Search NASA⌕ Search

SEARCH · Search NASA

Results for “Vulnerability Management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

BESS Digital Assurance, Supply Chain Risk Management, and Emerging Regulation Session One

The TADA BESS Supply Chain Workshops are designed to equip participants with the knowledge and tools necessary to address the evolving challenges at the intersection of battery energy storage systems (BESS), cybersecurity, and supply chain vulnerabilities. The workshops emphasize the application of Cyber-Informed Engineering (CIE) principles using INL’s procurement guide and the CIE-BAT tool. Attendees will develop risk-based security strategies and actionable compliance roadmaps tailored to their BESS projects. Additionally, the program fosters a collaborative network of practitioners and provides guidance on navigating emerging regulatory requirements, including FEOC rules under the OBBB framework, to assess and enhance organizational readiness. This is Session 1 of 3. (Full Version)

25 - ENERGY STORAGE↗

Power System Resilience Metrics Augmentation for Critical Load Prioritization

One of the major goals of new grid operation regimes, such as transactive energy systems (TESs), is to make the power grid more resilient to withstand natural or man-made disasters and potential reliability events, and to continue to serve the maximum number of its customers. But it is a well-known fact to system operators that not all customers are the same. This implies that any discussion of TESs’ impacts on the resilience of the power system should consider the needs of its critical customers (such as the power system operation centers, fire and police stations, and hospitals) over those of other customers. When evaluating the resilience of the system, bonus points must be awarded to any system that could maintain its power supply to critical customers during a disturbance that may cause an outage. This report discusses critical infrastructure (CI) as found in the literature and then categorizes it based on the field to which the operations belong (such as human life/safety-related, operations management, necessary city operation, industrial customers, etc.). Each of these CI categories is further divided into types of critical customers (e.g., the human life/safety-related category has different types of customers like hospitals, fire and police stations, etc.). The entire demand of each of the critical customer types is not categorized as critical load (CL); instead, only a portion of the total load of these critical customers is characterized as critical load. This is done based on the categories of equipment, the function of which is crucial in the operation of the overall facility. CL categorization is performed to provide the ratio of the critical load portion to the overall load , so that it can serve as a parameter in the resilience evaluation of the grid through a metrics-based approach. Such categorization is important as it helps to augment the existing quantifiable resilience metrics with CL categorization. The metrics for a power system need to not only consider how well a system performed during a disturbance event, but also how it reduced strain and supplied power to its CLs. The first step in this process is characterize CLs in the system. After CL characterization, the next step is the inclusion of these loads in the resilience metrics. To that end, in this report weight-based augmentation of resilience metrics is proposed, where certain customers (the ones that are categorized as critical) are assigned higher weights than others. Though an overview of assigning weights to customers is discussed, there is no one-size-fits-all approach for every power system. The decisions made about assigning such weights to customers vary greatly from one operator to another, based on their unique systems and the current and predicted states of critical customers. This decision-making can include the type of disturbance event, which might only affect certain parts of the system. In general, analyzing critical customers before an event helps understand system vulnerabilities. It also helps in planning and conducting operations during the event, evaluating system performance after the event, and supporting better planning for future events. An alternative to the current practices of managing the grid for outages is an innovative TES, which has the potential to provide a platform for including distributed energy resources for managing CLs. This report also describes how TES qualities can help (1) to maintain power supply to critical customers for uninterrupted operations and (2) to restore lost power supply to the critical customers rapidly.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Risk-Averse Bi-Level Stochastic Network Interdiction Model for Cyber-Security Risk Management

