Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 415 records · Page 23
All sourcesNASA NTRSDOE OSTI
NASA NTRS2016

Evaluating ESA CCI Soil Moisture in East Africa

To assess growing season conditions where ground based observations are limited or unavailable, food security and agricultural drought monitoring analysts rely on publicly available remotely sensed rainfall and vegetation greenness. There are also remotely sensed soil moisture observations from missions like the European Space Agency (ESA) Soil Moisture and Ocean Salinity (SMOS) and NASAs Soil Moisture Active Passive (SMAP), however these time series are still too short to conduct studies that demonstrate the utility of these data for operational applications, or to provide historical context for extreme wet or dry events. To promote the use of remotely sensed soil moisture in agricultural drought and food security monitoring, we use East Africa as a case study to evaluate the quality of a 30+ year time series of merged active-passive microwave soil moisture from the ESA Climate Change Initiative (CCI-SM). Compared to the Normalized Difference Vegetation index (NDVI) and modeled soil moisture products, we found substantial spatial and temporal gaps in the early part of the CCI-SM record, with adequate data coverage beginning in 1992. From this point forward, growing season CCI-SM anomalies were well correlated (R greater than 0.5) with modeled, seasonal soil moisture, and in some regions, NDVI. We use correlation analysis and qualitative comparisons at seasonal time scales to show that remotely sensed soil moisture can add information to a convergence of evidence framework that traditionally relies on rainfall and NDVI in moderately vegetated regions.

Amy McNally↗
NASA NTRS2005

Recent Advances in Radar Polarimetry and Polarimetric SAR Interferometry

The development of Radar Polarimetry and Radar Interferometry is advancing rapidly, and these novel radar technologies are revamping Synthetic Aperture Radar Imaging decisively. In this exposition the successive advancements are sketched; beginning with the fundamental formulations and high-lighting the salient points of these diverse remote sensing techniques. Whereas with radar polarimetry the textural fine-structure, target-orientation and shape, symmetries and material constituents can be recovered with considerable improvements above that of standard amplitude-only Polarization Radar ; with radar interferometry the spatial (in depth) structure can be explored. In Polarimetric-Interferometric Synthetic Aperture Radar (POL-IN-SAR) Imaging it is possible to recover such co-registered textural plus spatial properties simultaneously. This includes the extraction of Digital Elevation Maps (DEM) from either fully Polarimetric (scattering matrix) or Interferometric (dual antenna) SAR image data takes with the additional benefit of obtaining co-registered three-dimensional POL-IN-DEM information. Extra-Wide-Band POL-IN-SAR Imaging - when applied to Repeat-Pass Image Overlay Interferometry - provides differential background validation and measurement, stress assessment, and environmental stress-change monitoring capabilities with hitherto unattained accuracy, which are essential tools for improved global biomass estimation. More recently, by applying multiple parallel repeat-pass EWB-POL-D(RP)-IN-SAR imaging along stacked (altitudinal) or displaced (horizontal) flight-lines will result in Tomographic (Multi- Interferometric) Polarimetric SAR Stereo-Imaging , including foliage and ground penetrating capabilities. It is shown that the accelerated advancement of these modern EWB-POL-D(RP)-IN-SAR imaging techniques is of direct relevance and of paramount priority to wide-area dynamic homeland security surveillance and local-to-global environmental ground-truth measurement and validation, stress assessment, and stress-change monitoring of the terrestrial and planetary covers. In addition, various closely related topics of (i) acquiring additional and protecting existing spectral windows of the Natural Electromagnetic Spectrum (NES) pertinent to Remote Sensing; (ii) mitigating against common "Radio Frequency Interference (RFI)" and intentional Directive Jamming of Airborne & Space borne POL-IN-SAR Imaging Platforms are appraised.

Boerner, Wolfgang-Martin↗
NASA NTRS2016

Cyber-Threat Assessment for the Air Traffic Management System: A Network Controls Approach

