SEARCH · Engineering Papers

Results for “Vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 433 records · Page 24

All sources NASA NTRS DOE OSTI

DOE OSTI2022

Lianas and Trees From a Seasonally Dry and a Wet Tropical Forest Did Not Differ in Embolism Resistance but Did Differ in Xylem Anatomical Traits in the Dry Forest

One of the most prominent changes in neotropical forests has been the increase in abundance and size of lianas. Studies suggest that lianas have more acquisitive strategies than trees, which could allow them to take advantage of water more effectively when it is available in water-limited forests, but few studies compared across growth form (i.e., lianas vs. trees) and forest type (i.e., wet vs. seasonally dry). We measured hydraulic and anatomical traits of co-occurring lianas and trees that convey drought resistance (xylem embolism resistance and intervessel pit membranes) and water transport capacity (xylem vessel diameter and density) in a seasonally dry and a wet evergreen tropical forest to address: (1) Are there differences between vulnerability to embolisms (P 50 —water potential at 50% loss of hydraulic conductivity) and hydraulic safety margins (HSM) across growth form and forest type? (2) How do vessel diameter and density vary across growth form and forest type? (3) Are there differences in xylem intervessel pit membrane thickness across growth form and forest type and does it predict xylem embolism vulnerability in trees and lianas? We examined hydraulic and xylem anatomical traits of 32 species—eight lianas and eight trees in each forest type. We found no difference in P 50 and HSMs between lianas and trees and between the wetter and drier forest. Dry forest lianas had 81% greater maximum vessel diameter and 125% greater range in vessel diameter sizes than dry forest trees but, there was no significant difference between life forms in the wet forest. Dry forest species had 50% greater vessel density and 30% greater maximum pit membrane thickness than wet forest ones. Maximum pit membrane thickness was correlated to P 50 and HSMs. The main difference between lianas and trees occurred in the dry forest, where lianas had larger maximum xylem vessel size than trees, implying that they have proportionally greater hydraulic conductive capacity than the trees in seasonal forests.

Smith-Martin, Chris M.↗

DOE OSTI2022

Two Co-occurring Liana Species Strongly Differ in Their Hydraulic Traits in a Water-Limited Neotropical Forest

Lianas are a key growth form in tropical forests. They are believed to be strong competitors for water, thanks to their presumed efficient vascular systems. However, despite being a large polyphyletic group, they are currently often considered as a functionally homogeneous entity. In this study, we challenged this assumption by estimating the variability in hydraulic traits of two common, co-occurring liana species in a water-limited environment, namely, a seasonally dry tropical forest in Costa Rica. We measured vulnerability to embolism at the leaf and branch levels using two different methods (optical and acoustic vulnerability) and found that both species had very different hydraulic properties. Compared to reported P 50 values in literature, we found two extreme P 50 values: a low value for Bignonia diversifolia (−4.30 ± 0.54 MPa at the leaf level; −7.42 ± 0.54 MPa at the branch level) and a high value for Cissus microcarpa (−1.07 ± 0.14 at the leaf level; −1.20 ± 0.05 MPa at the branch level). Furthermore, B. diversifolia had a higher apparent modulus of elasticity in the radial direction (556.6 ± 401.0 MPa) and a variable midday water potential. On the other hand, C. microcarpa had a low apparent modulus of elasticity in the radial direction (37.8 ± 26.3 MPa) and a high branch water content, which enabled the species to keep its water potential stable during the dehydration experiments and during a drought period in the field. This mechanism may enable this species to coexist with species that are more resistant to drought-induced embolisms such as B. diversifolia . Although only two species were studied, considerable overlap was found between the range of hydraulic properties of trees growing in the same location and trees and lianas growing in two forests in Panama. These findings demonstrate that lianas cannot be considered as a homogeneous group and call for further research into the intra-growth form diversity of liana properties.

