Search NASA⌕ Search

SEARCH · Search NASA

Results for “Defense Resilience”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
DOE OSTI2026

Securing The Future: 2026 Manufacturing & Critical Infrastructure Threat Landscape

This report outlines the current state of manufacturing weaknesses introduced by the complexities of modern environments, including cloud services and Internet of Things (IoT) devices, with particular attention paid to the unique vulnerabilities encountered by SMMs. It also highlights CyManII’s strategic initiatives and collaborative solutions to mitigate these risks and strengthen the cybersecurity posture of the manufacturing ecosystem. Utilizing data from 2025 to inform forward-looking mitigation strategies, this report provides manufacturers with a clear understanding of both current and emerging cybersecurity threats, as well as practical opportunities to strengthen their cyber ecosystems. The following sections detail key vulnerabilities and threat vectors, along with actionable mitigation strategies, many of which have been developed or piloted through CyManII-led efforts. A thorough understanding of these risks and mitigation strategies is essential for manufacturers seeking to strengthen the security and resilience of their manufacturing operations.

3D Printing↗
DOE OSTI2025

Defect-engineered GaN high electron mobility transistors for enhanced radiation tolerance

This study explores the radiation resilience of GaN high-electron-mobility transistors (HEMTs) under various preconditioning treatments—pristine, electro-pulsed, electrically overstressed, and 60 Co gamma-irradiated—with a focus on enhancing survivability in high-radiation environments. Key findings emphasize the gate region’s central role in radiation sensitivity, with increased defect concentrations leading to reduced sensitivity—as determined from reduced single-event transient intensities during pulsed-laser studies—and impacting charge-transport dynamics. Notably, the most sensitive region shifted as a function of bias state, with the drain side of the gate being most sensitive under negative gate bias and the source side under unbiased conditions due to two-dimensional electron gas disruptions. These insights clarify the mechanisms influencing radiation sensitivity in microelectronics and highlight the potential of defect and strain engineering to enhance the radiation hardness of GaN HEMTs across various operational states, providing valuable guidance for applications in space, defense, and other radiation-rich environments.

36 MATERIALS SCIENCE↗
DOE OSTI2026

Flood Estimation under Snowmelt and Rain-on-Snow Processes in Alaska: A Military Installation Perspective

Accurate flood estimation in snow-dominated and high-latitude regions remains challenging due to complex interactions among rainfall, snowmelt, and rain-on-snow (ROS) processes, which are not captured in conventional precipitation-based intensity-duration-frequency (PREC-IDF) curves. This study evaluates the Next-Generation IDF (NG-IDF) framework, an extension of PREC-IDF that incorporates total water available for runoff (precipitation minus changes in snow water equivalent), in two contrasting Alaskan watersheds of Department of Defense (DoD) significance: the Little Chena River Basin (LCRB) in interior Alaska, a tributary of the Chena River that flows through Fort Wainwright and near Eielson Air Force Base, and the Upper Ship Creek Basin (USCB), which drains Joint Base Elmendorf-Richardson near Anchorage. Using long-term SNOTEL observations and event-based rainfall-runoff modeling, NG-IDF and PREC-IDF flood estimates were compared against observation-based flood frequency analyses. Results show that NG-IDF consistently reduces flood-estimation bias by 15–20% relative to PREC-IDF, particularly for snowmelt- and ROS-dominated events. In the interior LCRB, permafrost conditions can substantially amplify flood responses during snowmelt events, an effect not explicitly represented in standard design tools. These findings demonstrate that NG-IDF provides a more physically consistent and transferable framework for flood estimation in cold regions, with potential relevance to mission-critical DoD installation resilience. Projected increases in ROS frequency and permafrost degradation across Alaska further emphasize the need to integrate physics-based hydrologic models that explicitly represent snow and permafrost processes to enhance design resilience and operational readiness for military and other critical infrastructure.

