SEARCH · Engineering Papers

Results for “vulnerability analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20

All sources NASA NTRS DOE OSTI

NASA NTRS2003

An Overview of the NASA Aviation Safety Program (AVSP) Systemwide Accident Prevention (SWAP) Human Performance Modeling (HPM) Element

An overview is provided of the Human Performance Modeling (HPM) element within the NASA Aviation Safety Program (AvSP). Two separate model development tracks for performance modeling of real-world aviation environments are described: the first focuses on the advancement of cognitive modeling tools for system design, while the second centers on a prescriptive engineering model of activity tracking for error detection and analysis. A progressive implementation strategy for both tracks is discussed in which increasingly more complex, safety-relevant applications are undertaken to extend the state-of-the-art, as well as to reveal potential human-system vulnerabilities in the aviation domain. Of particular interest is the ability to predict the precursors to error and to assess potential mitigation strategies associated with the operational use of future flight deck technologies.

Foyle, David C.↗

NASA NTRS2015

Assessing Wetland Hydroperiod and Soil Moisture With Remote Sensing: A Demonstration for the NASA Plum Brook Station Year 2

Primary Goal: Assist with the evaluation and measuring of wetlands hydroperiod at the PlumBrook Station using multi-source remote sensing data as part of a larger effort on projecting climate change-related impacts on the station's wetland ecosystems. MTRI expanded on the multi-source remote sensing capabilities to help estimate and measure hydroperiod and the relative soil moisture of wetlands at NASA's Plum Brook Station. Multi-source remote sensing capabilities are useful in estimating and measuring hydroperiod and relative soil moisture of wetlands. This is important as a changing regional climate has several potential risks for wetland ecosystem function. The year two analysis built on the first year of the project by acquiring and analyzing remote sensing data for additional dates and types of imagery, combined with focused field work. Five deliverables were planned and completed: 1) Show the relative length of hydroperiod using available remote sensing datasets 2) Date linked table of wetlands extent over time for all feasible non-forested wetlands 3) Utilize LIDAR data to measure topographic height above sea level of all wetlands, wetland to catchment area radio, slope of wetlands, and other useful variables 4) A demonstration of how analyzed results from multiple remote sensing data sources can help with wetlands vulnerability assessment 5) A MTRI style report summarizing year 2 results. This report serves as a descriptive summary of our completion of these our deliverables. Additionally, two formal meetings were held with Larry Liou and Amanda Sprinzl to provide project updates and receive direction on outputs. These were held on 2/26/15 and 9/17/15 at the Plum Brook Station. Principal Component Analysis (PCA) is a multivariate statistical technique used to identify dominant spatial and temporal backscatter signatures. PCA reduces the information contained in the temporal dataset to the first few new Principal Component (PC) images. Some advantages of PCA include the ability to filter out temporal autocorrelation and reduce speckle to the higher order PC images. A PCA was performed using ERDAS Imagine on a time series of PALSAR dates. Hydroperiod maps were created by separating the PALSAR dates into two date ranges, 2006-2008 and 2010, and performing an unsupervised classification on the PCAs.

Brooks, Colin↗

DOE OSTI2024

Delamination and Buckling Analysis of a Laminated Component in a High-speed Permanent Magnet Motor

High-speed permanent magnet (PM) machines are widely used because of their high-power density and high efficiency. The high rotation speed also inevitably subjects the PMs to high centrifugal load, which might damage them due to their inherent mechanical vulnerability, such as a much lower tensile strength than the compressive strength. To robustly transfer the torque from the magnet to the shaft, the outer diameter of the laminated rotor core is larger than the inner diameter of the rotor frame to ensure tight contact while working at 20,000 rpm. Motor manufacturing requires the shrink-fit method to assemble the rotor frame and rotor core. However, after the shrink-fit assembly, unexpected local delamination and buckling are observed on the rotor core part. Utilizing finite element simulation, we study the internal stress of assembling these two parts at the provided interference. Simulation results indicate the reasons for the delamination and buckling of the rotor core part and provide suggestions for improving the assembly.

