SEARCH · Search NASA

Results for “Vulnerability management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

All sources NASA NTRS DOE OSTI

NASA NTRS2011

Risk Assessment Overview

Risk assessment is used in many industries to identify and manage risks. Initially developed for use on aeronautical and nuclear systems, risk assessment has been applied to transportation, chemical, computer, financial, and security systems among others. It is used to gain an understanding of the weaknesses or vulnerabilities in a system so modification can be made to increase operability, efficiency, and safety and to reduce failure and down-time. Risk assessment results are primary inputs to risk-informed decision making; where risk information including uncertainty is used along with other pertinent information to assist management in the decision-making process. Therefore, to be useful, a risk assessment must be directed at specific objectives. As the world embraces the globalization of trade and manufacturing, understanding the associated risk become important to decision making. Applying risk assessment techniques to a global system of development, manufacturing, and transportation can provide insight into how the system can fail, the likelihood of system failure and the consequences of system failure. The risk assessment can identify those elements that contribute most to risk and identify measures to prevent and mitigate failures, disruptions, and damaging outcomes. In addition, risk associated with public and environment impact can be identified. The risk insights gained can be applied to making decisions concerning suitable development and manufacturing locations, supply chains, and transportation strategies. While risk assessment has been mostly applied to mechanical and electrical systems, the concepts and techniques can be applied across other systems and activities. This paper provides a basic overview of the development of a risk assessment.

Prassinos, Peter G.↗

NASA NTRS2023

Climate and Human Impacts on Hydrological Processes and Flood Risk in Southern Louisiana

Satellite observations of coastal Louisiana indicate an overall land loss over recent decades, which could be attributed to climate and human-induced factors, including sea level rise (SLR). Climate induced hydrological change (CHC) has impacted the way flood control structures are used, altering the spatiotemporal water distribution. Based on “what-if” scenarios, we determine relative impacts of SLR and CHC on increased flood risk over southern Louisiana and examine the role of water management, via flood control structures, in mitigating flood risk over the region. Our findings show that CHC has increased flood risk over the past 28 years. The number of affected people increases as extreme hydrological events become more exceptional. Water management reduces flood risk to urban areas and croplands, especially during exceptional hydrological events. For example, currently (i.e., 2016-2020 period), CHC-induced flooding puts an additional 73km2 of cropland under flood risk at least half of the time (median flood event) and 65km2 once a year (annual flood event), when compared to a past period (1993-1997). A ten- to twenty-fold increase relative to SLR-induced flooding. CHC also increases population vulnerability in southern Louisiana to flooding; additional 9900 residents currently live under flood risk at least half of the time, and that number increases to 27,400 for annual flood events. Residents vulnerable to SLR induced flooding is lower (6000 and 3300 residents, respectively). Conclusions are that CHC is a major factor that should be accounted for flood resilience and that water management interventions can mitigate risks to human life and activities.

Augusto Getirana↗

NASA NTRS2017

NASA Earth Observations Informing Energy Management Decision Making

The Energy Sector is experiencing increasing impacts from severe weather and shifting climatic trends, as well as facing a changing political climate, adding uncertainty for stakeholders as they make short- and long-term planning investments. Climate changes such as prolonged extreme heat and drought (leading to wildfire spread, for example), sea level rise, and extreme storms are changing the ways that utilities operate. Energy infrastructure located in coastal or flood-prone areas faces inundation risks, such as damage to energy facilities. The use of renewable energy resources is increasing, requiring more information about their intermittency and spatial patterns. In light of these challenges, public and private stakeholders have collaborated to identify potential data sources, tools, and programmatic ideas. For example, utilities across the country are using cutting-edge technology and data to plan for and adapt to these changes. In the Federal Government, NASA has invested in preliminary work to identify needs and opportunities for satellite data in energy sector application, and the Department of Energy has similarly brought together stakeholders to understand the landscape of climate vulnerability and resilience for utilities and others. However, have these efforts improved community-scale resilience and adaptation efforts? Further, some communities are more vulnerable to climate change and infrastructure impacts than others. This session has two goals. First, panelists seek to share existing and ongoing efforts related to energy management. Second, the session seeks to engage with attendees via group knowledge exchange to connect national energy management efforts to local practice for increased community resilience.

