Search NASA⌕ Search

SEARCH · Search NASA

Results for “Infrastructure vulnerability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

A Review on Cybersecurity Vulnerabilities for Urban Air Mobility

Recent developments of high-powered unmanned aerial vehicles (UAVs) have allowed for urban air mobility (UAM) to become a reality. While these flying cars' propulsive technology has almost become economically viable, the infrastructure to allow these vehicles to operate in an urban environment is still lacking. With numerous known vulnerabilities in UAVs and commercial aircraft, manufacturers have not addressed cybersecurity in the scope of urban air mobility.

Urban Air Mobility↗
DOE OSTI2025

Yesterday’s extremes, today’s new normal: flood risk in the Kathmandu Valley, Nepal

Unplanned urban growth has left many cities increasingly vulnerable to extreme rainfall events, particularly in regions with inadequate drainage infrastructures and development encroaching on natural floodplains. Here, in this perspective paper, we examine the September 2024 floods that struck Central Nepal, triggered by a persistent low-pressure system and enhanced by converging moisture flows from the Arabian Sea and the Bay of Bengal which led to widespread catastrophic damage. In the Kathmandu Valley, floodwaters expanded to more than 2.5 times the bankfull water extent, causing significant damage to housing, transportation network, and critical infrastructure, displacing thousands of residents, and severely disrupting urban services. This event highlights the urgent need for improved flood management strategies that integrate both structural and non-structural measures into the infrastructure development. While early warning systems provided critical lead time, challenges remain in reducing forecasting uncertainties and improving communication across government agencies and with local communities. A forward-looking approach is essential, including probabilistic flood forecasting systems, sustainable floodplain management, risk-sensitive land use planning, climate- and disaster- resilient infrastructure development, and the integration of nature-based solutions like urban green and blue spaces to mitigate flood impacts. By involving local communities in planning and preparedness efforts, particularly through citizen science initiatives, and engagement with underserved and disadvantaged communities, Nepal can better adapt to the growing risks posed by extreme rainfall and urban flooding and enhance long-term disaster resilience in rapidly urbanizing areas like Kathmandu Valley.

Kathmandu Valley↗
DOE OSTI2024

Trends in Cybersecurity Threats to Clean Energy

As deployments of clean energy generation and storage assets continue to grow, the increased attack surface creates a greater risk for cyber threats, but is clean energy truly a target for cyber adversaries? This poster will present research on the trends in cyber incidents that have affected clean energy companies and assets as well as the trends in disclosed and exploited vulnerabilities. From a series of ransomware attacks on European wind manufacturers, to vulnerabilities exploited in solar assets to turn controllers into botnets, to attacks on communication infrastructure that have resulted in extended outages of remote control and monitoring, we explore the techniques used and the impacts to the clean energy sector. Key takeaways include understanding of how OT-focused malware is becoming more flexible and more destructive, how known vulnerabilities are being exploited, the growing number of IT and OT attacks that use built in tools and functionalities. Additionally, we highlight the presumed motivations and targeted sectors for various identified cyber adversaries. Viewers will leave with an understanding of how recent headlines fit into the development of cyberattack trends and what preventions they may need to take to protect against increasingly popular tactics.

14 SOLAR ENERGY↗
DOE OSTI2023

Hybrid Attack Graph Generation with Graph Convolutional Deep-Q Learning

Critical infrastructures such as power grids have become increasingly complex, connected, and vulnerable to adverse scenarios, including cyber and physical attacks and faults. Effective risk mitigation for such cyber-physical energy systems (CPES), requires preemptive knowledge of likely adversarial attack scenarios. Hybrid Attack Graph (HAG) is a structured way to represent an adversarial scenario as an attack sequence using a threat model. However, the scarcity of documented attack sequences hinders analysts and CPES planners’ ability to identify credible attack scenarios for a given CPES. We propose a data-driven Graph Convolutional Deep-Q Network (GCDQ) to address this data challenge through generating HAGs. By leveraging limited real-world observations from the MITRE ATT&CK knowledge base, our GCDQ model synthesizes realistic graphs with the targeted attribute of minimum detectability via reinforcement learning. This generative model is the first step in creating a tool to substantially boost the attack sequence dataset and enhance the performance of CPS defense-related tasks by providing insights into likely attack sequences with given attributes.

