Search NASA⌕ Search

SEARCH · Search NASA

Results for “Infrastructure vulnerability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

ML Clustering to Identify Natural Gas Pipeline Infrastructure Vulnerabilities

The network of more than 2.5 million miles of natural gas pipelines the U.S. are exposed to a range of vulnerabilities, ranging from extreme weather, to human behavior, and increasingly, to cyber threats. Advanced, data-driven analytics, including the use of machine learning and artificial intelligence, afford an opportunity to identify potential vulnerabilities, better understand risks, and help mitigate vulnerabilities in the network. At NETL, machine learning is being used to explore pipeline vulnerabilities and identify significant clusters of failure events, including failures due to weather, human behavior, and materials. These findings are being used to support the development of new technologies, including sensors, but can also be used to evaluate and inform mitigation strategies to reduce risks and vulnerabilities throughout the network.

Bauer, Jennifer↗
DOE OSTI2020

Toward Quantifying Vulnerabilities in Critical Infrastructure Systems

Modern society is increasingly dependent on the stability of a complex system of interdependent infrastructure sectors. Vulnerability in critical infrastructures (CIs) is defined as a measure of system susceptibility to threat scenarios. Quantifying vulnerability in CIs has not been adequately addressed in the literature. This paper presents ongoing research on how the authors model CIs as network-based models and propose a set of metrics to quantify vulnerability in CI systems. The size and complexity of the CIs make this a challenging task. These metrics could be used for planning and efficient decision-making during extreme events.

Devineni, Pravallika↗
DOE OSTI2021

Identification of Critical Infrastructure via PageRank

Assessing critical infrastructure vulnerabilities is paramount to arranging efficient plans for their protection. Critical infrastructures are cyber-physical systems that can be represented as a network consisting of nodes and edges and highly interdependent in nature. Given the interdependent nature of critical infrastuctures, failure in one node may cause failure in many others resulting in a cascade of failures. In this paper, we propose a node criticality metric that uses Google’s PageRank algorithm to identify nodes that are likely to fail (are vulnerable), nodes whose failure may cascade to many other sites in the network (are important), and nodes that are both vulnerable and important (are critical). We then present a series of experiments to understand how protecting certain critical nodes can help mitigate massive cascading failures. Simulating failures in a real-world network with and without critical node protections demonstrates the importance of identifying critical nodes in an infrastructure network.

Kay, Bill↗
DOE OSTI2023

Inventory of Public Key Cryptography in US Electric Vehicle Charging

Electric vehicles (EVs) and charging infrastructure are networked systems, which employ high-level communications in support of charging and grid service decisions. Public key cryptography (PKC) underlies much of the security and privacy protections of the information exchange. We are entering a new epoch where quantum computing threats must be seriously considered. A sufficiently large quantum computer, so named Cryptographically Relevant Quantum Computer (QRQC), will be able to perform the mathematical operations to efficiently attack the underpinnings of traditional PKC, thus jeopardizing the digital foundations for trust, communications security, and data security. Estimates suggest a QRQC can break public key encryption and digital signatures in the manner of tens to hundreds of hours, compared to traditional computing that would demand more than 10 18 years in a brute force-style attack. A consensus belief of quantum theorists, quantum experimenters, and cryptographers suggest that the quantum threat will be likely realized in the next twenty years. To address the threat, post-quantum cryptography, which is cryptosystems that are designed to be secure against both traditional and quantum computing threats, must be adopted. Migration from traditional PKC to quantum-resilient cryptography is a global undertaking and likely represents the largest transition in computing history. The nascent state of EV public key infrastructure, combined with limited adoption of the vehicle secure charging features, presents an opportunity to establish a preference for quantum-resistant cryptography as a step on the migration path. Delays will stunt the efforts as rapidly accelerating EVs sales and huge infrastructure investments will create large growing bases of long-lived vehicles and infrastructure. Migration preparations can commence while NIST continues the process to standardize post-quantum cryptography (PQC), which are quantum-resilient algorithms designed to be secure against traditional and quantum computing threats. The first step in preparing EV charging is to identify the presence of traditional public key cryptography algorithms and applications. With this objective in mind, this report is intended to advise the vehicle manufacturers, charging station manufacturers, charging station operators, charge network providers and other EV charging stakeholders with information on traditional PKC application and the potential risks when PKC becomes insecure. This report, the first in a series of reports discussing the topics existing at the confluence of post-quantum cryptography adoption and EV charging, identifies traditional public key applications employed and identifies potential consequences of leaving EV charging infrastructure vulnerable to quantum computing. The focus remains squarely on the of EV charging and infrastructure with respect to PKC and is believed by the authors to complement the NIST SP 1800-38 Migration to Post-Quantum Cryptography. While the report is centered on infrastructure, there are implications to vehicles.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2025