Security of cyber networks is crucial; recent severe cyber-attacks have had a devastating effect on many large organizations. The attack graph, which maps the potential attack paths of a cyber network, is a popular tool for analyzing cyber system vulnerability. In this study, we propose a bi-level stochastic network interdiction model on an attack graph to enable a risk-averse, resource constrained cyber network defender to optimally deploy security countermeasures that protect against attackers with an uncertain budget. This risk- averse conditional-value-at-risk (CVaR) model minimizes a weighted sum of the expected maximum loss over all scenarios and the expected maximum loss from the most damaging attack scenarios. We develop a customized constraint and column generation algorithm to solve our model as well as several acceleration techniques to improve the computational efficiency. Numerical experiments demonstrate that the acceleration techniques enable the solution of relatively large problems within a reasonable amount of time: applying all the acceleration techniques also reduces the average computation time of the basic algorithm by 71% for 100-node graphs. Using metrics called mean-risk value of stochastic solution and value of risk-aversion, computational results suggest that our stochastic risk-averse model significantly outperforms deterministic and risk-neutral models when 1) the distribution of attacker budget is heavy-right-tailed and 2) the defender is highly risk-averse.

Bhuiyan, Tanveer H.↗

BESS Digital Assurance, Supply Chain Risk Management, and Emerging Regulation Session One - Abridged

The TADA BESS Supply Chain Workshops are designed to equip participants with the knowledge and tools necessary to address the evolving challenges at the intersection of battery energy storage systems (BESS), cybersecurity, and supply chain vulnerabilities. The workshops emphasize the application of Cyber-Informed Engineering (CIE) principles using INL’s procurement guide and the CIE-BAT tool. Attendees will develop risk-based security strategies and actionable compliance roadmaps tailored to their BESS projects. Additionally, the program fosters a collaborative network of practitioners and provides guidance on navigating emerging regulatory requirements, including FEOC rules under the OBBB framework, to assess and enhance organizational readiness. This is Session 1 of 3.

25 - ENERGY STORAGE↗

Tracking the environmental impacts of ecological engineering on coastal wetlands with numerical modeling and remote sensing

Coastal wetlands are the most valuable ecosystems on the earth but facing severe degradation and losses owing to climate change and anthropogenic activities. Many ecological engineering projects (EEP) have been conducted to mitigate the degradation of coastal wetlands. However, the geomorphological impacts of EEP on coastal wetlands have not been well documented. In this study, a method employed a process-based hydrodynamic model and remote sensing (RS) was developed to evaluate the impacts of EEP on the geomorphological change of a prototype Ramsar site. Results demonstrated that RS has great potential in improving the quality of bathymetry data for the numerical model with a decrease of RMSE from 0.52 m to 0.3 m. It also showed good capacity in trend detection of geomorphological change spatially. Results showed the Chongming Dongtan wetland experienced erosion with an annual rate of -0.035 m/yr from 2013 to 2016 after the implementation of EEP. The deposition rate changed significantly in the area within 200 m of the EEP. It is found that the EEP modified the composition of vegetation, sediment transportation, as well as substrate stability, affecting the geomorphological change of coastal wetlands. It is suggested that the EEP with moderate anthropogenic disturbance is a direct and effective way to recover the coastal habitats for waterbirds. However, the modification of the coastal wetland ecosystem by EEP will lead to the potential vulnerability to global climate change. Therefore, how to mitigate the advantages and disadvantages of the EEP is needed to be further studied to find a more sustainable way for coastal management.

geomorphological change, coastal wetlands, Ecologi↗

Strengthening the Security of Operational Technology: Understanding Contemporary Bill of Materials

