SEARCH · Search NASA
Results for “supply chain resilience”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
N&HS & Cybercore Overview Duke Energy 1-25-23
Briefings provided to Duke Energy during their visit to INL on January 25, 2023. This is following the process to release the slides to Duke Energy.
Applying Cyber-Informed Engineering to Power System Operations
This presentation covers the interaction of the discipline of system operations with the growing body of knowledge around Cyber-Informed Engineering (CIE). First is discussion of a number of fundamental concepts for system operators - organizational division of responsibilities, human and machine cooperation, goals, and priorities. The next section covers the reasons why CIE was developed, what it is, and the key design and operational, and organizational principles of CIE. Finally, some thoughts on how CIE can be applied to power system operations are offered, along with some examples of how an organization can approach applying CIE principles in their particular circumstances.
A National Secure-by-Design Strategy
The US National Cybersecurity Strategy published March 2, 2023 uses plain language to communicate that the US is calling for a major change in how we prioritize the security of software systems used in critical infrastructure. It acknowledges that our current approach, which is essentially, “let the buyer beware,” leaves entities who are least able to assess or defend vulnerable software responsible for the impacts of designed-in weaknesses while the makers of the technology bear no liability. The strategy recommends a security-by-design approach, recommending that software vendors be held liable to uphold a “duty of care” to consumers and for systems to be designed to “fail safely and recover quickly” . For energy infrastructure, the strategy calls out the need to implement the National Cyber-Informed Engineering Strategy to achieve higher confidence security for energy infrastructures. The Idaho National Laboratory, a pioneer in cyber-informed engineering concepts, is at the forefront of organizations educating others in industry, academia, and government on how to apply these concepts to real-world challenges. In this brief, we'll outline some of the basic principles of security-by-design and offer examples of how, in a water sector context, they're being put into successful practice.
Mental Models for Managing Grid Cybersecurity Risk - ARC Industry Forum, Cybersecurity and Energy Transition
A proper mental model of the concepts of cyber risk and its components of threat and exploitability and consequence is necessary to allocate limited resources to different security activities, especially when considered alongside reliability and regulatory and economic risks. Understanding the consequence and frequency different risks are realized also helps align the right mitigations to the right risks. Cyber-informed engineering (CIE) is an emerging method to “engineer out” cyber risk across product and system lifecycles, and INL has a portfolio of programs operationalizing CIE’s principles for the energy sector.
HOP and Cybersecurity: Leveraging safety and reliability experience to improve digital security culture
This presentation will introduce participants to key mental models on how to think about and understand safety and the organizational attributes that support it from three of the leading voices in the discipline – David Marx, Dr. Erik Hollnagel and Dr. Todd Conklin – and from there we ask the simple question of “how can we apply this to cybersecurity?” Opportunities, similarities, and differences from the history of accomplishment applying human and organizational performance principles to safety and reliability can be collectively leveraged to the meet the challenge of cybersecurity for OT/ICS/cyber-physical systems. This is the same intent as the "Cybersecurity Culture" principle of Cyber-Informed Engineering (CIE).
Using Cyber-Informed Engineering for Cyber Defense Workbook
This workbook was prepared for a detailed workshop in Cyber-Informed Engineering. It is designed to provide an audience of electrical cooperative engineering staff with an opportunity to practice leveraging the principles of Cyber-Informed Engineering for a hypothetical system upgrade. This workbook contains material describing the fictional project, information about Cyber-Informed Engineering, hands-on exercises, and a copy of the slides presented during the workshop. It can stand alone as a CIE resource.
Overcoming mechanical fragility in Sm-Co permanent magnet materials
Samarium-cobalt alloys are used in some of the strongest permanent magnets, particularly for applications between about 200 and 550°C, but the utilization of these materials is restricted by their brittleness. Improving their mechanical resilience would allow them to be used more widely and, in some cases, substitute for neodymium-based magnet alloys which are subject to supply-chain risks. In this work, we have engineered a series of novel microstructures with bi-modal grain size distributions to achieve unprecedented combinations of mechanical and magnetic properties. Improvements up to 73% are obtained in the flexural strength of Sm 2 (CoFeCuZr) 17 sintered magnets, with negligible impact on the magnetic properties. Our mechanically-robust, high-performance Sm-Co magnets are made without changing the chemical compositions of the materials or their heat treatment procedures, making them highly compatible with existing manufacturing processes.