Yan, Hongxiang (ORCID:000000022387403X)↗
DOE OSTI2021

Bioenergy sorghum’s deep roots: A key to sustainable biomass production on annual cropland

Abstract Bioenergy sorghum has high biomass yield potential, drought resilience, good nitrogen use efficiency, and a root system that contributes to the accumulation of soil organic carbon. In this study, field grown bioenergy sorghum root systems were analyzed during the growing season to characterize their depth, biomass, morphology, anatomy, and gene expression profiles. Bioenergy sorghum roots grew continuously during a 155‐day growing season producing ~175 nodal roots, accumulating ~7 Mg of dry biomass per hectare, and reaching >2 m deep in the soil profile. Nodal roots within 20 cm of the stem were 1–5 mm in diameter, whereas roots deeper in soil profiles were enriched in lateral roots with small diameters (~30–500 µm) enabling growth through soil macropores. In older field‐grown plants, roots with intact endodermal, vascular and inner root tissues were surrounded by degraded or aerenchyma‐filled epidermal and cortical cell layers. Transcriptome analysis of nodal, surface, and deep roots identified >2,500 differentially expressed genes involved in root growth, transport, adaptation, defense, and AMF–root interaction. Deep roots (180–240 cm) differentially expressed genes that regulate lateral root growth. Surface roots (0–20 cm) located mid‐row differentially expressed genes involved in nitrate transport, whereas ammonium transport genes were expressed in surface and deep roots and genes involved in phosphate transport were expressed in nodal, surface, and deep roots. Overall, bioenergy sorghum's long growing season enables root systems to grow deeper and accumulate more biomass than annual grain crops such as maize, attributes that could help restore annual cropland soil organic carbon levels and improve soil productivity. Deep roots active in nutrient transport are positioned to take‐up fertilizer leached deep into soil profiles mitigating potential nutrient run‐off. Bioenergy sorghum's large and deep root system is a key to sustainable production of biofuels, biopower, and bioproducts on annual cropland.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2022

Associate Laboratory Directorate for Weapon Physics (ALDX) [Slides]

ALDX is one of seven technical Directorates at the Laboratory and resides within the Weapons Program. The Weapons Physics Directorate stewards a number of critical capabilities to meet its mission. Our mission is to sustain the resilience of the US nuclear stockpile and help shape a globalized nuclear world. Sustaining the aging stockpile poses scientific challenges to assess and certify the stockpile without testing. We are helping to solve major technical challenges in the nuclear global security regime. Geopolitical realities demand the Laboratory’s excellence in providing solutions to national security problems. High Performance Computing at Los Alamos opens the doors to many sophisticated modeling techniques. We use many experimental facilities to probe weapons physics. The diverse skill set required to execute ALDX’s mission has benefited greatly from the Postdoc program.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2020

Electromagnetic Pulse – Resilient Electric Grid for National Security: Research Program Executive Summary

Sandia National Laboratories sponsored a three-year internally funded Laboratory Directed Research and Development (LDRD) effort to investigate the vulnerabilities and mitigations of a high-altitude electromagnetic pulse (HEMP) on the electric power grid. The research was focused on understanding the vulnerabilities and potential mitigations for components and systems at the high voltage transmission level. Results from the research included a broad array of subtopics, covered in twenty-three reports and papers, and which are highlighted in this executive summary report. These subtopics include high altitude electromagnetic pulse (HEMP) characterization, HEMP coupling analysis, system-wide effects, and mitigating technologies.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Improved Biofuel Production through Discovery and Engineering of Terpene Metabolism in Switchgrass