Coppieters, Kasper↗

DOE OSTI2025

IoT Firmware Emulation and Its Security Application in Fuzzing: A Critical Revisit

As IoT devices with microcontroller (MCU)-based firmware become more common in our lives, memory corruption vulnerabilities in their firmware are increasingly targeted by adversaries. Fuzzing is a powerful method for detecting these vulnerabilities, but it poses unique challenges when applied to IoT devices. Direct fuzzing on these devices is inefficient, and recent efforts have shifted towards creating emulation environments for dynamic firmware testing. However, unlike traditional software, firmware interactions with peripherals that are significantly more diverse presents new challenges for achieving scalable full-system emulation and effective fuzzing. This paper reviews 27 state-of-the-art works in MCU-based firmware emulation and its applications in fuzzing. Instead of classifying existing techniques based on their capabilities and features, we first identify the fundamental challenges faced by firmware emulation and fuzzing. We then revisit recent studies, organizing them according to the specific challenges they address, and discussing how each specific challenge is addressed. We compare the emulation fidelity and bug detection capabilities of various techniques to clearly demonstrate their strengths and weaknesses, aiding users in selecting or combining tools to meet their needs. Finally, we highlight the remaining technical gaps and point out important future research directions in firmware emulation and fuzzing.

Zhou, Wei (ORCID:0000000178340839)↗

DOE OSTI2025

Exponential Backoff and Its Security Implications for Safety-Critical OT Protocols over TCP/IP Networks

The convergence of Operational Technology (OT) and Information Technology (IT) networks has become increasingly prevalent with the growth of Industrial Internet of Things (IIoT) applications. This shift, while enabling enhanced automation, remote monitoring, and data sharing, also introduces new challenges related to communication latency and cybersecurity. Oftentimes, legacy OT protocols were adapted to the TCP/IP stack without an extensive review of the ramifications to their robustness, performance, or safety objectives. To further accommodate the IT/OT convergence, protocol gateways were introduced to facilitate the migration from serial protocols to TCP/IP protocol stacks within modern IT/OT infrastructure. However, they often introduce additional vulnerabilities by exposing traditionally isolated protocols to external threats. This study investigates the security and reliability implications of migrating serial protocols to TCP/IP stacks and the impact of protocol gateways, utilizing two widely used OT protocols: Modbus TCP and DNP3. Our protocol analysis finds a significant safety-critical vulnerability resulting from this migration, and our subsequent tests clearly demonstrate its presence and impact. A multi-tiered testbed, consisting of both physical and emulated components, is used to evaluate protocol performance and the effects of device-specific implementation flaws. Through this analysis of specifications and behaviors during communication interruptions, we identify critical differences in fault handling and the impact on time-sensitive data delivery. The findings highlight how reliance on lower-level IT protocols can undermine OT system resilience, and they inform the development of mitigation strategies to enhance the robustness of industrial communication networks.

DNP3↗

DOE OSTI2026

Unsupervised Detection of SOC Spoofing in OCPP 2.0.1 EV Charging Communication Protocol Using One-Class SVM

The electric vehicles (EVs) market keeps growing globally; thus, it is critical to secure the EV charging communication protocols in order to guarantee reliable and fair charging operations among the customers. The Open Charge Point Protocol (OCPP) 2.0.1 supports the communication between the Electric Vehicle Supply Equipment (EVSE) and Charging Station Management Systems (CSMSs); therefore, it becomes vulnerable to several types of attacks, which aim to jeopardize smart charging, billing, and energy management. Specifically, OCPP 2.0.1 allows the self-reporting of the State of Charge (SOC) values, which makes it vulnerable to spoofing-based cyberattacks, which target manipulating the scheduling priorities, distorting the load forecasts, and extending the charging sessions in an unfair manner. In this paper, we try to address this type of attack by providing a comprehensive analysis of the SOC spoofing attacks and introducing a novel unsupervised detection framework based on the One-Class Support Vector Machine (OCSVM) algorithm. Specifically, two types of attack scenarios are analyzed (i.e., priority manipulation and session extension) by deriving engineered features that capture the nonlinear relationships under normal charging behavior. Detailed simulation-based results are derived by utilizing the DESL-EPFL Level 3 EV charging dataset. Our results demonstrate high F1-score and recall in identifying spoofed SOC values and that the proposed OCSVM model demonstrates superior performance compared to alternative clustering and deep-learning based detectors.

