Search NASA⌕ Search

SEARCH · Search NASA

Results for “organizational behavior”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2023

Organizational and psychological measures for data center energy efficiency: barriers and mitigation strategies

Abstract It was last estimated that in 2020, data centers comprised approximately 2% of total US electricity consumption, with an estimated annual growth rate of 4%. As our country increasingly relies on information technology (IT), our data centers (DCs) will need to increase their energy efficiency (EE) to stabilize their energy consumption. The task of studying EE in DCs is complicated by the interconnected nature of humans and mission-critical technical systems. Moreover, the literature tends to focus on technology solutions such as improvements to IT equipment, cooling infrastructure, and software, without addressing organizational and psychological drivers. Our research demystifies the complex interactions between humans and DCs, by asking What non-technical barriers impede EE investment decision-making and/or implementing energy management strategies? To begin to answer this question, we perform a literature review of 86 resources, ranging from peer-reviewed journal publications to handbooks. We also consider related fields such as organizational behavioral management and energy intensive buildings. We develop a public Zotero library, perform content coding, and complete a rudimentary network analysis. Our findings from the literature review suggest that (1) technological solutions are abundant in the literature but fall short of providing practical guidance on the pitfalls of implementation, (2) making energy efficiency a priority at the executive level of organizations will be largely ineffective if the IT and facilities staff are not directly incentivized to increase EE, and (3) there is minimal current understanding of how the individual psychologies of IT and facilities staff affect EE implementation in DCs. In the next phase of our research, we plan to interview data center operators/experts to ground-truth our literature findings and collaboratively design decarbonization policy solutions that target organizational structure, empower individual staff, and foster a supportive external market.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2024

Multiple Pathways of Influence for Tightly and Loosely Structured Organizations: Implications for Systems Resilience

Organizations play a key role in supporting various societal functions, ranging from environmental governance to the manufacturing of goods. Here, the behaviors of organization are impacted by various influences, including information, technology, authority, economic leverage, historical experiences, and external factors, such as regulations. This paper introduces a generalized framework, focused on the relative structure of an organization (tight vs. loose), that can be used to understand how different influence pathways can impact decision-making within differently structured organizations. This generalized framework is then translated into a modeling and simulation platform to support and assess implications of these structural differences in resilience to disinformation (measured by organizational behaviors of timeliness and inclusion of quality information) using a systems dynamics approach Preliminary results indicate that a tightly structured organization may be less timely at processing information but could be more resilient against using poor quality information in organizational decisions compared to a loosely structured organization. Ongoing work is underway to understand the robustness of these findings and to validate current model design activities with empirical insights.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2020

Phase I Closeout Report: Invoking Artificial Neural Networks to Measure Insider Threat Mitigation

Researchers from Sandia National Laboratories (Sandia) and the University of Texas at Austin (UT) conducted this study to explore the effectiveness of commercial artificial neural network (ANN) software to improve insider threat detection and mitigation (ITDM). This study hypothesized that ANNs could be "trainee to learn patterns of organizational behaviors, detect off-normal (or anomalous) deviations from these patterns, and alert when certain types, frequencies, or quantities of deviations emerge. The ReconaSense ANN system was installed at UT's Nuclear Engineering Teaching Laboratory (NETL) and collected 13,653 access control data points and 694 intrusion sensor data points over a three-month period. Preliminary analysis of this baseline data demonstrated regularized patterns of life in the facility, and that off-normal behaviors are detectable under certain situations -- even for a facility with anticipated highly non-routine, operational behaviors. Completion of this pilot study demonstrated how the ReconaSense ANN could be used to identify expected operational patterns and detect unexpected anomalous behaviors in support of a data-analytic approach to ITDM. While additional studies are needed to fully understand and characterize this system, the results of this initial study are overall very promising for demonstrating a new framework for ITDM utilizing ANNs and data analysis techniques.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Identifying institutional barriers and policy implications for sustainable energy technology adoption among large organizations in California