Project Objectives - Of the myriad specialized metabolites that plants deploy to adapt to environmental challenges, terpenes form the largest group. In many major crops, unique terpene blends serve as key stress defenses that directly impact plant fitness and yield. In addition, terpenes, such as bisabolene and pinene, are used for producing renewable biofuels. Essential to advancing a broader use of terpenes for biofuel feedstock engineering is a system-wide knowledge of the diverse biosynthetic machinery and defensive potential of often species-specific terpene blends. The proposed project would merge genome-wide enzyme discovery with comparative –omics, protein structural and plant microbiome studies to define the biosynthesis and stress-defensive functions of the switchgrass (Panicum virgatum) terpene network. These insights would be combined with developing and applying non-transgenic genome editing tools to design plants with desirable terpene blends for higher productivity and biofuel production on marginal lands. As a dedicated lignocellulosic feedstock for U.S. biofuel production with high net energy yield, stress tolerance, and available genome resources, switchgrass is well-suited for devising new avenues for biofuel production. Project Description – The diversity of plant terpene defenses is governed by species-specific families of terpene synthase (TPS) and cytochrome P450 monooxygenase (P450) enzymes. Mining of the switchgrass genome (genotype Alamo) identified ~100 TPS and P450 candidate genes, and combinatorial biochemical analysis of synthesized TPSs and P450s revealed more than a dozen enzymes with common and novel activities. In addition, several identified terpene metabolites and the corresponding transcripts were up-regulated in response to abiotic stressors. These findings demonstrate a unique switchgrass terpene network with probable importance to abiotic stress tolerance, thus providing a large chemical portfolio for optimizing crop resistance, yield, and biofuel composition. Leveraging these preliminary data, we propose to generate a genome-wide map of the switchgrass terpene metabolic network through multi-gene co-expression analyses that allow the efficient cross-validation of TPS and P450 functions. Key enzymes would further be applied to structure-function studies via X-ray protein crystallography, homology modeling and site-directed mutagenesis to gain mechanistic insight into the catalytic specificity of switchgrass terpene metabolism and provide gene and amino acid targets for genome editing. In tandem with terpene pathway discovery, system-wide metabolomics, transcriptomics and proteomics studies in switchgrass accessions of contrasting drought tolerance would define the role of switchgrass terpene metabolism in conferring abiotic stress resilience. Metabolic changes would be assessed in a combined approach of targeted (terpenes) and untargeted metabolite profiling using a high-resolution LC-MS/MS approach, differential gene expression analyses through multiplexed Illumina RNA sequencing, and quantitative analysis of high-priority pathway enzymes using multiple reaction monitoring (MRM). Drawing on these insights, knock-down/out mutants of stress-associated pathway nodes would be generated by optimizing transient virus-induced gene silencing (VIGS) and CRISPR/Cas9 systems under control of the Tobacco Rattle Virus (TRV). The resulting mutant lines would then be analyzed for stress susceptibility and the impact on the root microbiome to define gene functions in planta. Knowledge of terpene pathways, enzyme mechanisms and bioactivities would be applied to enhance switchgrass stress resilience and to tailor-make terpene blends for biofuel production. Here, TRV-enabled CRISPR/Cas9 genome editing, including allele-specific knock-out of redundant genes, engineering of enzyme specificity via structure-guided point mutations, and overexpression of terpene genes relevant to stress-protection or biofuel production, would be used to increase metabolic flux toward desired pathways. Broader Impacts - Integrating the system-wide discovery, mechanistic analysis and non-transgenic genome engineering of the switchgrass terpene network aligns the required steps to unlock the chemical potential of this important metabolite class to generate crops that are more resistant to stress and provide advanced biofuel production in light of rising climate pressures as foreseeable challenges for bioenergy crop cultivation. The proposed project would further offer interdisciplinary student training through active involvement in the project and integration of research concepts and outcomes into newly-developed graduate and undergraduate courses on Plant Biotechnology.

09 BIOMASS FUELS↗
DOE OSTI2025

DRE: Designing for Resilience through Emulation

Threats to cyber- and cyber-physical systems have continued to increase over the past decade. Now more than ever, it is vital that cyber-physical system stakeholders have the tools to deeply understand their systems and the threats they face. High-fidelity modeling capabilities are powerful tools to support system understanding and decision-making, but they currently lack scientifically rigorous experimentation practices and infrastructures. The purpose of the project Designing for Resilience through Emulation (DRE) was to bring together past research and existing tools into a new pipeline to improve our ability to quantitatively evaluate future cyber scenarios. DRE offers new integrated capabilities for large dataset collection, noise studies, sensitivity analysis, uncertainty quantification, and surrogate modeling using a cyber-physical system emulation environment. These new capabilities significantly improve our ability to establish the credibility of the answers derived from emulation environments, ultimately leading to better critical decision support.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

Development of Integrated Safety and Security Models for Comprehensive Reliability and Resiliency Evaluation

