Search NASA⌕ Search

SEARCH · Search NASA

Results for “Vulnerability management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Invasive Plant Species Management Plan for Los Alamos National Laboratory (Rev.3)

Native species are plants and animals that continually occupy a natural range without direct or indirect introduction and/or care by humans. They are adapted to the environmental conditions and processes of the ecosystem in which they reside. A species introduced into a novel ecosystem can either exploit that ecosystem and thrive or be unable to survive in that ecosystem (Hobbs et al. 2006). Alien or non-native species are species that are intentionally or accidentally introduced into a novel ecosystem and are capable of living and propagating within the physical parameters of that ecosystem. Invasive species is a species that is non-native (or alien) to the ecosystem under consideration and a noxious species are those whose introduction causes or is likely to cause economic or environmental harm. The term invasive species is applicable to plants and animals alike; however, this invasive species management plan currently focuses on invasive vegetation. Invasive plant species are usually capable of rapid colonization of disturbed ground, such as after a change in wildfire regime intensity and frequency (Reilly et al. 2020) or anthropogenic ground disturbance (Burke and Grime 1996; Hobbs and Huenneke 1992). Climate change facilitates the spread and establishment of many alien species and creates new opportunities for them to become invasive (Turbelin and Catford 2021). As climate change impacts increase in the coming decades, we may see in an increase in invasive species establishment. See a list of definitions of terms pertinent to this document in Appendix A: Definitions. Los Alamos National Laboratory (LANL) hosts populations of non-native and invasive species all typical of the northern New Mexico region (Martin 2004; NMDA 2020). By implementing an invasive species management plan, LANL will have readily accessible management strategies for invasive species that are found on-site. The benefits of managing invasive species include a decrease in wildland fire risks, an increase in soil productivity, an increase in (productive or beneficial) wildlife habitat, an increase in water quantity and quality, and the restoration of impacted areas (Burke and Grime 1996; Hobbs and Huenneke 1992; D’Antonio and Hobbie 2005; MacDougall et al. 2013; Reilly et al. 2020). The aforementioned benefits from invasive species management directly enable the LANL mission by ensuring compliance requirements are met and site-wide programs, such as the Vulnerability Assessment and Resilience Plan, are supported for a mutually beneficial outcome. An example for the LANL site specifically, controlling non-native annual plant species, for example, could reduce the costs associated with stabilizing soils during the stormwater pollution prevention compliance process. Roadway and utility right-of-way areas are another place where an integrated vegetation management strategy would promote low growing perennial plants in a way that is mutually beneficial to habitat and the institution through lowered maintenance costs. There is also an economic benefit to managing invasive species. In one nationwide study, invasive plants had an estimated impact cost of $190.45 billion (Fantel-Lepczyk et al. 2022). Investing in preventative measures and surveillance could help to offset future control and management costs of invasive species that have the potential to become established. The State of New Mexico has developed plant species lists and recommendations through the New Mexico Department of Agriculture’s Noxious Weeds Management Act, Article 7D (NM Statute § 76-7D-4 2021); however, effective invasive species management must rely on local knowledge of the site and region. Los Alamos County (LAC) has already compiled a target invasive plant species list and species-specific management objectives (Martin 2004). Therefore, the New Mexico Noxious Weed List and the LAC invasive plant species list, as well as management objectives from those documents, are integrated into LANL’s invasive plant species management plan.

54 ENVIRONMENTAL SCIENCES↗

Fallible humans and vulnerable systems - Lessons learned from aviation

It is suggested that the problems being experienced in complex automatic systems are essentially due to the failure of information management and communication. The failure covers the entire spectrum: display devices and techniques, coding information so as to reduce human error, and information economy, i.e., resisting the temptation to bombard the operator with unlimited information simply because the system possesses the capability to do so. Since there has been great progress in hardware engineering, it is suggested that further attention is needed in the 'soft' side of systems. The approach should focus on (1) preventing human cognitive slips and (2) making the systems less vulnerable to such slips when they do occur. Most of the examples are taken from studies of cockpit automation.

