Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “vulnerability assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

Equipment Assessment Guide: A Technical Inspection and Hardening Guide for Devices in Power Grid Operations

This Equipment Assessment Guide, developed by Idaho National Laboratory (INL), provides a comprehensive framework designed to enhance the security of operational technology (OT) devices within power grid operations. The guide outlines essential steps for asset owners to conduct technical inspections and harden vulnerable hardware and firmware components commonly found in embedded systems. It focuses on components frequently targeted by cyber threats, offering valuable identification techniques for locating and recognizing critical components on devices. Additionally, the guide presents recommended secure configurations aimed at minimizing exposure and reinforcing defenses, along with impact analysis that highlights the potential consequences for grid operations if components are compromised. By implementing the recommendations outlined in this guide, asset owners can significantly enhance their cybersecurity posture, reduce the attack surface of field-deployed devices, and improve the resilience of grid services against emerging cyber threats.

42 - ENGINEERING↗

Requirements and Recommendations for a Physical Attack Characterization Framework

This study seeks to identify existing frameworks or develop requirements and recommendations for a new framework that can consistently characterize physical attacks, analogous to MITRE ATT&CK®. MITRE ATT&CK is widely used across government, research organizations, and the cyber security community to characterize cyber attack tactics, techniques, and procedures (TTPs) in a consistent and commonly understood manner. While physical attack taxonomies, methodologies, and other tools for evaluating physical security do exist, many are sector and/or facility-type specific—and therefore not able to provide comparable scenarios across sectors—or are more focused on security assessment instead of the characterization of attacks themselves. A MITRE ATT&CK analog for physical attacks on critical infrastructure would provide a common language and structure for analysis of physical attacks. Existing attack characterization methodologies do not robustly address cyber-physical security risks. To fully understand a facility’s security needs, it is important to understand the entire vulnerability landscape from both a physical and a cyber perspective. To underscore this need, organizations such as the Cybersecurity and Infrastructure Security Agency (CISA) are calling for a coordinated approach to cyber and physical security, which they refer to as cyber and physical security convergence. A physical attack characterization framework that could be used jointly with MITRE ATT&CK would help support a more robust analysis in support of convergence, enabling the consistent characterization of attacks that utilize both cyber and physical tactics and techniques. This could provide analysts and stakeholders with a clearer understanding of how security mitigations deployed in the physical realm impact security risks in the cyber realm, and vice versa. In this study, the project team evaluates existing physical security taxonomies and methodologies to assess whether an existing method can be used to create a “physical half” of MITRE ATT&CK. This study then provides requirements and recommendations for a framework that can leverage aspects of existing methodologies. The goal of the final framework is for it to be widely adopted and referenced, regardless of critical infrastructure sector, facility type, or facility components. This study also identifies applicable use cases for when and how a framework could be applied across the various critical infrastructure sectors for a variety of attack types or motivations. Through a literature review of existing security-focused methodologies and taxonomies, engagement with relative stakeholders, evaluation of potential physical attack framework use cases, and subsequent identification of requirements, this study identified the following key findings and recommendations: There is a need for a new physical attack characterization framework; A physical attack framework should be interoperable with the MITRE ATT&CK framework; A physical attack framework should be broadly applicable, but with detailed tactics, techniques, and procedures that encompass the entire attack path; A physical attack framework should be based on observed or feasible events; A physical attack framework should adapt features from existing methodologies, frameworks, and taxonomies; A physical attack framework should be owned, overseen, and maintained by one organization.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Using a Customized Portable Deepwater Portable Electrofisher to Assess Larval Lamprey Populations in Irrigation Canals

Larval lamprey densities were quantified at two large-scale water diversions facilities located on the Yakima River near the city of Yakima, Washington. Water diversions are very common in the Yakima River Basin and provide water to irrigate a diverse range of valuable cropland. Out-migrating larval Pacific Lamprey are vulnerable to entrainment through fish protection screens during the withdrawal period and desiccation or predation during dewatering at the end of the season. In order to determine the impact to lamprey populations which inhabit these regions a portable deepwater electroshocking system was utilized to determine lamprey densities which could otherwise not be determined due to water depth. Surveys were conducted in the fall during the dewatering period in 2015 and 2017 and larval lamprey densities ranged from 0.8 to 8.8 fish m-2 at the Sunnyside Diversion Facility to 4.2 to 6.5 fish m-2 at the Wapato Diversion Facility. The estimates for the total lamprey numbers at each of the region using a portable deepwater electrofishing platform (PDEP) was very similar to those estimates using backpack electrofishing post-dewatering; the PDEP method was 12- 36% higher where comparisons were available. During 2017, the estimated lamprey entrainment at the Sunnyside Diversion increased by 484% from August to November. Lamprey lengths were also determined and ranged from 50 to 130 mm. Our results indicate that the use of the deepwater shocking system was very safe and effective at determining larval lamprey densities at hard to sample regions which are present near irrigation facilities.

