Search NASA⌕ Search

SEARCH · Search NASA

Results for “Critical Infrastructure Protection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

Encrypted Control Using Modified Learning With Errors-based Schemes

Cyber-physical systems (CPSs) require reliable, safe, and secure control of critical infrastructure, combining computational and networking capabilities, which heighten the risk of cyber attacks. These attacks can disrupt the physical process, causing unforeseen consequences. One solution is the use of fully homomorphic encryption (FHE) to protect the control loop, allowing for secure computations and communications without compromising signal and control system privacy. The challenge with FHE, however, is its requirement for inputs to be integers. This paper introduces a modified Learning With Errors (LWE) FHE approach that encodes control system dynamics and signals into integers. Our proposed scheme leverages a generalized LWE encoding function and modifies the Gentry-Sahai-Waters (GSW) gadget decomposition tool to encrypt the control system. Using the modified LWE scheme, we formalize a fully encrypted control system, supported by simulated results.

42 - ENGINEERING↗

Evaluating software defined networking solutions to reduce the digital attack surface of nuclear security systems

Most nuclear security systems used today were not designed for today’s threat environment. Systems that were intended to be stand alone are now interconnected. Devices that have a single purpose are built on multi-purpose platforms and communication protocols that, while effective, have no ability to authenticate authorized versus unauthorized commands. These attributes provide an attacker significant ability to affect the system, pivot throughout the interconnected networks, and remain undetected if he/she is able to compromise a single node. Software defined networking (SDN) has been used for years by information technology (IT) cloud service providers to quickly provision or remove servers or other systems to meet changing demand. The same concept has recently been applied to operational technology (OT) systems to enable very fast failover on critical systems that have stringent and deterministic (<5ms) transmit/receive times. By carefully engineering the communication flows through a network using preplanned routes and specific pathways it is possible to achieve deterministic and extremely reliable message delivery even when components fail. This engineering approach to network design has added security benefits including securing the networking control plane, eliminating network scanning and mapping, inhibiting ARP spoofing and host masquerading, eliminating unauthorized network pivoting and enabling greater situational awareness on the network. SDN in OT environments is new but early testing in electrical power and other critical infrastructure has shown it to be a very powerful tool for building reliable networks and reducing the digital attack surface of the network. The authors tested a software defined network switch on a simple physical protection system with components commonly found in nuclear security systems and found improved mitigations to denial of service attacks, lateral movement and network reconnaissance. The paper details the tests and their results.

Cyber security, Nuclear security, software defined↗

New concept of critical infrastructure strengthening

Strengthening of critical infrastructure is considered. Modal reservation of electronics is proposed as a new concept of the strengthening. The concept combines a widely used cold backup and a recently proposed modal filtration. It makes electronics reliable as well as protected against electromagnetic interference, especially the ultra-wide band pulses. New printed circuit board structure is suggested for implementation of the proposed concept. Results of simulation in time and frequency domains are presented for the suggested structures. Considerable attenuation of dangerous excitations shows that the new concept and structure are promising.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Quantum Key Distribution for Critical Infrastructures: Towards Cyber-Physical Security for Hydropower and Dams

Hydropower facilities are often remotely monitored or controlled from a centralized remote control room. Additionally, major component manufacturers monitor the performance of installed components, increasingly via public communication infrastructures. While these communications enable efficiencies and increased reliability, they also expand the cyber-attack surface. Communications may use the internet to remote control a facility’s control systems, or it may involve sending control commands over a network from a control room to a machine. The content could be encrypted and decrypted using a public key to protect the communicated information. These cryptographic encoding and decoding schemes become vulnerable as more advances are made in computer technologies, such as quantum computing. In contrast, quantum key distribution (QKD) and other quantum cryptographic protocols are not based upon a computational problem, and offer an alternative to symmetric cryptography in some scenarios. Although the underlying mechanism of quantum cryptogrpahic protocols such as QKD ensure that any attempt by an adversary to observe the quantum part of the protocol will result in a detectable signature as an increased error rate, potentially even preventing key generation, it serves as a warning for further investigation. In QKD, when the error rate is low enough and enough photons have been detected, a shared private key can be generated known only to the sender and receiver. We describe how this novel technology and its several modalities could benefit the critical infrastructures of dams or hydropower facilities. The presented discussions may be viewed as a precursor to a quantum cybersecurity roadmap for the identification of relevant threats and mitigation.

