Search NASA⌕ Search

SEARCH · Search NASA

Results for “Infrastructure vulnerability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Robust Restoration From Cyber-Physical Attacks in Active Distribution Grids With Grid-Edge IBRs

The inverter-based resources (IBRs) have enabled the integration of renewable energy at the grid edge with enhanced control capabilities to support the reliable operation of power grids. Different control frameworks, such as hierarchical or distributed architecture, have been proposed with the expansion of cyber networks for real-time monitoring and control. This evolution of critical infrastructure into cyber-physical systems also brings more vulnerabilities for the broadened attack surfaces, and significantly increases the possibility of physical system failures or outages caused by cyberattacks. Among tremendous efforts in the defense-in-depth approach, it remains challenging to provide prompt detection and accurate location of attack entry points or paths. Therefore, the prevailing restoration framework may struggle to fully consider the cyber-physical interdependence, successfully isolate the compromised cyber and physical components, and safely recover the systems without the potential risks leading to secondary outages. This paper is motivated to develop a cyber-physical restoration framework for distribution grids to recover from cyber attacks by harnessing grid-edge IBRs. The framework is first built on the operational guidelines of IBRs considering the compromised cyber layer. Then, an ambiguity set is established to represent the uncertainty of attack scenarios and their possibility levels. Next, a distributionally robust optimization model is developed to provide the optimal load restoration strategy across all scenarios. The effectiveness of the proposed model is demonstrated through various use cases on the modified IEEE 13-node and 123-node test systems. Finally, simulation results demonstrate the effectiveness and advancement of developed post-attack restoration strategies.

Cybersecurity↗
DOE OSTI2024

Attack Surface of Wind Energy Technologies in the United States [Slides]

This slide deck presents an overview of the threat landscape for wind energy technologies. It highlights unique cybersecurity considerations for wind, the growing penetration and potential impact of an attack. Standard architectures are shared to highlight where vulnerabilities may exist and attack paths to reach critical infrastructure. We discuss threat actors and attack paths. Several recent events impacting wind assets or wind companies are explained.

17 WIND ENERGY↗
DOE OSTI2024

Attack Surface of Renewable Energy Technologies

This slide deck presents an overview of the threat landscape for renewable energy technologies. It highlights he growing penetration of renewable resources and potential impact of an attack. Standard architectures are shared to highlight where vulnerabilities may exist and attack paths to reach critical infrastructure. We discuss threat actors and attack paths. Several recent events impacting renewable energy assets or companies are explained.

14 SOLAR ENERGY↗
DOE OSTI2026

TASTI-GRID: a holistic view of Florida's grid resilience opportunities

In December of 2025, the American Society of Civil Engineers updated Florida’s infrastructure grade to a ”C+” – reflecting overall investments in recent years. With the recommendation to further strengthen the electric grid and establish consistent building standards, extreme weather, aging infrastructure, and population in-migration are still compounding Florida’s grid vulnerabilities. Key challenges related to hurricane and other tropical & marine weather events are not unique to Florida. However, the state’s topography, location, demographics, and variation among rural and urban centers for tourism and industry, demonstrate the need for unique approaches to advancing critical infrastructure resilience, particularly for large concentrations of elderly residents or in areas of historic underinvestment. Florida’s grid asset advancements are credited with a reduction in average power outage durations. Yet, improvements since 2021 have set the stage for future resilience activities – as modernization efforts have greatly improved data collection – enabling better understanding of vulnerabilities and trends across counties and localities (particularly in Central Florida).

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Challenges resulting from urban density and climate change for the EU energy transition

Dense urban morphologies further amplify extreme climate events due to the urban heat island phenomenon, rendering cities more vulnerable to extreme climate events. Here we develop a modelling framework using multi-scale climate and energy system models to assess the compound impact of future climate variations and urban densification on renewable energy integration for 18 European cities. We observe a marked change in wind speed and temperature due to the aforementioned compound impact, resulting in a notable increase in both peak and annual energy demand. Therefore, an additional cost of 20–60% will be needed during the energy transition (without technology innovation in building) to guarantee climate resilience. Failure to consider extreme climate events will lower power supply reliability by up to 30%. Here, energy infrastructure in dense urban areas of southern Europe is more vulnerable to the compound impact, necessitating flexibility improvements at the design phase when improving renewable penetration levels.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2024

Visualizing a Vulnerability: Its Connections to Hardware and Software

All Hazards Analysis (AHA) is a framework developed by Idaho National Laboratory that provides capabilities to collect, store, analyze, and visualize critical infrastructure information. A core function of AHA is its ability to simulate faults or outages in networks of infrastructure originating from a plethora of causes, ranging from natural disasters to cyberattacks. AHA utilizes Hardware and Software Bills of Material (HBOM and SBOM, respectively) along with Known Exploited Vulnerabilities (KEVs) to document the potential attack vectors for each piece of infrastructure. The objective of this contribution to AHA was to create a visualization tool that could capture the small details held in each individual artifact as well as preserve the large-scale connections that link them together to aid threat modeling.