larval lamprey, electrofishing, water diversion↗

Data-Driven Energy Resilience Assessment and Enhancement in Urban Communities: A Case Study in Detroit

This paper presents a data-driven framework for assessing and enhancing energy resilience in urban communities. The resilience assessment is based on two datasets: 1) annual aggregated power outage data and 2) 15-minute interval outage data. High-impact, low-probability (HILP) events are identified within these datasets to evaluate community resilience under extreme conditions. To enhance resilience, an optimization framework utilizing mixed integer linear programming is developed to determine the optimal sizing and placement of solar photovoltaic (PV) systems and battery energy storage systems (BESS). This method offers a cost-effective and practical solution for improving energy resilience in vulnerable communities. Furthermore, a case study of the City of Detroit in Michigan demonstrates the effectiveness of the framework through simulation and validation.

Energy resilience assessment↗

Geologic Seawater Air Conditioning (GeoSWAC) System: Resource Assessment and Techno-Economic Evaluation in Puerto Rico

Puerto Rico's hot, humid climate drives a high and persistent demand for cooling, straining an aging and fuel-dependent energy grid while increasing peak electricity loads. Much of this challenge stems from inefficient air-conditioning systems operating in buildings without passive cooling design, making cooling both costly and vulnerable to disruption - especially during hurricanes. To address these issues, researchers evaluated a new alternative called Geologic Seawater Air Conditioning (GeoSWAC), which uses inland wells connected to naturally cold, deep seawater. By avoiding long offshore pipelines and energy-intensive refrigeration cycles, GeoSWAC can cut electricity use by 75-90%, reduce environmental impacts, and operate more reliably during power outages. A case study at the University of Puerto Rico's Rio Piedras campus found that GeoSWAC could deliver significantly lower levelized costs of cooling, reduced operational expenses, and improved water conservation compared to the campus's existing chilled-water plant. The system offers key advantages - including access to a constant cold heat sink, low pumping requirements, and enhanced resilience - for coastal regions such as Puerto Rico, the broader Caribbean, and Florida. However, its effectiveness depends heavily on site-specific geological conditions, such as subsurface connectivity and aquifer characteristics, which require detailed investigation. Future research should refine hydrogeological models, conduct performance and economic analyses, and address regulatory and permitting frameworks to support broader adoption of this promising technology.

24 POWER TRANSMISSION AND DISTRIBUTION↗

SPRUCE High-Resolution Minirhizotrons in an Experimentally-Warmed Peatland Provide an Unprecedented Glimpse at Fine Roots and their Fungal Partners: Supporting Data

Images were collected using first of their kind, non-destructive, high-resolution automated minirhizotrons (RhizoSystems, LLC) to assess the response of plant fine-root and fungal mycelium dynamics to elevated temperatures after 4-6 years of whole-ecosystem warming and exposure to elevated carbon dioxide concentrations (e[CO2]) in a peat bog where the SPRUCE (Spruce and Peatland Responses Under Changing Environments) experiment is located. We focused on two SPRUCE experimental plots: Plot 10 has elevated temperature (+9°C) and plot 19 is a control (+0°C). Both have elevated carbon dioxide (e[CO2]). Changes in root and fungal abundance with warming were estimated from a timeseries of landscape-level mosaiced images for each plot by measuring the proportional abundance of five belowground classes: fine roots of vascular plants, ectomycorrhizas, fungal hyphae, fungal rhizomorphs, and fungal sporocarps. To examine root and fungal phenology responses to warming, the length per individual root or fungal structure (except fungal hyphae that did not grow linearly but rather increased in areal coverage) were measured per image area of a set of timeseries patch-level mosaiced images for each plot. The experimental work was conducted in a Picea mariana [black spruce] – Sphagnum spp. bog forest in northern Minnesota, 40 km north of Grand Rapids, in the USDA Forest Service Marcell Experimental Forest (MEF). This ecosystem, which is located at the southern margin of the boreal forest, is considered especially vulnerable to climate change and anticipated to be near its tipping point. These data were used in analyses published in Defrenne et al (2021). This dataset contains 5 data files in comma-separate values (*.csv) format and a compressed folder (*.zip) containing 383 JPEG (*.jpg) images. Data files contain landscape-level assessment of belowground class abundance, patch-level growth phenology, and environmental variables (originally published in Hanson et al., 2016 and Hanson et al 2020). Images were collected with automated minirhizotrons and analyzed for phenology. Additional metadata are provided: 5 data dictionaries and a file-level metadata file in comma-separate values (.csv) format and a user guide in PDF (*.pdf) format.