Mechanically strengthened heterogeneous Sm-Co sintered magnets
Samarium-cobalt sintered magnets offer excellent magnetic properties, thermal stability, and corrosion resistance. They are used in a variety of defense and civilian applications, especially when elevated operation temperatures (e.g., 200 ºC to 550 ºC) are required. However, the utilization of these materials is restricted by their brittleness. Improving their mechanical resilience would make them more cost-effective, efficient, and robust in decarbonization and other function-related applications while reducing the pressure on critical material supply chains. In this paper, we engineer a series of novel heterogeneous microstructures, such as laminated coarse grain (CG)/fine grain (FG) and core/shell CG/FG microstructures, to produce unprecedented combinations of superior mechanical and magnetic properties without altering the chemical compositions of the magnets or common heat treatment procedures. Further, a 60% flexural strength enhancement is obtained using heterogeneous Sm 2 (CoFeCuZr) 17 sintered magnets with little impact on their magnetic properties. The mechanically robust heterogeneous Sm-Co sintered magnets have a minor (e.g., less than 4.6%) reduction in the energy product (BH) max due to a slightly reduced squareness of the demagnetization curve, with no decrease in either the remanence (B r ) or the intrinsic coercivity (H ci ). The flexural strengths of these heterogeneous Sm-Co magnets depend on the volume ratios and mean grain sizes of the FG/CG regions, as well as their microstructural architectures. The fine-grained regions act as mechanical strengthening sites, which can be strategically used when designing the magnet for different applications. This technology is highly compatible with existing magnet manufacturing processes and thus can be adopted readily by the magnet industry.
Overview and Commentary on Applying the Coordinated Vulnerability Disclosure Process to Photovoltaic System Devices
The rapid expansion of photovoltaic (PV) systems, particularly inverters, has introduced new cybersecurity challenges that threaten both local operations as well as the broader electrical grid’s stability. PV inverters, integrated into critical energy infrastructure are potential targets for cyber attacks due to vulnerabilities in firmware, remote access systems, and communication protocols. The Coordinated Vulnerability Disclosure (CVD) process, as defined by the Cybersecurity and Infrastructure Security Agency (CISA), provides a framework for identifying, reporting, and addressing these vulnerabilities in a transparent and collaborative manner. This report outlines the CVD process as it applies to PV systems, detailing the roles of key stakeholders, such as manufacturers, grid operators, and security researchers. The report also highlights specific challenges in managing vulnerabilities for new and legacy PV systems, which includes those introduced by insecure communications and third-party supply chain components. By adhering to the CVD process, the PV industry can mitigate cybersecurity risks, ensure regulatory compliance, and maintain consumer trust, while safeguarding the operational resilience of the energy grid. Ultimately, the effective coordination of vulnerability management is crucial for securing the future of PV systems within the critical electric grid infrastructure landscape.
Advanced Transmission Technologies – GETs and HPCs Session 2: Advanced Power Flow Control and Transmission Topology Optimization
The INL TADA GETs Cohort Session 2, held on November 7, 2025, conducted in collaboration with ScottMadden, focused on two core Advanced Transmission Technologies (ATTs): Advanced Power Flow Control (APFC) and Transmission Topology Optimization (TTO). These technologies are pivotal in enhancing grid flexibility, reliability, and cybersecurity resilience. APFC, particularly through modular FACTS devices like Modular Static Synchronous Series Compensators (M-SSSCs), enables dynamic voltage injection to reroute power flows. The session highlighted the deployment benefits of APFC, such as rapid installation, minimal civil works, and re-deployability. Regulatory drivers like FERC Order 2023 mandate the inclusion of Grid-Enhancing Technologies (GETs) in interconnection studies. Case studies from Central Hudson, CAISO, and National Grid (UK) demonstrated APFC’s effectiveness in congestion relief and cost savings. The session also addressed cybersecurity concerns, including firmware vulnerabilities, SCADA integration risks, and supply chain dependencies. Participants engaged in interactive exercises to rank cybersecurity and supply chain risks, emphasizing the need for robust digital assurance strategies. TTO involves software-based reconfiguration of transmission networks to optimize power flow without new infrastructure. The session showcased its operational value, with examples from SPP, PJM, and MISO showing significant congestion cost reductions. Cybersecurity vulnerabilities were discussed, particularly in API security and software supply chains, referencing incidents like SolarWinds and attacks on Danish utilities. Digital assurance exercises explored worst-case scenarios, attack paths, and mitigation responsibilities between vendors and utilities. Reliability challenges such as algorithm stability, vendor dependency, and operator trust were also examined. Cross-cutting themes emphasized the importance of digital assurance tools, including Software Bills of Materials (SBOMs) and hardware-in-loop testing. Human performance, training, and operational confidence were identified as critical enablers of technology adoption. The session concluded with a preview of Session 3, which will focus on High Performance Conductors (HPCs) and risk-based cybersecurity tools. Session 2 of 3.
CCE Phase 1: Consequence Prioritization
Idaho National Laboratory (INL) developed the Consequence-driven Cyber-informed Engineering (CCE) methodology to provide public and private organizations with steps to work collaboratively and establish a working relationship to protect critical infrastructure and other national assets. This process is a considerable undertaking, iterative in nature, and—as time and resources allow—should become a part of a company’s culture. By focusing on the impact of potentially negative Events, CCE provides a better understanding of how and why adversaries can affect critical functions and services using cyber-enabled sabotage. This document describes Phase 1 of the CCE process.
