SEARCH · Search NASA

Results for “Vulnerability Management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

All sources NASA NTRS DOE OSTI

DOE OSTI2022

Supply Chain Risk Management: Data Structuring

Supply chain risk management (SCRM) is an area of research that addresses both logistics concepts to maximize efficiency, reliability, and revenue as well as risk features, such as potential weak points, break points, and vulnerabilities within the supply chain. SCRM is used to find risks introduced at each node in a supply chain and how these risks can impact a company’s products, individuals, customers, and reputation. SCRM is a relatively new field, so standardized processes including data structuring are not fully documented. This paper explains the importance of a standard data structuring methodology and how it can enhance current SCRM efforts. Data ingest, structuring, and analysis are predominantly managed by humans. Automating some of the less complex steps can positively impact SCRM by allowing human analysts to focus on more strategic analyses. Types of data to be collected and structured are collected via publicly available information related to hardware, software, and corporate entities. After the data has been collected, the information is formatted in a specific manner, conforming to a schema, to allow for more effective and efficient ingest for further analysis. This paper outlines data structures used by Pacific Northwest National Laboratory for SCRM research and analysis purposes. These structures have been used for hundreds of analyses and have been successful in developing a common baseline. Data structuring is one of the first steps in data standardization, which will further mature and enhance the SCRM research area.

supply chain risk management, data structuring, re↗

DOE OSTI2025

Environmental drivers of spatial variation in tropical forest canopy height: Insights from NASA’s GEDI spaceborne LiDAR

Forest canopy height is a fundamental ecosystem property—influencing patterns of forest carbon storage and forest ecosystem responses to climate variability and change. Previous studies have analyzed environmental drivers influencing spatial variation in canopy height at landscape-to-regional scales; however, far less is known about the environmental determinants underlying regional and global scale variation in forest canopy height. Using the canopy height metrics products from Global Ecosystem Dynamics Investigation (GEDI), a space-borne Light Detection and Ranging (LiDAR) instrument specifically designed to characterize forest structure, we analyze the environmental correlates of spatial variation of global tropical forest canopy height. Our study demonstrates that climate, topography, and soil properties account for 75% of the variation in tropical forest canopy height. Elevation, dry season length, and solar radiation are the most important drivers in determining canopy height both locally and regionally. These results emphasize the vulnerability of tropical forest structure to ongoing changes in the earth’s climate and provide a valuable empirical baseline for tropical forest management.

Science & Technology - Other Topics↗

DOE OSTI2021

Impact Analysis of Data Integrity Attacks on FACTS-based Wide-Area Voltage Control System

Energy management system (EMS) consists of several wide-area control applications that serve as a backbone for security, stability, and reliability of the power system. Wide-area voltage control system (WAVCS), one of the critical wide-area applications, operates in coordination with local Flexible AC Transmission System (FACTS) devices to provide voltage security and optimal management of active and reactive power resources. Since the WAVCS relies on wide-area communication and data sharing devices, possible cybersecurity vulnerabilities have to be addressed to ensure the closed-loop operation of WAVCS. In this paper, we present a methodology for performing an impact analysis of cyber-attacks in WAVCS cybersecurity. In particular, different types of data integrity attacks, such as malicious tripping, fault replay, and signal altering attacks, are considered, and detailed impact analysis is conducted in a testbed environment using the Kundur's four machine two-area system. For performing an impact analysis, the transient voltage stability of the sensitive bus voltage is studied, followed by the quantitative assessment and severity ranking using the voltage profile index. Our experimental evaluation reveals that the data integrity attacks on control signals exhibit a higher attack severity than on the measurement signals. Further, the severity of these attacks varies with nature (static or dynamic), location, and types of attacks.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2025

Mississippi's Strategic Resilience: A multi-systems approach to secure, reliable, and adaptable electric grid infrastructure