Bridging the Gap on Data, Metrics, and Analyses for Grid Resilience to Weather Events: Information that utilities can provide regulators, state energy offices, and other stakeholders

A growing number of states require regulated utilities to file resilience plans to improve the electric grid’s ability to anticipate, withstand, adapt to and recover from increasingly severe weather events. This report aims to help state regulators identify and request data, metrics, and analyses from utilities and use it in decisions on utility resilience plans and investments. The report reviews state requirements and utility plans focused on overall grid resilience, climate change resilience and vulnerabilities, infrastructure modernization, storm protection, and wildfire mitigation. It details types of data, metrics, and analyses across five categories--and provides examples of each from the utility plans. The first category is vulnerability assessments, or evaluations of the susceptibility of systems, communities, or assets to potential harm from identified hazards. The second is data on hazards and the exposure of utility assets and customers to these hazards. The third is attribute metrics, or system characteristics that contribute to or describe the resilience of a system. The fourth is performance metrics, which are impacts of resilience investments on system performance--typically a reduction of negative impacts from hazard events. Finally, evaluation and prioritization are analyses that utilities conduct to estimate impacts from resilience measures (evaluation) and prioritize measures based on costs and estimated impacts (prioritization). The report concludes with examples of key trends and emerging best practices for states and utilities, and identifies areas for further research.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2026

Toward a standardization of cryostructure and cryogenic soil structure terminology for the field description of permafrost‐affected soils

This paper establishes standardized terminology and field documentation protocols for cryostructures and cryogenic soil structures in permafrost‐affected soils and provides brief guidance on descriptions of ground ice morphology and ice volume estimates. We consolidate permafrost terminology from Russian and North American literature, clarify long‐standing ambiguities, and provide explicit guidelines that align with US Department of Agriculture‐Natural Resources Conservation Service soil description standards. Our scheme makes critical distinctions between cryostructure, the distribution of ice within soil, and cryogenic soil structure, the morphological structure of soil resulting from ice formation. The scheme organizes cryostructures into three main categories: non‐segregated ice, visible segregated ice, and ice matrices. We introduce standardized codes and parameters for field descriptions of ice and soil that enable machine‐readable data collection compatible with existing soil information systems. This standardization will significantly enhance the integration of field observations into landscape‐scale assessments of permafrost stability, infrastructure vulnerability, and ecosystem response to permafrost thaw, addressing an urgent need for quantitative data to inform modeling and decision‐making in rapidly changing Arctic and subarctic environments.

Andersen, Megan L. [University of Minnesota, Saint↗
DOE OSTI2022

4D electrical resistivity tomography for assessing the influence of vegetation and subsurface moisture on railway cutting condition

Instability of slopes, embankments, and cuttings on the railway network is increasingly prevalent globally. Monitoring vulnerable infrastructure aids in geotechnical asset management, and improvements to transport safety and efficiency. Here, we examine the use of a novel, near-real-time Electrical Resistivity Tomography (ERT) monitoring system for assessing the stability of a railway cutting in Leicestershire, United Kingdom. In 2015, an ERT monitoring system was installed across a relict landslide (grassed) and an area of more stable ground on either side (wooded), to monitor changes in electrical resistivity through time and space, and to assess the influence of different types of vegetation on the stability of transportation infrastructure. Two years of 4-Dimensional ERT monitoring results are presented here, and petrophysical relationships developed in the laboratory are applied to calibrate the resistivity models in order to provide an insight into hydrogeological pathways within a railway cutting. The influence of vegetation type on subsurface moisture pathways and on slope stability is also assessed – here we find that seasonal subsurface changes in moisture content and soil suction are exacerbated by the presence of trees (wooded area). This results in shrink-swell behaviour of the clays comprising the railway cutting, resulting in fissuring and a reduction in shear strength, leading to instability. As such, it is proposed that on slopes comprised of expansive soils, grassed slopes are beneficial for stability. Insights into the use of 4-D ERT for monitoring railway infrastructure gained from this study may be applied to the monitoring of critical geotechnical assets elsewhere.