The evolution of cyber-physical infrastructure has made its security more challenging. The last few years have witnessed a convergence of hardware and software segments in various domains, including operational technology (OT) which is responsible for carrying out critical tasks such as monitoring and controlling power grids, nuclear plants, transportation, and emergency services. Both hardware and software encapsulate numerous open source and proprietary subcomponents, making it crucial for end-users to understand the composition of the products they are using. For example, wind turbines incorporate thousands of lines of code (software) used for the turbine's design, planning, operation, and analytics in addition to the numerous hardware subcomponents that construct it. Due to the highly complex nature of software and hardware, knowledge of the components and subcomponents is required to mitigate cyber vulnerabilities and defend against cyberattacks. There has also been a transformation from a traditional linear supply chain into a global, dynamic, diverse, and interconnected system. The digitization of the supply chain makes it easier to find and exploit vulnerabilities. Critical infrastructures (e.g., power grids, oil, natural gas, water, and wastewater) rely on OT to function, and if the OT is compromised, equipment damage and potential interruption of services could result. A significant security measure to protect OT systems from disruption is to develop a supply chain bill of materials (BoM) corresponding to the software and hardware used in OT, along with attestations amongst vendors and asset owners. A supply chain BoM is a proactive way to understand the inherent vulnerabilities in the system and mitigate them in advance of being exploited. BoMs bolster the trust placed in the digital infrastructure and enhance software supply chain security by sustaining the management of component obsolescence and compliance, along with the seclusion of unsafe segments of a specific product. Adopting BoM tools is becoming increasingly important across various government sectors, as evidenced by the recent U.S. executive order on cybersecurity (NIST 2021). This paper aims to classify BoMs based on structure, functionality, component type, and architecture. The work also discusses case studies to further highlight the benefits of BoMs. In addition, it identifies missing pieces in existing BoM implementations so that future research may identify bounds on where it could expect to make improvements and directly enable researchers to identify promising areas for exploration. Further, the authors provide valuable recommendations to tool developers, researchers, and standardizing organizations (policymakers), additionally benefitting critical infrastructure owners and government executives. This aids in paving a path for future work, thereby, providing suggestions to determine a tool for consumers that best suit their needs.

97 MATHEMATICS AND COMPUTING↗

Beam Losses for the PIP-III Linac to Recycler/Main Injector

The PIP-III linac produces 8 GeV H - beam for injection into the Recycler or Main Injector (MI). Beam losses throughout the system must remain low to ensure high intensity in the MI cycle and to manage radiation effects to acceptable levels, including enabling practical maintenance of the facility. Beam loss mechanisms in the system mageable maintStripping to H+ is needed, in a system that is vulnerable to magnetic stripping of H- in magnetic fields. The High power beam will heat stripping foils, perhaps unacceptably. The injection pulse is much longer than the MI circumference, so multiturn pulses with resulting heating and beam diffusion are required. We discuss beam loss related design considerations for the Linac-based scenario.

43 PARTICLE ACCELERATORS↗

Enhancing Resilience of Urban Systems Against Climate-Induced Floods Using Advanced Data-Driven and Computing Techniques: A Driver-Pressure-State-Impact-Response (DPSIR) Framework

Focal Area: This white paper proposes advanced data-driven and computing techniques to improve the predictability of extreme climate events (precipitation) and focuses on comprehending their impact dynamics to enhance resilience of urban systems. Science Challenge: In urban systems, climate change has presented significant challenges related to accurate spatiotemporal prediction of extreme climate events (heavy precipitation) and their impacts, i.e. flooding. The occurrence of extreme climate events and their compounding repercussions on the built environment make urban systems increasingly more vulnerable. The interactions between extreme climate events, urban systems, and the corresponding impacts are irregular, non-linear, and dynamic, making it difficult to standardize resilience. As it stands, the management of complex urban systems is affected by uncertainties related to the nature of short- and long-term consequences caused by extreme events.

54 ENVIRONMENTAL SCIENCES↗

A typological framework of non-floodplain wetlands for global collaborative research and sustainable use