Air transportation networks are being disrupted with increasing frequency by failures in their cyber- (computing, communication, control) systems. Whether these cyber- failures arise due to deliberate attacks or incidental errors, they can have far-reaching impact on the performance of the air traffic control and management systems. For instance, a computer failure in the Washington DC Air Route Traffic Control Center (ZDC) on August 15, 2015, caused nearly complete closure of the Centers airspace for several hours. This closure had a propagative impact across the United States National Airspace System, causing changed congestion patterns and requiring placement of a suite of traffic management initiatives to address the capacity reduction and congestion. A snapshot of traffic on that day clearly shows the closure of the ZDC airspace and the resulting congestion at its boundary, which required augmented traffic management at multiple locations. Cyber- events also have important ramifications for private stakeholders, particularly the airlines. During the last few months, computer-system issues have caused several airlines fleets to be grounded for significant periods of time: these include United Airlines (twice), LOT Polish Airlines, and American Airlines. Delays and regional stoppages due to cyber- events are even more common, and may have myriad causes (e.g., failure of the Department of Homeland Security systems needed for security check of passengers, see [3]). The growing frequency of cyber- disruptions in the air transportation system reflects a much broader trend in the modern society: cyber- failures and threats are becoming increasingly pervasive, varied, and impactful. In consequence, an intense effort is underway to develop secure and resilient cyber- systems that can protect against, detect, and remove threats, see e.g. and its many citations. The outcomes of this wide effort on cyber- security are applicable to the air transportation infrastructure, and indeed security solutions are being implemented in the current system. While these security solutions are important, they only provide a piecemeal solution. Particular computers or communication channels are protected from particular attacks, without a holistic view of the air transportation infrastructure. On the other hand, the above-listed incidents highlight that a holistic approach is needed, for several reasons. First, the air transportation infrastructure is a large scale cyber-physical system with multiple stakeholders and diverse legacy assets. It is impractical to protect every cyber- asset from known and unknown disruptions, and instead a strategic view of security is needed. Second, disruptions to the cyber- system can incur complex propagative impacts across the air transportation network, including its physical and human assets. Also, these implications of cyber- events are exacerbated or modulated by other disruptions and operational specifics, e.g. severe weather, operator fatigue or error, etc. These characteristics motivate a holistic and strategic perspective on protecting the air transportation infrastructure from cyber- events. The analysis of cyber- threats to the air traffic system is also inextricably tied to the integration of new autonomy into the airspace. The replacement of human operators with cyber functions leaves the network open to new cyber threats, which must be modeled and managed. Paradoxically, the mitigation of cyber events in the airspace will also likely require additional autonomy, given the fast time scale and myriad pathways of cyber-attacks which must be managed. The assessment of new vulnerabilities upon integration of new autonomy is also a key motivation for a holistic perspective on cyber threats.

Complex Networks↗
NASA NTRS2020

Application of Remote Sensing for Ex-Ante Decision Support and Evaluating Impact

Deforestation is an environmental stressor that dramatically threatens biodiversity while having adverse, deep-rooted socioeconomic impacts. Interventions to address deforestation require considerable long-term investments; therefore, assessing their impact is crucial. The UN Convention on Biological Diversity encourages establishing Protected Areas (PAs) as a strategy to conserve biodiversity, secure ecosystem services, support local livelihoods, and reduce climate change impacts. The Global Environment Facility (GEF) has supported the conservation and management of PAs, yet site accessibility and data availability present challenges in assessing PAs using traditional evaluation methods. We present a novel application of satellite Earth observations for evaluating the effectiveness and impact of PAs as a deforestation mitigation strategy. Geospatial analysis and ecological forecasting methodologies provide an efficient way to quantify land cover change, estimate above-ground carbon stock, and evaluate ecosystem services provided by the PAs ex-ante. We demonstrate the value of a geospatial approach through evaluation of GEF-supported PAs in Kenya.

Remote sensing↗
NASA NTRS2014

Groundwater Depletion During Drought Threatens Future Water Security of the Colorado River Basin

Streamflow of the Colorado River Basin is the most overallocated in the world. Recent assessment indicates that demand for this renewable resource will soon outstrip supply, suggesting that limited groundwater reserves will play an increasingly important role in meeting future water needs. Here we analyze 9 years (December 2004 to November 2013) of observations from the NASA Gravity Recovery and Climate Experiment mission and find that during this period of sustained drought, groundwater accounted for 50.1 cu km of the total 64.8 cu km of freshwater loss. The rapid rate of depletion of groundwater storage (5.6 +/- 0.4 cu km/yr) far exceeded the rate of depletion of Lake Powell and Lake Mead. Results indicate that groundwater may comprise a far greater fraction of Basin water use than previously recognized, in particular during drought, and that its disappearance may threaten the long-term ability to meet future allocations to the seven Basin states.

water security↗
DOE OSTI2020

Assessing Anomaly-Based Intrusion Detection Configurations for Industrial Control Systems

To reduce cost and ease maintenance, industrial control systems (ICS) have adopted Ethernetbased interconnections that integrate operational technology (OT) systems with information technology (IT) networks. This integration has made these critical systems vulnerable to attack. Security solutions tailored to ICS environments are an active area of research. Anomalybased network intrusion detection systems are well-suited for these environments. Often these systems must be optimized for their specific environment. In prior work, we introduced a method for assessing the impact of various anomaly-based network IDS settings on security. This paper reviews the experimental outcomes when we applied our method to a full-scale ICS test bed using actual attacks. Our method provides new and valuable data to operators enabling more informed decisions about IDS configurations.