Large organizations wield considerable market power, their procurement activities can be leveraged to achieve social, economic and environmental goals by ‘pulling’ more desirable products into the market. However, while there is substantial research in individual consumer buying behavior and market barriers to sustainable technology adoption, less is known about large organizational buying behavior and the impact of institutional barriers in this area. To address these research gaps, in this work we conducted an exploratory study aimed at better understanding the process through which large organizations purchase sustainable energy technologies and what internal barriers they experience during that process. Additionally, we surveyed and interviewed 120 individuals involved in procurement from Californian organizations representing both public and private sectors. Survey results indicate the need to resolve the conflict between prioritizing lowest first cost and lowest life cycle cost, better engage multiple stakeholders involved in internal decision-making around purchasing, and improve existing procurement tools or offer new ones. We provide recommendations for how policymakers can apply our findings to increase the adoption of sustainable energy technologies in their own organizations and communities.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2024

Expert and operator perspectives on barriers to energy efficiency in data centers

Abstract It was last estimated in 2016 that data centers (DCs) comprise approximately 2% of total US electricity consumption. However, this estimate is currently being updated to account for the massive increase in computing needs due to streaming, cryptocurrency, and artificial intelligence (AI). To prevent energy consumption that tracks with increasing computing needs, it is imperative we identify energy efficiency strategies and investments beyond the low-hanging fruit solutions. In a two-phased research approach, we ask: What non-technical barriers still impede energy efficiency (EE) practices and investments in the data center sector, and what can be done to overcome these barriers? In particular, we are focused on social and organizational barriers to EE. In Phase I, we performed a literature review and found that technical solutions are abundant in the literature, but fail to address the top-down cultural shifts that need to take place in order to adapt new energy efficiency strategies. In Phase II, reported here, we interviewed 16 data center operators/experts to ground-truth our literature findings. Our interview protocols focus on three aspects of DC decision-making: procurement practices, metrics and monitoring, and perceived barriers to energy efficiency. We find that vendors are the key drivers of procurement decisions, advanced efficiency metrics are facility-specific, and there is convergence in the design of advanced facilities due to the heat density of parallelized infrastructure. Our ultimate goals for our research are to design DC decarbonization policies that target organizational structure, empower individual staff, and foster a supportive external market.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2023

ISO 50001-Based Energy Management Systems as a Practical Path for Decarbonization: Initial Findings from a Survey of Technical Assistance Cohort Participants

Organizations face rising pressure to take action to reduce their climate-affecting emissions (i.e., decarbonize). While many responses are possible, an essential approach—strategically managing their energy consumption as an essential business practice via an ISO 50001-based energy management system—is not yet widely recognized as a framework for decarbonization. This study analyzes interim survey results from 24 organizations (a 48% response rate) implementing a rigorous energy management system, one deployed by the U.S. Department of Energy as “50001 Ready”, to test whether participating organizations perceive the energy management system under development as an essential aspect of their decarbonization efforts. The results are preliminary in nature, given the ongoing nature of the program and associated data collection; however, they are sufficient to refute our hypothesis that energy management systems are perceived by organizations participating in 50001 Ready cohorts to primarily affect energy performance with little-to-no connection regarding decarbonization efforts. Major findings include that participants’ decarbonization targets and commitments are driven by market imperatives (highlighting the importance of ISO 50001 as a management system tool) and that they see energy efficiency as vital to decarbonizing. We conclude by suggesting future research directions to further establish the premise that energy management systems are an effective, efficient, and long-lasting decarbonization strategy.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2024

Enhancing Nuclear and Radiological Security in Polarized Times: Safeguarding Against Extremist Insider Threats