58 GEOSCIENCES↗
DOE OSTI2023

High–Resolution Maps of Near–Surface Permafrost for Three Watersheds on the Seward Peninsula, Alaska Derived From Machine Learning

Permafrost soils are a critical component of the global carbon cycle and are locally important because they regulate the hydrologic flux from uplands to rivers. Furthermore, degradation of permafrost soils causes land surface subsidence, damaging infrastructure that is crucial for local communities. Regional and hemispherical maps of permafrost are too coarse to resolve distributions at a scale relevant to assessments of infrastructure stability or to illuminate geomorphic impacts of permafrost thaw. Here we train machine learning models to generate meter–scale maps of near–surface permafrost for three watersheds in the discontinuous permafrost region. The models were trained using ground truth determinations of near–surface permafrost presence from measurements of soil temperature and electrical resistivity. We trained three classifiers: extremely randomized trees (ERTr), support vector machines (SVM), and an artificial neural network (ANN). Model uncertainty was determined using k–fold cross validation, and the modeled extents of near–surface permafrost were compared to the observed extents at each site. At–a–site near–surface permafrost distributions predicted by the ERTr produced the highest accuracy (70%–90%). However, the transferability of the ERTr to the sites outside of the training data set was poor, with accuracies ranging from 50% to 77%. The SVM and ANN models had lower accuracies for at–a–site prediction (70%–83%), yet they had greater accuracy when transferred to the non–training site (62%–78%). These models demonstrate the potential for integrating high–resolution spatial data and machine learning models to develop maps of near–surface permafrost extent at resolutions fine enough to assess infrastructure vulnerability and landscape morphology influenced by permafrost thaw.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2025

How extreme rainfall and failing dams unleashed the Derna flood disaster

On September 11, 2023, Storm Daniel unleashed unprecedented rainfall over the Wadi Derna watershed, triggering one of the most devastating floods in modern history, striking Derna, a coastal city in Libya. This study reconstructs the disaster using an integrated modeling approach that combines satellite imagery, hydrologic, hydraulic, and geotechnical simulations, machine learning, eyewitness accounts, and digital elevation data to assess the impact of cascading dam failures. Our findings reveal that the region’s dams, even if structurally sound, would have provided minimal protection against the extreme runoff. However, their failure unleashed a destructive surge wave, amplifying the disaster’s magnitude and devastation. Here, we show that the collapse of aging flood control infrastructures, compounded by inadequate risk assessment and emergency preparedness, dramatically escalated the disaster’s impact. Our findings underscore the urgent need for systematic dam safety evaluations, enhanced flood forecasting, and adaptive risk management strategies that address climate extremes and infrastructure vulnerabilities.

Hydrology↗
DOE OSTI2022

The Press and Pulse of Climate Change: Extreme Events in the Colorado River Basin

Extremes in temperature and precipitation are associated with damaging floods, prolonged drought, destructive wildfires, agricultural challenges, compromised human health, vulnerable infrastructure, and threatened ecosystems and species. Often, the steady and progressive trends (or presses) of rising global temperature are the central focus in how climate impacts are described. However, observations of extreme weather events (or pulses) increasingly show that the intensity, duration and/or frequency of acute events are also changing, resulting in greater impacts on communities and the environment. Describing how the influence of extreme events may shape water management in the Colorado River Basin in clear terms is critical to sound future planning and efforts to manage risk. Three scenario planning workshops in 2019 and 2020 were held as part of a Colorado River Conversations series, identifying potential impacts from multiple intersecting extreme events. Water managers identified climate-related events of concern in the Colorado River Basin that necessitate greater attention and adaptive responses. To support efforts to include consideration of climate-change-driven extremes in water management and planning, we explore the current state of knowledge at the confluence of long-term climate shifts and extreme weather in the Colorado River Basin related to the events of concern that were identified by scenario planning participants.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

Advanced Offshore Hazard Forecasting to Enable Resilient Offshore Operations

Presentation for the Offshore Technology Conference 2024 manuscript, "Advanced Offshore Hazard Forecasting to Enable Resilient Offshore Operations." This presentation describes the use of Artificial Intelligence and Machine Learning (AI/ML) tools to assess offshore hazards and their impact to vulnerable infrastructure, in this case, pipelines. The results show the potential intersection of seafloor instability and pipelines with potentially lower integrity, then compares them to metocean pathways that could attract hazardous materials such as oil in the event that the pipelines are compromised.