Lin, Lianshan↗

NASA NTRS2009

Spatial Analysis of West Nile Virus: Predictive Risk Modeling of a Vector-borne Infectious Disease in Illinois by Means of NASA Earth Observation Systems

West Nile Virus is a mosquito-borne virus of the family Flaviviridae. It infects birds and various mammals, including humans, and can cause encephalitis that may prove fatal, notably among vulnerable populations. Since its identification in New York City in 1999, WNV has become established in a broad range of ecological settings throughout North America, infecting more than 25,300 people and killing 1133 as of 2008 (CDC,2009). WNV is transmitted by mosquitoes that feed on infected birds. As a result, the degree of human infection depends on local ecology and human exposure. This study hypothesizes that remote sensing and GIS can be used to analyze environmental determinants of WNV transmission, such as climate, elevation, land cover, and vegetation densities, to map areas of WNV risk for surveillance and intervention.

Renneboog, Nathan↗

DOE OSTI2023

Towards generic memory forensic framework for programmable logic controllers

A Programmable Logic Controller (PLC) is a microprocessor-based controller that is used to automate physical processes in critical infrastructure and various other industries and manufacturing sectors. Initially, PLCs were completely isolated from the Internet, and cyber security was not incorporated at the time of development. The introduction of industry 4.0 and the evolution of ICS systems to communicate over public IP addresses from the Internet enhanced productivity and efficiency, but Internet connectivity exposed the systems and their vulnerabilities, which led to an increase in cyber attacks. When a system is sabotaged/compromised, security analysts need to get to the root cause of the attack as quickly as possible to recover the system. To do so, memory forensic analysis is critical to provide a unique insight into the run-time memory activities and extract a reliable source of evidence. In this paper, we analyze the memory structure of the Schneider Electric Modicon M221 PLC. To build a memory profile, we reverse engineer the communication protocol and conduct differential analysis to gain knowledge about the structure of the memory and the low-level representation of control logic instructions. We then identify dynamic and static memory regions by modifying different project fields and conducting differential analysis, which allows us to identify boundaries of critical memory structures and extract important forensic artifacts that can be found in the memory. The Python implementation of the memory profile can help reduce the time and effort required for manual analysis in case of cyber incident or system failure.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2025

AI-based Cyber Event OSINT via Twitter Data

Open-Source Intelligence (OSINT) is largely regarded as a necessary component for cybersecurity intelligence gathering to secure network systems. With the advancement of artificial intelligence (AI) and increasing usage of social media, like Twitter, we have a unique opportunity to obtain and aggregate information from social media. In this study, we propose an AI-based scheme capable of automatically pulling information from Twitter, filtering out security-irrelevant tweets, performing natural language analysis to correlate the tweets about each cybersecurity event (e.g., a malware campaign), and validating the information. This scheme has many applications, such as providing a means for security operators to gain insight into ongoing events and helping them prioritize vulnerabilities to deal with. To give examples of the possible uses, we present three case studies demonstrating the event discovery and investigation processes.

Dale, Dakota↗

DOE OSTI2026

Unsupervised Detection of SOC Spoofing in OCPP 2.0.1 EV Charging Communication Protocol Using One-Class SVM

The electric vehicles (EVs) market keeps growing globally; thus, it is critical to secure the EV charging communication protocols in order to guarantee reliable and fair charging operations among the customers. The Open Charge Point Protocol (OCPP) 2.0.1 supports the communication between the Electric Vehicle Supply Equipment (EVSE) and Charging Station Management Systems (CSMSs); therefore, it becomes vulnerable to several types of attacks, which aim to jeopardize smart charging, billing, and energy management. Specifically, OCPP 2.0.1 allows the self-reporting of the State of Charge (SOC) values, which makes it vulnerable to spoofing-based cyberattacks, which target manipulating the scheduling priorities, distorting the load forecasts, and extending the charging sessions in an unfair manner. In this paper, we try to address this type of attack by providing a comprehensive analysis of the SOC spoofing attacks and introducing a novel unsupervised detection framework based on the One-Class Support Vector Machine (OCSVM) algorithm. Specifically, two types of attack scenarios are analyzed (i.e., priority manipulation and session extension) by deriving engineered features that capture the nonlinear relationships under normal charging behavior. Detailed simulation-based results are derived by utilizing the DESL-EPFL Level 3 EV charging dataset. Our results demonstrate high F1-score and recall in identifying spoofed SOC values and that the proposed OCSVM model demonstrates superior performance compared to alternative clustering and deep-learning based detectors.