Eckman, Richard↗

DOE OSTI2025

Cybersecurity and Infrastructure Security Agency (CISA) Infrastructure Security Division (ISD) Assessment Prioritization Project

The Cybersecurity and Infrastructure Security Agency’s Infrastructure Security Division (CISA ISD) manages a diverse portfolio of assessments across the nation’s critical infrastructure sectors. These assessments—ranging in type, scope, and complexity—are essential for identifying vulnerabilities and strengthening national security. However, the wide variation in assessment offerings and the increasing demand for limited resources have highlighted the need for a transparent, structured approach to prioritizing assessment activities. To address this challenge, CISA ISD partnered with Lawrence Livermore National Laboratory (LLNL) to review current assessment methodologies, analyze existing prioritization practices, and develop a comprehensive, national-security-focused prioritization framework. This report summarizes the project’s approach, key findings, and actionable recommendations for enhancing ISD’s assessment program.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2025

Environmental drivers of spatial variation in tropical forest canopy height: Insights from NASA’s GEDI spaceborne LiDAR

Forest canopy height is a fundamental ecosystem property—influencing patterns of forest carbon storage and forest ecosystem responses to climate variability and change. Previous studies have analyzed environmental drivers influencing spatial variation in canopy height at landscape-to-regional scales; however, far less is known about the environmental determinants underlying regional and global scale variation in forest canopy height. Using the canopy height metrics products from Global Ecosystem Dynamics Investigation (GEDI), a space-borne Light Detection and Ranging (LiDAR) instrument specifically designed to characterize forest structure, we analyze the environmental correlates of spatial variation of global tropical forest canopy height. Our study demonstrates that climate, topography, and soil properties account for 75% of the variation in tropical forest canopy height. Elevation, dry season length, and solar radiation are the most important drivers in determining canopy height both locally and regionally. These results emphasize the vulnerability of tropical forest structure to ongoing changes in the earth’s climate and provide a valuable empirical baseline for tropical forest management.

Science & Technology - Other Topics↗

DOE OSTI2025

Mississippi's Strategic Resilience: A multi-systems approach to secure, reliable, and adaptable electric grid infrastructure

Mississippi’s electric grid resilience challenges are linked to an intersection of complex socioeconomic, ecological, technological, historical, and political challenges, exacerbated by increasing severe weather like flooding and tornado events. The state’s legacy of underinvestment in critical energy infrastructure, particularly in rural areas and vulnerable floodplains, have stressed an aging grid, creating long-lasting disruptions in electric service during weather-related outages. Effective emergency management and preparedness is further hampered by a lack of coordination across local, county, and regional scales. Using the TASTI-GRID platform and partnership with Oak Ridge National Laboratory (ORNL), Mississippi is developing a comprehensive regional resilience strategy to overcome energy security and reliability challenges, mitigating the impacts of natural hazards, and positioning Mississippi as a resilient and premier destination for residents, businesses, and economic development.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2026

Commercial integration of advanced nuclear energy with Artificial Intelligence (AI): Possible implications

The integration of advanced nuclear technologies (both fission and fusion) with artificial intelligence (AI) presents unprecedented national security challenges and opportunities. As fusion energy approaches commercial viability alongside advanced Small Modular Reactors (SMRs), their integration with AI and Artificial General Intelligence (AGI) systems could fundamentally transform the global energy and AI landscapes — two pillars of national security. This document briefly examines how AI could accelerate nuclear energy development and deployment while altering existing power structures, a lot could be done to deepen the discussions. Simultaneously, it observes how nuclear-powered AI may expedite advances toward AGI and beyond. These issues are deeply interconnected and thus need to be examined as a whole and more comprehensively than what’s being summarized here. For instance, AI-powered autonomous operation of nuclear facilities could reduce human error but introduce new cybersecurity vulnerabilities and uncertainties. Further investigation would also address how AI-enhanced nuclear technologies might complicate proliferation concerns through advanced fuel cycle management, nuclear materials production and safeguard. The strategic advantage gained by first entities achieving successful AI-nuclear integration could reshape global and national security framework. Timely analysis of these implications may be crucial for policymakers seeking to harness these technologies' benefits while effectively mitigating their potential risks.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

