSM framework to the Salt Lake City, Utah water system, where we benchmark prediction performance on the seasonal response of reservoir levels, groundwater withdrawal, and imported water requests to climate anomalies at a daily resolution against an existing systems model. The ML-WSM accurately predicts the seasonal dynamics of all components; especially during supply-limiting conditions (KGE > 0.88, PBias < ±3%). Extreme wet conditions challenged model skill but the ML-WSM communicated the appropriate seasonal trends and relationships to component thresholds (e.g., reservoir dead pool). The model correctly classified nearly all instances of vulnerability (83%) and peak severity (100%), encouraging its use as a guidance tool that complements systems models for evaluating the influences of climate on MWS performance.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