deep learning, artificial intelligence↗
DOE OSTI2020

Karuk Climate Resiliency Plan

Statewide, California is the hottest and driest since modern record keeping has taken place. Among the most urgent of the local dimensions of climate change in Karuk Ancestral Territory is the increased frequency of high-severity fire. The 2016 Karuk Climate Vulnerability Assessment (CVA) outlines how these influences have created landscape conditions that hold the potential to be devastating in the face of future high-severity fire events. The project followed the format of our CVA and furthers information garnered to accomplish two primary objectives. The Karuk Tribe developed a Climate Adaptation Plan to address established vulnerabilities to Tribal traditional foods and cultural use species, Tribal program infrastructure, and Tribal management authority and political status resulting from changing conditions with a focus on increased frequency of high-intensity wildfire events within the Karuk Ancestral Territory.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2015

Analyzing Cyber Security Threats on Cyber-Physical Systems Using Model-Based Systems Engineering

The spectre of cyber attacks on aerospace systems can no longer be ignored given that many of the components and vulnerabilities that have been successfully exploited by the adversary on other infrastructures are the same as those deployed and used within the aerospace environment. An important consideration with respect to the mission/safety critical infrastructure supporting space operations is that an appropriate defensive response to an attack invariably involves the need for high precision and accuracy, because an incorrect response can trigger unacceptable losses involving lives and/or significant financial damage. A highly precise defensive response, considering the typical complexity of aerospace environments, requires a detailed and well-founded understanding of the underlying system where the goal of the defensive response is to preserve critical mission objectives in the presence of adversarial activity. In this paper, a structured approach for modeling aerospace systems is described. The approach includes physical elements, network topology, software applications, system functions, and usage scenarios. We leverage Model-Based Systems Engineering methodology by utilizing the Object Management Group's Systems Modeling Language to represent the system being analyzed and also utilize model transformations to change relevant aspects of the model into specialized analyses. A novel visualization approach is utilized to visualize the entire model as a three-dimensional graph, allowing easier interaction with subject matter experts. The model provides a unifying structure for analyzing the impact of a particular attack or a particular type of attack. Two different example analysis types are demonstrated in this paper: a graph-based propagation analysis based on edge labels, and a graph-based propagation analysis based on node labels.

MBSE↗
DOE OSTI2022

Advanced Technology and a Resilient Electric Grid

Making the electric grid cleaner and more resilient will require investing in a variety of new and emerging technologies. Advanced technologies including hydrogen, small modular nuclear reactors, and energy storage will all have a role to play in modernizing the electric grid. A diverse energy supply helps to keep the lights on and protects critical infrastructure, however it will also be important to assess the potential vulnerabilities and risks that come with unfamiliar and new technologies. This webinar will feature experts on resilience planning around advanced technologies from multiple sectors and share resources for states as they seek to modernize and decarbonize their electric grid.

advanced technology↗
DOE OSTI2025

Hierarchical Resilience Planning for Networked Microgrids: A Case Study of Puerto Rico

Microgrids can be designed to enhance the energy resilience of communities and critical infrastructures, such as hospitals, data centers, and communication networks, which are vulnerable to frequent weather-related disruption. Coordinating multiple microgrids in a network can leverage the geographical diversity of load and generation resources while enabling resilient and cost-effective planning of the distribution system. Designing a networked microgrid is complex, involving intricate technical assessment, cost-benefit analysis, site-specific requirements, and the evaluation of existing resources. Therefore, this paper proposes a hierarchical resilience planning framework and performs an extensive techno-economic analysis for the design of a networked microgrid. Hierarchical resilience planning involves technology sizing at an individual community level to meet the critical load and satisfy resilience criteria, and resource optimization at networked microgrid level to provide a higher level of resilience and energy adequacy. A real-world case of Puerto Rico's cooperative microgrid “Microrred de la Montaña” is investigated considering localized electricity tariffs, site-specific demand profiles, solar generation, and existing hydro resources. Multiple optimization scenarios are developed based on the resiliency requirement to estimate the capacity of solar photovoltaic and battery energy storage (BES) to be installed at each substation. The results provide the optimal sizing for individual community and networked microgrid to withstand 1day and 3-day outages along with the criteria for critical load.