Wiener, Earl L.↗

Los Angeles Urban Development Utilizing Nasa Earth Observations to Evaluate the Impact of Tree Coverage on Urban Heat Mitigation

In recent decades, Los Angeles, California has experienced an increase in summer temperatures that has intensified the urban heat island effect. The expansion of developed areas has contributed significantly to this phenomenon by trapping and reradiating heat, posing dangerous health risks to residents. To mitigate this problem, organizations including City Plants and the L.A.’s Office of City Forest Management have implemented initiatives to promote urban greening and tree planting, which help cool down vulnerable communities. In collaboration with these partners, NASA DEVELOP has undertaken a study to investigate the role of trees in urban environments and their effectiveness in reducing local urban heat islands.

Leyla Namazie↗

SCA Tools - SCRM Value Add or Lossy Noise Machines

Software supply chain risk management (SCRM) depends upon accurate information regarding the software components that comprise any given software system. The collection of components included in a software package can be organized within a software bill of materials, or SBOM. SBOMs are ideally generated when the software components are put together, such as at compile time, but for many reasons that has not and is not always possible. For example, legacy or proprietary software packages often do not have SBOMs available to downstream consumers of that software. It’s not just end users that are affected, manufacturers themselves also must deal with this problem. To answer these questions, the market has seen the rise of several commercial software composition analysis (SCA) tools. These tools aim to peer into completed software systems, automatically identifying hidden software dependencies and looking up known vulnerabilities associated with those dependencies to enable end-users to enhance their cyber supply chain risk management processes. These tools are potentially a huge boon to end users of legacy and proprietary software – and a potential bane, depending on how accurate they are. This research asks that question – how accurate are currently available binary SCA tools – and provides answers to several other questions: What does it mean to be “accurate”? What limitations do the tools have in identifying common edge cases that take place in modern software development? Can they help you avoid a devastating supply chain attack, or is it all just noise? After researching SCA tools on the market, we identified three vendors that fit our use case and would provide analysis on compiled binaries. Using these tools, we submitted firmware for critical infrastructure devices for analysis and SBOM generation. The SBOM outputs were then cross referenced with SBOMs generated through manual analysis for comparison. In addition to the firmware samples, we also submitted edge case samples based off a popular open-source library that were specifically crafted to evaluate each tools’ ability to accurately identify components. These samples were customized to be consistent with modifications we have seen in modern software development as well as a couple that are representative of supply chain attacks.

97 MATHEMATICS AND COMPUTING↗

Grand Canyon Ecological Forecasting: Using NASA Earth Observations to Monitor and Model Juniper Woodland Mortality in Grand Canyon National Park

Significant die-offs of the drought tolerant species Utah juniper (Juniperus osteosperma) and one-seeded juniper (Juniperus monosperma) have been observed throughout central and northern Arizona, including Grand Canyon National Park (GCNP). As climate models project rising temperatures and continuous drought, land managers are concerned for the future of juniper in and around GCNP. This project incorporated data from Landsat 8 Operational Land Imager (OLI), the Shuttle Radar Topography Mission (SRTM), and ocular samples of the National Agriculture Imagery Program (NAIP) in a random forest model to identify patterns between characteristics of the landscape and locations of juniper woodland mortality and to model areas subject to vulnerability. This study found no significant correlation between ocularly sampled juniper tree mortality and remotely sensed environmental variables used thus, accurately modeling mortality vulnerability in the future was not feasible. The ocular sampling, however, allows the partners at the GCNP’s Science & Resource Management Division to better understand areas of juniper tree woodland mortality and the relative amount of mortality in the park. Additionally, the areas of juniper tree mortality found in this project provide the partners with guidance for future field sampling.