97 MATHEMATICS AND COMPUTING↗

In Situ Cold-Spray Repair of Environmental Mission Infrastructure for Component Life Extension - 19424

Cold spray offers a potential option for performing in situ repair of U.S. Department of Energy (DOE) complex infrastructure critical to the Office of Environmental Management cleanup mission. Application to the DOE complex has the potential to reduce cost, schedule, and safety risk impacts associated with component failures and would negate the need to procure and construct replacement infrastructure. A concept and technical basis are presented for developing remotely deployable cold-spray systems for performing in situ repairs in hazardous environments such as nuclear waste tanks, piping, and process vessels to extend component service life or return critical infrastructure to service. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Spinoff 2010

Topics covered include: Burnishing Techniques Strengthen Hip Implants; Signal Processing Methods Monitor Cranial Pressure; Ultraviolet-Blocking Lenses Protect, Enhance Vision; Hyperspectral Systems Increase Imaging Capabilities; Programs Model the Future of Air Traffic Management; Tail Rotor Airfoils Stabilize Helicopters, Reduce Noise; Personal Aircraft Point to the Future of Transportation; Ducted Fan Designs Lead to Potential New Vehicles; Winglets Save Billions of Dollars in Fuel Costs; Sensor Systems Collect Critical Aerodynamics Data; Coatings Extend Life of Engines and Infrastructure; Radiometers Optimize Local Weather Prediction; Energy-Efficient Systems Eliminate Icing Danger for UAVs; Rocket-Powered Parachutes Rescue Entire Planes; Technologies Advance UAVs for Science, Military; Inflatable Antennas Support Emergency Communication; Smart Sensors Assess Structural Health; Hand-Held Devices Detect Explosives and Chemical Agents; Terahertz Tools Advance Imaging for Security, Industry; LED Systems Target Plant Growth; Aerogels Insulate Against Extreme Temperatures; Image Sensors Enhance Camera Technologies; Lightweight Material Patches Allow for Quick Repairs; Nanomaterials Transform Hairstyling Tools; Do-It-Yourself Additives Recharge Auto Air Conditioning; Systems Analyze Water Quality in Real Time; Compact Radiometers Expand Climate Knowledge; Energy Servers Deliver Clean, Affordable Power; Solutions Remediate Contaminated Groundwater; Bacteria Provide Cleanup of Oil Spills, Wastewater; Reflective Coatings Protect People and Animals; Innovative Techniques Simplify Vibration Analysis; Modeling Tools Predict Flow in Fluid Dynamics; Verification Tools Secure Online Shopping, Banking; Toolsets Maintain Health of Complex Systems; Framework Resources Multiply Computing Power; Tools Automate Spacecraft Testing, Operation; GPS Software Packages Deliver Positioning Solutions; Solid-State Recorders Enhance Scientific Data Collection; Computer Models Simulate Fine Particle Dispersion; Composite Sandwich Technologies Lighten Components; Cameras Reveal Elements in the Short Wave Infrared; Deformable Mirrors Correct Optical Distortions; Stitching Techniques Advance Optics Manufacturing; Compact, Robust Chips Integrate Optical Functions; Fuel Cell Stations Automate Processes, Catalyst Testing; Onboard Systems Record Unique Videos of Space Missions; Space Research Results Purify Semiconductor Materials; and Toolkits Control Motion of Complex Robotics.

Source record↗

Design and Development of a High Fidelity Cyber-Physical Testbed

In order to ensure that future critical infrastructure systems are resilient to various types of such advanced and persistent threats, it is important to develop and integrate tailored solutions that holistically address cyber-attack detection and mitigation in a timely manner such that adverse system impacts that impact a large population are avoided. Further, it is essential to create environments that allow control, protection and communication to exist within a realistic environment to analyze the effects of adverse conditions and system operating modes. This project aims to establish a high-fidelity testbed environment for modeling and simulating a single microgrid all the way up to a network of microgrids along with baseline controls, protection, and associated cyber communication. This is an important activity because accurately modeling and simulating the various power-electronics-based DERs and loads in a microgrid is critical to adequately capturing their behaviors over a wide range of off-normal conditions, as well as to evaluate the resilience of the system using the developed controls. The work presented in this report focuses on the process of building this high-fidelity testbed and the associated experimentation it enables. The model enables the creation of high-fidelity use cases and associated datasets that have been used extensively within the initiative to study resilience and support novel control development and prototyping. The work heavily leverages existing capability that is part of the high-fidelity cyber-physical system experimentation lab to create a power hardware-in-the-loop setup. The report also details the creation of an automated model building platform that can enable high-fidelity real-time models to be built without much effort allowing existing low-fidelity models to be analyzed in higher fidelity. Lastly, the report also discusses efforts center around scaling to large complex power system models to make the experimentation more effective.