54 ENVIRONMENTAL SCIENCES↗

Enhancing Building Resilience: Maintaining Energy Efficiency and Thermal Comfort During Power Outages in Cold Climates

The increasing frequency and intensity of extreme weather events, such as heatwaves and cold snaps, present significant challenges to building energy performance and occupant comfort. Highly correlated with climate events are widespread long duration power interruptions that may affect thousands of buildings and millions of customers. This study evaluates the impact of building energy performance and occupant thermal comfort in medium-sized office buildings in a cold climate region. Using energy models representing pre-1980 and 2019 vintages, simulations were conducted to assess energy performance under typical weather conditions and occupant thermal comfort during power interrupted extreme cold snap and heatwave climate events under both current 2020s and future 2050s weather conditions. The results show a projected 33% increase in cooling energy demand and a 19% reduction in heating energy by 2050. Findings reveal that older buildings are more susceptible to cold discomfort during cold snaps, while modern airtight buildings are more vulnerable to overheating during heatwaves. Various passive energy efficiency measures, such as improved infiltration control, thermal windows, solar-controlled windows, and cool envelopes, were evaluated for their ability to mitigate thermal discomforts. Solar controlled windows and weatherstripping contribute to reducing cold thermal discomfort by 21% during a power-interrupted cold snap. Solar-controlled windows were found to reduce hot thermal discomfort by 34% during a future power-interrupted heatwave. The study highlights the importance of targeted retrofitting strategies to enhance thermal resilience, especially during power outages, to ensure occupant safety and comfort during extreme climate events.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Anti-Ultralocality and Plateau Models of Inflation

Anti-ultralocality refers to the growth of spatial gradient terms relative to velocity terms in the coupled Einstein--scalar field equations. It is a characteristic feature of decelerated expansion before the onset of inflation. Previous numerical relativity studies have shown that anti-ultralocality prevents the onset of inflation in models with power-law inflaton potentials. In this paper, we show that models with plateau-shaped inflaton potentials, which are considered to be the simplest way to generate a tensor-to-scalar ratio below current observational upper limits, are especially vulnerable to anti-ultralocality effects. The reasons are the flatness of the plateau and the energy density gap of $\sim 10$ orders of magnitude between the Planck density and the plateau potential energy. To study the problem, we develop a protocol for assessing the viability of inflationary models in general, and we apply it to a plateau potential using a previously validated numerical relativity code. We find that, starting from generic initial conditions, the growth of gradient terms in the Einstein equations relative to non-gradient terms either prevents inflation from lasting for enough $e$-folds or triggers a phase of quantum runaway. We show that the fine-tuning of initial conditions necessary to avoid these issues becomes more severe as the energy scale of inflation is made smaller, disfavoring common approaches for reducing the tensor-to-scalar ratio.

FOS: Physical sciences↗

Hierarchical Resilience Planning for Networked Microgrids: A Case Study of Puerto Rico

Microgrids can be designed to enhance the energy resilience of communities and critical infrastructures, such as hospitals, data centers, and communication networks, which are vulnerable to frequent weather-related disruption. Coordinating multiple microgrids in a network can leverage the geographical diversity of load and generation resources while enabling resilient and cost-effective planning of the distribution system. Designing a networked microgrid is complex, involving intricate technical assessment, cost-benefit analysis, site-specific requirements, and the evaluation of existing resources. Therefore, this paper proposes a hierarchical resilience planning framework and performs an extensive techno-economic analysis for the design of a networked microgrid. Hierarchical resilience planning involves technology sizing at an individual community level to meet the critical load and satisfy resilience criteria, and resource optimization at networked microgrid level to provide a higher level of resilience and energy adequacy. A real-world case of Puerto Rico's cooperative microgrid “Microrred de la Montaña” is investigated considering localized electricity tariffs, site-specific demand profiles, solar generation, and existing hydro resources. Multiple optimization scenarios are developed based on the resiliency requirement to estimate the capacity of solar photovoltaic and battery energy storage (BES) to be installed at each substation. The results provide the optimal sizing for individual community and networked microgrid to withstand 1day and 3-day outages along with the criteria for critical load.