EV charging↗

NASA NTRS2012

Dust Hazard Management in the Outer Solar System

Most robotic missions to the outer solar system must grapple with the hazards posed by the dusty rings of the gas giants. Early assessments of these hazards led simply to ring avoidance due to insufficient data and high uncertainties on the dust population present in such rings. Recent approaches, principal among them the Cassini dust hazard management strategy, provide useful results from detailed modeling of spacecraft vulnerabilities and dust hazard regions, which along with the range of mission trajectories are used to to assess the risks posed by each passage through a zone of potential hazard. This paper shows the general approach used to implement the analysis for Cassini, with recommendations for future outer planet missions.

mission hazards↗

DOE OSTI2025

Open Source Intelligence for Cybersecurity Events via Twitter Data

Dale, Dakota↗

DOE OSTI2025

Data Centers and Digital Assurance Introduction to Supply Chain and Cybersecurity for Data Centers, Session 1

The first session of the TADA (Technical Assistance for Digital Assurance) Data Centers Cohort Workshop, held on October 30, 2025, introduced foundational concepts of Digital Assurance in the context of data center and grid integration. Sponsored by the U.S. Department of Energy, the workshop brought together utilities, data center operators, developers, and vendors to address cybersecurity and supply chain vulnerabilities. The session emphasized the growing criticality of data centers within the electric grid and the need for secure, real-time, bidirectional communication. Participants explored the principles of Digital Assurance, including cybersecurity, cyber-informed engineering (CIE), and lifecycle security, and applied a threat-vulnerability-consequence framework to identify and mitigate risks at the data center–grid interface. Discussions covered a range of threats such as spoofed dispatch signals and insider threats, architectural vulnerabilities like SCADA interfaces and insecure protocols, and potential consequences including cascading grid failures. The session also raised strategic questions about business value, vendor assurance, and defining cyber boundaries and responsibilities. This foundational workshop set the stage for deeper technical analysis and the development of actionable frameworks in subsequent sessions. Session 1 of 3.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2025

Energy efficiency and thermal resilience analysis for row houses using representative building energy models

Row houses, a prevalent medium-density urban archetype, were popularized during industrial era to accommodate the working class in the U.S. cities. Today, many of these structures are deteriorating, exacerbating the energy cost for residents with limited economic resources. Moreover, many households that lack Air Conditioning (AC) are vulnerable to extreme summer heat, an issue expected to worsen in the future. Energy-efficient retrofits can help mitigate these challenges. However, current literature provides limited insight into how existing building energy codes impact the energy efficiency and thermal resilience of row houses in current and future weather scenarios. This study provides a detailed method to address this gap by employing calibrated representative energy models of row houses as a baseline, and evaluating the annual energy savings and summertime thermal safety improvements from code compliant retrofits under current and future typical weather conditions. Using Baltimore City as a case study, results show that under current weather, retrofitting row houses yields significant energy savings along with notable thermal resilience improvements. The end unit row house realizes higher energy savings, whereas the interior unit experiences greater thermal resilience improvement after retrofitting. In future, retrofitted row houses can still save energy, but residents will face numerous hours of fatal indoor temperatures without AC in summer. Additionally, findings reveal stark zone-wise variations in thermal safety, and elevated humidity risks in certain zones post-retrofit, emphasizing the need for zonal retrofit strategies and better natural ventilation strategies.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2024

Integration of equitable resilience metrics into climate-informed electric utility planning processes: phase one

