SEARCH · Engineering Papers

Results for “vulnerability assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

All sources NASA NTRS DOE OSTI

DOE OSTI2026

Evaluation of Hardware and Software Bill of Materials (HBOMs/SBOMs) Extraction Methods

Hardware and software bills of materials (HBOMs and SBOMs) provide important visibility into the components, dependencies, and supply chain relationships within programmable digital devices. This visibility is critical for advanced nuclear reactor applications, where use of common or shared hardware components, software libraries, suppliers, or manufacturing processes may create common cause failure (CCF) vulnerabilities despite apparent diversity. This paper evaluates current approaches for obtaining and analyzing HBOMs and SBOMs in support of CCF, diversity and defense-in-depth (D3) assessments, and begins to explore potential methods for artificial intelligence/machine learning-based analysis. The availability of BOM information from advanced reactor manufacturers and vendors, representative hardware and software categories found in advanced reactor systems continues to limit research [13]. This paper compares commonly used BOM formats, including CycloneDX, SPDX, and SWID. It also surveys publicly available tools for generating BOMs from source code, compiled binaries, and hardware-related information, noting limitations in language coverage, system age, and format interoperability. Finally, this paper evaluates methods for correlating BOM data with vulnerability and exploitability information, including VEX, CVE, and CWE resources. The findings indicate that publicly available nuclear-vendor BOMs are limited, making third-party extraction and research into novel analysis techniques necessary.

Cybersecurity↗

DOE OSTI2022

A deep learning approach to real-time HIV outbreak detection using genetic data

Pathogen genomic sequence data are increasingly made available for epidemiological monitoring. A main interest is to identify and assess the potential of infectious disease outbreaks. While popular methods to analyze sequence data often involve phylogenetic tree inference, they are vulnerable to errors from recombination and impose a high computational cost, making it difficult to obtain real-time results when the number of sequences is in or above the thousands. Here, we propose an alternative strategy to outbreak detection using genomic data based on deep learning methods developed for image classification. The key idea is to use a pairwise genetic distance matrix calculated from viral sequences as an image, and develop convolutional neutral network (CNN) models to classify areas of the images that show signatures of active outbreak, leading to identification of subsets of sequences taken from an active outbreak. We showed that our method is efficient in finding HIV-1 outbreaks with R0 ≥ 2.5, and overall a specificity exceeding 98% and sensitivity better than 92%. We validated our approach using data from HIV-1 CRF01 in Europe, containing both endemic sequences and a well-known dual outbreak in intravenous drug users. Our model accurately identified known outbreak sequences in the background of slower spreading HIV. Importantly, we detected both outbreaks early on, before they were over, implying that had this method been applied in real-time as data became available, one would have been able to intervene and possibly prevent the extent of these outbreaks. This approach is scalable to processing hundreds of thousands of sequences, making it useful for current and future real-time epidemiological investigations, including public health monitoring using large databases and especially for rapid outbreak identification.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2021

Visual Examination of Aluminum Containers for Extended Wet Storage of Non-Aluminum-Clad Spent Nuclear Fuel (FY 2021)

The goal of the Augmented Monitoring and Condition Assessment Program (AMCAP) program is to provide a condition assessment of the storage containers for non-aluminum-clad spent nuclear fuel (NASNF) in L Basin and demonstrate continued safe storage of all NASNF pending retrieval for ultimate disposition. The storage configuration of NASNF is vulnerable to inside-out corrosion attack. The approach being used in AMCAP is to develop and deploy examination methods for remote, in-situ inspection of the bundle storage in VTS and for OSC storage in the OSC racks. A method for Visual Examination (VE) using video-recording cameras was readied as part of the full-scale mockup development, and was deployed in L Basin for the initial condition assessment work. This report describes the development and the deployment of the VE for inspection of selected bundles in L Basin. The first deployment of the VE system was for visually examining five spent fuel bundles. Bundles were chosen based on their vulnerability in terms of inner fuel contents, history, storage duration, storage configuration, and possibility of inside out corrosion due to galvanic coupling of fuel cladding with the aluminum bundle wall.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2025

