Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “vulnerability assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Philadelphia Health & Air Quality: Assessing Land Surface Temperature, Vegetation Cover, and Compounding Vulnerability Factors to Identify High Priority Areas for Cooling Initiatives in Philadelphia, Pennsylvania

Heat is the leading cause of weather-related deaths in the US, with heat-related hospitalizations increasing by 2-5% between 2001-2010. In Philadelphia alone, 137 heat-related deaths were recorded between 2010-2018, while a total of 18 daily temperature records have been set since 2010. Temperature is relatively higher in cities compared to rural areas, a phenomenon known as the urban heat island effect.This effect exaggerates daytime maximum temperatures and nighttime heat retention in urban areas, which increases heat exposure inurban environments and especially impacts vulnerable populations. Vulnerability to heat-related illnesses is determined by a combination of risk factors, such as demographics, socioeconomic status, and preexisting health conditions. This project supported the Philadelphia Department of Public Health and Office of Sustainability by identifying priority areas for cooling interventions, such as heat danger educational outreach and urban tree planting. The team developed heat vulnerability scores for each census tract within Philadelphia. Remotely sensed land surface temperature, normalized difference vegetation index, normalized difference built-up index, normalized difference water index, and albedo data were calculated from Aqua Moderate Resolution Imaging Spectroradiometer and Landsat 8 Operational Land Imager/Thermal Infrared Sensor instruments. These variables were weighted against socioeconomic variables and preexisting health conditions using a principal component analysis. A total of 74 census tracts clustered were identified as high-risk areas for heat-related illnesses. 15 of these census tracts also had very low tree density (lower 20th percentile) and should be targeted for tree planting initiatives. The findings of this project will help target interventions to mitigate heat-related health issues and improve the overall wellness of Philadelphia residents.

Health & Air Quality↗

Assessing Environmental and Socioeconomic Factors of Urban Flood Vulnerability in Kansas City, Kansas

Pluvial flooding, over-saturated ground, and drainage systems disproportionately impact historically marginalized urban neighborhoods during extreme rainfall events. These communities are impacted by physical and socioeconomic factors that make them vulnerable to flooding events, such as high concentrations of impervious landcover, high precipitation rates, and a combined sewer system framework. Despite known vulnerability to environmental hazards, understanding potential pluvial street-level flooding events are largely unknown. Using the open-source National Capital Project’s Integrated Valuation of Ecosystem Services and Tradeoffs (InVEST) Urban Flood Risk Mitigation model, NASA DEVELOP examined neighborhood scale runoff retention and potential economic damages for risk mapping throughout Kansas City, Kansas. The generated outputs aid in identifying vulnerable neighborhoods susceptible to flooding and in need of future intervention. Previous studies have applied this model framework to understand urban flood vulnerability regarding ecosystem services, urban planning, and flood mitigation strategies. We utilized the InVEST outputs to develop indices pertaining to environmental justice factors of race, socioeconomic status, social vulnerability, and health. The findings indicate that historically redlined neighborhoods in Kansas City, Kansas face disproportional impacts from flood events and are subject to greater environmental stressors. This research provides an approach to utilizing an open-source flood vulnerability model to empower neighborhood-scale environmental justice analysis, enhancing the local communities' understanding of present-day impacts of historical environmental injustices.

Hadwynne Gross↗

Hawai‘i Island Disasters: Using NASA Earth Observations to Assess Coastal Flood Risk with Measures of Land Cover Change, Flood Extent, and Vulnerability for Adaptation and Mitigation Planning on Hawai‘i Island

As the County of Hawai‘i faces an increased risk of extreme flooding events, sea-level rise, and other hazards associated with climate change, the need for building geospatial capacity to make better-informed decisions is critical. The County of Hawai‘i and Arizona State University partnered with NASA DEVELOP to complete a macro-scale risk analysis for the island of Hawai‘i analyzing flooding, land cover, vulnerability, and exposure factors using Earth observations and socio-economic data. The team assessed the variation in urban coastal vulnerability around the entire island of Hawai‘i, using satellite imagery of coastal land cover typology from satellite products such as Landsat 8 Operational Land Imager (OLI), Landsat 7 Enhanced Thematic Mapper Plus (ETM+), and Sentinel-1 Synthetic Aperture Radar (SAR). The team made a sharable geodatabase containing datasets modeling vulnerability to coastal flooding as well as the Hawai‘i Flood Risk Toolbox (HiFloRT) which contains multiple tools for the County to map land cover, extreme rainfall and flood extent across the Island. The end products will allow the County of Hawai‘i to establish a protocol and standard framework for the utilization of Earth observations in future planning.

