Results for “security assessment” — Page 11

DOE OSTI2025

I Can't Patch My OT Systems! A Look at CISA's KEVC Workarounds & Mitigations for OT

We examine the state of publicly available information about known exploitable vulnerabilities applicable to operational technology (OT) environments. Specifically, we analyze the Known Exploitable Vulnerabilities Catalog (KEVC) maintained by the US Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) to assess whether currently available data is sufficient for effective and reliable remediation in OT settings. Our team analyzed all KEVC entries through July 2025 to determine the extent to which OT environments can rely on existing remediation recommendations. We found that although most entries in the KEVC could affect OT environments, only 13% include vendor workarounds or mitigations as alternatives to patching. This paper also examines the feasibility of developing such alternatives based on vulnerability and exploit characteristics, and we present early evidence of success with this approach.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2020

An Assessment of the Usability of Machine Learning Based Tools for the Security Operations Center

Gartner, a large research and advisory company, anticipates that by 2024 80% of security operation centers (SOCs) will use machine learning (ML) based solutions to enhance their operations. 1 1 https://www.ciodive.com/news/how-data-science-tools-can-lighten-the-load-for-cybersecurity-teams/572209/ In light of such widespread adoption, it is vital for the research community to identify and address usability concerns. This work presents the results of the first in situ usability assessment of ML-based tools. With the support of the US Navy, we leveraged the national cyber range-a large, air-gapped cyber testbed equipped with state-of-the-art network and user emulation capabilities-to study six US Naval SOC analysts' usage of two tools. Our analysis identified several serious usability issues, including multiple violations of established usability heuristics for user interface design. We also discovered that analysts lacked a clear mental model of how these tools generate scores, resulting in mistrust a and/or misuse of the tools themselves. Surprisingly, we found no correlation between analysts' level of education or years of experience and their performance with either tool, suggesting that other factors such as prior background knowledge or personality play a significant role in ML-based tool usage. Our findings demonstrate that ML-based security tool vendors must put a renewed focus on working with analysts, both experienced and inexperienced, to ensure that their systems are usable and useful in real-world security operations settings.

Oesch, T↗

DOE OSTI2025

Fostering Nuclear Security Culture through Effective Leadership: An Operational Perspective

Security culture plays a critical role in determining the effectiveness of an organization's security performance, making its significance impossible to overemphasize. It encompasses the collective values, shared perceptions, and habitual actions embraced by all individuals within a nuclear organization—from leadership to frontline staff. When the entire workforce recognizes the reality of potential threats, accepts that security is a shared duty, and integrates security-minded behavior into everyday routines, it fosters an environment where strong security practices are the norm. In such a setting, everyone can take pride and feel reassured in being part of an organization where a strong security culture is deeply embedded. Security culture is based on the broader concept of organizational culture. All organizations—whether families, social clubs, religious institutions, businesses, non-governmental organizations, or governments—possess an underlying culture shaped by core values and beliefs. These values and beliefs influence attitudes and drive behavior throughout the organization. While multiple factors contribute to the development of a strong security culture, leadership plays a particularly pivotal role. In organizations where security culture is well-established, leaders go beyond rhetoric; they demonstrate a genuine commitment to security through their actions. They implement policies and procedures that actively engage all employees, foster open dialogue around security concerns, and encourage teamwork in resolving issues. Furthermore, they reward proactive behavior and ensure that corrective actions are taken promptly. Regular assessments of the organization's security culture allow such leaders to gauge its effectiveness and take strategic steps to strengthen it when necessary. This paper leverages practical, real-world experience to guide leadership and senior management within nuclear organizations through the foundational steps of cultivating a robust, organization-wide culture of nuclear security. It emphasizes the critical importance of early leadership engagement in shaping this culture and outlines a comprehensive approach that includes strategic, tactical, and operational measures. Additionally, it explores methods for fostering a unified vision across all levels of the organization to ensure alignment, commitment, and continuous improvement in nuclear security practices.