13 - HYDRO ENERGY↗
NASA NTRSDate not supplied

A Review on Cybersecurity Vulnerabilities for Urban Air Mobility

Recent developments of high-powered unmanned aerial vehicles (UAVs) have allowed for urban air mobility (UAM) to become a reality. While the propulsive technology of these flying cars has almost reached an economic level, the infrastructure to allow for these vehicles to operate in an urban environment is still lacking. With numerous known vulnerabilities in UAVs and commercial aircraft, manufacturers have not addressed cybersecurity in the scope of urban air mobility. This paper presents a review of several known cybersecurity vulnerabilities and previous attacks associated with the core communication systems of UAVs and aircraft. Analyzing current solutions to each threat and incorporating early concepts for UAM, this paper then presents a basic framework featuring a blockchain-based PKI with secondary navigation systems to allow for the development of secure airspace.

Urban Air Mobility↗
DOE OSTI2025

I Can't Patch My OT Systems! A Look at CISA's KEVC Workarounds & Mitigations for OT

We examine the state of publicly available information about known exploitable vulnerabilities applicable to operational technology (OT) environments. Specifically, we analyze the Known Exploitable Vulnerabilities Catalog (KEVC) maintained by the US Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) to assess whether currently available data is sufficient for effective and reliable remediation in OT settings. Our team analyzed all KEVC entries through July 2025 to determine the extent to which OT environments can rely on existing remediation recommendations. We found that although most entries in the KEVC could affect OT environments, only 13% include vendor workarounds or mitigations as alternatives to patching. This paper also examines the feasibility of developing such alternatives based on vulnerability and exploit characteristics, and we present early evidence of success with this approach.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Emerging Threats in Transportation Security Related to Intelligent Transportation Systems (ITS)

Transport of high-consequence shipments requires a resilient and robust systems of systems to guarantee cargo arrival. Furthermore, rising adoption of technologies such as connected and automated vehicles (CAVs), intelligent infrastructure, and vehicle-to-everything (V2X) communication presents unique challenges for securing transportation systems. Within these Intelligent Transportation Systems (ITS), several additional vulnerabilities exist that create pathways for adversarial attacks and cargo interception. For example, connectivity provides cyber pathways directly into vehicle systems and infrastructure for malicious actors. Furthermore, advanced vehicle automation exposes additional vehicle control necessary for shipment interception otherwise unavailable to adversaries. Within this paper, we will discuss the specific threats introduced by ITS-enabled technologies currently deployed and in development. These include those mentioned related to connectivity and automation, but will be expanded into grid, infrastructure, and vehicle specific threats. In addition, we will discuss how to potentially mitigate these emerging challenges as well as how to safeguard transportation systems from next generation attacks.

Cook, Adian [ORNL] (ORCID:0000000160825395)↗
DOE OSTI2022

Extreme events, energy security and equality through micro- and macro-levels: Concepts, challenges and methods

Low-income households face long-standing challenges of energy insecurity and inequality (EII). During extreme events (e.g., disasters and pandemics) these challenges are especially severe for vulnerable populations reliant on energy for health, education, and well-being. However, many EII studies rarely incorporate the micro- and macro-perspectives of resilience and reliability of energy and internet infrastructure and social-psychological factors. To remedy this gap, we first address the impacts of extreme events on EII among vulnerable populations. Second, we evaluate the driving factors of EII and how they change during disasters. Third, we situate these inequalities within broader energy systems and pinpoint the importance of equitable infrastructure systems by examining infrastructure reliability and resilience and the role of renewable technologies. Then, we consider the factors influencing energy consumption, such as energy practices, socio-psychological factors, and internet access. Finally, we propose interdisciplinary research methods to study these issues during extreme events and provide recommendations.