Hydrogen Transportation and Distributed Energy Systems Seismic Risk Assessment for Cascadia Subduction Zone Airport Facilities

08 HYDROGEN↗

DOE OSTI2025

An assessment of the global cooling supply chain and implications for critical minerals

The global room air conditioner (AC) industry has undergone rapid growth, and the U.S. and India now face new supply chain risks due to China’s dominant role in manufacturing and driving demand. As India’s room AC market and related electricity consumption increases with continued economic development, it faces dual challenges of supply chain vulnerabilities and power grid blackouts from higher peak loads. To mitigate supply chain vulnerabilities for high-efficiency cooling equipment and critical mineral inputs to AC components, there is an increasing need to diversify the supply chain and address energy security and peak load risks to both the U.S. and India. This report assesses the potential for diversifying supply chains and scaling up manufacturing of highly efficient cooling equipment technologies and related critical mineral inputs in the U.S. and India. Successful cooperation on these technologies will enable the U.S., India, and their Quadrilateral Security Dialogue (Quad) partners to diversify AC supply chains while meeting India’s large and growing demand for efficient cooling. In the similarly concentrated supply chain for critical minerals, the U.S. and India can work with Japan and Australia to leverage each country’s strengths in diversifying mining, processing, and refining while pursuing alternatives to materials with high supply chain risks and supporting increased recycling and circular economy approaches.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2022

Cyber Attack Sequences Generation for Electric Power Grid

Security assessment of cyber-physical energy systems (CPESs) such as the electric power grid is a critical operation to maintain availability, reliability, and quality of service in the presence of persistent threats from malicious cyber actors. Existing security assessment approaches such as penetration testing and red teaming rely on subject matter expert experience and forensic cyber analysis of historical events to perform realistic, threat-informed assessments of CPES defense. CPESs have a large attack surface because of the heterogeneity and complexity of underlying topology, devices, measurements, and vulnerabilities. The aforementioned approaches lead to partial coverage of the attack surface with a large set of unknown but possible exploits. There is a need to automate the CPES attack surface discovery and contextualize it for relevant, highly probable, real-world attack scenarios. We propose a methodology and framework to facilitate the discovery of the CPES attack surface. We present a multilayer attack graph with ranked attack sequences to describe CPES failure scenarios. We present a work-in-progress framework that lists key components to automate the attack modeling and sequence generation. We demonstrate the published National Electric Sector Cybersecurity Organization Resource CPES failure scenario to highlight the trustworthiness of generated attack sequences.

Dutta, Ashutosh↗

DOE OSTI2025

Dataset: "Widespread Drought-driven Declines in Streamflows and Water quality in the Upper Colorado River Basin (1998-2022)"