NASA NTRS2019

Radiation Hardness Assurance: Evolving for NewSpace

During the past decade, government agencies, private companies and academic institutions, have launched hundreds of small satellites into space, with dramatically expanded dependence on advanced commercial-off-the-shelf (COTS) technologies and systems required for mission success. While the radiation effects vulnerabilities of components within small satellites are the same as those of their larger, traditional relatives, revised approaches are needed for risk management because of differences in technical requirements and programmatic resources. While moving to COTS components and systems may reduce direct costs and procurement lead times, it undermines many cost-reduction strategies used for conventional radiation hardness assurance (RHA). Limited resources are accompanied by a lack of radiation testing and analysis, which can pose significant risks. Small satellites have benefited from short mission durations in low Earth orbits with respect to their radiation response, but as mission objectives grow and become reliant on advanced technologies operating for longer and in harsher environments, requirements need to reflect the changing scope without hindering developers that provide new capabilities. In this course we suggest RHA strategies that engineers and scientists can apply to a wide range of aerospace systems, including constellations, with a focus on how to manage aggressive system scaling for smaller platforms.

Radiation Hardness Assurance (RHA)↗

NASA NTRS2022

Analyzing Recharge Dynamics and Storage in a Thick, Karstic Vadose Zone

Karst vadose zone heterogeneity creates complex transmission and storage dynamics that affect the timing and magnitude of aquifer recharge. Young, high-matrix permeability eogenetic karst aquifers may have significantly higher matrix storage than older, lower matrix permeability counterparts. In vulnerable and water-limited karst regions, the timescales of storage may be important for seasonal and sub-seasonal water resource management. We create a framework to quantify storage dynamics in karst aquifers using high-resolution precipitation and groundwater levels from the Northern Guam Lens Aquifer in the US territory of Guam. We estimate recharge using the Water Table Fluctuation method, and then develop transfer functions between precipitation and recharge to quantify storage and release of water from the vadose zone. The transfer functions are partitioned into different flow pathways including conduit, conduit/matrix, and slowly draining matrix. Probability distributions are fit to each pathway to determine the average travel times of infiltrated waters. The results show that aquifer recharge through secondary porosity features typically occurs within a few hours of a rainfall event, but this rapid recharge accounts for only 12%–28% of total recharge. The majority of aquifer recharge (>70%) occurs within a month of a contributing storm event. An additional 10% of recharge, on average, took longer than a month to reach the water table. The framework established can help improve the hydrological modeling and freshwater management for karst aquifers.

Patricia Spellman↗

DOE OSTI2025

Establishing nationwide power system vulnerability index across US counties using interpretable machine learning

Power outages have become increasingly frequent, intense, and prolonged in the US due to climate change, aging electrical grids, and rising energy demand. However, largely due to the absence of granular spatiotemporal outage data, we lack data-driven evidence and analytics-based metrics to quantify power system vulnerability. This limitation has hindered the ability to effectively evaluate and address vulnerability to power outages in US communities. Here, in this work, we collected ∼179 million power outage records at 15-min intervals across 3022 US contiguous counties (96.15 % of the area) from 2014 to 2023. We developed a power system vulnerability assessment framework based on three dimensions (intensity, frequency, and duration) and applied interpretable machine learning models (XGBoost and SHAP) to compute Power System Vulnerability Index (PSVI) at the county level. Our analysis reveals a consistent increase in power system vulnerability across the US counties over the past decade. We identified 318 counties across 45 states as hotspots for high power system vulnerability, particularly in the West Coast (California and Washington), the East Coast (Florida and the Northeast area), the Great Lakes megalopolis (Chicago-Detroit metropolitan areas), and the Gulf of Mexico (Texas). Our heterogeneity analysis indicates that urban counties and those located along regional transmission boundaries tend to exhibit significantly higher vulnerability. Our results highlight the significance of the proposed PSVI for evaluating the vulnerability of communities to power outages. The findings underscore the widespread and pervasive impact of power outages across the country and offer crucial insights to support infrastructure operators, policymakers, and emergency managers in formulating policies and programs aimed at enhancing the resilience of the US power infrastructure.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