Working together, Sandia National Laboratories, Southern California Edison (SCE) - an Investor-Owned Utility (IOU) - and the California Public Utilities Commission (CPUC) are studying how electric utilities can use equity and resilience metrics to help inform the prioritization and sequencing of resilience-driven infrastructure investments. To this end, this project evaluated “Social Burden,” an equitable resilience metric which measures the potential impact of disruptions in access to non-electric critical services on people and estimates community resilience to these disruptions. The Social Burden was expanded to incorporate SCE’s existing equity metric and applied to evaluate the potential impacts from a range of climate-informed hypothetical outage scenarios developed under SCE’s 2022 Climate Adaptation Vulnerability Assessment. One baseline (“blue-sky”) state and eight different outage scenarios were evaluated to measure the potential impacts of the outages on non-electric infrastructure, critical services, and people. Key findings include: 1) the Social Burden framework is flexible enough to adapt to and build upon existing utility equity and/or resilience metrics, 2) Social Burden results highlight the high degree of non-electric service redundancy within the SCE service area with most (6/8) hypothetical outage scenarios predicted to increase people’s Social Burden by less than 10%; however, 3) access to critical services and people’s ability to obtain them is unequal and spatially clustered, meaning that there are some hypothetical outage scenarios (2/8) that will exert a higher toll on communities directly experiencing the outage as well as some nearby communities with pre-existing vulnerabilities. The report concludes with recommendations for potential use cases of the expanded Social Burden metric and identifies priority follow-on work. Potential use cases may include incorporating equity into IOU’s prioritization of climate resilience investments. Additionally, Social Burden analysis may provide additional data and insights to augment grid planning, potentially by identifying additional needs and/or prioritizing previously identified needs.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NASA NTRS2007

Pressing the Approach: A NASA Study of 19 Recent Accidents Yields a New Perspective on Pilot Error

This article begins with a review of two sample airplane accidents that were caused by pilot error. The analysis of these and 17 other accidents suggested that almost all experienced pilot operating in the same environment in which the accident crews were operating and knowing only what the accident crews knew at each moment of the flight, would be vulnerable to making a similar decision and similar errors. Whether a particular crew in a given situation makes errors depends on somewhat random interaction of factors. Two themes that seem to be prevalent in these cases are: Plan Continuation Bias, and Snowballing Workload.

Berman, Benjamin A.↗

NASA NTRS2018

The Probability of False Go/No-Go Determined by GOES Proton Flux: Proposed Launch Constraints for Avoiding Damaging Solar Energetic Particle Events

Most space-bound hardware needs to be designed to withstand space weather events to some degree. Long-term predictability of space weather events, such as solar flares or coronal mass ejections, are still a matter of theory so designers should assume a worst case event for their specific environment. In our analysis, we show preliminary results of the probability of encountering a false/true go/no-go based on a threshold launch and design proton environment. The goal in choosing a threshold launch environment is to avoid the chance of exceeding the design environment during vulnerable parts of the mission. Operationally, this method cannot predict damaging space weather but can aid in avoiding space weather events that are already occurring. The GOES (Geostationary Operational Environmental Satellite) proton flux database is used as a proxy for the heavy ion fluxes, which impart a greater threat because of larger single event upsets and effects. Our use of protons as a proxy for heavy ions is justified on the basis of the correlation between their fluxes shown by a qualitative comparison of GOES proton integral fluxes at greater than 10 megaelectronvolts and ACE/SIS (Advanced Composition Explorer / Solar Isotope Spectrometer) heavy ion integral fluxes.

DeStefano, Anthony M.↗

NASA NTRS2022

Chile Wildfires: Utilizing NASA and NOAA Earth Observations to Determine Lightning-ignited Wildfire Risks in Central Chile

In recent years, Central Chile has experienced wildfires of increasing frequency and intensity which threaten natural resources and communities. The Corporación Nacional Forestal (CONAF) responds to wildfires caused by a variety of ignitions, including lightning, but it is difficult to determine the prevalence of lightning-ignited wildfires based solely on ground observations. In collaboration with CONAF and the Embassy of Chile, Agricultural Office, the team used Earth observations to map coincidence of lightning strikes and wildfire ignitions. The Active Fire Product of Suomi NPP Visible Infrared Imaging Radiometer Suite (VIIRS) identified wildfires as thermal anomalies, which the team compared to the lightning events detected by NOAA’s GOES-16 Geostationary Lightning Mapper (GLM). Next, the team mapped lightning strike frequency and lightning related wildfires across the study area. Finally, the team calculated and mapped a relative estimate of lightning-ignited wildfire vulnerability across the year, fire season (December – March), and off-season (April – November) by summing the following factors: lightning frequency, the Normalized Difference Moisture Index (NDMI) and land surface temperature (LST). These risks were then weighted by fuel availability. Preliminary analysis of the lightning fire relationship showed a spatiotemporal coincidence, primarily in the South-central region of study, near Temuco, and isolated areas on the Andean front. The team identified areas at risk of lightning-induced wildfires, predominantly in the northern third of the study area and along the Andean front. Adjusting the relative weight of risk factors and improving the lightning and fire coincidence map by clustering VIIRS thermal anomalies into fire events could reduce discrepancies and improve risk assessments for future work.