Non-floodplain wetlands (NFWs) are important but vulnerable inland freshwater systems that are receiving increased attention and protection worldwide. However, a lack of consistent terminology, incohesive research objectives, and inherent heterogeneity in existing knowledge hinder cross-regional information sharing and global collaboration. To address this challenge and facilitate future management decisions, we synthesized recent work to understand the state of NFW science and explore new opportunities for research and sustainable NFW use globally. Results from our synthesis show that although NFWs have been widely studied across all continents, regional biases exist in the literature. We hypothesize these biases in the literature stem from terminology rather than real geographical bias around existence and functionality. To confirm this observation, we explored a set of geographically representative NFW regions around the world and characteristics of research focal areas. We conclude that there is more that unites NFW research and management efforts than we might otherwise appreciate. Furthermore, opportunities for cross-regional information sharing and global collaboration exist, but a unified terminology will be needed, as will a focus on wetland functionality. Based on these findings, we discuss four pathways that aid in better collaboration, including improved cohesion in classification and terminology, and unified approaches to modeling and simulation. In turn, legislative objectives must be informed by science to drive conservation and management priorities. Finally, an educational pathway serves to integrate the measures and to promote new technologies that aid in our collective understanding of NFWs. Our resulting framework from NFW synthesis serves to encourage interdisciplinary collaboration and sustainable use and conservation of wetland systems globally.

54 ENVIRONMENTAL SCIENCES↗

River Regulation Alleviates the Impacts of Climate Change on US Thermoelectricity Production

Climate change and anthropogenic activities can both influence stream temperature, which is a critical indicator of thermoelectric power generation potential. Previous studies emphasized the vulnerability of power-generation systems to climate warming (ref 1, 2). Despite the fact that two-thirds of the global rivers are regulated by dams (ref 3), the relative impacts of water management and climate change on stream temperature and thermoelectric production have not yet been evaluated. Using an integrated modeling system applied to the conterminous United States, simulations confirm the dominant role of climate change in shaping the future trends of stream temperature. However, water management, reservoir regulation in particular, can mitigate the stream temperature warming and reduce the frequency and magnitude of extreme high stream temperatures through redistribution of the seasonal streamflow. Moreover, water management can alleviate the loss of power plant usable capacity from climate change to the level of reduced warming from emission mitigation. By regulating the flow and temperature regimes, water management is a promising adaptation measure to alleviate climate change induced effects in the water-energy nexus.

Zhang, Xiao↗

A framework for studying the effects of offshore wind energy development on birds and bats in the Eastern United States

Offshore wind energy development (OWED), while a key strategy for reducing carbon emissions, has potential negative effects to wildlife that should be examined to inform decision making and adaptive management as the industry expands. We present a conceptual framework to guide the long-term study of potential effects to birds and bats from OWED. This framework includes a focus on exposure and vulnerability as key determinants of risk. For birds and bats that are exposed to OWED, there are three main effects of interest that may impact survival and productivity: 1) collision mortality, 2) behavioral responses, including avoidance, displacement, and attraction, and 3) habitat-mediated effects to prey populations. If these OWED effects cause changes in survival and/or breeding success (e.g., fitness), they have the potential for population-level consequences, including changes in population size and structure. Understanding the influence of ecological drivers on exposure and effect parameters can help to disentangle the potential impacts of OWED from other stressors. We use this theoretical framework to summarize existing relevant knowledge and identify current priority research questions (n=22) for the eastern United States, where largescale development of OWED is primarily in the planning and early construction phase. We also identify recommendations for study design and further prioritization of research topics.

17 WIND ENERGY↗

The Energy Transition: Advanced Nuclear Needed but Address Climate Vulnerabilities Now