The Design and Evaluation of Zero Trust Architecture for Electric Vehicle Charging Infrastructure: EVs @ Scale Series on EV Charging Station Cybersecurity

Implementing a zero trust architecture can significantly bolster the security of electric vehicle (EV) charging infrastructure. EV charging infrastructure includes numerous networked interfaces, each of which can present potential vulnerabilities. When these vulnerabilities are exploited, they can compromise the entire system, leading to severe operational and security risks. Zero trust is a security model that operates on the principle of "never trust, always verify," which helps manage the attack surface and limit the scope of any potential compromises. Fundamentally, this model ensures that no entity, whether inside or outside the network, is trusted by default. The design principles of zero trust include continuous verification, strict deny-by-default access controls, and micro-segmentation. Continuous verification ensures that every request is thoroughly checked, regardless of its origin. Strict access controls enforce the principle of least privilege, allowing users and devices only the minimum necessary access to perform their functions. Micro-segmentation involves dividing the network into smaller, isolated segments to prevent lateral movement in case of a breach. In the context of EV charging infrastructure, zero trust can be implemented through various strategies. For example, multi-factor authentication (MFA) can be required for engineers to access the management interfaces and control systems of charging stations. Real-time monitoring and analysis of network traffic can help detect and respond to anomalies. Systems that do not need to communicate with each other can be micro-segmented to enhance security. All communications should adhere to predefined policies to be permitted. Additionally, encrypting communications can protect sensitive information exchanged between chargers and management systems. This paper presents a zero trust architecture specifically designed for EV charging infrastructure. Implementing zero trust not only mitigates risks but also builds a resilient infrastructure capable of withstanding and quickly recovering from cyber threats. The architecture addresses six defined security objectives. A comprehensive test plan is developed to assess the architecture against these objectives, and the results of the evaluation are reported. This approach is essential for maintaining the reliability and integrity of EV charging services in an increasingly interconnected and vulnerable digital landscape. This is the first in a planned series of papers exploring the implementation of zero trust in EV charging infrastructure. Each paper will delve into different aspects and applications of zero trust, highlighting how various work processes and requirements can lead to distinct architectural designs. These architectures will be tailored to address specific security challenges and operational needs within the EV charging ecosystem, ensuring a robust and adaptable security framework.

33 ADVANCED PROPULSION SYSTEMS↗

DOE OSTI2025

Machine Learning Prediction of Tritium‐Helium Groundwater Ages in the Central Valley, California, USA

Abstract Groundwater ages provides insight into recharge rates, flow velocities, and vulnerability to contaminants. The ability to predict groundwater ages based on more accessible parameters via Machine Learning (ML) would advance our ability to guide sustainable management of groundwater resources. In this study, ML models were trained and tested on a large data set of tritium concentrations and tritium‐helium groundwater ages from the California Central Valley, a large groundwater basin with complex land use, irrigation, and water management practices. The ML models were trained on 63 features, including location, well construction information, landscape characteristics, and climate variables, water chemistry, and stable isotopes. The Bagging regressor method can accurately classify (F1‐score = 0.91) groundwater samples as either modern or pre‐modern whereas the accuracy of the ML prediction of continuous tritium‐helium groundwater ages is limited and explains only of the variability in this data set. In general, ML groundwater age prediction relies mostly on features related to (a) the source of groundwater recharge, (b) contaminant history, (c) aquifer materials, (d) well construction, and (e) geochemical reactions along flow paths.

54 ENVIRONMENTAL SCIENCES↗

NASA NTRS2017

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification Validation (IVV) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASA's Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domaincomponent, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IVV enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

Fault management↗

NASA NTRS1987

Space Station Program threat and vulnerability analysis

An examination has been made of the physical security of the Space Station Program at the Kennedy Space Center in a peacetime environment, in order to furnish facility personnel with threat/vulnerability information. A risk-management approach is used to prioritize threat-target combinations that are characterized in terms of 'insiders' and 'outsiders'. Potential targets were identified and analyzed with a view to their attractiveness to an adversary, as well as to the consequentiality of the resulting damage.