13 - HYDRO ENERGY↗

Droughts Reduce Growth Rates and Increase Vulnerability to Increasingly Frequent and Severe Drying Events in an Aquatic Ectotherm

Many aquatic organisms are experiencing increasingly severe and frequent droughts and drying events. Simultaneously, drought effects are carrying over to nondrought years as ecosystems remain in incomplete states of recovery. Aquatic organisms are thus faced with fewer sequential years under degraded environmental conditions to prepare for increasingly severe droughts and potential drying events. We assessed the effect of droughts and sex on the growth, mass, and mass-dependent estivation potential of long-lived aquatic salamanders (Greater Sirens, Siren lacertina) that estivate during drying events brought on by severe droughts. We calculated growth rates of S. lacertina based on mark–recapture data spanning 11 yr of a severe drought local minimum (of past 50 yr) in the southeastern United States. Sirens showed a distinct seasonal gain in body length and mass from March through September and little growth for the rest of the year. Gains during the growth season were strongly reduced by drought conditions. Although male and female sirens were predicted to reach a similar maximum body size, females grew much slower. Recruitment into drying event ‘‘size refugia’’ is constrained by drying event severity (determines minimum size required), frequency (determines available time between events to grow), and environmental conditions between drying events (determines the rate of growth). Thus, increases in drying event severity and frequency will require faster growth to a larger body size for successful recruitment into a size class that is resistant to drying events. The slower growth of females and reduction of growth during suboptimal years (mild to moderate droughts) suggest that the life history strategy of Greater Sirens for persisting through drying events potentially increases their demographic susceptibility to the predicted effects of climate change.

59 BASIC BIOLOGICAL SCIENCES↗

Utility-Scale Operational Consequences for Solar Grid Services

This report delves into the critical aspects of grid services provided by solar inverter-based resources (IBRs), with an emphasis on the evolving landscape of microgrids, virtual power plants (VPPs), aggregators, and distributed energy resource management systems (DERMS). As the energy sector undergoes a transformative shift towards more decentralized and resilient grid architectures, understanding the multifaceted risks associated with these technologies becomes paramount. The report categorizes these risks into organizational, technical, and procedural domains, providing a thorough risk assessment framework that stakeholders can utilize to anticipate and mitigate potential issues. In addressing the increasing complexity of grid interconnections, the report highlights the importance of Cyber-Informed Engineering (CIE). By embedding engineering controls and cybersecurity measures into the early stages of system design, this approach aims to fortify grid infrastructure against emerging cyber threats. The analysis includes an exploration of best practices and strategies for integrating CIE principles to enhance grid security and resilience. To provide practical insights, the report conducts a detailed consequence analysis of various grid services and cyber mitigations that can be applied through the interconnection process. This analysis evaluates the potential impacts of different failure modes and vulnerabilities, offering a clear understanding of the consequences that could arise from disruptions within the energy grid. The findings are further enriched by a series of case studies that illustrate real-world scenarios and lessons learned from past incidents. Through this comprehensive examination of grid services and their criticality, the report aims to prepare industry professionals with the knowledge and tools necessary to navigate the complexities of modern energy systems. By providing a comprehensive approach that includes risk assessment, cybersecurity, and consequence analysis, solar stakeholders can more effectively guarantee the reliability, efficiency, and security of the energy grid.

14 SOLAR ENERGY↗

Gaps in global wildlife trade monitoring leave amphibians vulnerable

As the biodiversity crisis continues, we must redouble efforts to understand and curb pressures pushing species closer to extinction. One major driver is the unsustainable trade of wildlife. Trade in internationally regulated species gains the most research attention, but this only accounts for a minority of traded species and we risk failing to appreciate the scale and impacts of unregulated legal trade. Despite being legal, trade puts pressure on wild species via direct collection, introduced pathogens, and invasive species. Smaller species-rich vertebrates, such as reptiles, fish, and amphibians, may be particularly vulnerable to trading because of gaps in regulations, small distributions, and demand of novel species. Here, we combine data from five sources: online web searches in six languages, Convention on International Trade in Endangered Species (CITES) trade database, Law Enforcement Management Information System (LEMIS) trade inventory, IUCN assessments, and a recent literature review, to characterise the global trade in amphibians, and also map use by purpose including meat, pets, medicinal, and for research. We show that 1215 species are being traded (17% of amphibian species), almost three times previous recorded numbers, 345 are threatened, and 100 Data Deficient or unassessed. Traded species origin hotspots include South America, China, and Central Africa; sources indicate 42% of amphibians are taken from the wild. Newly described species can be rapidly traded (mean time lag of 6.5 years), including threatened and unassessed species. The scale and limited regulation of the amphibian trade, paired with the triptych of connected pressures (collection, pathogens, invasive species), warrants a re-examination of the wildlife trade status quo, application of the precautionary principle in regard to wildlife trade, and a renewed push to achieve global biodiversity goals.