58 GEOSCIENCES↗
DOE OSTI2024

Enhancing Grid Resilience during Wildfires in Socioeconomic Vulnerable Regions using Powered and Non-Powered Hydro Dams

In many regions around the world, wildfires have become a growing threat, exacerbated by factors such as climate change, droughts, and urban sprawl. These wildfires often wreak havoc on power infrastructure, leading to extended power outages, which can have devastating consequences for communities, especially in socioeconomically vulnerable areas. Ensuring grid resiliency in the face of these challenges is of paramount importance. One innovative approach to mitigating the impact of wildfires on the power grid is the utilization of hydropower facilities including both powered and non-powered hydro dams. While powered hydro dams along with additional infrastructure like energy storage and solar photovoltaic can provide resilience during wildfire-related outages, non-powered dams, originally constructed for purposes other than electricity generation, also offer a unique opportunity to bolster grid resilience. In this paper, we aim to explore the efficacy of hydro-dams in general to provide resiliency during wildfire-induced outages.

Wildfires, Resilience, Grid Resiliency, Hydropower↗
DOE OSTI2025

Enhancing Power Resilience for Remote Communities: A Comprehensive Renewable Energy Solution for Itbayat Island

The island of Itbayat, Philippines, faces significant challenges in maintaining a reliable and resilient power supply due to its current reliance on a vulnerable power distribution system managed by a local electric cooperative. The existing infrastructure, which includes diesel generators and a radial network configuration with some above-ground lines, is highly susceptible to frequent typhoons and adverse weather conditions. These factors, combined with inadequate staffing and high operational costs, result in frequent power outages that disrupt daily life and hinder economic development. This white paper proposes a comprehensive solution to enhance the resilience and reliability of Itbayat's power system by integrating renewable energy sources, specifically solar photovoltaic (PV) systems, battery storage, and a microgrid controller. The proposed solution aims to reduce dependency on diesel fuel, optimize energy use, and provide a sustainable and robust power supply for the island. Key components of the solution include: 1. Solar PV Installation: Deploying solar PV panels to harness abundant solar energy, reducing reliance on diesel fuel. 2. Battery Storage Systems: Installing battery storage to store excess solar energy and ensure a continuous power supply during low solar generation periods. 3. Microgrid Controller: Implementing a microgrid controller to manage and optimize the integration of solar PV, battery storage, and existing diesel generators. The proposed solution addresses several critical issues, including system vulnerability, generator dependency, and operational inefficiencies. By adopting this innovative approach, Itbayat Island can achieve a more resilient, efficient, and sustainable energy infrastructure, ensuring a stable power supply for its residents and enhancing overall energy security.

14 SOLAR ENERGY↗
DOE OSTI2020

After the hurricane: Validating a resilience assessment methodology

With increasing utility grid outages in the United States, there is growing interest in assessing risk and developing mitigation strategies to reduce the impact of grid outages. Working with the U.S. Air Force, the U.S. Department of Energy's National Renewable Energy Laboratory (NREL) developed a replicable energy resilience assessment methodology and investment decision tool to: (1) identify and score hazards and vulnerabilities at the site level; (2) analyze risks to energy infrastructure; and (3) identify and prioritize energy resilience investments. This work improves on existing resilience assessment methodologies and tools by combining a bottom-up, all-hazards assessment methodology with top-down geographic information system mapping capabilities to provide an innovative, dynamic tool for identifying and prioritizing actionable solutions. This process combines probabilistic forecasting with an iterative approach for continuously updating and reassessing risks to address temporal dynamism. Relationships among systems are modeled and visualized to estimate the effectiveness of resilience actions across multiple interdependent systems and inform financial priorities through cost-difficulty-impact trade-offs. The approach is validated in a case study at Tyndall Air Force Base (AFB) in Florida, which experienced a Category 5 hurricane in 2018. The risks and mitigation strategies identified pre-hurricane are compared with post-hurricane, realized impacts. The assessment effectively identifies risks and actions to increase site energy resilience, but the methodology can be enhanced though greater consideration of the interdependencies between the energy system and related systems like transportation, communication, and food/water systems, which impact the recovery of the energy system and the base.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2020