The security of the electric grid and supporting energy systems is crucial to national security. One of the complexities in analyzing the security of energy systems is the safety consequences that may result from accidents. For energy systems, the goal is to ensure that they operate as intended and that any consequences are mitigated or prevented. The integration of safety and security is paramount to protecting these systems from attacks and ensuring that large consequences are prevented. This report describes an integrated safety and security methodology to evaluate cybersecurity events that can lead to large consequences. This novel approach first describes how Systems-Theoretic Process Analysis (STPA) provides a digital causal analysis for Bayesian Networks (BNs). The use of STPA causal analysis provides a systematic approach to constructing BNs that adequately model cyber scenarios that result in consequences. When combined with the technical principles described in Risk-Informed Management of Enterprise Systems (RIMES), a comprehensive risk-informed cybersecurity analysis results that allows decision-makers to prioritize systems that most impact risk.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Robust Restoration From Cyber-Physical Attacks in Active Distribution Grids With Grid-Edge IBRs

The inverter-based resources (IBRs) have enabled the integration of renewable energy at the grid edge with enhanced control capabilities to support the reliable operation of power grids. Different control frameworks, such as hierarchical or distributed architecture, have been proposed with the expansion of cyber networks for real-time monitoring and control. This evolution of critical infrastructure into cyber-physical systems also brings more vulnerabilities for the broadened attack surfaces, and significantly increases the possibility of physical system failures or outages caused by cyberattacks. Among tremendous efforts in the defense-in-depth approach, it remains challenging to provide prompt detection and accurate location of attack entry points or paths. Therefore, the prevailing restoration framework may struggle to fully consider the cyber-physical interdependence, successfully isolate the compromised cyber and physical components, and safely recover the systems without the potential risks leading to secondary outages. This paper is motivated to develop a cyber-physical restoration framework for distribution grids to recover from cyber attacks by harnessing grid-edge IBRs. The framework is first built on the operational guidelines of IBRs considering the compromised cyber layer. Then, an ambiguity set is established to represent the uncertainty of attack scenarios and their possibility levels. Next, a distributionally robust optimization model is developed to provide the optimal load restoration strategy across all scenarios. The effectiveness of the proposed model is demonstrated through various use cases on the modified IEEE 13-node and 123-node test systems. Finally, simulation results demonstrate the effectiveness and advancement of developed post-attack restoration strategies.

Cybersecurity↗
DOE OSTI2021

Energy Sector Position, Navigation, and Time Cybersecurity Profile

The Pacific Northwest National Laboratory has developed this positioning, navigation, and timing (PNT) profile for the Energy Sector at the request of the U.S. Department of Energy. The Department of Energy is the sector-specific agency for the Energy Sector and is responsible for providing guidance in the form of this PNT Profile, per Executive Order 13905, Strengthening National Resilience Through Responsible Use of Positioning, Navigation, and Timing Services (Executive Office of the President 2020) issued February 18, 2020. Executive Order 13905 directed the National Institute of Standards & Technology to develop a PNT Profile that is broadly applicable to all sectors and to serve as a foundation for sector-neutral guidance, NISTIR 8323 Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services. This document builds on NISTIR 8323 to identify and serve as the required Energy Sector specific guidance. For purposes of this PNT Profile, Energy Sector precise time is 0.5 µs (microseconds) to 1 µs accuracy. Currently, the electricity subsector has systems that use this level of precision time, but the oil and natural gas subsector currently does not. While the electricity subsector uses precision timing, it does not use positioning and/or navigation at this level of accuracy. For this reason, this PNT Profile will focus on only precise time for the electricity subsector.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

On the Limits of EM Based Detection of Control Logic Injection Attacks In Noisy Environments