Garren Kalter↗

Warming Response of Deep Soil Carbon (LDRD Final Report)

The overarching objective of this LDRD project was to determine the vulnerability of deep soil organic carbon (SOC) to warming in the Sierra Nevada region. Deep soils (>30 cm) store more than 70% of global SOC, and increased SOC decomposition and CO 2 emissions caused by warming are potentially large climate change feedbacks. According to the Intergovernmental Panel on Climate Change, temperatures are expected to increase by 4°C by the year 2100, warming the land and underlying soil, and making understanding of how warming will influence deep SOC storage and persistence critical to projecting the land carbon sink. However, uncertainty remains in our process-level understanding and ability to quantify how projected warming will impact the stability of carbon in deep soils. We investigated warming effects on deep (up to 16 m) SOC stability across climate, vegetation, and soil mineralogy gradients in California. We sampled soils from the surface to bedrock (down to 16 meters) at four sites representing vastly different ecosystems across the Northern and Southern Sierra Nevada mountains. This study quantified the response of SOC concentration, distribution, and vulnerability to warming using a soil incubation experiment to warm the whole soil profile and radiocarbon and stable isotopes to assess which pools are vulnerable to loss under warming. Our results refine our understanding of the terrestrial carbon cycle by revealing the vulnerability of deep SOC to future changes in climate and how minerology may influence that vulnerability.

58 GEOSCIENCES↗

Hydrologic and Agricultural Earth Observations and Modeling for the Water-Food Nexus

In a globalizing and rapidly-developing world, reliable, sustainable access to water and food are inextricably linked to each other and basic human rights. Achieving security and sustainability in both requires recognition of these linkages, as well as continued innovations in both science and policy. We present case studies of how Earth observations are being used in applications at the nexus of water and food security: crop monitoring in support of G20 global market assessments, water stress early warning for USAID, soil moisture monitoring for USDA's Foreign Agricultural Service, and identifying food security vulnerabilities for climate change assessments for the UN and the UK international development agency. These case studies demonstrate that Earth observations are essential for providing the data and scalability to monitor relevant indicators across space and time, as well as understanding agriculture, the hydrological cycle, and the water-food nexus. The described projects follow the guidelines for co-developing useable knowledge for sustainable development policy. We show how working closely with stakeholders is essential for transforming NASA Earth observations into accurate, timely, and relevant information for water-food nexus decision support. We conclude with recommendations for continued efforts in using Earth observations for addressing the water-food nexus and the need to incorporate the role of energy for improved food and water security assessments

Food Security↗

Assessing Historical Extreme Weather Event Impacts

Resilience planning, particularly energy and water resilience planning, has been a key priority for the federal government for many years, leading federal agencies to develop processes for identifying and addressing critical resilience gaps at their facilities and sites. Furthermore, recent federal policy is driving agencies to prioritize climate change impacts as a more central component of their resilience planning efforts. To achieve this, federal sites must understand their vulnerability to climate change, which involves identifying climate hazards projected to impact the site (known as exposure), as well as understanding the sensitivity (the degree to which a site, including its people and the things they value, could be harmed by that exposure), and adaptive capacity of the site (the degree to which the site could lessen bathe potential for harm by taking action to reduce exposure and sensitivity). To assess and understand sensitivity and adaptive capacity, it is important to first obtain a baseline and understand how a site has been impacted by past events, in addition to considering the potential for unprecedented impacts based on climate projections. This information paper highlights current limitations for developing event history assessments and suggests a framework for more consistently capturing key data points. The purpose of this paper is to help inform how organizations could begin structuring a comprehensive process for recording the impacts of extreme weather events in order to facilitate climate vulnerability assessments, and thus, resilience planning.