Domestic violent extremism has been on the rise in recent years, fueled by growing political polarization, the COVID-19 pandemic, and the spread of misinformation online. This concerning trend raises an important question: has this increase in extremist violence manifested in more incidents involving radioactive or nuclear (RN) materials and a corresponding security concern? To explore this question, we analyzed existing data on events involving chemical, biological, radiological, or nuclear materials over time. Specifically, we examined the rate of RN-related incidents, the targets of these events, and the ideologies motivating the perpetrators by using the Violent Non-State Actor Chemical, Biological, Radiological, and Nuclear Event Database from the National Consortium for the Study of Terrorism and Responses to Terrorism. Our analysis aimed to determine whether the broader rise of violent extremism has translated to an elevated risk of attacks involving RN materials. Results of the analysis revealed that there was no clear increase in events involving RN material in the dataset. However, given the rarity of these events, this conclusion does not indicate that such a trend might not appear in coming years if violent extremism continues to rise. To address the potential risk presented by violent extremism, in addition to quantifying the frequency of RN events, we also reviewed traits that could make organizations more susceptible to insider threats from radicalized employees. Focusing on the literature around counterproductive workplace behavior, we identified organizational characteristics that might increase the risk of malicious acts committed by radicalized insiders. These risk factors include abusive leadership, situational constraints, and organizational injustice. Finally, using these organizational risk characteristics, we discuss interventions that organizations with RN material can take to reduce their risk of attacks stemming from violent extremism while still protecting individual rights to privacy and civil liberties. Overall, this article provides an overview of the intersections between rising domestic extremism, insider threats, and risks posed by RN materials. We present current data on trends and patterns in this space as well as practical guidance for organizational resilience.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2022

Results From Invoking Artificial Neural Networks to Measure Insider Threat Detection & Mitigation

Advances on differentiating between malicious intent and natural “organizational evolution” to explain observed anomalies in operational workplace patterns suggest benefit from evaluating collective behaviors observed in the facilities to improve insider threat detection and mitigation (ITDM). Advances in artificial neural networks (ANN) provide more robust pathways for capturing, analyzing, and collating disparate data signals into quantitative descriptions of operational workplace patterns. In response, a joint study by Sandia National Laboratories and the University of Texas at Austin explored the effectiveness of commercial artificial neural network (ANN) software to improve ITDM. Overall, this research demonstrates the benefit of learning patterns of organizational behaviors, detecting off-normal (or anomalous) deviations from these patterns, and alerting when certain types, frequencies, or quantities of deviations emerge for improving ITDM. Evaluating nearly 33,000 access control data points and over 1,600 intrusion sensor data points collected over a nearly twelve-month period, this study's results demonstrated the ANN could recognize operational patterns at the Nuclear Engineering Teaching Laboratory (NETL) and detect off-normal behaviors—suggesting that ANNs can be used to support a data-analytic approach to ITDM. Several representative experiments were conducted to further evaluate these conclusions, with the resultant insights supporting collective behavior-based analytical approaches to quantitatively describe insider threat detection and mitigation.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2025

Hungary 908 Event - Risk Based Graded Approach to ITM

This presentation, Risk-Based, Graded Approach to Insider Threat Mitigation: Human Measures, introduces a structured framework for managing insider threat risk using internationally recognized guidance from the International Atomic Energy Agency (IAEA) Nuclear Security Series No. 8-G (Rev. 1) and the Joint Statement on Mitigating Insider Threats (INFCIRC/908). The presentation emphasizes that effective insider threat mitigation (ITM) depends on both positional controls, which manage inherent risk based on access, authority, and knowledge, and human measures, which address residual risk reflected in behavior, motivation, and reliability. Using a risk-informed and graded approach, the presentation outlines methods for identifying and prioritizing high-risk positions, applying layered organizational controls, and integrating human reliability mechanisms such as the Behavior Observation Program (BOP), Fitness-for-Duty (FFD) evaluations, Employee Assistance Programs (EAP), and Nuclear Security Culture (NSC). The human-focused portion examines behavioral and organizational indicators of opportunity, vulnerability, motivation, and crisis, demonstrating how early detection, deterrence, and response can prevent insider events. The session concludes with a case review of the Millstone Nuclear Power Station incident involving engineer George Galatis. The case illustrates how weak leadership and a poor safety culture can create conditions for failure and how a comprehensive ITM framework could have altered the outcome. The objective of this presentation is to help practitioners apply a risk-based, graded philosophy to human factors and promote a culture of accountability, communication, and resilience within nuclear organizations.