97 MATHEMATICS AND COMPUTING↗

Protecting drinking water utilities from cyberthreats

Cyber-security challenges have the potential for becoming one of the defining issues of our time. Cyber-attacks have become an ever-increasing threat and the United States (US) Federal Bureau of Investigation (FBI) now ranks cyber-crime as one of its most important law enforcement activities. In addition to the general problems associated with cyber-crime, critical infrastructure (CI) related to energy production, manufacturing, water supply and other systems have come under attack. For example, drinking water utilities are increasingly incorporating computer technology into their routine operations and are therefore increasingly vulnerable to cyber- threats. Systems control and data acquisition (SCADA) systems used to manage automated physical processes essential to water treatment and distribution systems have become standard in medium to large drinking water utilities and in many small water systems. However, even with the application of standard information technology cybersecurity best practices these types of systems have proven to be vulnerable to cyber-attacks. In 2015, the US Department of Homeland Security (DHS) responded to 25 cybersecurity incidents in the Water Sector and to 46 incidents in the Energy Sector. Comparatively, between 2014 and 2015, the reported number of Water Sector incidents actually increased by 78.6% (from 14 to 25). The DHS is in a collaborative partnership with the US Environmental Protection Agency to ensure cybersecurity in the Water Sector. As a result of this partnership a number of guidance documents and techniques have been developed to counter cyber-attacks and minimize cyber vulnerability. These approaches are documented along with a summary of common vulnerabilities. However, a new approach which has great promise in protecting drinking water systems against hacking and cyber-attacks, based on the concept of unidirectional gateways, is presented and discussed.

99 GENERAL AND MISCELLANEOUS↗

Critical Need for Plutonium and Uranium Isotopic Standards with Lower Uncertainties

Certified reference materials (CRMs) traceable to national and international safeguards database are a critical prerequisite for ensuring that nuclear measurement systems are free of systematic biases. CRMs are used to validate measurement processes associated with nuclear analytical laboratories. Diverse areas related to nuclear safeguards are impacted by the quality of the CRM standards available to analytical laboratories. These include: nuclear forensics, radio-chronometry, national and international safeguards, stockpile stewardship, nuclear weapons infrastructure and nonproliferation, fuel fabrication, waste processing, radiation protection, and environmental monitoring. For the past three decades the nuclear community is confronted with the strange situation that improvements in measurement data quality resulting from the improved accuracy and precision achievable with modern multi-collector mass spectrometers could not be fully exploited due to large uncertainties associated with CRMs available from New Brunswick Laboratory (NBL) that are used for instrument calibration and measurement control. Similar conditions prevail for both plutonium and uranium isotopic standards and for impurity element standards in uranium matrices. Herein, the current status of U and Pu isotopic standards available from NBL is reviewed. Critical areas requiring improvement in the quality of the nuclear standards to enable the U. S. and international safeguards community to utilize the full potential of modern multi-collector mass spectrometer instruments are highlighted.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Coupled flow accumulation and atmospheric blocking govern flood duration

Abstract We present a physically based Bayesian network model for inference and prediction of flood duration that allows for a deeper understanding of the nexus of antecedent flow regime, atmospheric blocking, and moisture transport/release mechanisms. Distinct scaling factors at the land surface and regional atmospheric levels are unraveled using this Bayesian network model. Land surface scaling explains the variability in flood duration as a function of cumulative exceedance index, a new measure that represents the evolution of the flood in the basin. Dynamic atmospheric scaling explains the cumulative exceedance index using the interaction between atmospheric blocking system and the synergistic model of wind divergence and atmospheric water vapor. Our findings underline that the synergy between a large persistent low-pressure blocking system and a higher rate of divergent wind often triggers a long-duration flood, even in the presence of moderate moisture supply in the atmosphere. This condition in turn causes an extremely long-duration flood if the basin-wide cumulative flow prior to the flood event was already high. Thus, this new land-atmospheric interaction framework integrates regional flood duration scaling and dynamic atmospheric scaling to enable the coupling of ‘horizontal’ (for example, streamflow accumulation inside the basin) and ‘vertical’ flow of information (for example, interrelated land and ocean-atmosphere interactions), providing an improved understanding of the critical forcing of regional hydroclimatic systems. This Bayesian model approach is applied to the Missouri River Basin, which has the largest system of reservoirs in the United States. Our predictive model can aid in decision support systems for the protection of national infrastructure against long-duration flood events.