54 ENVIRONMENTAL SCIENCES↗

Development of the Contamination Distribution Centered Toxics Mobility Vulnerability Index in the Beaumont–Port Arthur Region of Texas

This study advances the Toxics Mobility Inventory (TMI) and the Toxics Mobility Vulnerability Index (TMVI) to develop a new tool to assess the movement of hazardous substances and their implications for vulnerable communities. It emphasizes the need to include contamination distribution variables in such indices to address disproportionate impacts and more accurately reflect vulnerability. The study uses the TMI framework and TMVI methodology in the Beaumont–Port Arthur region of Texas, also integrating contamination distribution considerations into the analysis to develop a new framework and process. The new Contamination Distribution Centered Toxics Mobility Vulnerability Index (CDC-TMVI) consolidates climate change and topography variables into a broader built environment vulnerability category while introducing a contamination sources category. Using ArcGIS Pro and ToxPi tools, the study evaluates 27 geospatial variables across four categories: built environment vulnerability, social vulnerability, health outcomes, and contamination sources. The results indicate significant contributions from contamination and social vulnerability variables, highlighting areas with higher risks of flooding and air pollution. This article advocates for future research and policy efforts to enhance the integration of contamination sources and their spatial distributions into toxics mobility assessments to better protect vulnerable populations. Furthermore, the unique methodology and findings serve as a basis for developing targeted measures and strategic planning to improve environmental health.

contamination↗

Validating a Dynamic PWR Safety and Security Model?

Nuclear power plants (NPPs) are assessed for safety and security using separate models that cannot capture how an attacker's decisions and a plant's response unfold together in real time, leaving regulators and operators without a complete picture of true plant vulnerability. Traditional probabilistic risk assessment (PRA) methods treat adversarial events as fixed initiators with predetermined outcomes, and are structurally incapable of representing the time-dependent interplay between physical security events, safety system response, and operator mitigative actions. At Idaho National Laboratory (INL), I contributed to the development and validation of Modeling and Analysis for Safety and Security using the Dynamic EMRALD Framework (MASS-DEF). Where static PRA relies on event-tree logic that cannot evolve mid-scenario, MASS-DEF couples a time-dependent dynamic PRA tool EMRALD (Event Modeling Risk Assessment using Linked Diagrams) with attack simulation software, allowing attacker behavior, plant system states, and operator actions to interact across time. My work focused on validating a general Pressurized Water Reactor (PWR) model. I traced model logic against PWR plant to identified errors in logic and confirm accuracy. I then built and tested attack scenarios against a general PWR model to verify that the model produced expected outcomes across all logical pathways. I also contributed a section to a related technical paper applying the same EMRALD platform to radiation dose modeling. Results show that MASS-DEF can quantitatively demonstrate that many plants exceed their regulatory security thresholds. This demonstrated margin provides a technically defensible basis for reducing the number of guards without compromising regulatory compliance. Physical security costs represent roughly 10% of annual operating budgets, making such reductions directly meaningful to INL's mission of sustaining existing commercial NPPs. This internship strengthened my understanding of nuclear systems, probabilistic modeling, and technical writing, and has solidified my pursuit of a career at a national laboratory.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗

Assessing V and V Processes for Automation with Respect to Vulnerabilities to Loss of Airplane State Awareness

Automation has contributed substantially to the sustained improvement of aviation safety by minimizing the physical workload of the pilot and increasing operational efficiency. Nevertheless, in complex and highly automated aircraft, automation also has unintended consequences. As systems become more complex and the authority and autonomy (A&A) of the automation increases, human operators become relegated to the role of a system supervisor or administrator, a passive role not conducive to maintaining engagement and airplane state awareness (ASA). The consequence is that flight crews can often come to over rely on the automation, become less engaged in the human-machine interaction, and lose awareness of the automation mode under which the aircraft is operating. Likewise, the complexity of the system and automation modes may lead to poor understanding of the interaction between a mode of automation and a particular system configuration or phase of flight. These and other examples of mode confusion often lead to mismanaging the aircraftâ€"TM"s energy state or the aircraft deviating from the intended flight path. This report examines methods for assessing whether, and how, operational constructs properly assign authority and autonomy in a safe and coordinated manner, with particular emphasis on assuring adequate airplane state awareness by the flight crew and air traffic controllers in off-nominal and/or complex situations.