99 - GENERAL AND MISCELLANEOUS↗
DOE OSTI2022

Domestic Extremism: How to Counter Threats Posed to Critical Assets

Although facilities with sensitive information, hazardous materials, critical infrastructure, or other sensitive items have security measures in place to protect those critical assets, the threat of domestic extremism (DE) has challenged those security measures in new ways. The project described in this brief report used focus groups to identify best practices, tools, or techniques relevant to preventing or countering DE and sought to identify gaps in security measures. Five focus groups with twenty-two subject matter experts from government, healthcare, and other stakeholder groups were conducted to understand how organizations protect critical assets against the DE threat. The results of the focus groups underscore the importance of organizational culture, codes of conduct, and behavior observation programs in prevention of DE events. In addition, results emphasized the value of multidisciplinary teams, employee assistance programs, and regular threat assessment as resources when responding to DE incidents. However, monitoring of social media and lack of adequate resources remain challenges when attempting to prevent or counter the DE threat.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2023

Imprinting and Reproductive Health: A Toxicological Perspective

This overview discusses the role of imprinting in the development of an organism, and how exposure to environmental chemicals during fetal development leads to the physiological and biochemical changes that can have adverse lifelong effects on the health of the offspring. There has been a recent upsurge in the use of chemical products in everyday life. These chemicals include industrial byproducts, pesticides, dietary supplements, and pharmaceutical products. They mimic the natural estrogens and bind to estradiol receptors. Consequently, they reduce the number of receptors available for ligand binding. This leads to a faulty signaling in the neuroendocrine system during the critical developmental process of ‘imprinting’. Imprinting causes structural and organizational differentiation in male and female reproductive organs, sexual behavior, bone mineral density, and the metabolism of exogenous and endogenous chemical substances. Several studies conducted on animal models and epidemiological studies provide profound evidence that altered imprinting causes various developmental and reproductive abnormalities and other diseases in humans. Altered metabolism can be measured by various endpoints such as the profile of cytochrome P-450 enzymes (CYP450’s), xenobiotic metabolite levels, and DNA adducts. The importance of imprinting in the potentiation or attenuation of toxic chemicals is discussed.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2023

Light Water Sustainability Program: Optimizing Information Automation Using a New Method Based on System-Theoretic Process Analysis

This report describes the interim progress for research supporting the design and optimization of information automation systems for nuclear power plants. Much of the domestic nuclear fleet is currently focused on modernizing technologies and processes, including transitioning toward digitalization in the control room and elsewhere throughout the plant, along with a greater use of automation, artificial intelligence, robotics, and other emerging technologies. While there are significant opportunities to apply these technologies toward greater plant safety, efficiency, and overall cost-effectiveness, optimizing their design and avoiding potential safety and performance risks depends on ensuring that human-performance-related organizational and technical design issues are identified and addressed. This report describes modeling tools and techniques, based on sociotechnical system theory, to support these design goals and their application in the current research effort. The report is intended for senior nuclear energy stakeholders, including regulators, corporate management, and senior plant management. We have developed and employed a method to design an optimized information automation ecosystem (IAE) based on the systems-theoretic constructs underlying sociotechnical systems theory in general and the Systems-Theoretic Accident Modeling and Processes (STAMP) approach in particular. We argue that an IAE can be modeled as an interactive information control system whose behavior can be understood in terms of dynamic control and feedback relationships amongst the system’s technical and organizational components. Up to this point, we have employed a Causal Analysis based on STAMP (CAST) technique to examine a performance- and safety-related incident at an industry partner’s plant that involved the unintentional activation of an emergency diesel generator. This analysis provided insight into the behavior of the plant’s current information control structure within the context of a specific, significant event. Our ongoing analysis is focused on identifying near-term process improvements and longer-term design requirements for an optimized IAE system. The latter analyses will employ a second STAMP-derived technique, System-Theoretic Process Analysis (STPA). STPA is a useful modeling tool for generating and analyzing actual or potential information control structures. Finally, we have begun modeling plantwide organizational relationships and processes. Organizational system modeling will supplement our CAST and STPA findings and provide a basis for mapping out a plantwide information control architecture. CAST analysis findings indicate an important underlying contributor to the incident under investigation, and a significant risk to information automation system performance, was perceived schedule pressure, which exposed weaknesses in interdepartmental coordination between and within responsible plant organizations and challenged the resilience of established plant processes, until a human caused the initiating event. These findings are discussed in terms of their risk to overall system performance and their implications for information automation system resilience and brittleness. We present two preliminary information automation models. The proactive issue resolution model is a test case of an information automation concept with significant near-term potential for application and subsequent reduction in significant plant events. The IAE model is a more general representation of a broader, plantwide information automation system. From our results, we have generated a set of preliminary system-level requirements and safety constraints. These requirements will be further developed over the remainder of our project in collaboration with nuclear industry subject matter experts and specialists in the technical systems under consideration. Additionally, we will continue to pursue the system analyses initiated in the first part of our effort, with a particular emphasis on STPA as the main tool to identify weak or weakening control structures that affect the resilience of organizations and programs. Our intent is to broaden the scope of the analysis from an individual use case to a related set of use cases (e.g., maintenance tasks, compliance tasks) with similar human-system performance challenges. This will enable more generalized findings to refine the Proactive Issue Resolution and IAE models, as well as their system-level requirements and safety constraints. We will use organizational system modeling analyses to supplement STPA findings and model development. We conclude the report with a set of summary recommendations and an initial draft list of system-level requirements and safety constraints for optimized information automation systems.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2023