This data package contains the associated data and scripts for Nagamoto, E., Ombadi, M., Ciulla, F. et al. Widespread drought-driven declines in streamflows and water quality in the Upper Colorado River Basin during 1998-2022. Commun Earth Environ 7, 734 (2026). https://doi.org/10.1038/s43247-026-03890-5. This purpose of this study was to investigate the impact of the 21st century drought on water quantity and quality at catchments throughout the Upper Colorado River Basin (UCRB). We used stream flow, water temperature, specific conductance, air temperature, precipitation, and catchment attribute data for over 200 sites in the UCRB, collected from the National Water Information System using Basin3D (Varadharajan, 2023), GAGESII (Falcone, 2010), and the Google Earth Engine. We identified years of severe drought between 1998 and 2022 using the Standardized Precipitation Evaporation Index (SPEI), then calculated the relative change percentage of the stream flow, water temperature, and specific conductance from drought versus non-drought years. We used the attribute information from GAGESII to investigate what physical traits of catchments are associated streamflow vulnerability (greater relative change) or resilience to drought. We used land cover data from the National Land Cover Database (USGS, 2024) to assess any changes to physical attributes that may not be represented in the static attributes information in GAGESII. To increase data availability, we modeled stream temperature using methods from Willard, 2023. While the study period is water years 1998 to 2022, the raw water quantity and quality data extends to 1950 and the meteorological data extends to 1980. The data and code can be downloaded via the UCRB_drought.zip. Within the zip, the files are organized as follows: - INPUTS: Contains all input data used in UCRB_Drought_Workflow.ipynb - OUTPUTS: Contains all intermediate data created from UCRB_Drought_Workflow.ipynb as well as final products including the calculated Standardized Evapotranspiration Index (SPEI) - climatic_variables: The code used to collect meteorologic data from Google Earth Engine - feature_importance: The code used for the catchment attributes analysis - preprocessing: Code used in UCRB_Drought_Workflow_Preprocessing.ipynb - pyeto: Code used in UCRB_Drought_Workflow_Preprocessing.ipynb - calculations: Code used in UCRB_Drought_Workflow_Impacts.ipynb - plotting: Code used in UCRB_Drought_Workflow_Impacts.ipynb - README.md - UCRB_Drought_Workflow_Preprocessing.ipynb: The code used to prep raw data for the analysis - UCRB_Drought_Workflow_Impact.ipynb: The code which uses the prepped raw data for analysis, and plots all figures - requirements_ucrb-drought_v2.yml: The requirements file to create a virtual environment and Jupyter Lab kernel to run the code The INPUTS folder is organized into the following major directories and sub-directories. The "RDC_WT_SC_RAW" folder contains raw data for streamflow, water temperature, and specific conductance in a ".h5" file. The "NLCD_RAW" folder contains ".csv" files with annual land cover percentages for counties within the UCRB. The "MET_RAW" folder contains a ".csv" file with monthly meteorological data (air temperature and precipitation) for the sites in the UCRB which was obtained from code in the climatic_variables folder. The "GAGESII" folder contains ".csv" files with physical catchment attribute variables for catchments across the country. The "WT_LSTM_data" folder contains ".csv" files with calculated WT (Willard, 2023) and the associated RMSEs. The "Upper_Colorado_River_Basin_Boundary" folder contains geographic data including a shapefile for plotting in the UCRB_Drought_Workflow.ipynb. The "RESERVOIRS_RAW" folder contains ".csv" files for each reservoir in the UCRB with daily reservoir storage. There are also two files in the INPUTS folder that have combined reservoir storage data and reservoir metadata. The OUTPUTS folder is organized into the following major directories and sub-directories. The "RDC_WT_SC_data" folder contains a folder "Water_year" with the associated cleaned data, metadata, and data availability information in ".csv" files, a folder "Median_Relchange" with the relative change comparing drought to non-drought years in ".csv" files, and a folder "Peak95_Min5_Relchange" that has ".csv" files for the relative change in peak (95th %) and minimum (5th %) variables. The "NLCD_data" folder contains the difference in land cover from the beginning to end of the study period and the percentage of the county that is within UCRB bounds can be found in Nagamoto et al (2025)). The "MET_data" folder contains separated monthly air temperature and precipitation data and the calculated PET in ".csv" files. The "SPEI_data" folder contains ".csv" files with calculated SPEI values (one restricted to the study period and the other with information from the entire MET data period). The "Paper_Tables" folder contains two ".csv" files containing site information and data availability and information about the GAGESII trait aggregated categories. The base directory includes the file “flmd.csv” for a list and description of all files and the file “dd.csv” for data dictionaries. Scripts for preprocessing, analysis, and figure generation are located in the associated GitHub repository found at [https://github.com/iNAIADS/drought-impacts/tree/develop/UCRB-drought]. UPDATE 1: Title and code file updated to match submitted manuscript 10-15-2025. UPDATE 2: Code and data files updated to match revised manuscript 3-4-2026. UPDATE 3: Code and data files updated to match revised manuscript 6-7-2026. ** NOTE: DD and FLMD have not been updated yet. UPDATE 4: Added associated Manuscript information and DD and FLMD have been updated. To cite this code, please use the following BibTeX: @misc{nagamoto2025drought, author = {Emily Nagamoto and Fabio Ciulla and Mohammad Ombadi and Jared Willard and Rosemary Carroll and Charuleka Varadharajan}, title = {Dataset: "Widespread Drought-driven Declines in Streamflows and Water quality in the Upper Colorado River Basin (1998-2022)"}, year = {2025}, doi = {10.15485/2551894}, publisher = {ESS-DIVE Repository}, url = {https://data.ess-dive.lbl.gov/datasets/doi:10.15485/2551894} }