Gillen, Rob↗
DOE OSTI2023

Vulnerabilities in Satellite Communications Underscore Threat to Critical Infrastructure

INL analysts assess critical infrastructure sectors leveraging satellite communications (SATCOM) are likely inadvertently increasing the attack surface caused by inherent vulnerabilities in equipment and communications pathways. A lack of ownership regarding security in SATCOM ecosystems creates pervasive information security risk, and the obfuscation of patching responsibility means the mitigation of publicly and privately disclosed vulnerabilities is difficult to track. With these factors in consideration, INL analysts assess the number of attacks against SATCOM is likely to increase in the next decade as threat actors exploit these vulnerabilities.

99 GENERAL AND MISCELLANEOUS↗
NASA NTRS2021

Argentina Food Security & Agriculture: Crop Monitoring and Forecasting for Argentina using NASA Satellite Observations

Early harvest information helps guide agricultural commodity assessments in Argentina, providing valuable planning information to identify potentially food-insecure regions, anticipate transportation and storage demands, predict price fluctuations, and project commodity trends. However, crop yield estimates are currently subjective, based on interviews with qualified informants (i.e., farmers, agribusiness actors). In partnership with the Buenos Aires Grain Exchange, we leveraged Terra Moderate Resolution Imaging Spectroradiometer (MODIS), Soil Moisture Active Passive (SMAP), and Integrated Multi-satellitE Retrievals for Global Precipitation Measurement (GPM IMERG) NASA Earth observations to develop a Google Earth Engine (GEE) toolset to monitor vegetation growth. The first component of the toolset produces spatial and temporal maps of temperature, precipitation, soil moisture, and the Normalized Difference Vegetation Index (NDVI), allowing users to visualize the influence of the region’s climate and weather. Next, we developed an autoregressive model to predict NDVI several months in advance. Lastly, we created a linear regression model of crop yield and NDVI for soybeans, corn, and wheat, and input the forecasted NDVI to generate a predicted crop yield output. The NDVI forecasting model produced accurate predictions at two, four, and six months when examining the most recent growing season. In the crop yield model, soybeans exhibited moderately strong correlation, wheat had consistent weak correlation, and corn varied from weak to strong correlation depending on zone. This information is vital for vegetation growth monitoring by identifying areas of high growth and allocating resources to areas of lower growth to efficiently maximize crop yields.

DEVELOP Tech Paper↗
DOE OSTI2023

Environmental Impact Assessment of Lithium Recovery from Geothermal Brines in the SS-KGRA: An Overview

There is increasing interest in securing a reliable, domestic source of lithium in the United States to support an electrified grid and energy secure future. The Salton Sea Known Geothermal Resource Area (SS-KGRA) has garnered attention for this purpose due to the abundance of lithium in brines brought to the surface for geothermal energy production in this region. Geothermal production from this field is already expected to grow from the current 400 MWe to 920 MWe in the next 3-4 years with a potential total geothermal capacity in the region estimated at nearly 2,950 MWe. With this growth, there is potential for construction and operation of new direct lithium recovery and processing facilities to meet domestic demands for lithium. In this work, we estimate the potential impact of geothermal expansion and lithium extraction in the SS-KGRA on water use, direct air emissions from facilities, and solid waste production and management.

Busse, MM↗
DOE OSTI2026

System-Level Integration of Modular Language Models for Real-Time Risk Assessment in Third-Party Risk Management Systems

Large enterprises typically rely on dedicated teams to govern and implement security measures throughout their supply chains, ensuring compliance with enterprise security procedures. There is a significant reliance on Third-Party Risk Management (TPRM) platforms, which often require complete, highly structured information from potential vendors. The review and compliance assurance processes are time- and labor intensive, often requiring several rounds of review between the supply chain security risk management teams, business users, and potential vendors, leading to delays in the supply chain processing and consumer experience. Significant challenges in the risk management paradigm include handling unstructured data in various formats and providing real-time feedback to users to reduce the required review time. This paper presents a novel solution to these challenges. A modular multi-step system architecture is proposed using advances in language processing, specifically for unstructured responses and provides real-time feedback (i.e., 3 seconds) so that users can improve their responses before the TPSRM team review. This novel system architecture will increase information accuracy and significantly reduce time and labor during the review process.