The difficulty in applying traditional security mechanisms in Industrial Control System (ICS) environments makes a large portion of these mission-critical assets vulnerable to cyber attacks. Therefore, there is a dire need for the development of novel security mechanisms specifically designed to protect such critical systems. Recently a lot of attention has been given to mechanisms that exploit the EM emanations of devices for defense purposes. Such practices may lead to the development of robust external and non-intrusive anomaly detection systems. Nevertheless, the majority of current work in the area neglects to consider the implications of real-life environments, particularly environmental noise. In this work, we explore the limits of EM-based anomaly detection towards identifying injection attacks in control logic software in noisy environments. Our study conducted upon both synthetically generated and real signals identified that indeed environmental noise might significantly degrade the accuracy of the anomaly detection process. Experiments done upon synthetic data indicated that assuming that signals are captured with high sampling rates, even minor code injections can be detected with above-90% accuracy in noisy environments where SNR is up to -2dB. This is true even if naive detection methods are considered. Moreover, experiments done using a real-life testbed attest that even single-instruction injections can be detected with near-perfect accuracy in relatively clean environments. Finally, noise-elimination techniques can drastically improve the reliability of the detection mechanism even in noisy environments.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

1. Physical Security Engineering by Design for Nuclear Facilities; 2. Nuclear Power Plant Site Security Management – A Security Strategy; 3. The UAE Women in Nuclear Energy Security

1. Security by design, or SeBD, is a comprehensive approach that integrates the physical protection system of a nuclear plant into every stage of its existence. This includes planning, designing, constructing, commissioning, and operating the facility, using a combination of analytical, physical, technological, and procedural measures. Essentially, SeBD involves intentionally applying and incorporating security into all aspects of design and operation throughout the entire lifecycle of a facility. By implementing this methodology throughout various phases such as program development, process implementation, staff training and procedures management in conjunction with plant equipment, facilities can be optimized to minimize security risks without compromising functional design requirements. This ultimately improves the overall security posture of the site and reduces the need for costly modifications or additional security resources post-design. 2. A site security strategy is a living document that is revised on a periodic or event-driven basis, ensuring that site security operations and corresponding procedures provide long-term, effective protection for the entire nuclear power plant (NPP) site. A site security strategy aims to mitigate threats across the entire NPP site via in-depth defense approaches and mutual support; therefore, if a layer is omitted or altered, then the effect across all layers must be re-evaluated. Therefore, the aim of the site security strategy is to provide an appropriate, scalable security regime that deters, denies, delays, and detects incidents and, equally importantly, reassures legitimate users and the regulator that due diligence and regulatory compliance have been achieved, ensuring that the site is safe and secure. Robust access control for vehicles and pedestrians is at the heart of the strategy. Vehicle and pedestrian searching and screening are seen as the strongest mitigation methods against vehicle- and pedestrian-borne attacks. The security strategy must also be supported through comprehensive staff training and the development of robust processes, procedures, and planning. If all these measures are to be effective, then training must be implemented during each phase of construction, partial operation/commissioning, and full operation. No single element of site security is completely isolated from the influence of other elements. Ideally, consideration of all key elements will result in a security strategy that is integrated and proportional to the threat and that does not over specify individual security solutions through the application of isolated measures but rather applies a holistic, all-encompassing approach. 3. When women enter the labor force, numerous positive outcomes emerge, including increased GDP, educational gains, and decreased maternal mortality. Despite these benefits, women's employment rates and equality vary significantly worldwide as does support for women in the workforce. This paper will explore the multifaceted benefits of women's employment, the factors influencing labor force participation rates, and the urgency to achieve gender equality as outlined in the 2015 United Nations Sustainable Development Goals (SDGs). It will then examine the emerging presence of women in the traditionally male-dominated nuclear field, specifically within the United Arab Emirates (UAE) as a testament to their resilience and determination to break social norms and advance gender equality.

Zineddin, Dr. Z.↗
DOE OSTI2025

Deploying Adversarial Attacks in Super-Resolution Models

Reliable super-resolution methods are crucial for applications like remote sensing, grid resilience and disaster impact analysis, and standoff biometrics. These methods infuse additional high-frequency information into reconstructions, allowing for better contextualization and image intelligence. However, super-resolution models can also introduce hallucinations or other unseen vulnerabilities that could be exploited by an adversary. This is further compounded by the prominence of deep learning in these models, as models are often blindly applied on out-of-distribution images. In this work, we implement adversarial attacks in common open-source super-resolution models and examine their impact on reconstructions and downstream classification tasks. We find that an adversarially trained super-resolution model can produce high-quality reconstructions that degrade downstream classifications. Moreover, these attacks do not require access to low-resolution imagery or class labels at inference time. These results demonstrate the vulnerability of super-resolution methods to malicious actors and motivates the development of a detector for super-resolution adversarial attacks. Further exploration of adversarial attacks in this domain is required to ensure trustworthiness and robustness of super-resolution models for national security applications.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2024