Chen, CF↗
DOE OSTI2020

A Mathematical Framework for Representing Cyber-Physical System Interdependencies and Resilience

U.S. critical infrastructure is increasingly composed of integrated cyber-physical systems (CPS) whose components are operationally interdependent. These interdependencies can create additional vulnerabilities beyond those that are typically evaluated through independent physical and cyber risk assessments. These additional vulnerabilities, previously undetected at the sub-system and/or component level, could cause cascading effects across both the physical and cyber domains that could lead to infrastructure disruption or failure. This paper will review an initial mathematical framework developed to help understand the dynamics of these interfacing physical and cyber components at a holistic system level. The resulting framework also provides a method for modeling and assessing the resilience of CPS in complex and adaptive systems. It frames the system in terms of mission performance and the potential effects to performance caused by attacks that are cyber, physical, or blended in nature. The framework utilizes a systems-based, state-space modeling approach to reason about risk, resilience, and interdependencies in CPS. Probabilities are applied to each CPS component regarding a threat (both man-made and natural) and the likelihood of that particular component being impacted, along with indirect impact to other interdependent components. These component-level impacts from threats then translate into mission-level impact and systemic state change.

Brigantic, Robert T.↗
DOE OSTI2026

Evaluating Supply Prioritization Strategies for Risk-Informed Decision Making in an Arbitrary Gas Network

Supply disruptions and infrastructure failures in natural gas networks present critical challenges to energy reliability and risk-informed planning. This study evaluates two supply prioritization strategies, Maximum Delivery Prioritization (MDP) and Demand-Based Prioritization (DBP), within an arbitrary natural gas network under conditions of supply shortage. Model performance under both strategies is assessed in response to node and edge failure using demand satisfaction metrics, system-wide and localized dependency scores, and geographic information system (GIS)-based spatial analysis. Results show that DBP better preserves supply for high-demand nodes, while MDP offers broader coverage. The underlying network topology plays a critical role in shaping prioritization outcomes. Integrated GIS visualization enhances the interpretability of vulnerability assessments, revealing structurally critical components and localized vulnerabilities. The proposed framework supports scalable, data-driven decision-making for infrastructure planners and engineers, enabling improved disruption recovery and efficiency in constrained natural gas networks. These insights contribute to the development of more robust energy systems capable of withstanding stress and disruptions.

Peterson, Steven [ORNL] (ORCID:0000000287672998)↗
DOE OSTI2023

Advancing uncertainty characterization for understanding projected water scarcity in multi-sector, multi-actor river basins across scales.

Invited Talk at AGU Fall Meeting 2023 Modeling how human institutions and infrastructure interact with the water cycle is essential to better understand the vulnerability, and resilience of water resources systems from the local to the global scale. This is especially true when investigating multi-sector, multi-actor responses to the effects of long-term changes and short-term shocks. It is also well recognized that uncertainty present throughout the modeling cycle (e.g., in data, functional relations, and model coupling approaches) limits our ability to trace the interactive dynamics of human-water systems, as well as to quantify their implications for management and planning. Systems with large numbers of diverse stakeholders further compound this challenge, as uncertain drivers and complex dynamics might have very disparate effects on water users. The work presented is conducted through the Integrated Multisector Multiscale Modeling (IM3) Science Focus Area, which explores how human and natural systems co-evolve in response to change. Through this multi-year effort, we have developed exploratory modeling methods to better characterize how the uncertain human and natural drivers of water scarcity yield consequential vulnerabilities in institutionally complex, multi-sectoral systems. This talk will specifically present on a series of uncertainty characterization experiments performed in the Upper Colorado River Basin, a sub-basin of the Colorado with thousands of water users. These complementary and systematic experiments are aimed at understanding: How are various uncertain stressors (e.g., climate change, demand growth) affecting the diverse water users of this basin in terms of water shortage? What are the key drivers of this shortage for each user? Methods and results from this work are used to address additional questions on the ability of adaptation to modulate the effects of these uncertain drivers, and on their compounding effects across spatial scales and through sectoral interactions.