Van Meter, Steven D.↗

DOE OSTI2026

Exploring Wildfire & Energy data toward State Prioritization Index (WESPI)

Energy infrastructure can both induce and suffer risks from wildfires ranging from direct damage to energy assets such as substations and power lines to Public Safety Power Shutoffs. Recent wildfire events underscore the need for data-driven approaches that help states and utilities proactively plan for wildfire risk. Existing national tools such as Federal Emergency Management Agency (FEMA)’s National Risk Index (NRI) are valuable for community hazard planning. However, they are less suited for energy infrastructure, as they emphasize population and building exposure rather than system vulnerabilities. In this paper, we explore relationships between energy and wildfire data and present a Wildfire-Energy State Prioritization Index (WESPI). Our methodology combines data from the US Forest Service’s Fire Simulation (FSIM) dataset with energy resilience metrics, historical fire incidents, and geospatial data on transmission lines and fire stations. Correlation analyses suggest that FSIM burn probability is more strongly associated with power outage metrics (ρ = 0.32) than NRI wildfire frequency, and counties with a greater density of fire stations experience more frequent, but less intense wildfires. We further leverage data for burn probability, transmission line density, and fire station density to develop a Wildfire-Energy State Prioritization Index (WESPI) to highlight counties where wildfire hazard, infrastructure exposure, and limited suppression capacity converge. The index provides a consistent, scalable framework for state energy offices and utilities to screen counties for vegetation management, optimization of outage management system deployment, and to inform wildfire mitigation plans.

Critical infrastructure↗

NASA NTRS2017

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification & Validation (IV&V) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASAs Office of Safety and Mission Assurance (OSMA) defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domain/component, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IV&V enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

IV&V↗

NASA NTRS1973

Central Atlantic regional ecological test site: A prototype regional environmental information system

The author has identified the following significant results. A comparison of photomorphic regions from an uncontrolled ERTS-1 mosaic of CARETS to land use areas on a map published in the National Atlas revealed close correlations in non-urban regions. Such regional scale analysis of ERTS-1 data has the potential for providing an economical sampling strategy for selecting sites for more detailed field measurements if other environmental variables can be correlated with patterns on ERTS-1 imagery. ERTS-1 imagery has also revealed for the first time the appearance of CARETS during the winter months. Investigators have identified extensive areas of conifers, which have previously been indistinguishable from deciduous vegetation. Imagery has also shown very clearly the extent of snow cover at a particular time over the region. The evaluation of ERTS-1 imagery used for the land use mapping of the shore zone of CARETS, has shown that the presence or absence of elements of an hierarchal system of shoreline landforms can help identify areas of potential rapid change. Changes in land use class distributions on the Barrier Islands signify the environmental response to natural and man-caused processes. Both environmental vulnerability and sensitivity can be estimated from the repetitive ERTS-1 coverage of long reaches of the CARETS coast. Results indicate potential applications to land use planning, management, and regional environmental quality analysis.

Alexander, R. H.↗

DOE OSTI2025

Soil Carbon Saturation: What Do We Really Know?

Managing soils to increase organic carbon storage presents a potential opportunity to mitigate and adapt to global change challenges, while providing numerous co-benefits and ecosystem services. However, soils differ widely in their potential for carbon sequestration, and knowledge of biophysical limits to carbon accumulation may aid in informing priority regions. Consequently, there is great interest in assessing whether soils exhibit a maximum capacity for storing organic carbon, particularly within organo–mineral associations given the finite nature of reactive minerals in a soil. While the concept of soil carbon saturation has existed for over 25 years, recent studies have argued for and against its importance. Here, we summarize the conceptual understanding of soil carbon saturation at both micro- and macro-scales, define key terminology, and address common concerns and misconceptions. We review methods used to quantify soil carbon saturation, highlighting the theory and potential caveats of each approach. Critically, we explore the utility of the principles of soil carbon saturation for informing carbon accumulation, vulnerability to loss, and representations in process-based models. We highlight key knowledge gaps and propose next steps for furthering our mechanistic understanding of soil carbon saturation and its implications for soil management.

Environmental sciences↗