Mississippi’s electric grid resilience challenges are linked to an intersection of complex socioeconomic, ecological, technological, historical, and political challenges, exacerbated by increasing severe weather like flooding and tornado events. The state’s legacy of underinvestment in critical energy infrastructure, particularly in rural areas and vulnerable floodplains, have stressed an aging grid, creating long-lasting disruptions in electric service during weather-related outages. Effective emergency management and preparedness is further hampered by a lack of coordination across local, county, and regional scales. Using the TASTI-GRID platform and partnership with Oak Ridge National Laboratory (ORNL), Mississippi is developing a comprehensive regional resilience strategy to overcome energy security and reliability challenges, mitigating the impacts of natural hazards, and positioning Mississippi as a resilient and premier destination for residents, businesses, and economic development.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2026

Commercial integration of advanced nuclear energy with Artificial Intelligence (AI): Possible implications

The integration of advanced nuclear technologies (both fission and fusion) with artificial intelligence (AI) presents unprecedented national security challenges and opportunities. As fusion energy approaches commercial viability alongside advanced Small Modular Reactors (SMRs), their integration with AI and Artificial General Intelligence (AGI) systems could fundamentally transform the global energy and AI landscapes — two pillars of national security. This document briefly examines how AI could accelerate nuclear energy development and deployment while altering existing power structures, a lot could be done to deepen the discussions. Simultaneously, it observes how nuclear-powered AI may expedite advances toward AGI and beyond. These issues are deeply interconnected and thus need to be examined as a whole and more comprehensively than what’s being summarized here. For instance, AI-powered autonomous operation of nuclear facilities could reduce human error but introduce new cybersecurity vulnerabilities and uncertainties. Further investigation would also address how AI-enhanced nuclear technologies might complicate proliferation concerns through advanced fuel cycle management, nuclear materials production and safeguard. The strategic advantage gained by first entities achieving successful AI-nuclear integration could reshape global and national security framework. Timely analysis of these implications may be crucial for policymakers seeking to harness these technologies' benefits while effectively mitigating their potential risks.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

NASA NTRS2019

Radiation Hardness Assurance: Evolving for NewSpace

During the past decade, government agencies, private companies and academic institutions, have launched hundreds of small satellites into space, with dramatically expanded dependence on advanced commercial-off-the-shelf (COTS) technologies and systems required for mission success. While the radiation effects vulnerabilities of components within small satellites are the same as those of their larger, traditional relatives, revised approaches are needed for risk management because of differences in technical requirements and programmatic resources. While moving to COTS components and systems may reduce direct costs and procurement lead times, it undermines many cost-reduction strategies used for conventional radiation hardness assurance (RHA). Limited resources are accompanied by a lack of radiation testing and analysis, which can pose significant risks. Small satellites have benefited from short mission durations in low Earth orbits with respect to their radiation response, but as mission objectives grow and become reliant on advanced technologies operating for longer and in harsher environments, requirements need to reflect the changing scope without hindering developers that provide new capabilities. In this course we suggest RHA strategies that engineers and scientists can apply to a wide range of aerospace systems, including constellations, with a focus on how to manage aggressive system scaling for smaller platforms.

Radiation Hardness Assurance (RHA)↗

NASA NTRS2022

Analyzing Recharge Dynamics and Storage in a Thick, Karstic Vadose Zone

Karst vadose zone heterogeneity creates complex transmission and storage dynamics that affect the timing and magnitude of aquifer recharge. Young, high-matrix permeability eogenetic karst aquifers may have significantly higher matrix storage than older, lower matrix permeability counterparts. In vulnerable and water-limited karst regions, the timescales of storage may be important for seasonal and sub-seasonal water resource management. We create a framework to quantify storage dynamics in karst aquifers using high-resolution precipitation and groundwater levels from the Northern Guam Lens Aquifer in the US territory of Guam. We estimate recharge using the Water Table Fluctuation method, and then develop transfer functions between precipitation and recharge to quantify storage and release of water from the vadose zone. The transfer functions are partitioned into different flow pathways including conduit, conduit/matrix, and slowly draining matrix. Probability distributions are fit to each pathway to determine the average travel times of infiltrated waters. The results show that aquifer recharge through secondary porosity features typically occurs within a few hours of a rainfall event, but this rapid recharge accounts for only 12%–28% of total recharge. The majority of aquifer recharge (>70%) occurs within a month of a contributing storm event. An additional 10% of recharge, on average, took longer than a month to reach the water table. The framework established can help improve the hydrological modeling and freshwater management for karst aquifers.