Najibi, Nasser (ORCID:0000000205157192)↗

Current State-of-Practice in Dam Safety Risk Assessment

Dams provide significant benefits to the nation, serving as critical infrastructure to deliver water retention and control throughout the United States (US). Major cities could not function without the fresh water supply stored in dammed reservoirs, and many electrical systems rely on dependable hydroelectric power supply. Dams on rivers across the country protect communities against destructive flood impacts while providing navigable waters for transportation, irrigation for agriculture, and various opportunities for recreation. While dams provide many essential services, dam failure flooding can present significant risks to property and life. Over decades of experience, dam safety practices, including risk assessment, have evolved as engineering knowledge, scientific understanding, and technological advancements grow. This project summarizes the current state-of-practice in dam safety risk assessment.

13 HYDRO ENERGY↗

Current State-of-Practice in Dam Safety Risk Assessment

Dams provide significant benefits to the nation, serving as critical infrastructure to deliver water retention and control throughout the United States (US). Major cities could not function without the fresh water supply stored in dammed reservoirs, and many electrical systems rely on dependable hydroelectric power supply. Dams on rivers across the country protect communities against destructive flood impacts while providing navigable waters for transportation, irrigation for agriculture, and various opportunities for recreation. While dams provide many essential services, dam failure flooding can present significant risks to property and life. Over decades of experience, dam safety practices, including risk assessment, have evolved as engineering knowledge, scientific understanding, and technological advancements grow. This project summarizes the current state-of-practice in dam safety risk assessment.

42 ENGINEERING↗

EPA and Idaho National Laboratory create first of its scale

Advancing the science and engineering of decontaminating water distribution systems and safely disposing of high-volumes of contaminated water are high priorities for the EPA. To help address these science gaps, EPA homeland security researchers have developed the first-of-its-scale Water Security Test Bed (WSTB). Water is an important component of everyday life. We rely on safe, clean water for our health and the health of the environment. Protecting this vital resource is critical to living safely and securely. The U.S. Environmental Protection Agency is responsible for working with water utilities to protect water systems from contamination and to clean up systems that become contaminated. Purposeful or inadvertent distribution system contamination can result in large amounts of infrastructure and water that must be cleaned. Water distribution systems contamination can be caused by, for example, natural disasters such as Superstorm Sandy or by individuals hoping to cause harm. The WSTB, constructed at the Department of Energy’s (DOE) Idaho National Laboratory, replicates a section of a typical municipal drinking water system including a piping system with roughly 445 feet of pipe and two fire hydrants laid out in an “L” shape using 40-year-old, eight-inch cement mortar lined, ductile iron pipes, excavated after twenty years of use for water conveyance. Researchers built the WSTB above ground for easy access during experiments, and to facilitate fast leak detection. Over the next several years, EPA and partner researchers will conduct experiments using simulants of various biological, chemical, and radioactive materials that simulate high toxic versions of these agents. At this “full” sized system, researchers will demonstrate approaches to contamination detection, sensor and model testing, infrastructure decontamination, water treatment and cyber testing developed at lab and pilot scale. Researchers are also able to verify if laboratory results that were effective in controlled conditions are as effective in full-scale testing. Having the ability to conduct bench scale studies in a real world setting can help address specific research gaps, and help water researchers understand conditions in which real world drinking water systems operate.