Scarlet Jackson↗

Los Angeles Urban Development: Utilizing NASA Earth Observations to Evaluate the Impact of Tree Coverage on Urban Heat Mitigation

Over the last several decades the city of Los Angeles, California, has been experiencing increased temperatures resulting from the urban heat island effect. This is largely due to the expansion of developed areas which allow for the trapping of heat, posing dangerous health risks. As a solution, many organizations have turned to urban greening and tree planting initiatives to help cool vulnerable communities. NASA DEVELOP has partnered with City Plants and the City of Los Angeles, Office of Forest Management to study the role of trees in urban environments and their relation to the mitigation of local urban heat islands. This team used NASA Earth observation data spanning from 2016 to 2022, including land surface temperature and Normalized Difference Vegetation Index (NDVI) data collected from Landsat 8 Thermal Infrared Sensor (TIRS) and International Space Station (ISS) ECOsystem Spaceborne Thermal Radiometer Experiment on Space Station (ECOSTRESS), respectively. Data from the National Agriculture Imagery Program (NAIP) were also used to obtain a supervised classification of tree canopy cover. Our analysis reveals a spatial and temporal connection between temperature and vegetation, suggesting that areas with more vegetation are less likely to suffer high summertime temperatures. Results also highlight the impacts of tree planting programs, such as the Vermont Corridor planting project, which increased tree canopy cover by up to 5% in the community between 2016 and 2022. These findings support the implementation of urban greening practices and inform residents and officials about how investing in trees will help mitigate increasing heat within Los Angeles.

Urban heat island↗

Enhancing SWAT with mechanistic plant hydraulics: development and application in the Hanjiang River Basin

Plant transpiration plays a critical role in global water and energy cycles, requiring better process understanding as climate change intensifies drought stress and alters plant responses. Most hydrological models such as the widely-used SWAT lack representation of plant hydraulics, the mechanistic processes controlling plant water regulation and transpiration. Here, this study developed SWAT-PHS by integrating a plant hydraulics scheme (PHS) into SWAT hydrological model, enabling explicit simulation of root water uptake, sap flow, storage and transpiration at 30-minute timescales for watershed-scale modeling. In the Hanjiang River Basin, SWAT-PHS mitigated overestimation of runoff during the rainy season and underestimation during the dry season, reducing the overall simulation error by 29% across the entire simulation period. The model can simulate reasonable plant water dynamics, including diurnal transpiration patterns and drought responses showing declining transpiration flux, hydraulic buffering through stem water storage, and depth-dependent root water uptake strategies. Sensitivity analysis shows that SWAT-PHS captured mechanistic relationships between plant hydraulic traits and transpiration, with root distribution and stem capacitance positively affecting annual transpiration while vulnerability parameters showed negative effects. This work provides a pathway for improving hydrologic modeling and water resource management by better representing plant water regulation under climate change and expected intensifying water stress conditions.

China↗

Severe Space Weather Events--Understanding Societal and Economic Impacts: A Workshop Report - Extended Summary

The effects of space weather on modern technological systems are well documented in both the technical literature and popular accounts. Most often cited perhaps is the collapse within 90 seconds of northeastern Canada's Hydro-Quebec power grid during the great geomagnetic storm of March 1989, which left millions of people without electricity for up to 9 hours. This event exemplifies the dramatic impact that severe space weather can have on a technology upon which modern society critically depends. Nearly two decades have passed since the March 1989 event. During that time, awareness of the risks of severe space weather has increased among the affected industries, mitigation strategies have been developed, new sources of data have become available, new models of the space environment have been created, and a national space weather infrastructure has evolved to provide data, alerts, and forecasts to an increasing number of users. Now, 20 years later and approaching a new interval of increased solar activity, how well equipped are we to manage the effects of space weather? Have recent technological developments made our critical technologies more or less vulnerable? How well do we understand the broader societal and economic impacts of severe space weather events? Are our institutions prepared to cope with the effects of a 'space weather Katrina,' a rare, but according to the historical record, not inconceivable eventuality? On May 22 and 23, 2008, a one-and-a-half-day workshop held in Washington, D.C., under the auspices of the National Research Council's (NRC's) Space Studies Board brought together representatives of industry, the federal government, and the social science community to explore these and related questions. The key themes, ideas, and insights that emerged during the presentations and discussions are summarized in 'Severe Space Weather Events--Understanding Societal and Economic Impacts: A Workshop Report' (The National Academies Press, Washington, D.C., 2008), which was prepared by the Committee on the Societal and Economic Impacts of Severe Space Weather Events: A Workshop. The present document is an expanded summary of that report.