Patricia Spellman↗

DOE OSTI2020

Infrastructure and Metocean Technology

Research Problem: Changes in the ocean environment (i.e., mudslides or burial from subsea currents, strong weather events or natural fluctuations) have been linked to billions of dollars of impacts. These events can have a significant effect on the success and longevity of offshore infrastructure, as well as affect safety and cost during exploration and production activities.Research Approach: (1) Determine current state of knowledge regarding hazardous metocean and bathymetric conditions, and data availability regarding these conditions and historic events. (2) EY19 -Evaluate if Ml/AI model can be developed to better identify current hazardous metocean and bathymetric conditions. (3) EY 20 + -develop, train, and test ML/AI model to identify current conditions and forecast changes and vulnerability that may impact offshore infrastructure and operations. Benefit: Improved characterization of seabed related hazards in the offshore environment will help to manage and minimize costs and risks during drilling and production operations, and help prevent catastrophic incidents.

Duran, Rodrigo↗

DOE OSTI2022

Development of a vadose zone advanced monitoring system: Tools to assess groundwater vulnerability

Performing repeat pore-fluid sampling over long time-scales can provide valuable information on unsaturated zone contaminants and their potential flux to ground water. This information can be used to manage groundwater remedies and identify contaminants that need to be sequestered in the vadose zone to minimize flux to ground water. Pore-water samples are commonly used to obtain contaminant concentrations within the vadose zone, but existing methods are limited as they only provide a single sample at one location and time. The vadose zone advanced monitoring system (VZAMS) has been designed to integrate multiple technologies into a single down-borehole system that allows for sampling of pore fluids (liquid and gas) to provide information about contamination and hydraulic conditions at multiple depths (~0.3-m intervals) within a cased borehole. Testing has been completed at the laboratory scale to verify the sampling elements of VZAMS, including geochemical testing for representative contaminants known to exist at the Hanford Site, located in southeastern Washington State. Physical tests focused on the ability of the sampler to draw fluid under unsaturated conditions. Initial geochemical testing showed that the stainless steel material used with the porous cuff may affect the sampled concentrations of redox-sensitive contaminants under very dry conditions. Additional laboratory testing demonstrated that the VZAMS components are able to collect representative samples for substances of interest under expected field conditions. In this paper, the design and functionality of a novel instrument are demonstrated in support of subsequent testing in the field.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2023

Incremental Threshold Scheme Enabled IoT Group Key Management

Cyber landscape evolves rapidly. Internet of Things (IoT) and Edge Computing (EC) have rapidly become an integral part of the modern computing infrastructure. It is expected that there will be more than 50 billion active and connected IoT devices by 2025 [1]. Pervasive IoT/EC creates unprecedented opportunities bridging the gap between previously segregated cyber and physical spaces. However, this progress also brings along new security challenges. IoT devices typically have limited computation, communication, and storage resources. This leads to security architecture designs such as using symmetric keys for group communication. While secure and efficient in stable network settings, symmetric key solutions are ill-adapted for IoT's highly dynamic device mobility behavior and frequent group membership turnover. Whenever IoT members leave a group, the known symmetric keys cannot be made forgotten, posing a serious vulnerability. This leads to frequent re-groupings that require expensive re-authentication, key regeneration, and key redistribution in order to maintain IoT/EC security. We present a novel symmetric key management framework that integrate an Incremental Threshold Scheme (ITS) cryptographical function into communication protocol's key rotation mechanism to allow for secure and efficient symmetric key communication group member node revocation. This ITS-enabled key management framework alleviates the need of frequent and expensive re-grouping and re-keying needed by today's large and dynamic IoT/EC operations. We further applied this ITS-enabled key management framework to a distributed IoT/EC-integrated publish and subscribe framework for applicability validation.