Resilient distribution system leveraging distributed generation and microgrids: a review

With the aging of electricity transmission and distribution infrastructures and increasing intensity of extreme weather events, the aggravated vulnerability of electric distribution systems to extreme weather events has motivated the study of resilient distribution systems. This study presents a review of the state-of-the-art research on distribution grid resilience. First, the definition and quantifying metrics of resilience in the electrical distribution system are summarised. Second, the long-term and short-term measures to enhance the distribution system resilience are discussed. In particular, the recent studies on distributed generation and microgrid-assisted resilience enhancements are reviewed. Finally, recommendations for future research are presented.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Sequential Perturbation-based FDIA Detection using DERs for Unbalanced Distribution System

The power distribution system with its reliance on automated monitoring and control infrastructure makes it a complicated cyber-physical system and vulnerable to various cyber-attacks. This paper proposes a moving target defense inspired false data injection attack (FDIA) detection mechanism for an unbalanced distribution system. In the proposed grid diagnosis service framework, the distribution system operator judiciously manipulates power outputs of a subset of inverter-based distribution energy resources (DERs) to create secret low magnitude voltage perturbations which are inconsequential to the normal operation of the grid. A mixed-integer-linear-programming algorithm is developed to select the optimal set of DERs that can create a voltage perturbation signal of the required magnitude at each sensor location at a minimum cost. Then, a sequential detector is applied that detects for the FDIA as measurements are received from individual sensors. The performance of the proposed perturbation-based FDIA detection framework is demonstrated via simulation of the IEEE 123 bus test system.

Attack Detection↗
DOE OSTI2020

HIDES: Hybrid Intrusion Detector for Energy Systems

The establishment of a resilient electric grid accompanied by a secure communications network is an ongoing battle as advanced persistent threats continue to exploit existing vulnerabilities in legacy supervisory control and data acquisition system (SCADA) infrastructure. Traditional intrusion detection systems (IDSs) lack consistent performance because of the continuously evolving attack surface of SCADA systems. These shortcomings can be overcome by integrating logical system behavior, protocol-specific knowledge, and data-based learning to develop a comprehensive IDS solution. In this paper, we present a Hybrid Intrusion Detector for Energy Systems by integrating a network-based IDS, state-of-the-art machine learning-based IDS, and model-based IDS to detect unknown and stealthy cyberattacks targeting the SCADA networks. The proposed IDS uses synchrophasor measurements and cyber logs to learn patterns of different scenarios based on spatiotemporal behaviors of power systems. As a proof of concept, we implement and validate the proposed IDS by leveraging resources available at the National Renewable Energy Laboratory's Energy Systems Integration Facility test bed. Experimental results show promising performance in detecting cyberattacks while providing realtime visualization of power system measurements and cyber logs.

machine-learning intrusion detection system↗
DOE OSTI2020

Mitigation of External Exposure of Energy Delivery System (MEEDS).

MEEDS is a cybersecurity solution that empowers under resourced owners and operators of critical energy infrastructure to rapidly identify and detect the publicly exposed and vulnerable operational technology (OT) and other critical Industrial Control and Energy Delivery Systems.

Mylrea, Michael↗
DOE OSTI2025

Activity-based Informed Curtailment: Using Acoustics to Design and Validate Smart Curtailment to Reduce Risk to Bats at Wind Farms

Rapid expansion of renewable energy infrastructure is a key part of any global strategy to reduce the pace and severity of anthropogenic climate change, although the potential impacts of renewable energy infrastructure on wildlife are also becoming increasingly apparent. Bats appear vulnerable to population-level impacts from the cumulative effect of turbine-related fatalities at commercial wind energy facilities in North America, particularly as the industry continues to expand to meet renewable energy generation targets. Turbine curtailment is the most widely used and consistently effective method to reduce bat fatality rates and involves pitching turbine blades parallel to prevailing winds to restrict turbine rotation when turbines would otherwise be operating and capable of producing power. Recognizing the need to expand the wind industry while managing risk to bats highlights the need to understand and manage turbine-related impacts to bats more aggressively and strategically than the current use of blanket curtailment allows.