Source record↗

Declining Reservoir Reliability and Increasing Reservoir Vulnerability: Long-Term Observations Reveal Longer and More Severe Periods of Low Reservoir Storage for Major United States Reservoirs

Hydrological drought is a pervasive and reoccurring challenge in managing water resources. Reservoirs are critical for lessening the impacts of drought on water available for many uses. We use a novel and generalized approach to identify periods of unusually low reservoir storage—via comparisons to operational rule curves and historical patterns—to investigate how droughts affect storage in 250 reservoirs across the conterminous U.S. (CONUS). We find that the maximum amount of water stored in reservoirs is decreasing, and that periods of unusually low storage are becoming longer, more severe, and more variable in (a) western and central CONUS reservoirs, and (b) reservoirs with primarily over-year storage. Results suggest that reservoir storage has become less reliable and more vulnerable to larger deviations from desired storage patterns. These changes have coincided with ongoing shifts to the hydroclimate of CONUS, and with sedimentation further reducing available reservoir storage.

54 ENVIRONMENTAL SCIENCES↗

SPAN security policies and guidelines

A guide is provided to system security with emphasis on requirements and guidelines that are necessary to maintain an acceptable level of security on the network. To have security for the network, each node on the network must be secure. Therefore, each system manager, must strictly adhere to the requirements and must consider implementing the guidelines discussed. There are areas of vulnerability within the operating system that may not be addressed. However, when a requirement or guideline is discussed, implementation techniques are included. Information related to computer and data security is discussed to provide information on implementation options. The information is presented as it relates to a VAX computer environment.

Sisson, Patricia L.↗

Infrastructure-Based Cooperative Perception at a Traffic Intersection: Overview and Challenges

Traffic intersections are crucial and challenging nodes in transportation networks where multiple lanes of vehicles and pedestrians converge. About one-quarter of traffic fatalities and about one-half of all traffic injuries in the United States happen at traffic intersections . Effective management of these intersections is important to ensure safety and efficiency of all users - vehicles, pedestrians, cyclists, and vulnerable road users (VRUs). With advancements in sensor perception technologies such as radar, light detection and ranging (lidar), and cameras, traffic intersections are developing into dynamic and data-rich environments. By using these data to create a real-time digital twin, we can enable real-time data-driven decision making and a range of applications such as sharing perception information to connected vehicles (CVs) and connected autonomous vehicles (CAVs), safety affirmative signaling, and curb optimizing to improve efficiency and enhance safety.This paper presents an overview of the concept and examines the challenges involved in implementing an infrastructure-based cooperative perception engine at a traffic intersection. In addition to outlining the physical components, this study also addresses important challenges involved in a multi-sensor system. We present results from deploying the National Renewable Energy Laboratory's (NREL's) Infrastructure Perception and Control (IPC) mobile trailer at a traffic intersection in the city of Colorado Springs, Colorado, USA that employed multiple radars and lidars to capture the data. This study provides necessary practical learning for the Cooperative Driving Automation (CDA) and traffic engineering communities for next-generation infrastructure-based cooperative perception that promises improvements in signal control for optimized traffic flow, among other applications, and documents findings for ongoing research and development efforts in other areas.

ADVANCED PROPULSION SYSTEMS,MATHEMATICS AND COMPUT↗

Persistence and potential of soil organic carbon in nature‐based climate solutions: A review of managed disturbances