Optimizing Information Automation Using a New Method Based on System-Theoretic Process Analysis: Tool Development and Method Evaluation

This report is an update to a prior report that describes progress and findings for a program of research supporting the design and optimization of information automation systems for nuclear power plants. Much of the domestic nuclear fleet is currently focused on modernizing technologies and processes, including transitioning toward digitalization in the control room and throughout the plant, along with a greater interest in the use of automation, artificial intelligence, robotics, and other emerging technologies. While there are significant opportunities to apply these technologies toward greater plant safety, efficiency, and overall cost-effectiveness, optimizing their design and avoiding potential safety and performance risks depends on ensuring that human performance-related organizational and technical design issues are identified and addressed early in the design process. This report describes modeling tools and techniques, based on sociotechnical systems theory, to support these design goals and their application in the current research effort. The report is primarily intended for senior nuclear energy stakeholders, including regulators, corporate management, and senior plant management. We have developed and employed a method to design an optimized information automation ecosystem (IAE) based on the systems-theoretic constructs underlying sociotechnical systems theory in general and the Systems-Theoretic Accident Modeling and Processes (STAMP) approach in particular. We argue that an IAE can be modeled as an interactive information control system whose behavior can be understood in terms of dynamic control, feedback, and communication relationships amongst the system’s technical and organizational components. We have employed two STAMP-based tools in this effort. The first is Causal Analysis based on STAMP (CAST), an accident and incident analysis technique that was used to examine a performance- and safety-related incident at an industry partner’s plant involving the unintentional activation of an emergency diesel generator. This analysis provided insight into the behavior of the plant’s current information control structure within the context of a specific, significant event. The second tool is Systems Theoretic Process Analysis (STPA) which is a proactive risk analysis tool used to examine existing and potential, planned sociotechnical systems. STPA was used to identify risk factors in the current design of a generic nuclear power plant (NPP) preventive maintenance system. Our analyses focused on identifying near-term system improvements and longer-term design requirements for an optimized IAE system. CAST analysis findings indicate an important underlying contributor to the incident under investigation, and a significant risk to information automation system performance, was perceived time and schedule pressure, which exposed weaknesses in interdepartmental coordination between and within responsible plant organizations and challenged the resilience of established plant processes, until a human caused the eventual event. These findings are discussed in terms of their risk to overall system performance and their implications for information automation system resilience and brittleness. STPA findings exposed several areas of concern in the design of current preventive maintenance systems. We also present two preliminary information automation models. The proactive issue resolution (PIR) model is a test case of an information automation concept with significant near-term potential for application and subsequent reduction in significant plant events. The IAE model is a more general representation of a broader, plantwide information automation system and represents an end-state vision for our work. From our results, we have generated an initial set of preliminary system-level requirements and safety constraints for these models. We have also focused on early development of easy to learn, easy to use “transportable” tools for sociotechnical systems analysis. We intend these to be used by NPP personnel as a means of gaining reliable and relatively quick insight into (1) sociotechnical systems factors impacting incidents and accidents, (2) potential sociotechnical risk factors in existing or planned system designs, and (3) potential weaknesses in a system’s safety and/or information control structure. We conclude the report with a set of summary recommendations, a discussion of planned and potential follow-on research and development, and a draft list of system-level requirements and safety constraints for optimized information automation systems.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2025