54 ENVIRONMENTAL SCIENCES↗

Development and Demonstration of Sustainable Surface Infrastructure for Moon/Mars Exploration

For long-term human exploration of the Moon and Mars to be practical, affordable, and sustainable, future missions must be able to identify and utilize resources at the site of exploration. The ability to characterize, extract, processes, and separate products from local material, known as In-Situ Resource Utilization (ISRU), can provide significant reductions in launch mass, logistics, and development costs while reducing risk through increased mission flexibility and protection as well as increased mission capabilities in the areas of power and transportation. Making mission critical consumables like propellants, fuel cell reagents and life support gases, as well as in-situ crew/hardware protection and energy storage capabilities can significantly enhance robotic and human science and exploration missions, however other mission systems need to be designed to interface with and utilize these in-situ developed products and services from the start or the benefits will be minimized or eliminated. This requires a level of surface and transportation system development coordination not typically utilized during early technology and system development activities. An approach being utilized by the US National Aeronautics and Space Administration and the Canadian Space Agency has been to utilize joint analogue field demonstrations to focus technology development activities to demonstrate and integrate new and potentially game changing. mission critical capabilities that would enable an affordable and sustainable surface infrastructure for lunar and Mars robotic and human exploration. Two analogue field tests performed in November 2008 and February 2010 demonstrated first generation capabilities for lunar resource prospecting, exploration site preparation, and oxygen extraction from regolith while initiating integration with mobility, science, fuel cell power, and propulsion disciplines. A third analogue field test currently planned for June 2012 will continue and expand the fidelity and integration of these surface exploration and infrastructure capabilities while adding Mars exploration technologies, improving remote operations and control of hardware, and promoting the use of common software, interfaces, & standards for control and operation for surface exploration and science. The next field test will also attempt to include greater involvement by industry, academia, and other countries/space agencies. This paper will provide an overview of the development and demonstration approach utilized to date, the results of the previous two ISRU-focused field analogue tests in Hawaii, and the current objectives and plans for the 3rd international Hawaii analogue field test.

Sanders, Gerald B.↗

Probabilistic Risk Assessment of Spent Fuel Pool Cooling System Failure Considering Safety and Security Initiating Events

In order to quantify the probable risk associated with a safety system, nuclear safety risk evaluation process is applied which is generally performed in three steps. The first step is to calculate the damage frequency of a critical system. This step is followed by the radioactive source term estimation due to the potential system damage. The final step is the assessment of off-site consequences. The safety risk formula is shown by Eq. (1). P{sub F} is the probability of safety system failure (the probability used describes a random, independent event), and C is the consequence value. R{sub SAF} = P{sub F} * C (1) The security risk associated with an attack on critical infrastructure and/or special nuclear materials theft is usually evaluated using three- term risk equation (probability of attack, probability of adversary success, and consequence). A security threat and the related initiating events are not considered in a pure safety risk analysis. The vulnerability of the physical protection system is performed independently even though the consequence resulting from a security initiating event can be similar to a safety related initiating event and thus gets double counted. The security risk can be calculated using Eq. (2) R{sub SEC} = P{sub A} * P{sub S} * C (2) PA is the probability of attack, P{sub S} is the probability of adversary success (P{sub S} = 1 - P{sub I} P{sub N}). P{sub I} being the probability of interruption which accounts for the probabilities of detection of all timely detection elements along an adversary path. PN being the probability of neutralization: the result of engagement of the response force with the adversaries after the interruption has occurred. C is the consequence magnitude from a successful attack. The two security probabilities do not describe random, independent events. As a result, because of the differences in the randomness and independence of the respective safety and security probabilities, the safety and the security risks are currently calculated separately. The consequence term in nuclear safety and security risk evaluation have the same definition. An effort is made here to study the effect on the overall risk by considering security initiating events along with the subsequent failure of the intermediate safety element. The target selected is a spent fuel storage pool for analyzing the public risk arising from the interplay between nuclear security and safety initiating events. EASI (Estimate of Adversary Sequence Interruption) model is used to calculate the probability of interruption related to a security system that leads to the calculation of the security initiating event frequency. Further progression of this initiating security event to a top event is analyzed using a Probabilistic Safety Assessment (PSA) tool, SAPHIRE (version 8) to obtain a joint pool damage frequency. For the progression of events leading to a top event, the failure of the intermediate safety elements is assumed to be external random events such as heavy load drop and fire events. The objectives of this study is to (1) determine the double accounting of frequency of failure, risk and allocated resources in the scenario of a non-random security initiating event leading to a safety random event chain (2) compare the damage frequency from pure security with the frequency of combined security-safety failure event and pure safety failure events. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Engineering in Cyber Resilience with Cyber-Informed Engineering