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2026

Ambient-Pressure Chemical Recycling of Thermoset Carbon Fiber-Reinforced Polymers via Low-Temperature Solvolysis: Techno-Economic and Life-Cycle Assessment

Carbon fiber-reinforced polymer (CFRP) waste is rapidly accumulating, with global volumes projected to exceed 500,000 tons annually by 2050. Virgin carbon fiber production is extremely energy- and cost-intensive, and growing demand has intensified supply-chain vulnerabilities associated with precursor availability and reliance on critical materials. Scalable recycling technologies therefore offer not only environmental benefits but also opportunities to reduce material costs and strengthen domestic composite supply chains. This study introduces an efficient, mild chemical recycling method for epoxy-amine CFRPs, utilizing acetic acid (80 wt%) and zinc acetate (1 wt%) at atmospheric pressure and low temperature (~110 °C). The solvolysis process preserves residual resin (~40%) on recycled carbon fibers (rCF), enhancing interfacial bonding in remanufactured composite materials. Recycled fibers retain ~90% of their mechanical properties, and recovered oligomers show potential for reuse in epoxy formulations, supporting material circularity. Techno-economic analysis (TEA) and life-cycle assessment (LCA) confirm the scalability and sustainability of this process.

Recycling CFRP↗

DOE OSTI2026

Analytical small-signal stability analysis of low-inertia power system frequency response considering secondary frequency regulation

Modern power systems are increasingly vulnerable to frequency instability as inverter-based resources (IBRs) replace synchronous machines and reduce system rotational inertia. Existing small-signal frequency stability assessment methods are either computationally intensive, relying on simulation-driven approaches, or lack analytical stability regions that explicitly account for secondary frequency response (SFR). This paper introduces new analytical frameworks that enable evaluation small-signal frequency stability while explicitly incorporating tunable IBR and SFR parameters. Using Kharitonov’s theorem with an overbounding approach, explicit small-signal stability criteria are derived. In addition, based on Białas’ criterion and Hurwitz matrix, analytical stability regions are established to reveal feasible design spaces for SFR and IBR parameters tuning. Extensive Matlab/Simulink-based simulations validate the accuracy and computational efficiency of the proposed methods, demonstrating that coordinated tuning of SFR and IBR parameters can substantially enhance system resilience. By bridging analytical rigor with practical tunability, this work provides an analytical framework for assessing small-signal frequency stability in low-inertia grids, supporting the real-time, scalable, and resilient operation of sustainable power systems.

14 SOLAR ENERGY↗

DOE OSTI2024

Fail-Safe Logic Design Strategies Within Modern FPGA Architectures

Fail-safe computing refers to computing systems that revert to a non-operational safe state when a fault occurs. In this paper, we investigate a circuit level technique as mitigation for single event upsets (SEUs) and fault injection attacks on field programmable gate arrays (FPGAs), and analyze the effectiveness of the technique as a fail-safe monitor for an encryption algorithm. The propagation of fault effects through FPGA primitives including lookup tables (LUTs) and programmable interconnect points (PIPs) is assessed within an FPGA architecture created using an open source tool, and validated using fault injection experiments on an FPGA. The analysis reveals additional vulnerabilities exist within reconfigurable architectures over those in equivalent fail-safe application specific integrated circuit (ASIC), thus requiring a more elaborate network of redundant circuits and checking logic. The configuration memory bits (CMBs), which configure routing and designate logic functions within the LUTs of the FPGA, add complexity to fail-safe design strategies by introducing additional fault conditions and fault propagation paths. A resource-efficient fail-safe circuit design technique called DEsign for Fail-safe in reCONfigurable systems (DEFCON) is proposed. The benefits and limitations associated with DEFCON are described in the context of fault injection experiments carried out as simulations and in FPGA hardware.