Zineddin, Dr. Z. [ORNL] (ORCID:0009000848740725)↗

DOE OSTI2021

Cybersecurity Resiliency of Marine Renewable Energy Systems Part 2: Cybersecurity Best Practices and Risk Management

Marine renewable energy (MRE) is an emerging source of power for marine applications, marine devices, and coastal communities. This energy source relies on industrial control systems and IT to support operations and maintenance activities, which create a pathway for an adversary to gain unauthorized access to systems and data and disrupt operations. Incorporating cybersecurity risk prevention measures and mitigation capabilities from inception, development, operation, to decommissioning of the MRE system and components is paramount to the protection of energy generation and the security of network architecture and infrastructure. To improve the resilience of MRE systems as a predictable, affordable, and reliable source of energy, cybersecurity guidance was developed to enable operators to assess cybersecurity risks and implement security measures commensurate with the risk. This publication is the second of a two-part series, with Part 1 addressing a framework to determine cybersecurity risk by assessing the vulnerability of an MRE system to potential cyber threats and the consequences a cyberattack would have on the end user. This Part 2 publication describes an approach to select appropriate cybersecurity best practices commensurate with the MRE system's cybersecurity risk. The guidance includes 86 cybersecurity best practices, which are associated with 36 cybersecurity domains and grouped into nine categories. The best practices follow the core functions of the National Institute of Science and Technology Cybersecurity Framework (e.g., identify, detect, protect, respond, and and recover) and insights from both maritime and energy industry guidance documents to identify security measures effective in protecting information and operational technology assets prevalent in MRE systems.

97 MATHEMATICS AND COMPUTING↗

NASA NTRS2017

Towards a New Food System Assessment: AgMIP Coordinated Global and Regional Assessments of Climate Change

Agricultural stakeholders need more credible information on which to base adaptation and mitigation policy decisions. In order to provide this, we must improve the rigor of agricultural modelling. Ensemble approaches can be used to address scale issues and integrated teams can overcome disciplinary silos. The AgMIP Coordinated Global and Regional Assessments of Climate Change and Food Security (CGRA) has the goal to link agricultural systems models using common protocols and scenarios to significantly improve understanding of climate effects on crops, livestock and livelihoods across multiple scales. The AgMIP CGRA assessment brings together experts in climate, crop, livestock, economics, and food security to develop Protocols to guide the process throughout the assessment. Scenarios are designed to consistently combine elements of intertwined storylines of future society including, socioeconomic development, greenhouse gas concentrations, and specific pathways of agricultural sector development. Through these approaches, AgMIP partners around the world are providing an evidence base for their stakeholders as they make decisions and investments.

Ensembles↗

DOE OSTI2022

Development of a leading simulator/trailing simulator methodology as part of an integrated safety-security analysis for nuclear power plants

Nuclear power plant (NPP) risk assessment is broadly separated into disciplines of nuclear safety, security, and safeguards. Different analysis methods and computer models have been constructed to analyze each of these as separate disciplines. However, due to the complexity of NPP systems, there are risks that can span all these disciplines and require consideration of safety-security (2S) interactions which allows a more complete understanding of the relationship among these risks. In this work, a novel leading simulator/trailing simulator (LS/TS) method is introduced to integrate multiple generic safety and security computer models into a single, holistic 2S analysis. A case study is performed using this novel method to determine its effectiveness. The case study shows that the LS/TS method avoided introducing errors in simulation, compared to the same scenario performed without the LS/TS method. A second case study is then used to illustrate an integrated 2S analysis which shows that different levels of damage to vital equipment from sabotage at a NPP can affect accident evolution by several hours.