Fostering Nuclear Security Culture through Effective Leadership: An Operational Perspective

Security culture plays a critical role in determining the effectiveness of an organization's security performance, making its significance impossible to overemphasize. It encompasses the collective values, shared perceptions, and habitual actions embraced by all individuals within a nuclear organization—from leadership to frontline staff. When the entire workforce recognizes the reality of potential threats, accepts that security is a shared duty, and integrates security-minded behavior into everyday routines, it fosters an environment where strong security practices are the norm. In such a setting, everyone can take pride and feel reassured in being part of an organization where a strong security culture is deeply embedded. Security culture is based on the broader concept of organizational culture. All organizations—whether families, social clubs, religious institutions, businesses, non-governmental organizations, or governments—possess an underlying culture shaped by core values and beliefs. These values and beliefs influence attitudes and drive behavior throughout the organization. While multiple factors contribute to the development of a strong security culture, leadership plays a particularly pivotal role. In organizations where security culture is well-established, leaders go beyond rhetoric; they demonstrate a genuine commitment to security through their actions. They implement policies and procedures that actively engage all employees, foster open dialogue around security concerns, and encourage teamwork in resolving issues. Furthermore, they reward proactive behavior and ensure that corrective actions are taken promptly. Regular assessments of the organization's security culture allow such leaders to gauge its effectiveness and take strategic steps to strengthen it when necessary. This paper leverages practical, real-world experience to guide leadership and senior management within nuclear organizations through the foundational steps of cultivating a robust, organization-wide culture of nuclear security. It emphasizes the critical importance of early leadership engagement in shaping this culture and outlines a comprehensive approach that includes strategic, tactical, and operational measures. Additionally, it explores methods for fostering a unified vision across all levels of the organization to ensure alignment, commitment, and continuous improvement in nuclear security practices.

Zineddin, Dr. Z. [ORNL] (ORCID:0009000848740725)↗
DOE OSTI2020

Allometric Trophic Networks From Individuals to Socio-Ecosystems: Consumer–Resource Theory of the Ecological Elephant in the Room

A well-known parable is that of the blind men studying an elephant each of which assert the elephant is the part they first hold in their hands, e.g., “rope!” says the tail holder while the leg holder asserts “tree!” The various subdisciplines of ecology appear similar in that we each engage in our enthusiastic but at least somewhat myopic study with remarkably limited agreement or even discussion about the overall system which we all study. Allometric trophic network (ATN) theory offers a path out of this dilemma by integrating across scales, taxa, habitats and organizational levels from physiology to ecosystems based on consumer-resource interactions among co-existing organisms. The network architecture and the metabolic and behavioral processes that determine the structure and dynamics of these interactions form the first principles of ATN theory, which in turn provides a synthetic overview and powerfully predictive framework for ecology from organisms to ecosystems. Beyond ecology, ATN theory also synthesizes eco-evolutionary and socio-ecological research still largely based on consumer-resource mechanisms but respectively integrated with different processes including natural selection and market mechanisms. This paper briefly describes foundations, advances, and future directions of ATN theory including predicting an ecosystem’s phenotype from its community’s genotype in order to accelerate more predictive and unified understanding of the complex systems studied by ecologists and other environmental scientists.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