17 WIND ENERGY↗
DOE OSTI2026

Exploring Wildfire & Energy data toward State Prioritization Index (WESPI)

Energy infrastructure can both induce and suffer risks from wildfires ranging from direct damage to energy assets such as substations and power lines to Public Safety Power Shutoffs. Recent wildfire events underscore the need for data-driven approaches that help states and utilities proactively plan for wildfire risk. Existing national tools such as Federal Emergency Management Agency (FEMA)’s National Risk Index (NRI) are valuable for community hazard planning. However, they are less suited for energy infrastructure, as they emphasize population and building exposure rather than system vulnerabilities. In this paper, we explore relationships between energy and wildfire data and present a Wildfire-Energy State Prioritization Index (WESPI). Our methodology combines data from the US Forest Service’s Fire Simulation (FSIM) dataset with energy resilience metrics, historical fire incidents, and geospatial data on transmission lines and fire stations. Correlation analyses suggest that FSIM burn probability is more strongly associated with power outage metrics (ρ = 0.32) than NRI wildfire frequency, and counties with a greater density of fire stations experience more frequent, but less intense wildfires. We further leverage data for burn probability, transmission line density, and fire station density to develop a Wildfire-Energy State Prioritization Index (WESPI) to highlight counties where wildfire hazard, infrastructure exposure, and limited suppression capacity converge. The index provides a consistent, scalable framework for state energy offices and utilities to screen counties for vegetation management, optimization of outage management system deployment, and to inform wildfire mitigation plans.

Critical infrastructure↗
DOE OSTI2022

Fragility Functions Resource Report: Documented Sources for Electricity and Water Resilience Valuation

Fragility curves provide the vulnerability between hazard intensity and an asset. Federal installations may include many different electricity and water infrastructure types (or assets) such as generators, wind turbines, solar PV, switch yards, substations and power lines as well as water distribution systems that could be affected by different hazards. The vulnerability of each asset is a function of its age, type of materials and maintenance. In addition, the vulnerability changes with the hazards intensity and has a probability distribution function associated with it. The fragility functions are used in conjunction with hazard probability and consequence valuations to determine the values at risk for examination of investment grade analyses of alternative mitigation strategies. This document provides examples of fragility functions and links to their sources for different electricity and water infrastructure assets by hazard type.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Yesterday’s extremes, today’s new normal: flood risk in the Kathmandu Valley, Nepal

Unplanned urban growth has left many cities increasingly vulnerable to extreme rainfall events, particularly in regions with inadequate drainage infrastructures and development encroaching on natural floodplains. Here, in this perspective paper, we examine the September 2024 floods that struck Central Nepal, triggered by a persistent low-pressure system and enhanced by converging moisture flows from the Arabian Sea and the Bay of Bengal which led to widespread catastrophic damage. In the Kathmandu Valley, floodwaters expanded to more than 2.5 times the bankfull water extent, causing significant damage to housing, transportation network, and critical infrastructure, displacing thousands of residents, and severely disrupting urban services. This event highlights the urgent need for improved flood management strategies that integrate both structural and non-structural measures into the infrastructure development. While early warning systems provided critical lead time, challenges remain in reducing forecasting uncertainties and improving communication across government agencies and with local communities. A forward-looking approach is essential, including probabilistic flood forecasting systems, sustainable floodplain management, risk-sensitive land use planning, climate- and disaster- resilient infrastructure development, and the integration of nature-based solutions like urban green and blue spaces to mitigate flood impacts. By involving local communities in planning and preparedness efforts, particularly through citizen science initiatives, and engagement with underserved and disadvantaged communities, Nepal can better adapt to the growing risks posed by extreme rainfall and urban flooding and enhance long-term disaster resilience in rapidly urbanizing areas like Kathmandu Valley.

Kathmandu Valley↗
DOE OSTI2024

Trends in Cybersecurity Threats to Clean Energy

As deployments of clean energy generation and storage assets continue to grow, the increased attack surface creates a greater risk for cyber threats, but is clean energy truly a target for cyber adversaries? This poster will present research on the trends in cyber incidents that have affected clean energy companies and assets as well as the trends in disclosed and exploited vulnerabilities. From a series of ransomware attacks on European wind manufacturers, to vulnerabilities exploited in solar assets to turn controllers into botnets, to attacks on communication infrastructure that have resulted in extended outages of remote control and monitoring, we explore the techniques used and the impacts to the clean energy sector. Key takeaways include understanding of how OT-focused malware is becoming more flexible and more destructive, how known vulnerabilities are being exploited, the growing number of IT and OT attacks that use built in tools and functionalities. Additionally, we highlight the presumed motivations and targeted sectors for various identified cyber adversaries. Viewers will leave with an understanding of how recent headlines fit into the development of cyberattack trends and what preventions they may need to take to protect against increasingly popular tactics.

14 SOLAR ENERGY↗