Christopher Matechik↗

DOE OSTI2024

Baseload Hydrogen Production Using Nuclear and Renewable Energy: A Comparative Analysis

As the global push towards net zero carbon gains momentum, the demand for clean hydrogen is expected to grow rapidly across various sectors, including transportation, industries and electrical grids. To meet this growing hydrogen demand, baseload hydrogen production facilities capable of providing a continuous and reliable supply of hydrogen will be necessary throughout the world. This paper explores the technoeconomic feasibility of establishing baseload electrolytic hydrogen production facilities in the United States, utilizing different clean generation resources. The key criteria include maintaining a consistent supply of clean hydrogen without putting baseload demand stress to already vulnerable power grid. In order to do that, the proposed facilities will host onsite clean power generation and energy storage technologies. The proposed facilities can capitalize on available investment and production incentives and have ability to export excess electricity to the utility at a bulk price. Several scenarios are considered based on the clean energy resources to support the electrolysis process including light water reactors (LWRs) currently evaluating retirement options, wind, solar PVs, and advanced small modular reactors (SMRs). For each scenario, a hypothetical hydrogen production facility is considered in a location in the US where the primary generation resource is at its peak strength. Comparative analysis in this paper reveal that the nuclear power plants are most economically viable for baseload hydrogen production facilities, outperforming renewable-based facilities with significantly lower levelized cost of hydrogen (LCOH). Even under best-case scenarios for resource availability, incentives and export prices, renewable-based facilities face challenges due to daily and seasonal generation variability, resulting in large installation sizes and lower capacity factors. Among renewable-based facilities, complementarity hybrids, providing more stable power supply, demonstrate superior economics compared to facilities based on a single renewable technology. While LWR-powered facility can achieve a negative LCOH with incentives, SMR-powered facilities can provide economic hydrogen supply with LCOH below $1/kg with high temperature electrolysis option. The analysis in this paper underscores the pivotal role of nuclear energy in the future hydrogen economy.

08 - HYDROGEN↗

DOE OSTI2024

Advanced Permanent Magnet Generator Topologies Using Multimaterial Shape Optimization and 3D Printing: Preprint

A vast majority of utility-scale wind turbine generators in the United States are dependent on foreign- sourced rare-earth permanent magnets that are vulnerable to supply chain uncertainties. Many small wind original equipment manufacturers are motivated to pursue continuous improvements to the generator design to lower the material and production costs and improve performance by lowering cogging torque and increasing the efficiency. Traditional design and manufacturing offer limited opportunities. In this work, we demonstrate advanced design approaches for a 15-kW baseline wind turbine generator by making use of recent progress in three-dimensional (3D) printing of polymer- bonded magnets and, electrical and structural steel. We explore three methods of magnet parametrization using Bezier curves resulting in symmetric, asymmetric and multimaterial magnet designs. We employ a multiphysics approach combining parametric computer-aided design modeling, finite- element analysis and targeted sampling to identify novel designs with more opportunities for reducing rare-earth material, improving efficiency and minimizing cogging torque. The results show that asymmetric-pole design and multimaterial-pole designs offer a greater opportunity to minimize rare-earth magnet materials by up to 35% with similar performance as the baseline generator, suggesting newer opportunities with design freedom beyond traditional limits of symmetry and as allowed by 3D printing.

Bezier curves↗

DOE OSTI2023

Cyber and Physical Security Analysis of GSI and Noventum Application for IoT Communications

We present our findings of the red team exercise conducted on the device and application developed by Guardian Sensors, Inc. (GSI) and Noventum. The app is used for situational awareness and control of photovoltaics (PV) and microgrid energy systems. The assessments performed are practical case scenarios that assess the risks and vulnerabilities posed by the app through targeted activities that could be engaged by an adversary. The assessment team’s results and recommendations are provided to inform on and mitigate the identified weaknesses to improve secure user authentication, connections, and communications. The recommendations in this report are not intended to be a security panacea but will add the desired defense-in-depth layer to securing communication of such interconnected systems.

24 POWER TRANSMISSION AND DISTRIBUTION↗