A Data Processing Pipeline for Adversarial Socio-Technical Network Analysis

With the rapid adoption of emerging technologies, there is a need to catalog and model sociotechnical interdependencies that have been historically used to influence the operation of Critical Infrastructure networks including the impacts of mergers and acquisitions, hostile takeovers, and foreign investment. Our research intends to address this need with two primary contributions. First, we have developed a data curation and processing pipeline to generate sociotechnical networks extracted from a variety of data sources including SEC filings and infrastructure asset databases. The pipeline, implemented in Apache Airflow, extracts and normalizes the representation of entities and relations, specified within ontologies. Our intent is to provide an extensible, machine-actionable approach to quickly communicate such models, reproduce previous results, and adapt them to new, unanticipated situations. Second, networks produced by our pipeline enable the development of graph-theoretic metrics that consider the properties of network components in addition to its topology. Metadata associated with network components---whether semantic, temporal, or geospatial---affects the alignment of generated networks with assumptions underlying complexity metrics. Validation of generated networks relative to component types defined by an ontology, may allow the research community to adapt metrics to the semantics of the domains being studied. Generated networks may be processed as knowledge, dynamic, or spatial graphs and enables a variety of analyses including automated reasoning and measures of network complexity. Automated reasoning views extracted entities and relations as a knowledge graph; this enables application of inference rules that represent historically-attested adversarial business methods and applies that behavior to a specific geographic context. Measures of network complexity, including degree distribution, reachability analyses, temporal analysis, and community detection can be adapted to indicate adversarial organizational influence.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Modeling Cyber Supply Chain Incidents with Multilayered Graph Motifs

As noted within the literature, supply chain includes people and organizations---manufacturers, integrators, and third-party vendors---that are involved in one or more stages of a product lifecycle. Since supply chains, by definition, include organizations and people, supply chain risk management activities must consider dependencies between an organization's business processes and third-party resources. Just as adversarial tactics can be implemented via techniques implemented via networked computer systems, so can such tactics be expressed via legal business relationships. A cyber incident may have an exponential impact downstream, for example, by leveraging a product's distribution channel (e.g. malicious updates in SolarWinds, buggy updates in CrowdStrike). Similarly, legitimate and legal business relationships also affect the attack surface exposure of systems, enabling long-term persistence and/or unknown impacts to product quality that are hard to detect. This paper catalogs several recent digital supply chain incidents and applies a multilayered network formalism to develop structural indicators (graph motifs) that reflect potentially-adversarial behavior. Finally, we compare and contrast the characteristics of adversarial tactics (e.g. Loss of Availability, Data Collection) that leverage cyber-physical dependencies to those that leverage legal organizational relationships.

97 - MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Scrambling Signal Modularity in Bottom-up Assembled Synthetic Pseudomonas Consortia Reveals Robust Information Transfer

There is immense potential in crafting synthetic microbial communities for application in human health, agriculture, the environment, and even biomanufacturing where an appropriately constructed consortium can be assembled with tremendous biosynthetic or degradative capabilities. In many of these cases, bacterial signaling serves as a form of intercellular information transfer that guides the collective’s behavior. Such communication is complex, as many signals, signal disruptors, microbial species, physical barriers, and spatiotemporal constraints may be involved. Here, in this work, we demonstrate that a multisignal pathway for molecular information transfer within a consortium of several Pseudomonas spp. can be scrambled (genetically and organizationally) while the original message is still effectively conveyed. Assembled from the bottom up, we have employed two types of signaling molecules (i) a redox active secondary metabolite (rhizospheric signal, phloroglucinol), and (ii) a bacterial quorum sensing signal (3-oxo-C12 acylhomoserine lactone, AI-1). These signals can be intraconverted and acted upon by designated community members. We show how the order in which the signals are received, transduced, and subsequently transmitted can be rearranged with minimal impact on the intended outcome. In the consortial context, we found this messaging structure can be remarkably robust. Inspired by rhizospheric molecular signaling mechanisms, this work provides a conceptual framework for designing signaling and information transfer processes within assembled communities.

Biological and medical sciences↗