Whitlow, Stephen↗

A Methodology for Assessing Risk to Inform Technology Integration

When new technology, such as artificial intelligence (AI), is introduced into an existing workflow it may impact risk by mitigating some vulnerabilities and threats in the workflow while introducing others. We present a versatile methodology for assessing the vulnerabilities and threats that impact overall risk in a workflow to inform technology integration. Our method involves both qualitative and quantitative assessment of risk and includes a formula for generating a risk score to guide technology integration. We describe our methodology and demonstrate its application to a specific workflow (the Derivative Classification review process). This work was funded by the Department of Energy (DOE) Automated Classification Tools for the Identification of Classified Information (ACTICI) program.

risk, technology integration↗

Cool rooms for indoor heat resilience: Evaluating affordable cooling strategies in heat-stressed California homes

Extreme heat conditions pose significant indoor survivability challenges for resource-constrained communities, which often lack access to cooling, have poorly insulated homes, and face compounding socioeconomic vulnerabilities. Moreover, concurrent power outages worsen health risks and heat-related illnesses. It is therefore crucial to develop innovative and affordable cooling approaches to protect vulnerable populations. This study assesses the efficacy of “cool rooms”– a designated space within a home equipped with passive and low-power active cooling measures to maintain safe indoor temperatures during extreme heat events and power disruptions. Using a physics-based building energy modeling approach, we evaluate the efficacy of various retrofit packages in maintaining thermal safety within the cool room under recent extreme heat conditions. The results indicate that passive measures can reduce 64% of hours with unmet standard effective temperatures, while the combination of passive and low-power active measures with built-in batteries further cuts this to 86%. Nevertheless, these strategies remain insufficient to maintain indoor thermal safety during extended outages. In contrast, integrating a solar-powered mini-split heat pump, whose technical potential was evaluated in this study, reduces indoor air temperatures below the 28 °C overheating threshold and significantly improves indoor habitability. The localized cool room strategy also offers potential for grid resilience by reducing peak electricity demand by up to 70% compared to whole house cooling during heat waves. The findings can inform the development of actionable heat mitigation plans and retrofit policies for residential communities with relatively low adoption of air conditioning such as warm marine climates.

Cool room↗

Simulating the Composite Propellant Manufacturing Process

There is a strategic interest in understanding how the propellant manufacturing process contributes to military capabilities outside the United States. The paper will discuss how system dynamics (SD) has been applied to rapidly assess the capabilities and vulnerabilities of a specific composite propellant production complex. These facilities produce a commonly used solid propellant with military applications. The authors will explain how an SD model can be configured to match a specific production facility followed by a series of scenarios designed to analyze operational vulnerabilities. By using the simulation model to rapidly analyze operational risks, the analyst gains a better understanding of production complexities. There are several benefits of developing SD models to simulate chemical production. SD is an effective tool for characterizing complex problems, especially the production process where the cascading effect of outages quickly taxes common understanding. By programming expert knowledge into an SD application, these tools are transformed into a knowledge management resource that facilitates rapid learning without requiring years of experience in production operations. It also permits the analyst to rapidly respond to crisis situations and other time-sensitive missions. Most importantly, the quantitative understanding gained from applying the SD model lends itself to strategic analysis and planning.

Williamson, Suzanne↗

Ransomware and Today's Electric Grid

Cyberattacks come in many forms, including one of the newest and most threatening of attacks: ransomware. The rise in ransomware impacts businesses small and large -- and have the potential to significantly disrupt the operations of critical infrastructure. This presentation will explain what utilities can expect from a ransomware attack, sharing examples from specific events, provide guidance on how to prepare for the unknown, and offer possible ways to respond when an attack occurs. The presentation will also discuss cybersecurity governance as an effective method in taking preventative action to ransomware by identifying and addressing vulnerabilities through monitoring and assessment.

assessment↗

Vulnerabilities, Influences and Interaction Paths: Failure Data for Integrated System Risk Analysis

We describe graph-based analysis methods for identifying and analyzing cross-subsystem interaction risks from subsystem connectivity information. By discovering external and remote influences that would be otherwise unexpected, these methods can support better communication among subsystem designers at points of potential conflict and to support design of more dependable and diagnosable systems. These methods identify hazard causes that can impact vulnerable functions or entities if propagated across interaction paths from the hazard source to the vulnerable target. The analysis can also assess combined impacts of And-Or trees of disabling influences. The analysis can use ratings of hazards and vulnerabilities to calculate cumulative measures of the severity and importance. Identification of cross-subsystem hazard-vulnerability pairs and propagation paths across subsystems will increase coverage of hazard and risk analysis and can indicate risk control and protection strategies.