Societal Impact Statement Implementing nature-based climate solutions is important for mitigating climate change, which is a global issue, but requires local adjustments in management practices. Using the association between soil carbon and minerals as a proxy for carbon persistence, we evaluated the effect of different management regimes on soil carbon sequestration and loss. We identified areas where management practices that increase carbon inputs should be prioritized and areas where management should focus on avoiding severe disturbances. Using this storage-potential-and-persistence framework to identify how to increase or maintain soil organic carbon storage locally will increase the effectiveness of nature-based climate solutions globally. Summary Increasing soil organic carbon storage could reduce the pace of climate change, but the longevity of this nature-based climate solution depends on the persistence of carbon in soils, not just the input rates into soils. We apply a framework for considering how soil carbon persistence—namely, via the association with minerals—sheds light on soil carbon sequestration. We review how management of disturbances, such as prescribed burning, forestry, and grazing, can change soil carbon storage, persistence, and potential. Past work demonstrated that management of disturbances can sequester soil carbon, but it remains unclear how the potential stabilization of that accrual and vulnerability to loss varies across disturbance types and geographies. We found that there is substantial geographical heterogeneity in the overlap among estimates of carbon accrual, disturbance occurrence, and potential stabilization: Fire-prone grasslands and intensively grazed rangelands occur in areas estimated to have high potential to store mineral-associated organic carbon, and studies also find that adjusted fire and grazing can promote mineral-associated organic carbon. Plantation forestry and burned area span large regions where particulate organic matter is the dominant form, and studies find that particulate organic carbon is disproportionately lost following intense wildfires and forest harvests. Thus, areas with high mineral-associated organic carbon deficits should be prioritized for practices that increase carbon inputs; whereas areas with high proportions of particulate organic carbon should be prioritized for practices that help to avoid severe disturbances. Taken together, the distribution of and changes in persistence mechanisms shed light on the durability of nature-based climate solutions.

fire↗

Mechanical characterization of Bi-2212 composite winding pack samples for high-field superconducting magnet design

Bi₂Sr₂CaCu₂O8−x (Bi-2212) multi-filament round wire is a high-temperature superconductor (HTS) capable of carrying high transport currents, which makes it suitable for high-field magnet applications. However, its weak Ag–Mg sheath leaves it vulnerable to mechanical stress, posing challenges for high-field magnet design. To better understand and improve mechanical stress management in Bi-2212 winding packs, we conducted an experimental study evaluating the axial stress–strain behavior of five winding pack configurations with varying insulation materials, reinforcement strategies, and construction quality. Using uniaxial tensile testing at 77 K, we measured Young’s modulus and Poisson’s ratio for each composition. Our results show that pure alumina braid insulation and co-wind reinforcements significantly enhance stiffness compared to aluminosilicate braids, with more than 2.5 times increased winding pack Young’s modulus. Rule of mixtures analysis further quantified the contribution of non-wire composite components to overall stiffness. These findings highlight the critical role of insulation material selection and reinforcement design in optimizing Bi-2212 coil performance under stress, providing a foundation for improved mechanical models and more reliable high-field HTS magnet designs.

Bi-2212 magnet↗

Lamellar: A Rust-based Asynchronous Tasking and PGAS Runtime for High Performance Computing

Cybersecurity is one of the largest concerns in modern computing, impacting and dictating how governments, private corporations, and individuals interact with and live in an increasingly digital world. The NSA has recently released a memo [ 1] on “Software Memory Safety” where they highlight that both Microsoft and Google have stated around 70% of software vulnerabilities were due to memory safety issues. Although languages such as C and C++ provide freedom and flexibility with memory management, guaran- teeing safety falls mostly on the developer. The NSA recommends using “memory safe” languages whenever possible. In this paper we introduce Lamellar, an asynchronous tasking and PGAS HPC runtime written in Rust, one such "memory safe" language. We describe the entire Lamellar stack, from network interfaces to high- level abstractions such as distributed LamellarArrays and Active Messages. We conclude by showing comparable performance to legacy PGAS runtimes (e.g. OpenSHMEM) on a subset of the BALE kernel suite while maintaining strong memory safety principles.