Li, Mingyan↗

DOE OSTI2025

Establishing nationwide power system vulnerability index across US counties using interpretable machine learning

Power outages have become increasingly frequent, intense, and prolonged in the US due to climate change, aging electrical grids, and rising energy demand. However, largely due to the absence of granular spatiotemporal outage data, we lack data-driven evidence and analytics-based metrics to quantify power system vulnerability. This limitation has hindered the ability to effectively evaluate and address vulnerability to power outages in US communities. Here, in this work, we collected ∼179 million power outage records at 15-min intervals across 3022 US contiguous counties (96.15 % of the area) from 2014 to 2023. We developed a power system vulnerability assessment framework based on three dimensions (intensity, frequency, and duration) and applied interpretable machine learning models (XGBoost and SHAP) to compute Power System Vulnerability Index (PSVI) at the county level. Our analysis reveals a consistent increase in power system vulnerability across the US counties over the past decade. We identified 318 counties across 45 states as hotspots for high power system vulnerability, particularly in the West Coast (California and Washington), the East Coast (Florida and the Northeast area), the Great Lakes megalopolis (Chicago-Detroit metropolitan areas), and the Gulf of Mexico (Texas). Our heterogeneity analysis indicates that urban counties and those located along regional transmission boundaries tend to exhibit significantly higher vulnerability. Our results highlight the significance of the proposed PSVI for evaluating the vulnerability of communities to power outages. The findings underscore the widespread and pervasive impact of power outages across the country and offer crucial insights to support infrastructure operators, policymakers, and emergency managers in formulating policies and programs aimed at enhancing the resilience of the US power infrastructure.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

The Design and Evaluation of Zero Trust Architecture for Electric Vehicle Charging Infrastructure: EVs @ Scale Series on EV Charging Station Cybersecurity

Implementing a zero trust architecture can significantly bolster the security of electric vehicle (EV) charging infrastructure. EV charging infrastructure includes numerous networked interfaces, each of which can present potential vulnerabilities. When these vulnerabilities are exploited, they can compromise the entire system, leading to severe operational and security risks. Zero trust is a security model that operates on the principle of "never trust, always verify," which helps manage the attack surface and limit the scope of any potential compromises. Fundamentally, this model ensures that no entity, whether inside or outside the network, is trusted by default. The design principles of zero trust include continuous verification, strict deny-by-default access controls, and micro-segmentation. Continuous verification ensures that every request is thoroughly checked, regardless of its origin. Strict access controls enforce the principle of least privilege, allowing users and devices only the minimum necessary access to perform their functions. Micro-segmentation involves dividing the network into smaller, isolated segments to prevent lateral movement in case of a breach. In the context of EV charging infrastructure, zero trust can be implemented through various strategies. For example, multi-factor authentication (MFA) can be required for engineers to access the management interfaces and control systems of charging stations. Real-time monitoring and analysis of network traffic can help detect and respond to anomalies. Systems that do not need to communicate with each other can be micro-segmented to enhance security. All communications should adhere to predefined policies to be permitted. Additionally, encrypting communications can protect sensitive information exchanged between chargers and management systems. This paper presents a zero trust architecture specifically designed for EV charging infrastructure. Implementing zero trust not only mitigates risks but also builds a resilient infrastructure capable of withstanding and quickly recovering from cyber threats. The architecture addresses six defined security objectives. A comprehensive test plan is developed to assess the architecture against these objectives, and the results of the evaluation are reported. This approach is essential for maintaining the reliability and integrity of EV charging services in an increasingly interconnected and vulnerable digital landscape. This is the first in a planned series of papers exploring the implementation of zero trust in EV charging infrastructure. Each paper will delve into different aspects and applications of zero trust, highlighting how various work processes and requirements can lead to distinct architectural designs. These architectures will be tailored to address specific security challenges and operational needs within the EV charging ecosystem, ensuring a robust and adaptable security framework.

33 ADVANCED PROPULSION SYSTEMS↗

DOE OSTI2023

Community Resilience Indicator Analysis: Commonly Used Indicators from Peer-Reviewed Research (Updated for Research Published 2003-2021)