Malin, Jane T.↗

Vulnerabilities in Satellite Communications Underscore Threat to Critical Infrastructure

INL analysts assess critical infrastructure sectors leveraging satellite communications (SATCOM) are likely inadvertently increasing the attack surface caused by inherent vulnerabilities in equipment and communications pathways. A lack of ownership regarding security in SATCOM ecosystems creates pervasive information security risk, and the obfuscation of patching responsibility means the mitigation of publicly and privately disclosed vulnerabilities is difficult to track. With these factors in consideration, INL analysts assess the number of attacks against SATCOM is likely to increase in the next decade as threat actors exploit these vulnerabilities.

99 GENERAL AND MISCELLANEOUS↗

Towards Automatic Mapping of Vulnerabilities to Attack Patterns using Large Language Models

With the advent of new devices and applications, cyber attack surface is continuously evolving due to the emergence of new attack techniques and vulnerabilities. Hence, security management tool must assess the cyber risk of an enterprise at regular interval basis through comprehensively identifying associations among attack techniques, weakness, and vulnerabilities. However, existing repositories providing such associations are incomplete (i.e., missing associations), inducing the likelihood of undermining the risk of particular set of attack techniques. Moreover, such associations still rely on manual interpretation, which is slow compared to attack speed and ineffective for the increasing list of vulnerabilities and attack actions. Therefore, there is an urge to develop methodologies for automatically associating vulnerabilities to all relevant attack techniques. In this paper, we present a framework, named VWC-MAP, that can automatically identify all relevant attack techniques of a vulnerability via weakness based on their text descriptions, applying natural language process (NLP) techniques. To achieve that, we present a novel two-tiered classification approach, where the first tier classifies vulnerabilities to weakness, and the second tier classifies weakness to attack techniques. This research has improved the scalability of the current state-of-the-art tool to make vulnerability to weakness mapping significantly faster. Moreover, this paper presents two novel approaches for weakness to attack technique mapping applying Text-to-Text and link prediction techniques. Our experiment results cross-validated through cyber-security experts show that VWC-MAP can associate vulnerabilities to weakness types with 87% accuracy and to new attack patterns with 80% accuracy.

Das, Siddhartha Shankar↗

Cybersecurity Resiliency of Marine Renewable Energy Systems-Part 1: Identifying Cybersecurity Vulnerabilities and Determining Risk

Technology innovation, market demand, and the potential impacts of a changing climate are driving the marine renewable energy (MRE) industry to develop market-ready systems to provide low-carbon electricity for emerging, off-grid markets. The advanced operational and information technology devices used in MRE systems create a pathway for a cyber threat actor to gain unauthorized access to data or disrupt operation. To improve the resiliency of MRE systems as a predictable, affordable, and reliable source of energy from oceans and rivers, guidance was developed for an end users' organization that describes a framework for identifying and managing cybersecurity risk. The development of the cybersecurity guidance is based on standards described in the Risk Management Framework and Cybersecurity Framework developed by the National Institute of Standards and Technology (NIST). This paper is the first of a two-part series that describes an approach to determine the cybersecurity risk for MRE systems based on assessing potential cyber threats, identifying vulnerabilities (people, processes, and technology, including physical and operational environment), and evaluating the consequences a cyberattack would have on operation of the MRE system and impact on end users' mission and business objectives. MRE developers and stakeholders can use this approach to assess their current cybersecurity risk posture to incorporate appropriate cybersecurity controls to reduce the consequences and impacts from a cyberattack on MRE systems. This approach can be refined further as MRE systems are deployed and operational configurations are available.

97 MATHEMATICS AND COMPUTING↗