Hughes, Alice C.↗

Assessment and Coordination of EVSE Cybersecurity Standards

Cybersecurity certification programs for Electric Vehicle Supply Equipment (EVSE) are fragmented due to no single certification covering all aspects of the device and additionally the existence of multiple programs and under different levels of regulation. These devices are also confronted by the intricate assembly of product software, firmware, and hardware. Devices contain both logical and physical interfaces. These multifaceted devices have vulnerabilities at many levels and interconnect with other potentially vulnerable systems including the electric vehicle, the cloud where data and payment information are stored, and the electric grid and electric grid equipment including utilities. Of the EVSE certification programs that are found, none are directly for the cybersecurity of EVSE. Many standards are for safety, specifically battery safety, some are cybersecurity standards for other types of equipment and can be modeled for EVSE. In specific, ISA/IEC 62443 is found to be significantly in line with EVSE security needs and will be used in future testing to certify EVSE and help guide the project to demonstrate where gaps exist, where strengths lie in the standard and how this can be used to lead the certification efforts in harmonizing EVSE cybersecurity standards. In addition, there are multiple efforts that are currently seeking to build EVSE standards or revise existing standards to address gaps. This effort is seeking to establish a cybersecurity program for EVSE that will inform customers and help increase the level of security across products and state EVSE procurements to achieve consistency across different jurisdictions.

33 ADVANCED PROPULSION SYSTEMS↗

Pavement condition and climatic data in southeast Texas: A dataset for evaluating flood impacts on pavement performance

Effective pavement maintenance is essential for economic stability, optimal network performance, and roadway safety. Achieving this requires thorough evaluation of pavement conditions, including structural integrity, surface roughness, and distress characteristics. Pavement performance indicators play a critical role in influencing vehicle safety and ride quality. Recent advances have emphasized the use of data-driven modeling to anticipate pavement behavior, with the goal of optimizing resource allocation and refining Maintenance and Rehabilitation (M&R) strategies through accurate condition assessment. A foundational requirement for these modeling efforts is the availability of standardized, high-quality datasets that can support robust and reproducible infrastructure analysis. This data article presents a comprehensive dataset assembled to facilitate pavement performance prediction, with a geographic focus on Southeast Texas, particularly the flood-vulnerable area of Beaumont. The dataset encompasses pavement and traffic attributes, meteorological records, flood simulation outputs, ground deformation measurements, and topographic indices, enabling detailed examination of both load-associated and non-load-associated degradation mechanisms. Data preprocessing was performed using ArcGIS Pro, Microsoft Excel, and Python to ensure consistency and usability in data-driven modeling applications, including machine learning workflows. Key contributions of this dataset include its utility in analyzing the climatic and environmental factors affecting pavement conditions, identifying critical predictive features, and enabling in-depth correlation analysis across diverse variables. By filling existing gaps in input variable selection resources, this dataset supports the development of predictive tools for estimating future maintenance demand and enhancing the resilience of pavement networks in flood-impacted areas. The resource highlights the importance of standardized datasets for advancing pavement management practices and provides a robust foundation for ongoing infrastructure performance modeling.

42 ENGINEERING↗

Residential Building Stock Characterization in Palm Beach County, Florida

This building stock characterizations is intended to help Palm Beach County (PBC) Office of Resilience (OOR) and municipalities composing the Municipal Resilience Partnership prioritize building energy efficiency investments to reduce energy costs and increase resilience for the county's most vulnerable residents. The analysis utilizes NREL’s ResStock model to characterize PBC’s residential building stock, including building type, renter/owner status, size (square footage), age of buildings (vintage), HVAC system types, and, for multi-family buildings, number of units. Building energy efficiency, weatherization, and electrification upgrade packages were assessed for approximate cost, customer bill-savings, and emissions reductions potential and findings will help guide OOR financial assistance program design.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Assessing the exposure of three diving bird species to offshore wind areas on the U.S. Atlantic Outer Continental Shelf using satellite telemetry