Bhakta, Priya A. [Univ. of New Mexico, Albuquerque↗

DOE OSTI2021

A proteogenomic portrait of lung squamous cell carcinoma

Lung squamous cell carcinoma (LSCC) remains a leading cause of cancer death with few therapeutic options. We characterized the proteogenomic landscape of LSCC, providing a deeper exposition of LSCC biology with potential therapeutic implications. We identify NSD3 as an alternative driver in FGFR1-amplified tumors and low-p63 tumors overexpressing the therapeutic target survivin. SOX2 is considered undruggable, but our analyses provide rationale for exploring chromatin modifiers such as LSD1 and EZH2 to target SOX2-overexpressing tumors. Our data support complex regulation of metabolic pathways by crosstalk between post-translational modifications including ubiquitylation. Numerous immune-related proteogenomic observations suggest directions for further investigation. Proteogenomic dissection of CDKN2A mutations argue for more nuanced assessment of RB1 protein expression and phosphorylation before declaring CDK4/6 inhibition unsuccessful. Finally, triangulation between LSCC, LUAD, and HNSCC identified both unique and common therapeutic vulnerabilities. These observations and proteogenomics data resources may guide research into the biology and treatment of LSCC.

60 APPLIED LIFE SCIENCES↗

DOE OSTI2021

Mapathons versus automated feature extraction: a comparative analysis for strengthening immunization microplanning

Background: Social instability and logistical factors like the displacement of vulnerable populations, the difficulty of accessing these populations, and the lack of geographic information for hard-to-reach areas continue to serve as barriers to global essential immunizations (EI). Microplanning, a population-based, healthcare intervention planning method has begun to leverage geographic information system (GIS) technology and geospatial methods to improve the remote identification and mapping of vulnerable populations to ensure inclusion in outreach and immunization services, when feasible. We compare two methods of accomplishing a remote inventory of building locations to assess their accuracy and similarity to currently employed microplan line-lists in the study area. Methods: The outputs of a crowd-sourced digitization effort, or mapathon, were compared to those of a machine-learning algorithm for digitization, referred to as automatic feature extraction (AFE). The following accuracy assessments were employed to determine the performance of each feature generation method: (1) an agreement analysis of the two methods assessed the occurrence of matches across the two outputs, where agreements were labeled as “befriended” and disagreements as “lonely”; (2) true and false positive percentages of each method were calculated in comparison to satellite imagery; (3) counts of features generated from both the mapathon and AFE were statistically compared to the number of features listed in the microplan line-list for the study area; and (4) population estimates for both feature generation method were determined for every structure identified assuming a total of three households per compound, with each household averaging two adults and 5 children. Results: The mapathon and AFE outputs detected 92,713 and 53,150 features, respectively. A higher proportion (30%) of AFE features were befriended compared with befriended mapathon points (28%). The AFE had a higher true positive rate (90.5%) of identifying structures than the mapathon (84.5%). The difference in the average number of features identified per area between the microplan and mapathon points was larger (t = 3.56) than the microplan and AFE (t = -2.09) (alpha = 0.05). Conclusions: Our findings indicate AFE outputs had higher agreement (i.e., befriended), slightly higher likelihood of correctly identifying a structure, and were more similar to the local microplan line-lists than the mapathon outputs. These findings suggest AFE may be more accurate for identifying structures in high-resolution satellite imagery than mapathons. However, they both had their advantages and the ideal method would utilize both methods in tandem.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2025

Hydrogen Transportation and Distributed Energy Systems Seismic Risk Assessment for Cascadia Subduction Zone Airport Facilities