99 - GENERAL AND MISCELLANEOUS↗
DOE OSTI2025

FRMAC Laboratory Analysis Manual Volume 1, Revision 0

The Federal Radiological Monitoring and Assessment Center (FRMAC) is an operational center, available on request by the Department of Homeland Security (DHS) to respond to nuclear and radiological incidents as described in the National Response Framework (NRF). Under the Federal Interagency Operational Plan for Response and Recovery’s Nuclear/Radiological Annex, the U.S. Department of Energy (DOE) has the responsibility to maintain the operational readiness of the FRMAC during the emergency phase of an event. FRMAC is initially established and managed by the Nuclear Emergency Support Team (NEST) and serves as an interagency operations center with representatives from various federal, state, and local radiological response organizations. The purpose of the FRMAC is to assist state, local, tribal, and territorial governments (SLTT) in their mission to protect the health and well-being of their citizens with: • Verified radiation measurements. • Interpretations of radiation distributions based on Environmental Protection Agency (EPA), Food and Drug Administration (FDA), or local Protective Action Guidelines (PAGs). • Characterization of overall radiological conditions. Once a declaration to respond to a radiological emergency has been made, the National Nuclear Security Administration (NNSA) Headquarters will coordinate the response in consultation with the cognizant NNSA Regional Coordinating Office (RCO). Each of the eight RCOs maintain a 24-hour response capability for radiological emergencies that may occur in states served by its region. When a FRMAC is established, it operates under the parameters of the Incident Command System (ICS), as defined in the National Incident Management Systems (NIMS) construct. The Consequence Management Home Team (CMHT) will be activated immediately during normal business hours (Pacific Time Zone), and within two hours otherwise. The Consequence Management Response Team (CMRT) is prepared for deployment within six hours after activation. Along with the assets, FRMAC provides an operational framework for coordinating of all federal off-site radiological monitoring and assessment activities during a response to a radiological emergency to support the coordinating agency and SLTT governments. Potential radiological emergencies that fall within FRMAC vary widely in terms of the area affected, the nature of the contamination, and the scope of the government’s response. Detonation of a nuclear device, accidental release of radiation from a nuclear power plant, and a terrorist threat are just a few of the many possible scenarios FRMAC must be prepared to address. Through all this, supporting the state, local, and tribal organizations in the protection of the public remains the primary goal of the federal response.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Plant-specific Model and Data Analysis using Dynamic Security Modeling and Simulation

The requirements for U.S. nuclear power plants to maintain a large on-site physical security force contribute to their high operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability (LWRS) program’s physical security pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. The conservatisms built into current security postures may be analyzed and minimized in order to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within LWRS program’s physical security pathway has successfully developed a dynamic force-on-force modeling framework using various computer simulation tools and integrating them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This document provides an update on the progress in applying a dynamic computational framework that links results from a commercially available force-on-force simulation tool, a commercially available thermal-hydraulic tool, and EMRALD to an operating commercial nuclear power plant. This report is only a summary of the progress and does not contain specific modeling results as those contain sensitive security information. This process of including plant procedures and multiple analysis results is being called Modeling and Analysis for Safety Security using Dynamic EMRALD Framework or MASS-DEF. Previous reports described how a user could integrate their plant-specific force-on-force models with the dynamic simulation tool EMRALD, model operator actions, integrate with probabilistic risk assessment tools, such as CAFTA (Computer Aided Fault Tree Analysis System) or SAPHIRE (Systems Analysis Programs for Hands-on Integrated Reliability Evaluations), and with thermal-hydraulic tools, such as RELAP-5. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report documents the results of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. This report does not contain any plant's sensitive information and/or Safeguards Information. The purpose of this study was to verify that results achieved using generic models are similar to actual plant results and to refine our guidance on the use of the framework. This assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

Threat Hunt Guide for BESS Environments

The rapid digitalization of the electric grid - driven by the integration of inverter-based resources (IBRs), battery energy storage systems (BESS), and advanced grid control platforms - has significantly enhanced grid efficiency, visibility, and flexibility. However, this evolution also introduces new cybersecurity risks, particularly through supply chain dependencies and operational blind spots at the grid edge. To address these challenges, Idaho National Laboratory (INL), through the Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) Rapid Risk initiative, conducted a series of rapid risk assessment engagements with energy organizations across the United States. Drawing on lessons learned from these engagements, INL developed the following threat hunting guide for asset owners and operators (AOOs) to enhance their cybersecurity visibility within BESS and IBR systems. The guide demonstrates how to use passive network monitoring to baseline device behavior, detect adversarial activity, and investigate anomalies without disrupting operations. By implementing these practices, energy sector stakeholders can improve coordination between cybersecurity and operations teams and strengthen the resilience of distributed energy resources (DERs) within the modern power grid. Prior to implementing any network monitoring, packet capture, or threat hunting activity described in this guide, AOOs are strongly advised to review applicable governance frameworks, legal requirements, and organizational policies. This guide is intended for informational and educational purposes only. It does not replace compliance with any federal, state, or local cybersecurity mandates or industry standards. Implementation of described configurations, technologies, or analytic workflows is performed at the discretion and responsibility of the asset owner and operator.