Peer-to-peer communication control for resilient operations of networked cyberphysical systems

This report includes two main accomplishments of the peer-to-peer communication control for resilient operation of networked microgrids project in FY24, which include a scheme for cyberattack-aware coordination of networked microgrids for supporting voltages of bulk power systems and a scheme for price signal-based operations of EV-rich networked microgrids with mixed ownership. First, the cyberattack-aware scheme enables networked microgrids to distributedly determine the amount of reactive power injection to support the voltage of bulk power system (BPS) in a fair manner. In this scheme, a risk-informed algorithm is presented to generate the peer-to- peer (P2P) communication graph with minimal risk of attack on communication links. To deal with cyberattacks on MG controllers, the resilient consensus algorithm (CA) is utilized for MG controllers to robustly estimate the total reactive power headroom, from which the MGs can accurately provide the needed amount of reactive power injection for supporting the voltage of BPS. The CA implementation and performance within the P2P communication framework are demonstrated on the IEEE 39-bus system with 6 microgrids contained in the distribution feeder under different cyberattack scenarios. Second, the price-based scheme enables the usage of the real-time price signal for the operations of electric vehicle (EV)-rich networked-microgrids with mixed ownership, in which not all the microgrids can communicate with the distribution system operator (DSO). In this scheme, a max consensus is introduced to enable the real-time price signal to be propagated from the DSO to all the microgrids, from which each microgrid controller will manage the DERs to balance the load demand and the power injection from the EV charging stations within its microgrid. Numerical results over one day with 288 slots of 5-minute intervals on the modified 123-node test feeder including 3 microgrids with high penetration of EV are presented to evaluate how the price signal affects the operations of networked microgrids under different charging strategies of the EV charging stations. The result indicates that our proposed EVCS (dis)charging strategy, which leverages the flexibility of EVs to support the grid through discharging during peak demand, proves to be a cost-effective solution that reduces operational costs while improving the social welfare of EV charging.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

Countering Weapons of Mass Destruction (CWMD) Device Cybersecurity Characterization Process and Profile

Countering Weapons of Mass Destruction (CWMD) recognizes that threats in the cyberspace domain continue to grow, which requires CWMD devices and supporting systems to be both cybersecure (ability to protect or defend from cyber-attacks) and resilient (ability to maintain required capability in the face of adversity) to cyber threats. The CWMD cybersecurity characterization approach in this document supports existing cyber resilience activities within the Acquisition Lifecycle Framework. Similarly, this process supports existing Department of Homeland Security Cyber Resilience Test and Evaluation activities, which consist of iterative processes, starting at the initiation of system acquisition and continuing throughout the entire device and system life cycle. Cyber resilience is the ability of an information system to continue to operate while under attack, even if in a degraded or debilitated state, and to rapidly recover operational capabilities for essential functions after a successful attack. The goal of the security characterization task for CWMD is to support the development of a CBRN device-dependent profile that aligns with device network capabilities and maps to recommended security controls to create a characterization security profile impact levels. The impact levels for CWMD devices should be characterized as Low (L), Moderate (M), High (H) to align with the low, moderate, high control baselines. To estimate the impact levels, the device’s security-related attributes are translated into the security objectives: Confidentiality (C), Integrity (I), and Availability (A), known as the CIA triad. The potential impact for each device can be L, M, H, for devices that connect and transmit different types of data and may have different impact levels. National Institute of Standards and Technology Federal Information Processing Standards Publication 199 states, “the potential impact values assigned to the respective security objectives shall be the highest value from among those security categories that have been determined for each type of information resident on the information system.” As CWMD is determining the cybersecurity impact levels of CBRN devices based on network connections and data transfers, the impact levels are aligned with the associated attributes of network connections and communications. For example, if the device system is connected to a wireless network and transmits different data types based on the confidentiality of the data, the highest impact value for each security objective should represent the device’s CIA impact level. This document is intended to be used by test managers, test team, and program managers.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2024