Trends and 2025 Insights on the Rise of Electric Vehicles in the USA
Plug-in electric vehicles (EVs) are reshaping the transportation energy landscape, providing a practical alternative to petroleum fuels for a growing number of applications. EV sales grew 55x in the past decade (2014-2024) and 6x since 2020, driven by technological progress enabled by policies to reduce transportation emissions as well as industrial plans motivated by strategic value of EVs for global competitiveness, jobs and geopolitics. In 2024, 22% of passenger cars sold globally were EVs and opportunities for EVs beyond on-road applications are growing, including solutions to electrify off-road vehicles, maritime and aviation. This Review updates and expands our 2020 assessment of the scientific literature and describes the current status and future projections of EV markets, charging infrastructures, vehicle-grid integration and supply chains in the USA. EV is the lowest-emission motorized on-road transportation option, with life-cycle emissions decreasing as electricity emissions continue to decrease. Charging infrastructure grew in line with EV adoption but providing ubiquitous reliable and convenient charging remains a challenge. EVs are reducing electricity costs in several US markets and coordinated EV charging can improve grid resilience and reduce electricity costs for all consumers. The current trajectory of technology improvement and industrial investments points to continued acceleration of EVs.
CCE Case Study: Baltavia Substation Power Outage
In this case study, we will examine a fictional event broadly inspired by the real power outages in Ukraine that took place in December 2015 and December 2016 - both the result of cyber-enabled sabotage. The actual events of 2015 and 2016 were well-documented - the adversaries in these attacks gained access to a few power companies’ corporate networks, pivoted to industrial control system (ICS) networks, and created widespread physical effects in the form of power outages.
CCE Case Study: Stinky Cheese Company
This document explores how to apply Consequence-driven Cyber-informed Engineering (CCE) to identify and mitigate catastrophic effects resulting from cyber-enabled sabotage in a case study. For this case study, we will examine a fictional organization named the Stinky Cheese Company.
New York Cross-Border Commodity Flow Disaggregation Modeling
The New York Cross-Border Transportation Regional Resiliency Assessment Program (RRAP) project characterized roadway-based trade and freight transportation between the United States and Canada along New York’s border crossings, with a particular focus on commodity flows and supply chains important to New York. The goal of better understanding, at a systems level, the flow of critical or important cross-border freight throughout the region was an important input in that study’s ultimate goal of assessing the importance of the state’s roadway transportation system to crossborder freight movement throughout the state. However, the intermediate analysis of cross-border freight flows, itself, resulted in insights that may be useful to better understanding the interplay between cross-border freight flows and local economies, communities, and the agencies, organizations, and supply chains that serve them.
Securing Grid Communications Infrastructure: Addressing Gaps Beyond NERC CIP Facility Perimeters
The North American electric grid relies on a complex communications infrastructure that extends beyond facility perimeters traditionally covered by NERC Critical Infrastructure Protection (CIP) standards. While CIP requirements have significantly strengthened cybersecurity within Electronic Security Perimeters, many operational communications—such as those between control centers, substations, and third-party networks—fall outside current regulatory scope. As grid modernization introduces new technologies and connectivity models, these external pathways present evolving security challenges. This brief explores the nature of these challenges, including emerging attack vectors and supply chain considerations, and highlights how ongoing grid transformation increases exposure to sophisticated threats. It outlines practical strategies and policy options to complement existing standards, such as expanding secure communications practices, enhancing supply chain transparency, and fostering collaboration among federal, state, and industry stakeholders. Near-term actions like encryption, authentication, and contractual safeguards can help reduce risk while longer-term frameworks are developed to ensure resilient and secure grid operations.
Quantifying Uncertainty of Deep Reinforcement Learning Based Decision Making for Operations and Maintenance of Nuclear Power Plant
This paper summarizes research that integrates condition monitoring and prognostics with decision making for nuclear power plant operations and maintenance. As part of this research, we have developed an online asset management tool to help reduce life-cycle maintenance and repair costs. Using the latest advancements in condition monitoring, supply chain analytics, and deep reinforcement learning, we have created a predictive maintenance tool that can optimize the maintenance and spare-part management of a repairable nuclear system. To demonstrate these methods, preliminary studies were conducted on a simple, representative maintenance system undergoing a stochastic degradation process that requires repairs or replacement to continue operation. Through Monte Carlo simulations, we were able to reduce maintenance spending by approximately 50% compared to optimized, time-based maintenance strategies. Not only does the decision maker reduce the average life-cycle costs, it also minimizes the chance of high cost scenarios, lowering the variance of the expected cost distributions, and reducing overall financial risk. Furthermore, this work also studies the ability of the decision maker to handle various levels of noise from observation uncertainty. By introducing uncertainty into the decision-making process, we have quantified the robustness and resiliency of the decision maker, as well as identified necessary levels of observability to demonstrate cost effectiveness.