Mark-Moser, Mackenzie K.↗
DOE OSTI2026

McGrath Community Energy Planning

The City of McGrath, a remote Alaskan community reliant on diesel fuel, developed a Community Energy Plan through the Energy Technologies Innovation Partnership Project (ETIPP) to address high energy costs, infrastructure vulnerabilities, and long-term sustainability. Guided by community-led priorities and technical assistance from partners including NREL, REAP, and ANTHC, the plan identifies eight focus areas: distribution system upgrades, solar and battery integration, river energy potential, emergency backup power, housing efficiency, water system losses, independent power producer models, and targeted funding strategies. The plan combines local knowledge with technical analysis to chart a path toward a more resilient, affordable, and sustainable energy future for McGrath.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2024

Electrification Analysis: Manhattan Beer

This one-page highlight details the key takeaways from a project that utilized NREL's Fleet Research, Energy Data, and Insights (FleetREDI) data analysis pipeline, the Manhattan Beer Electrification Project. This project determined that Class-8 beverage distribution trucks operating in Manhattan show substantial electrification potential due to daily driving distances below 50 miles and low average speeds of 22mph or less. Their duty cycle needs can often be met by even modestly sized batteries and charging infrastructure. Vulnerable communities near their routes would benefit from fleet electrification.

ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2026

Assessing Energy Infrastructure Devices for Vulnerabilities

Industrial control systems prove to be vital to the health and security of the nation in our critical infrastructure. Critical infrastructure includes the most foundational systems to support modern civilization which includes water and wastewater systems, communications, and the electricity we use to name a few sectors. However, these devices' overall composition remains largely unknown and are untested from a cyber security perspective. As part of the Cyber Testing for Resilient Industrial Control Systems (CyTRICS) program, I analyzed one such energy infrastructure device to better understand how it functions, what hardware and software components are present within it, and assess it for security vulnerabilities. To achieve this, I reverse engineered binary files using Ghidra to understand system functionality and learned more about how to collaborate with other researchers on a shared Ghidra project. I learned more about how web sockets function and how to interact with them through Python to test if they are secure or not. This work led me to assess possible vulnerabilities in this device and provide a better understanding of its composition and function, which are essential to INL's mission of securing our nation's energy infrastructure.

99 - GENERAL AND MISCELLANEOUS↗
DOE OSTI2026

Hardware Aware Mitigation of Timing Side-Channel Vulnerabilities in Critical Infrastructure Software

Program runtime/timing attacks exploit variations in a program’s execution times to extract sensitive information from the program (e.g. encryption keys, sensitive variable data, intellectual property). State-of-the-art solutions to runtime sidechannel attacks attempt to balance the execution time of the sensitive code for different control flow paths to eliminate the timing leakage. However, during the mitigation process, most techniques do not consider the underlying hardware/device on which the target program is supposed to run on. This can lead to over-fixing (unnecessary extra operations), under-fixing (not solving the imbalance properly), and even failures. We propose DISARM, a joint hardware-software methodology (unlike any existing solution) for mitigating runtime side-channel vulnerabilities that utilizes timing values from real embedded devices to generate targeted software fixes. We implement DISARM to support C/C++/Java source codes and validate it across 22 standard benchmarks. DISARM outperforms state-of-the-art solutions such as PENDULUM and DifFuzzAR in terms of execution time overhead (up to −46%), code size overhead (up to −10%), and correctness (no failures) on five different embedded/edge devices.