Countering Weapons of Mass Destruction (CWMD) Device Cybersecurity Characterization Process and Profile

Countering Weapons of Mass Destruction (CWMD) recognizes that threats in the cyberspace domain continue to grow, which requires CWMD devices and supporting systems to be both cybersecure (ability to protect or defend from cyber-attacks) and resilient (ability to maintain required capability in the face of adversity) to cyber threats. The CWMD cybersecurity characterization approach in this document supports existing cyber resilience activities within the Acquisition Lifecycle Framework. Similarly, this process supports existing Department of Homeland Security Cyber Resilience Test and Evaluation activities, which consist of iterative processes, starting at the initiation of system acquisition and continuing throughout the entire device and system life cycle. Cyber resilience is the ability of an information system to continue to operate while under attack, even if in a degraded or debilitated state,1 and to rapidly recover operational capabilities for essential functions after a successful attack.2 The goal of the security characterization task for CWMD is to support the development of a CBRN device-dependent profile that aligns with device network capabilities and maps to recommended security controls to create a characterization security profile impact levels. The impact levels for CWMD devices should be characterized as Low (L), Moderate (M), High (H) to align with the low, moderate, high control baselines. To estimate the impact levels, the device’s security-related attributes are translated into the security objectives: Confidentiality (C), Integrity (I), and Availability (A), known as the CIA triad. The potential impact for each device can be L, M, H, for devices that connect and transmit different types of data and may have different impact levels. National Institute of Standards and Technology Federal Information Processing Standards Publication 199 states, “the potential impact values assigned to the respective security objectives shall be the highest value from among those security categories that have been determined for each type of information resident on the information system.”3 As CWMD is determining the cybersecurity impact levels of CBRN devices based on network connections and data transfers, the impact levels are aligned with the associated attributes of network connections and communications. For example, if the device system is connected to a wireless network and transmits different data types based on the confidentiality of the data, the highest impact value for each security objective should represent the device’s CIA impact level. This document is intended to be used by test managers, test team, and program managers.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2020

Why does cyber deterrence fail and when might it succeed? A framework for cyber scenario analysis

Through cyberattacks on information technology and digital communications systems, antagonists have increasingly been able to alter the strategic balance in their favor without provoking serious consequences. Conflict within and through the cyber domain is inherently different from conflict in other domains that house our critical systems. These differences result in new challenges for defending and creating resilient systems, and for deterring those who would wish to disrupt or destroy them. The purpose of this paper is to further examine the question of whether or not deterrence can be an effective strategy in cyber conflict, given our broad and varied interests in cyberspace. We define deterrence broadly as the creation of conditions that dissuade antagonists from taking unwanted actions because they believe that they will incur unacceptably high costs and/or receive insufficient benefits from taking that action. Deterrence may or may not be the most credible or effective strategy for achieving our desired end states in cybersecurity. Regardless of the answer here, however, it is important to consider why deterrence strategies might succeed under certain conditions, and to understand why deterrence is not effective within the myriad contexts that it appears fail. Deterrence remains a key component of U.S. cyber strategy, but there is little detail on how to operationalize or implement this policy, how to bring a whole-of-government and whole-of- private-sector approach to cyber deterrence, which types of antagonists can or should be deterred, and in which contexts. Moreover, discussion about how nations can and should respond to significant cyber incidents largely centers around whether or not the incident constitutes a "use of force," which would justify certain types of responses according to international law. However, we believe the "use of force" threshold is inadequate to describe the myriad interests and objectives of actors in cyberspace, both attackers and defenders. In this paper, we propose an approach to further examine if deterrence is an effective strategy and under which conditions. Our approach includes systematic analysis of cyber incident scenarios using a framework to evaluate the effectiveness of various activities in influencing antagonist behavior. While we only examine a single scenario for this paper, we propose that additional work is needed to more fully understand how various alternative thresholds constrain or unleash options for actors to influence one another's behavior in the cyber domain.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