The term “Energy Transition” is an attempt to capture an elaborate set of activities related to the modernization and decarbonization of energy grids. Performed concurrently and often in an ad hoc manner across local, state, regional and national boundaries, it is bringing chaos to what should arguably be one of the most conservatively managed of all critical infrastructure sectors. What’s more, with climate change producing an increasing tempo of extreme events, confidence in the intended resilient and redundant structure of the electric grids is likely to ebb. Even without these climate induced stressors, the nation’s electric grid was built for an earlier century. In addition to a drive towards greater efficiency via digitization and a continuing price decline in distributed energy resources (DERs), one could argue that climate change concerns are the primary driver of the energy transition. Non-CO2 emitting generation sources like wind and solar have become an important part of the overall generation fleet, albeit ones that cannot be counted upon to provide dispatchable power. Current projections indicate deployment of even larger percentages of DERs in coming years. Until far better storage capabilities arrive, the variability of wind and solar, inconsistent performance of traditional thermal generation plants, and energy delivery failures associated with natural gas pipelines will reinforce mounting reliability concerns. This pertains to both electric transmission and distribution. The recent shuttering of nuclear power plants in Germany, Japan, the US and elsewhere are also putting more downward pressure on dispatchable generation. Russia’s attack on Ukraine has roiled energy markets worldwide and forced some countries to return to coal as a primary fuel. In view circumstances such as these, it is essential that significant changes be made to policies and planning criteria, and to the standards and code on which they are based. Given the accelerating pace of extreme weather events, this needs to occur as soon as possible.

24 POWER TRANSMISSION AND DISTRIBUTION↗

CityBES v2021

City Buildings, Energy, and Sustainability (CityBES) is a web-based data and computing platform, focusing on energy modeling and analysis of a city's building stock to support district or city-scale building energy efficiency programs. CityBES uses an international open data standard, CityGML, to represent and exchange 3D city models. CityBES employs EnergyPlus to simulate building energy use and savings from energy efficient retrofits. Other CityBES features include energy benchmarking, district heating and cooling system modeling, rooftop PV analysis, building performance visualization, heat resilience modeling, as well as urban scale mapping of microclimate and heat vulnerability at census tract level. Different from other tools, CityBES uses integrated open and standard 3D city building data and models each individual building using EnergyPlus. CityBES can be used by urban planners, city energy managers, building owners, utilities, energy consultants and researchers.

Hong, Tianzhen↗

WISP: Watching grid Infrastructure Stealthily through Proxies (Final Technical Report)

The complex interdependencies of cyber systems (sensors and communications), physical grids and associated electricity market operations make protecting electric power grids a significant challenge. The energy sector is constantly under new, targeted, advanced and dangerous cyber-attacks that have the potential to result in the loss of human life. These threats are further exacerbated by our need to modernize the grid. One focus of cyber security research in smart grids is the securing of the SCADA system through advanced intrusion detection systems (IDS) and bad data detection algorithms in state estimation. These methods either require full knowledge of the system topology and parameters or fail to understand the physical behaviors under attack. WISP (Watching grid Infrastructure Stealthily through Proxies) is designed to provide additional protection to the power grid using only publicly available data. In particular, WISP exploits the spatio-temporal nature of the real time locational marginal prices (LMPs), in conjunction with other information such as bids, weather, outages and load data to analyze anomalous power pricing behaviors and then correlate those observations to localize regions of interest and identify potential cyber events. WISP is non-intrusive as the tool is deployed as a service in the Cloud or on premise and provides reliable information to system operators for enhanced situational awareness, without impeding energy delivery functions. The WISP technology comprises three modules: the data-driven anomaly detection core, the vulnerability and risk analysis and the root cause analysis. The data-driven anomaly detection core performs the tasks of feature selection, anomaly detection and attack region localization. The vulnerability and risk analysis module provides system level information of the vulnerable variables and times, assisting the operators in selecting monitoring and protection nodes. The root cause analysis module takes the detection results and identifies potential operational conditions that contribute to the detected anomalies. In Phase I, we have demonstrated the feasibility and effectiveness of WISP. We developed a realistic electricity market simulator capable of generating normal and attack market data under various operational conditions. We developed a series of cyber-attack detection and analysis algorithms and evaluated them under multiple data sources. Finally, we integrated all modules into an end-to-end software, providing functions for data management, data analytics and visualization. Specifically, we have achieved: (i) real-time data acceptance from external utility interfaces with >99% acceptance rate; (ii) high performance anomaly detection algorithms with >98% detection accuracy and <0.1% false alarm rate; and (iii) ultra-low computing delay <50 milliseconds. Additionally, our team developed algorithms to identify the vulnerable variables in electricity market operations and root cause analysis functions to identify major contributors to the price spikes. These ancillary modules are necessary when deploying WISP in real world industry environment. In Phase II, we have demonstrated the effectiveness of WISP software on realistic largescale power systems. We performed red team testing for the Phase I WISP software and identified software vulnerabilities and implemented corresponding mitigation solutions. We adapted the electricity market simulator for the Texas synthetic 2000-bus system and generated datasets for the false data injection attacks. We created database and visualization interfaces for the Texas system and the ISO New England system. We performed software optimization in terms of operation efficiency, computing speed and detection accuracy. Finally, we tested the software on the Texas system and the ISO New England system and evaluated the detection performance. Overall, we achieved above 89% detection rate, below 3% false alarm rate and below 37 seconds of end-to-end detection delay.