In 2017, FEMA’s National Integration Center (NIC) Technical Assistance (TA) Branch identified a need to establish a data-driven basis for prioritizing locations for TA investment and guiding local emergency management planning. To achieve this goal, FEMA tasked Argonne National Laboratory (Argonne) with identifying commonly used indicators of community resilience across the landscape of published peer-reviewed research. FEMA and Argonne completed the first Community Resilience Indicator Analysis (CRIA) in 2018 and repeated the process in 2022. The CRIA process begins with a literature review and cataloguing of published peer-reviewed assessment methodologies on social vulnerability and community resilience. The literature review findings are then filtered by inclusion criteria established by the CRIA research team to ensure the methodologies are: (1) Quantitative, (2) Data and methodology are publicly available, (3) Calculated at the county level or lower, (4) Examine generalized hazard risk (rather than a singular hazard), and (5) Focused on pre-disaster community conditions. After this, the research team identifies the commonly used indicators across these methodologies and selects the best data source for each indicator. Finally, the research team bins the data for visual display, conducts a correlation analysis and creates a composite index, the FEMA Community Resilience Index (FEMA CRI). In 2018, the CRIA identified eight resilience and vulnerability assessment methodologies and 20 commonly used indicators (indicators used in three or more of the eight methodologies). The FEMA CRI in 2018 was created from these 20 indicators and was produced for at the county level. The 2022 CRIA updated the literature review to expand the list of methodologies examined and followed the same process, resulting in an analysis of 14 methodologies published between 2003 and 2021 and 22 indicators identified as commonly used (indicators used in five or more of the 14 methodologies). In 2022, the research team produced the FEMA CRI at the county and the census tract levels. To make the CRIA data more accessible and more actionable, each individual indicator and the FEMA CRI is binned and included in FEMA’s Resilience Analysis and Planning Tool (RAPT). RAPT enables emergency managers and community partners to quickly visualize relative differences in potential resilience by county, tribe and census tract. By reviewing the data for each of these 22 indicators individually, emergency managers can gain insights for targeted outreach strategies, planning, mitigation investments and response and recovery operations. Communities, regional governments and others can use this data to better understand potential challenges to resilience. As the social science field of examining and validating indicators of resilience evolves, FEMA will update RAPT to provide emergency managers and community partners with additional data and tools to inform planning, mitigation, response and recovery. It is important to understand that the role of the emergency manager is not to change or to “improve” the data, but to plan appropriately for the community characteristics reflected in the data. These datasets are community characteristics that researchers have identified as important considerations for resilience. For example, people with disabilities may have greater challenges to be resilient to disasters. If a community has a high population of people with disabilities, the emergency manager(s) may need to create tailored preparedness outreach programs and strategies to ensure those residents have support if evacuation is necessary. Rather than label these indicators as an absolute measure of resilience, FEMA considers “potential challenges to resilience” a better frame to understand these indicators. Everyone is vulnerable to disasters. While scholars theorize that certain characteristics may make an individual or a household more socially vulnerable, the data does not reflect measures that individuals and/or communities have taken to address potential challenges, such as emergency management planning and outreach or household preparedness measures. To aid emergency managers in understanding how to use these indicators, calling them potential challenges to resilience supports a more positive and strategic application of the data in all phases of emergency management.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2025

Machine Learning Prediction of Tritium‐Helium Groundwater Ages in the Central Valley, California, USA

Abstract Groundwater ages provides insight into recharge rates, flow velocities, and vulnerability to contaminants. The ability to predict groundwater ages based on more accessible parameters via Machine Learning (ML) would advance our ability to guide sustainable management of groundwater resources. In this study, ML models were trained and tested on a large data set of tritium concentrations and tritium‐helium groundwater ages from the California Central Valley, a large groundwater basin with complex land use, irrigation, and water management practices. The ML models were trained on 63 features, including location, well construction information, landscape characteristics, and climate variables, water chemistry, and stable isotopes. The Bagging regressor method can accurately classify (F1‐score = 0.91) groundwater samples as either modern or pre‐modern whereas the accuracy of the ML prediction of continuous tritium‐helium groundwater ages is limited and explains only of the variability in this data set. In general, ML groundwater age prediction relies mostly on features related to (a) the source of groundwater recharge, (b) contaminant history, (c) aquifer materials, (d) well construction, and (e) geochemical reactions along flow paths.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2021