42 ENGINEERING↗

DOE OSTI2026

Smart Inverters, Dumb Risk: Taking Control of IBR Security in the Digital Age

This presentation addresses the security challenges posed by Inverter-Based Resources (IBRs) in the modern energy landscape. The presentation highlights the vulnerabilities and risks associated with IBRs, including the potential for cyber-attacks, the impact of insecure defaults, and the systemic risks posed by supply chain dependencies. Key topics covered include: 1) The increasing digital transformation in energy systems and the associated security risks. 2) Specific vulnerabilities in IBRs, including weak passwords, hardcoded credentials, and insecure web application interfaces. 3) The implications of persistent connectivity and the strategic risks posed by foreign-manufactured components. 4) The role of regulatory frameworks, such as NERC CIP, in addressing these challenges and the limitations of current oversight. 5) Practical solutions for mitigating risks, including secure design practices, vendor risk assessments, and the importance of strong passwords and role-based access control. The presentation underscores the necessity of a comprehensive, system-of-systems approach to securing IBRs, emphasizing the need for collaboration across various stakeholders, including operators, developers, and regulators, to ensure the resilience and security of the energy grid.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

NASA NTRS2020

Africa Food Security & Agriculture: Predicting the Likelihood of Human-elephant Conflict and Assessing Elephant Habitat Conditions During Extreme Drought and Crop Deficit in the Kavango-Zambezi Area

Human-wildlife conflict is increasingly more common due to human population growth, habitat fragmentation, and changing climatic conditions. This conflict is particularly evident in the Kavango-Zambezi area, where over three million people share the landscape with an abundant megafauna population. As the changing climate continues to exacerbate drought severity and subsequent food availability, conflict between humans and wildlife has become more prevalent. In the Kavango-Zambezi area, conflict between elephants and humans has resulted in crop loss, property damage, and threats to public safety. In order to manage current and future conflict, The Ecoexist Project and Connected Conservation have been working to empower farmers and conserve the natural habitat. This DEVELOP project employed Earth observations to conduct a time series analysis of vegetation health change, elephant movement, and climate conditions, from 2017 to 2020. Data were aggregated into the wet (November through April) and dry (May through October) seasons. The resulting analysis demonstrated the potential to use Landsat 8 Operational Land Imager (OLI), Global Precipitation Measurement’s Integrated Multi-satellite Retrievals for GPM (GPM IMERG), and TerraClimate data to identify potential areas of conflict under increased seasonal variability. An improved understanding of conflict drivers will help support sustainable wildlife conservation and food security in the future.

DEVELOP Project Summary↗

NASA NTRS2020

Africa Food Security & Agriculture: Predicting the Likelihood of Human-elephant Conflict and Assessing Elephant Habitat Conditions During Extreme Drought and Crop Deficit in the Kavango-Zambezi Area

Human-wildlife conflict is increasingly more common due to human population growth, habitat fragmentation, and changing climatic conditions. This conflict is particularly evident in the Kavango-Zambezi area, where over three million people share the landscape with an abundant megafauna population. As the changing climate continues to exacerbate drought severity and subsequent food availability, conflict between humans and wildlife has become more prevalent. In the Kavango-Zambezi area, conflict between elephants and humans has resulted in crop loss, property damage, and threats to public safety. In order to manage current and future conflict, The Ecoexist Project and Connected Conservation have been working to empower farmers and conserve the natural habitat. This DEVELOP project employed Earth observations to conduct a time series analysis of vegetation health change, elephant movement, and climate conditions, from 2017 to 2020. Data were aggregated into the wet (November through April) and dry (May through October) seasons. The resulting analysis demonstrated the potential to use Landsat 8 Operational Land Imager (OLI), Global Precipitation Measurement’s Integrated Multi-satellite Retrievals for GPM (GPM IMERG), and TerraClimate data to identify potential areas of conflict under increased seasonal variability. An improved understanding of conflict drivers will help support sustainable wildlife conservation and food security in the future.