Suha, Tasneem [University of Maine]↗
DOE OSTI2026

Strategic Energy Plan: City of Key West, Florida

This Strategic Energy Plan for the city of Key West, Florida—developed through the U.S. Department of Energy’s Energy Technology Innovation Partnership Project (ETIPP)—outlines a comprehensive strategy to advance the city’s energy vision: to improve energy efficiency and independence using local energy resources to foster long-term resilience. To guide this effort, the plan is structured around four focus areas: • Energy efficiency: Reduce overall energy consumption and utility costs across municipal, residential, and commercial buildings. • Local energy generation: Increase the share of energy produced from local sources to enhance energy independence. • Resilience: Strengthen critical infrastructure and community preparedness for flooding, hurricanes, and other natural weather hazards. • Electric transportation: Support the addition of new electric vehicles (EVs) and develop reliable charging infrastructure to reduce reliance on imported fuels. ETIPP provides strategic energy planning, technical assistance, and direct funding to U.S. coastal, remote, and island communities to improve energy resilience. Key West was part of ETIPP’s fourth cohort. As a low-lying island community vulnerable to infrastructure damage due to natural weather hazards, Key West seeks to reduce its dependence on external energy and build long-term sustainability. The Strategic Energy Plan identifies specific challenges, sets clear goals, and proposes actionable opportunities with implementation timelines and key stakeholders. A baseline assessment reveals significant energy consumption in both city-owned and residential/commercial buildings, limited local energy generation, and an early-stage EV market with vulnerable charging infrastructure. The proposed solutions emphasize a multifaceted approach, leveraging both established and innovative technologies, while addressing financial, technical, and community engagement challenges. The baseline assessment provided a snapshot of current energy conditions in Key West, evidencing key challenges and opportunities across the city’s energy priorities. Building on the baseline assessment and extensive input from city staff, local stakeholders, and community partners, a set of targeted opportunities was identified to address Key West’s energy goals. Each was evaluated in terms of its potential benefits, key implementation steps, associated challenges and mitigation strategies, and the city departments and stakeholders best positioned to lead or support progress.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2022

CyTRICS: Vulnerability Analysis Tailored for Critical Infrastructure

Society and modern life are dependent on critical infrastructure that is composed of expensive, special purpose devices that have long life cycles and may be in use for decades before being replaced. There are an abundance of organizations and individuals doing vulnerability analysis on a variety of systems, but what makes the Cyber Testing for Resilient Industrial Control Systems (CyTRICS) program unique and valuable is its strategic focus on high-priority critical infrastructure, close partnership with vendors, and ability to leverage bills of materials (BOMs) to identify and relate vulnerabilities to affected systems. Creating a bill of materials is a formal way of understanding and documenting the components of a system, including everything from integrated circuits to operating systems to third-party libraries. This is beneficial for connecting known vulnerabilities to affected devices, since vulnerabilities in a specific component are often not mapped to all systems that use that vulnerable component. Additionally, CyTRICS finds novel vulnerabilities through its vulnerability testing process and works closely with vendor partners to provide vulnerability reports so that affected systems can be patched in a timely manner. This presentation will describe the interrelated technical processes CyTRICS uses to create bills of materials and conduct vulnerability analysis.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

A holistic cyber-physical security protocol for authenticating the provenance and integrity of structural health monitoring imagery data

Modern infrastructure systems, such as bridges, dams, power generation stations, and buildings increasingly have an intrinsic cyber-physical nature to them. Infrastructure now commonly, includes actuators, network connections, sensors, control systems, and computational resources. It is of increasing concern that modern infrastructure is vulnerable to cyber-attacks that can damage both the cyber and physical nature of the infrastructure. To date, the physical and cyber health of infrastructure has been considered separately. However, the increasing concerns associated with the cyber-physical security of infrastructure coupled with the emergence of 5G networks made using components that are not universally considered trustworthy, and the emergence of techniques for creating deepfakes and adversarial examples suggests the time has come to begin considering cyber health and structural health with a more holistic approach. In this work, a protocol is developed for ensuring the imagery data captured by a structural health monitoring system can be unambiguously attributed to legitimate sensors associated with the structural health monitoring system. A computer vision approach based on the idea of mutual information is then presented to detect damage in an image. This work presents the protocol for authenticating the provenance of imager data and demonstrates that this protocol does not have overly adverse effects when used with the mutual information-based technique for detecting damage in the resulting imagery data.

Jung, HweeKwon↗