Evolution and Trends of Industrial Control System Cyber Incidents since 2017

The industrial control systems (ICSs) that manage our critical infrastructure are increasingly converging with corporate networks and the Internet as technology and businesses prioritize digital connectivity. These connections make them more vulnerable and available to malicious cyber actors who traditionally targeted the companies’ more public-facing information technology (IT) networks. This paper will review select publicly reported cyber incidents to highlight the continued and growing threat to ICS devices and operational technology (OT) environments. It will summarize the incident and when available, will provide information on the cyber actors, the vulnerabilities they exploited, and any publications the U.S. Government (USG) provided in response. Data belonging to the Department of Homeland Security (DHS) will be used to highlight quantitative trends concerning ICS incidents. This paper builds on “History of Industrial Control System Cyber Incidents” (Hemsley & Fisher 2018), a paper that highlighted select noteworthy threats and incidents to ICS systems up to 2017. This paper will similarly review select incidents occurring after the last previously reviewed incident, Triton/HatMan, December 2017, and will note ICS incident trends including IT/OT convergence and advances in cyber-threat actors’ capabilities in observed in the examined incidents.

99 GENERAL AND MISCELLANEOUS↗

NASA NTRS2017

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification Validation (IVV) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASA's Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domaincomponent, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IVV enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

Fault management↗

NASA NTRS1987

Space Station Program threat and vulnerability analysis

An examination has been made of the physical security of the Space Station Program at the Kennedy Space Center in a peacetime environment, in order to furnish facility personnel with threat/vulnerability information. A risk-management approach is used to prioritize threat-target combinations that are characterized in terms of 'insiders' and 'outsiders'. Potential targets were identified and analyzed with a view to their attractiveness to an adversary, as well as to the consequentiality of the resulting damage.

Van Meter, Steven D.↗

DOE OSTI2021

Microbial Community Shifts Reflect Losses of Native Soil Carbon with Pyrogenic and Fresh Organic Matter Additions and Are Greatest in Low-Carbon Soils

ABSTRACT Soil organic carbon (SOC) plays an important role in regulating global climate change, carbon and nutrient cycling in soils, and soil moisture. Organic matter (OM) additions to soils can affect the rate at which SOC is mineralized by microbes, with potentially important effects on SOC stocks. Understanding how pyrogenic organic matter (PyOM) affects the cycling of native SOC (nSOC) and the soil microbes responsible for these effects is important for fire-affected ecosystems as well as for biochar-amended systems. We used an incubation trial with five different soils from National Ecological Observatory Network sites across the United States and 13 C-labeled 350°C corn stover PyOM and fresh corn stover OM to trace nSOC-derived CO 2 emissions with and without PyOM and OM amendments. We used high-throughput sequencing of rRNA genes to characterize bacterial, archaeal, and fungal communities and their responses to PyOM and OM in soils that were previously stored at −80°C. We found that the effects of amendments on nSOC-derived CO 2 reflected the unamended soil C status, where relative increases in C mineralization were greatest in low-C soils. OM additions produced much greater effects on nSOC-CO 2 emissions than PyOM additions. Furthermore, the magnitude of the microbial community composition change mirrored the magnitude of increases in nSOC-CO 2 , indicating that a specific subset of microbes was likely responsible for the observed changes in nSOC mineralization. However, PyOM responders differed across soils and did not necessarily reflect a common “charosphere.” Overall, this study suggests that soils that already have low SOC may be particularly vulnerable to short-term increases in SOC loss with OM or PyOM additions. IMPORTANCE Soil organic matter (SOM) has an important role in global climate change, carbon and nutrient cycling in soils, and soil moisture dynamics. Understanding the processes that affect SOM stocks is important for managing these functions. Recently, understanding how fire-affected organic matter (or “pyrogenic” organic matter [PyOM]) affects existing SOM stocks has become increasingly important, due to both changing fire regimes and interest in “biochar,” pyrogenic organic matter that is produced intentionally for carbon management or as an agricultural soil amendment. We found that soils with less SOM were more prone to increased losses with PyOM (and fresh organic matter) additions and that soil microbial communities changed more in soils that also had greater SOM losses with PyOM additions. This suggests that soils that already have low SOM content may be particularly vulnerable to short-term increases in SOM loss and that a subset of the soil microbial community is likely responsible for these effects.

54 ENVIRONMENTAL SCIENCES↗