DEVELOP Tech Paper↗

DOE OSTI2022

Water Electrolyzers and Fuel Cells Supply Chain: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. This report is one of a series that supports the analysis of the energy industrial base called for in Executive Order 14017 on America’s supply chains (Exec. Order No. 14017, 2021). Specifically, it provides a review of the supply chain for water electrolyzers and fuel cells with a focus on polymer electrolyte membrane electrolyzer cells (PEMEC), polymer electrolyte membrane fuel cells (PEMFC), solid oxide electrolyzer cells (SOEC), and solid oxide fuel cells (SOFC). Water electrolysis and fuel cells are a nascent industry with little prior information related to supply chain needs and constraints. This report provides a preliminary assessment; further industry peer review and revisions are expected.

08 HYDROGEN↗

DOE OSTI2021

UNREVIEWED DISPOSAL QUESTION EVALUATION: Disposal of the TRU Waste Processing Center Mixed Low Level Waste at the Area 5 Radioactive Waste Management Site, Nevada National Security Site, Nye County, Nevada

This Unreviewed Disposal Question Evaluation (UDQE) assesses whether the U.S. Department of Energy (DOE), National Nuclear Security Administration (NNSA) Transuranic (TRU) Waste Processing Center Mixed Low Level Waste (MLLW), FWORCHMLLW103, Revision 13 [TWPC 2021]), is suitable for shallow land burial (SLB) at the Area 5 Radioactive Waste Management Site (RWMS) on the Nevada National Security Site (NNSS). Disposal of the TRU Waste Processing Center MLLW meets all performance objectives of DOE Manual DOE M 435.1-1, Radioactive Waste Management Manual, Chapter IV, Section P (DOE 1999). The TRU Waste Processing Center MLLW waste stream is recommended for acceptance without conditions.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2022

Grid Energy Storage: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the Federal Government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the Federal Government to build more secure and diverse U.S. supply chains, including energy supply chains. To combat the climate crisis and avoid the most severe impacts of climate change, the U.S. is committed to achieving a 50 to 52 percent reduction from 2005 levels in economy-wide net greenhouse gas pollution by 2030, creating a carbon pollution-free power sector by 2035, and achieving net zero emissions economy-wide by no later than 2050. The U.S. Department of Energy (DOE) recognizes that a secure, resilient supply chain will be critical in harnessing emissions outcomes and capturing the economic opportunity inherent in the energy sector transition. Potential vulnerabilities and risks to the energy sector industrial base must be addressed throughout every stage of this transition. The DOE energy supply chain strategy report summarizes the key elements of the energy supply chain as well as the strategies the U.S. Government is starting to employ to address them. Additionally, it describes recommendations for Congressional action. DOE has identified technologies and crosscutting topics for analysis in the one-year time frame set by the Executive Order. Along with the capstone policy report, DOE is releasing 11 deep dive assessment documents, including this one, covering the following technology sectors: carbon capture materials; electric grid including transformers and high voltage direct current (HVDC); energy storage; fuel cells and electrolyzers; hydropower including pumped storage hydropower (PSH); neodymium magnets; nuclear energy; platinum group metals and other catalysts; semiconductors; solar photovoltaics (PV); and wind. DOE is also releasing two deep dive assessments on the following crosscutting topics: Commercialization and competitiveness; and cybersecurity and digital components. More information can be found at www.energy.gov/policy/supplychains.

25 ENERGY STORAGE↗

DOE OSTI2021

Airport Risk Assessment Model Stakeholder Symposium Event Report

On June 22-23, 2021, the Pacific Northwest National Laboratory hosted a two-day virtual stakeholder symposium to share how the Airport Risk Assessment Model (ARAM) is putting security resource allocation planning into the hands of our airport’s front lines of defense. This report highlights the key takeaways from the discussions.