Engineers have super powers to provide cybersecurity resilience with deterministic engineering solutions and to protect systems from the most catastrophic consequences that a cyber saboteur could cause. Come to this session to learn how to use engineering risk management skills to harden your engineered systems from cyberattacks. Objective 1 Identify what system functions could be digitally induced to cause undesired high-impact consequences. Objective 2 Analyze how loss or instability of digital controls in a subsystem could lead to high-impact consequences. Objective 3 Analyze how loss or instability in the digital connectivity between systems could lead to high-impact consequences. Objective 4 Identify engineering controls which could build resilience by eliminating digital loss or instability pathways or reduce the impact of digital loss or instability. This presentation will introduce Cyber-Informed Engineering, described below, and walk participants through specific engineering use cases to show how engineers can consider the potential for cyber sabotage in their existing system designs and enact deterministic engineering-based controls which eliminate pathways for attack or mitigate specific consequences. A wide variety of application use cases will be considered so that audience members can align the material with familiar engineering applications. CIE is an engineering approach that integrates cyber resilience into the conception, design, build, and operation of any physical system that has digital connectivity, sensors, monitoring, or control. CIE offers the opportunity to use engineering to eliminate or mitigate avenues for cyber attack—starting from the earliest stage of design and continuing throughout the system’s lifecycle. Today, engineers and industrial control system (ICS) technicians build engineered systems with specific goals for safety, reliability, and functionality. While systems engineering includes considerable safety and failure mode analysis, cybersecurity risks are often not specifically addressed—particularly the risks of intentional cyber compromise, exploitation, and misuse. Cyber-Informed Engineering pairs well with traditional cyber defenses and offers an extra designed-in protection to eliminate the most catastrophic consequences which can be realized by an adversary should traditional cyber defenses fail.

42 ENGINEERING↗

Defense strategies for cloud computing multi-site server infrastructures

We consider cloud computing server infrastructures for big data applications, which consist of multiple server sites connected over a wide-area network. The sites house a number of servers, network elements and local-area connections, and the wide-area network plays a critical, asymmetric role of providing vital connectivity between them. We model this infrastructure as a system of systems, wherein the sites and wide-area network are represented by their cyber and physical components. These components can be disabled by cyber and physical attacks, and also can be protected against them using component reinforcements. The effects of attacks propagate within the systems, and also beyond them via the wide-area network.We characterize these effects using correlations at two levels using: (a) aggregate failure correlation function that specifies the infrastructure failure probability given the failure of an individual site or network, and (b) first-order differential conditions on system survival probabilities that characterize the component-level correlations within individual systems. We formulate a game between an attacker and a provider using utility functions composed of survival probability and cost terms. At Nash Equilibrium, we derive expressions for the expected capacity of the infrastructure given by the number of operational servers connected to the network for sum-form, product-form and composite utility functions.

Rao, Nageswara S.↗

Planning for Seattle at the Convergence of Resilience and Energy

Grid reliability metrics obscure important temporal, spatial, and categorical considerations for increasing energy resilience. Systemwide or feeder-level outage metrics do not identify which kinds of services are affected by outages, where, and for how long. These outage metrics indicate the impacts of outages but cannot measure the consequences to customers that could result from those outages. The consequences of power outages for surrounding community members are caused by disruptions to electricity-dependent critical services, rather than to electricity itself. Power outages can decrease a community's access to healthcare, fuel, safe indoor temperatures, and provisions like food and water. This project developed critical service access, a new consequence-focused resilience metric that quantifies the relative access to critical services provided to households by distribution infrastructure during normal conditions and major disruptions. We use a spatially granular grid analysis that facilitates targeted resilience interventions; dividing feeders into isolatable sections and combining those sections with the critical service access metric allows us to identify where energy improvements like solar-plus-storage microgrids could create the most benefits for community members by protecting access to food, fuel, health, shelter, and public safety services. We identify locations in a South Seattle study area that could be high priorities for resilience investment and summarize their potential neighborhood-scale resilience benefits. This analysis was complemented by direct feedback from study area residents collect through a survey and focus groups. Results can help utilities understand how and where long power outages can create real consequences for customers, set strategic targets based on that understanding, and measure the potential benefits of energy resilience upgrades for more informed decisions.

14 SOLAR ENERGY↗