24 POWER TRANSMISSION AND DISTRIBUTION↗

A baseline structure inventory with critical attribution for the US and its territories

Leveraging high performance computing, remote sensing, geographic data science, machine learning, and computer vision, Oak Ridge National Laboratory has partnered with Federal Emergency Management Agency (FEMA) to build a baseline structure inventory covering the US and its territories to support disaster preparedness, response, and recovery. The dataset contains more than 125 million structures with critical attribution, and is ready to be used by federal agencies, local government and first responders to accelerate on-the-ground response to disasters, further identify vulnerable areas, and develop strategies to enhance the resilience of critical structures and communities. Data can be freely and openly accessed through Figshare data repository, ESRI’s Living Atlas or FEMA’s Geodata platform.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

Assessing Impacts of Environmental Perturbations on Urban Biogenic Carbon Exchange in the Chicago Region

Carbon dioxide (CO 2 ) quantification is critical for assessing city-level carbon emissions and sustainable urban development. While urban vegetation has the potential to provide environmental benefits, such as heat and carbon mitigation, the CO 2 exchange from biogenic sectors and its impact from the environmental perturbations are often overlooked. It is also challenging to simulate the plant functions in the complex urban terrain. This study presents a processed-based modeling approach to assess the biogenic carbon fluxes from the vegetated areas over the Chicago Metropolitan Area (CMA) using the Weather Research and Forecast—Urban Biogenic Carbon exchange model. We investigate the change of CO 2 sink power in CMA under heatwaves and irrigation. The results indicate that the vegetation plays a significant role in the city's carbon portfolio and the landscaping management has the potential to reduce carbon emissions significantly. Furthermore, based on the competing mechanisms in the biogenic carbon balance identified in this study, we develop a novel Environmental Benefit Score metrics framework to identify the vulnerability and mitigation measures associated with nature-based solutions (NbS) within CMA. By using the generalized portable framework and our science-policy confluence analysis presented in this study, global cities can maximize the effectiveness of NbS and accelerate carbon neutrality.

54 ENVIRONMENTAL SCIENCES↗

Understanding the E balance for water management in hydroxide exchange membrane fuel cells

As a key challenge for hydroxide exchange membrane fuel cells (HEMFCs), understanding water management deeply is critical for performance and durability improvement. Here, in this work, we show that the balance between water generation and phase-change-induced (PCI) flow is the main factor controlling cell voltage over a wide range of conditions where the cells are vulnerable to severe flooding. The regulation of flooding by heat generation can be reflected by a stable voltage with increase of current density in the polarization curve. This PCI balance voltage (E balance ), which determines the shape of polarization curve, is modeled as a function of cell operating conditions and gas diffusion layer (GDL) properties. Temperature, pressure, and thermal conductivity of GDL were found important for tuning the level of E balance , both in HEMFCs and proton exchange membrane fuel cells. The understanding of E balance will help to generate strategies for resolving flooding in HEMFCs, and it offers a new perspective for polarization curve interpretation.

25 ENERGY STORAGE↗