Portland International Airport in Oregon is exploring operating a fleet of 28 fuel cell electric buses to support airport operations and possibly provide backup power during outages. In this report, we evaluate the risk of hydrogen deployment at an airport considering the potential for seismic activity. We present a seismic risk assessment for pressurized piping for a generic hydrogen refueling station at the airport. Only pressurized piping was considered in the risk analysis because of its vulnerability and availability of fragility information unlike the other components. Seismic capacity of other components should be included as more information becomes available. To characterize the seismic hazard, we considered the initiating event frequency of a Cascadia Subduction Zone earthquake event based on data from the literature. Seismic stressors that translate to the site from an earthquake event are expressed as peak ground acceleration. Site disturbance is characterized as a function of soil conditions, represented by different shear wave velocity values, which affect how seismic waves propagate and impact structures. Pipe fragility curves as a function of seismic capacity were used to correlate ground acceleration and failure probability. These fragility characteristics were combined with site-specific soil conditions to calculate the probability of pipe rupture during a seismic event. It should be noted that multiple simultaneous failures due to an earthquake event as a common cause are not considered. Some epistemic uncertainties such as self-exciting shocks, aftershocks, and the time variant nature of the ground motion are not considered either.

08 HYDROGEN↗

DOE OSTI2024

Thermal Resilience of Residential Building with Thermally Anisotropic Building Envelope Connected to Geothermal Sources

Heat waves and cold snaps have become more frequent and more intense because of climate change. A heat wave and a cold snap are a period of excessively hot and cold weather, respectively, that poses severe risks to building occupants’ health, especially for vulnerable people. They increase electrical energy consumption and put high stress on the grid which leads to potential power outages. Therefore, it is critical to assess and actively improve the thermal resilience of buildings to cope with heat waves, cold snaps, and power outages. The thermally anisotropic building envelope (TABE) is a novel active building envelope that can save energy while maintaining thermal comfort in buildings by redirecting heat and coolness from building envelopes to hydronic loops. When connecting to a ground thermal loop (GL), TABE can utilize the relatively stable temperature of the ground to protect the indoor environment during heat waves and cold snaps. This study assesses the thermal resilience of residential buildings that installed TABE and used ground thermal energy to supply the hydronic loops, abbreviated as ground thermal loop or TABE+GL. The simulation and analysis are conducted for the US Department of Energy prototype single-family detached residential building in the hot climate of Miami, Florida and Tucson, Arizona, and the cold climate of Denver, Colorado, and Rochester, Minnesota. Heat waves and cold snaps were obtained from the historical weather data of 1998-2020 for the studied regions. Three thermal resilience metrics, including the standard effective temperature (SET) degree-hours, the Heat Index, and the Hours of Safety (HOS) were used to quantify the effect of TABE+GL. The results showed that buildings installed TABE+GL could significantly reduce the average SET degree-hours above 30°C, increase HOS, and greatly improve thermal resilience.

Shen, Zhenglai↗

DOE OSTI2026

Structural dynamics of the renewable energy economy: A longitudinal input-output insights for a resilient transition

As countries accelerate their energy transitions, understanding how renewable energy (RE) systems structurally integrate into national economies is essential. This study presents a longitudinal economic input-output (EIO) analysis of the renewable energy sector in South Korea from 2016 to 2022. We develop a novel EIO-based framework that disaggregates the RE sector both by energy source (thermal, hydro, nuclear and renewable) and by industrial function (manufacturing, generation, and services), allowing for a detailed assessment of production dynamics, value-added creation, and import dependency. By quantifying backward and forward linkages and induced economic effects, the analysis reveals persistent structural vulnerabilities in renewable manufacturing and increasing sectoral interdependencies. Results reveal that while the renewable energy sector's production and value-added shares have increased, critical segments remain highly import-dependent, particularly in equipment manufacturing. The analysis highlights systemic gaps in domestic supply chain resilience and offers sector-specific insights for reducing vulnerability and enhancing energy security. Although applied to South Korea as a case study, the proposed framework is designed to be transferable to other national contexts where renewable energy planning requires economic structural insights. The findings offer policy-relevant guidance for enhancing domestic energy resilience and aligning industrial strategy with long-term decarbonization goals.