HPC Software Systems, Rust Programming Language, P↗

Templates for Risk Informed Assurance with Curvature Embeddings (TRACE)

We investigate recovery of geometric structure from networks embedded in manifolds with spatially varying curvature, extending the constant-curvature framework of Lubold et al. (2023). Our work supports cascade risk assessment in critical infrastructure through the Templates for Risk-informed Assurance with Curvature Embeddings (TRACE) framework. Simulations on a bi-modal Gaussian surface show that constant-curvature methods yield weighted averages shaped by clique patterns, while hierarchical clustering identifies distinct regimes. Localized estimation, however, reveals boundary contamination in transitional regions. To address heterogeneity, we develop distance metrics for graphs with edge and node features, proving their metric validity, and validate them via deterministic graph generation from canonical tilings. We further propose a diffusion-based anomaly detection approach that treats networks as glued manifolds, using curvature discontinuities to detect structural anomalies. Employing the carré-du-champ operator and scalar curvature, we achieve robust anomaly discrimination, demonstrated on the Singapore Water Treatment (SWaT) dataset with joint network-traffic and sensor features. Integration with TRACE reveals how curvature shapes cascade dynamics: positive curvature impedes, while negative curvature accelerates propagation. This geometric perspective provides interpretable risk metrics and visualization tools for critical infrastructure managers. While full validation remains ongoing, our contributions establish a rigorous foundation for geometric analysis of network resilience and cascade vulnerability.

97 MATHEMATICS AND COMPUTING↗

Radiation Hardness Assurance: Evolving for NewSpace

During the past decade, numerous small satellites have been launched into space, with dramatically expanded dependence on advanced commercial-off-the-shelf (COTS) technologies and systems required for mission success. While the radiation effects vulnerabilities of small satellites are the same as those of their larger, traditional relatives, revised approaches are needed for risk management because of differences in technical requirements and programmatic resources. While moving to COTS components and systems may reduce direct costs and procurement lead times, it undermines many cost-reduction strategies used for conventional radiation hardness assurance (RHA). Limited resources are accompanied by a lack of radiation testing and analysis, which can pose significant risks - or worse, be neglected altogether. Small satellites have benefited from short mission durations in low Earth orbits with respect to their radiation response, but as mission objectives grow and become reliant on advanced technologies operating for longer and in harsher environments, requirements need to reflect the changing scope without hindering developers that provide new capabilities.

Radiation Hardness Assurance (RHA)↗

Radiation Hardness Assurance: Evolving for NewSpace

During the past decade, numerous small satellites have been launched into space, with dramatically expanded dependence on advanced commercial-off-the-shelf (COTS) technologies and systems required for mission success. While the radiation effects vulnerabilities of small satellites are the same as those of their larger, traditional relatives, revised approaches are needed for risk management because of differences in technical requirements and programmatic resources. While moving to COTS components and systems may reduce direct costs and procurement lead times, it undermines many cost-reduction strategies used for conventional radiation hardness assurance (RHA). Limited resources are accompanied by a lack of radiation testing and analysis, which can pose significant risks—or worse, be neglected altogether. Small satellites have benefited from short mission durations in low Earth orbits with respect to their radiation response, but as mission objectives grow and become reliant on advanced technologies operating for longer and in harsher environments, requirements need to reflect the changing scope without hindering developers that provide new capabilities.

Radiation Hardness Assurance (RHA)↗

Developing a Cybersecurity Architecture for Extensible Traffic Management (xTM)

This paper explores the development of a cybersecurity architecture tailored for Extensible Traffic Management (xTM) to address emerging challenges in managing diverse aerial vehicles within the National Airspace System (NAS). Driven by technological advances and the rise of uncrewed aerial systems (UAS), urban air mobility (UAM), and high-altitude traffic (ETM), the NAS is undergoing a paradigm shift. Traditional air traffic management, reliant on traditional Federal Aviation Administration (FAA) control, will give way to decentralized coordination among autonomous and semi-autonomous systems. The proposed xTM Security Architecture, designed as a high-level framework, focuses on ensuring the confidentiality, integrity, and availability of data and operations in this evolving ecosystem. Utilizing threat modeling, the research identifies potential risks across key flight phases, operations and use cases to offer security control recommendations. Key objectives include analyzing interactions between novel airspace entrants and existing NAS traffic, cataloging vulnerabilities, and developing mitigative strategies to ensure safety, operational stability, and secure data exchanges. This research lays the groundwork for regulatory and industry adaptation, providing critical insights into managing cybersecurity risks in this complex, multi-domain environment.

UAM↗