Abstract Aim The United States Atlantic Outer Continental Shelf (OCS) has considerable offshore wind energy potential. Capturing that resource is part of a broader effort to reduce CO 2 emissions. While few turbines have been constructed in U.S. waters, over a dozen currently planned offshore wind projects have the potential to displace marine birds, potentially leading to effective habitat loss. We focused on three diving birds identified in Europe to be vulnerable to displacement. Our research aimed to determine their potential exposure to areas designated or proposed for offshore wind development along the Atlantic OCS. Methods Satellite tracking technology was used to determine the spatial and temporal use and movement patterns of Surf Scoters ( Melanitta perspicillata ), Red‐throated Loons ( Gavia stellata ) and Northern Gannets ( Morus bassanus ), and calculate their exposure to each offshore wind area. We tagged 236 adults in 2012–2015 on the Atlantic OCS from New Jersey to North Carolina; an additional 147 birds tagged in previous tracking studies were integrated into our analyses. Tracking data were analysed in two‐week intervals using dynamic Brownian bridge movement models to develop composite spatial utilization distributions. For each species, these distributions were then used to calculate the spatio‐temporal exposure to each offshore wind area. Results Surf Scoters and Red‐throated Loons were exposed to offshore wind areas almost exclusively during migration because these species were distributed among coastal and inshore waters during winter months. In contrast, Northern Gannets ranged over a much larger area, reaching farther offshore and south in winter, thus exhibited the greatest exposure to extant offshore wind areas. Conclusions Results of this study provide better understanding of how diving birds use current and potential future offshore wind areas on the Atlantic OCS, and can inform permitting, risk assessment and pre‐ and post‐construction impact assessments of offshore energy infrastructure.

Stenhouse, Iain J.↗

Hantavirus is Associated With Open Developed Areas and Arid Climates, Highlighting Increased Risk in the Western United States

In the United States, hantaviruses can cause hantavirus pulmonary syndrome (HPS) in humans, an acute respiratory illness with a high mortality rate. Most people contract HPS from exposure to infected rodent excrement. The interannual dynamics of hantavirus transmission are tied to both environmental and human-related factors, including changes in annual climate conditions, rodent populations, and the built environment in which humans are more likely to be exposed. Similar environmental conditions and socioeconomic factors also likely determine the long-term risk of hantavirus exposure. Here, we use ecological niche models and human cases of HPS in the U.S. from 1993 to 2022 to assess hantavirus risk using four socioeconomic variables, 17 land use variables, one variable of rodent richness, and seven climate variables to determine both the geographical locations of highest exposure risk and leading environmental predictors. We found that areas with higher relative risk tend to be where it is drier, higher social vulnerability, increased rodent richness, and more open to low levels of development—this largely mapped to the western U.S. We found evidence that fringe ecosystems may be important areas of hantavirus transmission, similar to other emerging diseases. Increased rodent richness was associated with increased hantavirus risk, warranting further investigation into how the abundance and community composition of rodents could impact long-term risk. These risk maps can help public health officials develop plans for mitigating hantavirus, especially for the most susceptible populations. They can also be used to further investigate regions estimated to be at high risk for hantavirus where disease cases have not been as common but may be underreported.

54 ENVIRONMENTAL SCIENCES↗

Large-Scale Hydrogen Storage Cyber Risk Assessment

Hydrogen storage systems are becoming more widely deployed throughout the country, and as their presence continues to grow, it is possible that individual and interconnected systems will be exposed to cyber-attacks. These events can cause physical and financial harm to employees, people in the vicinity, and to the company that owns the facility. The two main mechanisms malicious actors may access information or control from a hydrogen storage facility are through information technology and operations technology devices, the former of which refers to data and information from networked devices and the latter of which refers to onsite controls for the physical system. Both types of entryways into the system should be considered when facility managers conduct cyber risk assessments and when regulators develop or revise relevant codes and standards. This report analyzes cybersecurity risks applicable to a wide variety of hydrogen storage systems by outlining the system's purpose and the importance of its cybersecurity. The hydrogen storage system architecture and communication protocols are provided to understand potential cyber vulnerabilities. Later, an event tree analysis is performed on hydrogen operation to identify system weaknesses by outlining potential attack scenarios. This report also identifies critical cyber assets related to different hydrogen operations followed by an examination of potential threats, and the impact of cyber assets on those operational assets.

08 HYDROGEN↗