42 ENGINEERING↗

DOE OSTI2022

Hydropower: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. Hydropower is a vital component of the U.S. Energy Sector Industrial Base. The United States has mature conventional hydropower and pumped storage hydropower (PSH) fleets with corresponding mature supply chains. Given the slow pace of new construction over the past few decades, the U.S. hydropower industry primarily supports the existing domestic fleets—the U.S. conventional hydropower fleet (80.3 GW) is the 4 th largest in the world and the U.S. PSH fleet (21.8 GW) is the third largest in the world. Additionally, U.S. hydropower manufacturing facilities export part of their output. This report examines the hydropower supply chain to identify potential bottlenecks, challenges, and opportunities, particularly if the U.S. demand for hydropower components grows significantly to meet decarbonization targets.

13 HYDRO ENERGY↗

DOE OSTI2022

Rare Earth Permanent Magnets: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. This report focuses on the supply chain for rare earth permanent magnets, specifically sintered neodymiumiron-boron (NdFeB) magnets, used in clean energy technologies. Sintered NdFeB magnets are the strongest magnets commercially available and provide a host of benefits to wide-ranging applications in consumer and industrial electronics, especially in advanced motor and drive systems. Within the Energy Sector Industrial Base, and clean energy in particular, NdFeB magnets are key intermediate components of permanent magnet synchronous (direct drive) generators in wind turbines (especially for offshore turbines) and electric synchronous traction motors for propulsion systems in battery and hybrid electric vehicles.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2022

Nuclear Energy: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. This report responds to Executive Order 14017 by describing the current and potential future roles for nuclear energy in the United States and abroad, the various segments of the nuclear energy supply chain, and the main risks facing the sector. Some issues, such as uranium imports, relate both to existing nuclear reactors and advanced reactors under development, while other issues, such as production of high-assay low-enriched uranium, relate primarily to plans for advanced reactors.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2022

Platinum Group Metal Catalysts: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. This report focuses on the supply chain for catalysts, specifically platinum group metal (PGM) catalysts, used for decarbonizing energy technologies. Catalysts are substances that increase the rate, conversion, and selectivity of chemical reactions and are used in a variety of applications such as chemical manufacturing, petroleum refining, and catalytic converters. Catalysts containing PGMs (“PGM catalysts”) are particularly useful in widespread industrial applications, including the production of high-volume chemicals such as ammonia, acetic acid, nitric acid, and the refining of crude oil into petroleum products. The PGM metals possess extraordinary properties such as being active oxidation and hydrogenation catalysts; excellent electrical conductors and electrodes; and outstanding adsorbers of oxygen and hydrogen. Within the energy industrial base, PGM catalysts improve the energy and materials efficiency of petroleum refining and chemical industry processes and reduce energy consumption in manufacturing. In addition to their use in catalytic converters, PGM catalysts are important to maximizing the efficiency of emerging decarbonization technologies, specifically in proton exchange membrane (PEM) electrolyzers for green hydrogen production from water and PEM fuel cells for transportation and stationary energy storage. Green hydrogen is expected to play a significant role in decarbonization scenarios.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2022

Wind Energy: Supply Chain Deep Dive Assessment

The report “America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition” lays out the challenges and opportunities faced by the United States in the energy supply chain as well as the federal government plans to address these challenges and opportunities. It is accompanied by several issue-specific deep dive assessments, including this one, in response to Executive Order 14017 “America’s Supply Chains,” which directs the Secretary of Energy to submit a report on supply chains for the energy sector industrial base. The Executive Order is helping the federal government to build more secure and diverse U.S. supply chains, including energy supply chains. To inform the DOE team’s supply chain review, researchers at the National Renewable Energy Laboratory (NREL) conducted research and analyses that characterize supply chain strengths, weaknesses, opportunities, and threats within the wind industry, including both land-based and offshore wind. The team also conducted interviews with industry stakeholders and subject matter experts. This report documents these findings and provides a foundation for addressing the observed vulnerabilities and enhancing U.S. wind supply chain competitiveness.

17 WIND ENERGY↗