Economic linkage↗

DOE OSTI2025

Rising temperatures intensify drought propagation and severity across the contiguous United States

Droughts can propagate from meteorological droughts (MD) into agricultural (AD) and hydrological droughts (HD). However, the mechanisms by which rising temperatures and changes in precipitation amount influence MD propagation, and how these dynamics vary across U.S., are not yet fully understood. This gap is critical given the U.S.’s diverse climates and land-use patterns, which lead to region-specific drought vulnerabilities and impacts, such as the 2012 AD in the Great Plains and the 2014 HD in the western U.S. Using a dynamical-statistical framework, we assess warming impacts on drought propagation. Results reveal that the Midwest and Southeast, key agricultural regions, show the largest increases in MD propagation to AD/HD, driven by rising temperatures and declining precipitation, though magnitudes vary regionally. In contrast, the Northeast shows reduced propagation due to increased year-round precipitation. Higher-intensity AD/HD events become disproportionately more likely, with rates varying by region and MD intensity.

Yan, Hongxiang [Pacific Northwest National Laborat↗

DOE OSTI2025

GridSTIX

SF-25-112 Grid-STIX is a comprehensive extension of the STIX (Structured Threat Information Expression) 2.1 ontology specifically designed for electrical grid cybersecurity applications. This ontology provides a standardized, machine-readable framework for modeling grid assets, operational technology devices, threats, vulnerabilities, supply chain risks, and security relationships in electrical power systems. ## Key Features - **Comprehensive Grid Coverage**: Physical assets, OT devices, grid components, sensors, and energy storage systems - **Zero Trust Architecture**: Policy decision points, enforcement points, trust brokers, and continuous monitoring - **AMI Infrastructure**: Advanced metering networks, head-end systems, mesh gateways, and MDM systems - **Advanced Security Modeling**: Attack patterns, vulnerabilities, mitigations, and supply chain risks - **Critical Grid Relationships**: Power flow, protection, control, and synchronization relationships - **Supply Chain Security**: Supplier modeling, country of origin tracking, and risk assessment - **Protocol Support**: DNP3, Modbus, IEC 61850, IEC 60870-5-104, OPC-UA, and IEEE standards - **Python Code Generation**: Automated STIX-compliant Python class generation from ontologies - **Interactive Visualization**: Enhanced HTML network graphs with grid-specific categorization - **STIX 2.1 Compliance**: Full compatibility with STIX threat intelligence ecosystem

Blakely, Benjamin [Argonne National Laboratory (AN↗

DOE OSTI2026

Residential Vehicle-to-Home Backup Power Capabilities: Key Findings from a ComEd Beneficial Electrification R&D Pilot

This report summarizes key findings from a collaborative technical study of residential, non-grid-tied vehicle-to-home (V2H) backup power systems in Commonwealth Edison’s (ComEd’s) service territory. The work integrates (1) a feeder-level technoeconomic analysis (TEA) using historical outage-event data and simulated electric-vehicle (EV) driving/charging profiles to estimate potential reliability and customer interruption-cost impacts under V2H and vehicle-to-grid (V2G) adoption scenarios; (2) controlled laboratory performance testing of a representative V2H backup ecosystem to characterize transfer-to-backup behavior, sustained power delivery, efficiency trends, and repeatable reliability limitations; and (3) a cybersecurity assessment aligned with NIST Cybersecurity Framework (CSF) 2.0 and ISO/SAE 21434 to evaluate interface-level risk drivers and identify program-relevant mitigations. Results indicate that V2H can provide measurable resilience value, but outcomes are strongly context dependent on outage patterns and the share of events that are “V2H-applicable.” Typical transfer-to-backup behavior clustered on the order of minutes, but rare long-delay edge cases were observed (including an event approaching 30 minutes) and should be treated as a reliability risk. High-power testing showed that peak-rated output is not necessarily continuously deliverable; stable operation may require operation below nameplate ratings and attention to thermal and installation constraints. The cybersecurity assessment highlights a broad attack surface spanning commissioning, home networks, embedded services, and cloud/OTA pathways, motivating minimum controls for secure onboarding, signed updates, patch cadence, and coordinated vulnerability response for any scaled deployment.

24 POWER TRANSMISSION AND DISTRIBUTION↗