Hadjimichael, Antonia↗
NASA NTRSDate not supplied

Cyber Resiliency and the Implementation of a Host-Based Intrusion Detection System in an Urban Air Mobility Environment

With the growth in urban air mobility systems and the increasing reliance on interconnected technologies, ensuring the security of these complex infrastructures has become critical. As cities evolve into smart urban centers, the vulnerability to cyber threats escalates, possibly endangering citizens’ safety and the efficiency of transportation networks. In response to these challenges, this paper presents a study on implementing a Host-Based Intrusion Detection System (HIDS) tailored explicitly to urban mobility environments’ unique demands. This study explores the design, development, and deployment of the proposed HIDS, focusing on its adaptability to monitor the hybrid nature of the urban mobility environment. Leveraging machine learning algorithms and anomaly detection techniques, the HIDS is equipped to continuously monitor and analyze the behavior of individual host systems, vehicles, and devices, thereby providing a proactive approach to threat detection. Implementing a HIDS is a pivotal strategy for enhancing cyber resiliency, as it gives an organization granular visibility into internal system activities, enables rapid detection and response to anomalous behavior and cyber threats, and fortifies the organization’s overall cybersecurity posture. In conclusion, this paper highlights the significance of host-based intrusion detection in urban mobility environments and underscores the necessity of tailored security solutions to safeguard against emerging cyber threats.

UAM↗
NASA NTRSDate not supplied

Formational History and Geomorphic Preservation of Sea Level Highstands Over the Last 150 ky Near Cape Canaveral, Florida, USA

Cape Canaveral, Florida, is perhaps one of the most important stretches of coastline in the United States of America (USA) due to its critical strategic role in the pursuit of space exploration and as the locus of advanced technological innovation. Due to its geographical setting, the entirety of Cape Canaveral, including its infrastructure, facilities, and important natural habitats (e.g., wetlands, estuaries and dunes) is vulnerable to coastal hazards such as continued sea level rise, storm surges, erosion and flooding. As such, accurate sea level characterization and coastal resiliency predictions are essential to promoting long-term coastal planning and sustainability in the area. This study aims to better understand the temporal and spatial evolution of this area with the purpose of more accurately documenting historical sea level fluctuations and calibrating more localized projections at this site. The Cape Canaveral coastline is situated on a passive margin mostly affected by oceanic (sea level change and wave impact) and atmospheric (aeolian) alteration. This sector is part of the east Florida coast microtidal (1.2 m) setting and low wave energy (1.2-1.6 m and 6.1-8.2 sec for average significant waves) regime and is defined by a well delineated set of beach ridge or cape systems. While the name “Cape Canaveral” is often used as a generic term to describe the geographic area, it is actually an amalgamation or complex of multiple preserved capes. The preserved Cape Canaveral beach ridge plain has largely documented the paleo-sea level highstand history over the last 150 ky. High-resolution mapping of these beach ridges is completed using GPS, LiDAR, aerial, as well as satellite imagery. In order to reconstruct the formational history of the Cape Kennedy Complex and the preserved record of sea level highstands, these detailed geomorphological observations are integrated with OSL and C14 dating techniques. The chronological framework delineated by the OSL dates coupled with detailed geomorphological mapping allows for the creation of high-resolution calibrated site-specific sea level curves that reflect the local environmental and geological conditions. This refinement has the potential to improve the understanding of past sea level variability which is crucial for predicting future trends and assessing the impacts on coastal regions such as Cape Canaveral.

geomorphology↗
NASA NTRS2023

The Compound Risk of Heat and COVID-19 in New York City: Riskscapes, Physical and Social Factors, and Interventions

Climate change is disrupting the fundamental conditions of human life and exacerbating existing inequity by placing further burdens on communities that are already vulnerable. Risk exposure varies by where people live and work. In this article, we examine the spatial overlap of the compound risks of COVID-19 and extreme heat in New York City. We assess the relationship between socio-demographic and natural, built and social environmental characteristics, and the spatial correspondence of COVID-19 daily case rates across three pandemic waves. We use these data to create a compound risk index combining heat, COVID-19, density and social vulnerability. Our findings demonstrate that the compound risk of COVID-19 and heat are public health and equity challenges. Heat and COVID-19 exposure are influenced by natural, built, and social environmental factors, including access to mitigation infrastructure. Socio-demographic characteristics are significant indicators of COVID-19 and heat exposure and of where compound vulnerability exists. Using GIS mapping, we illustrate how COVID-19 risk geographies change across the three waves of the pandemic and the particular impact of vaccinations before the onset of the third wave. We, then, use our compound risk index to assess heat interventions undertaken by the City, identify neighborhoods of both adequate and inadequate coverage and provide recommendations for future interventions.

COVID-19↗