25 - ENERGY STORAGE↗
DOE OSTI2020

Risk Assessment of Rare Events in Probabilistic Power Flow via Hybrid Multi-Surrogate Method

The risks associated with rare events threatening the security of power system operation are of paramount importance to power system planners and operators. To analyze the risks caused by high-impact, low-frequency rare events, an immensely large number of samples are typically required for the Monte-Carlo (MC) method on the high-fidelity power system model to achieve a sufficient accuracy, thereby rendering this approach computationally prohibitive. To handle this problem efficiently, it is desirable to construct a surrogate model for the power system response. However, the straightforward MC sampling of the low-fidelity surrogate can lead to biased results in the low-probability tail regions that are vital to risk assessment. Moreover, a single surrogate is unable to handle the topology uncertainties caused by random branch outages. To overcome these issues, we propose a hybrid multi-surrogate (HMS) method based on the polynomial chaos expansion (PCE) with low-probability tail events reevaluated by the high-fidelity model through a probabilistic analysis. This method improves the computational efficiency of the MC method for rare-event risk assessment by leveraging multi-fidelity models while retaining the desired accuracy. Simulations conducted in three test systems verify the excellent performances of the HMS method.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2006

Security Verification Techniques Applied to PatchLink COTS Software

Verification of the security of software artifacts is a challenging task. An integrated approach that combines verification techniques can increase the confidence in the security of software artifacts. Such an approach has been developed by the Jet Propulsion Laboratory (JPL) and the University of California at Davis (UC Davis). Two security verification instruments were developed and then piloted on PatchLink's UNIX Agent, a Commercial-Off-The-Shelf (COTS) software product, to assess the value of the instruments and the approach. The two instruments are the Flexible Modeling Framework (FMF) -- a model-based verification instrument (JPL), and a Property-Based Tester (UC Davis). Security properties were formally specified for the COTS artifact and then verified using these instruments. The results were then reviewed to determine the effectiveness of the approach and the security of the COTS product.

patch↗
DOE OSTI2025

A roadmap to understanding and anticipating microbial gene transfer in soil communities

Engineered microbes are being programmed using synthetic DNA for applications in soil to overcome global challenges related to climate change, energy, food security, and pollution. However, we cannot yet predict gene transfer processes in soil to assess the frequency of unintentional transfer of engineered DNA to environmental microbes when applying synthetic biology technologies at scale. This challenge exists because of the complex and heterogeneous characteristics of soils, which contribute to the fitness and transport of cells and the exchange of genetic material within communities. Here, we describe knowledge gaps about gene transfer across soil microbiomes. Here, we propose strategies to improve our understanding of gene transfer across soil communities, highlight the need to benchmark the performance of biocontainment measures in situ, and discuss responsibly engaging community stakeholders. We highlight opportunities to address knowledge gaps, such as creating a set of soil standards for studying gene transfer across diverse soil types and measuring gene transfer host range across microbiomes using emerging technologies. By comparing gene transfer rates, host range, and persistence of engineered microbes across different soils, we posit that community-scale, environment-specific models can be built that anticipate biotechnology risks. Such studies will enable the design of safer biotechnologies that allow us to realize the benefits of synthetic biology and mitigate risks associated with the release of such technologies.

bioccontainment↗
DOE OSTI2024

2023 Annual Site Environmental Report for Sandia National Laboratories, Livermore, California

Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration. The National Nuclear Security Administration’s Sandia Field Office administers the Prime Contract and oversees contractor operations at Sandia National Laboratories, California. Activities at this multi-program engineering and science laboratory support the nuclear weapons stockpile program, energy and environmental research, homeland security, micro-and nanotechnologies, and basic science and engineering research. The U.S. Department of Energy’s National Nuclear Security Administration and its management and operating contractor are committed to safeguarding the environment, assessing sustainability practices, and ensuring the validity and accuracy of the monitoring data presented in this annual site environmental report. This report provides a summary of environmental monitoring of information and compliance activities that occurred at Sandia National Laboratories, California during calendar year 2023 unless noted otherwise. General site and environmental program information is also included. This report was prepared in accordance with DOE O 231.1B, Admin Change 1, Environment, Safety and Health Reporting.

54 ENVIRONMENTAL SCIENCES↗