EV charging↗

DOE OSTI2024

Digital Tools for the Preventive Conservation of Built Heritage: The Church of Santa Ana in Seville

Historic Building Information Modelling (HBIM) plays a pivotal role in heritage conservation endeavours, offering a robust framework for digitally documenting existing structures and supporting conservation practices. However, HBIM’s efficacy hinges upon the implementation of case-specific approaches to address the requirements and resources of each individual asset and context. This paper defines a flexible and generalisable workflow that encompasses various aspects (i.e., documentation, surveying, vulnerability assessment) to support risk-informed decision making in heritage management tailored to the peculiar conservation needs of the structure. This methodology includes an initial investigation covering historical data collection, metric and condition surveys and non-destructive testing. The second stage includes Finite Element Method (FEM) modelling and structural analysis. All data generated and processed are managed in a multi-purpose HBIM model. The methodology is tested on a relevant case study, namely, the church of Santa Ana in Seville, chosen for its historical significance, intricacy and susceptibility to seismic action. The defined level of detail of the HBIM model is sufficient to inform the structural analysis, being balanced by a more accurate representation of the alterations, through linked orthophotos and a comprehensive list of alphanumerical parameters. This ensures an adequate level of information, optimising the trade-off between model complexity, investigation time requirements, computational burden and reliability in the decision-making process. Field testing and FEM analysis provide valuable insight into the main sources of vulnerability in the building, including the connection between the tower and nave and the slenderness of the columns.

Chaves, Estefanía↗

DOE OSTI2023

Consequence-Driven Cybersecurity for High-Power Electric Vehicle Charging Infrastructure

Cybersecurity of high-power charging infrastructure for electric vehicles (EVs) is critical to the safety, reliability, and consumer confidence in this publicly accessible technology. Cybersecurity vulnerabilities in high-power EV charging infrastructure may also present risks to broader transportation and energy-infrastructure systems. Here, this paper details a methodology used to analyze and prioritize high-consequence events that could result from cybersecurity sabotage to high-power charging infrastructure. The highest prioritized events are evaluated under laboratory conditions for the severity of impact and the complexity of cybersecurity manipulation. Mitigation solutions and strategies are presented to secure the vulnerabilities that potentially lead to high-consequence events. These mitigations can be immediately implemented by industry or executed during the design stage.

25 ENERGY STORAGE↗

DOE OSTI2025

Biological response of eelgrass epifauna, Taylor's Sea hare ( Phyllaplysia taylori ) and eelgrass isopod ( Idotea resecata ), to elevated ocean alkalinity

Abstract. Marine carbon dioxide removal (mCDR) approaches are under development to mitigate the effects of climate change by sequestering carbon in stable reservoirs, with the potential co-benefit of local reductions in coastal acidification impacts. One such method is ocean alkalinity enhancement (OAE). A specific OAE method is the generation of aqueous alkalinity via electrochemistry to enhance the alkalinity of the receiving water by the extraction of acid from seawater, thereby avoiding the issues of solid dissolution kinetics and the release of impurities into the ocean from alkaline minerals. While electrochemical acid extraction is a promising method for increasing the carbon dioxide sequestration potential of the ocean, the biological effects of increasing seawater alkalinity and pH within an OAE project site are relatively unknown. This study aims to address this knowledge gap by testing the effects of increased pH and alkalinity, delivered in the form of aqueous NaOH, on two eelgrass epifauna in the US Pacific Northwest, Taylor's sea hare (Phyllaplysia taylori) and eelgrass isopod (Idotea resecata), chosen for their ecological importance as salmon prey and for their role in eelgrass ecosystems. Four-day experiments were conducted in closed bottles to allow measurements of the evolution of carbonate species throughout the experiment, with water refreshed twice daily to maintain elevated pH, across pHNBS (NBS standard scale) treatments ranging from 7.8 to 9.3. Sea hares experienced mortality in all pH treatments, ranging from 37 % mortality at pHNBS 7.8 to 100 % mortality at pHNBS 9.3. Isopods experienced lower mortality rates in all treatment groups, ranging from 13 % at pHNBS 7.8 to 21 % at pHNBS 9.3, which did not significantly increase with higher pH treatments. These experiments represent an extreme of constant exposure to elevated pH and alkalinity, which should be considered in the context of both the natural variation and the dilution of alkalinity experienced by marine communities across an OAE project site. Different invertebrate species will likely have different responses to increased pH and alkalinity, depending on their physiological vulnerabilities. Investigation of the potential vulnerabilities of local marine species will help inform the decision-making process regarding mCDR planning and permitting.

marine carbon dioxide removal↗

DOE OSTI2023

Panta Rhei benchmark dataset: socio-hydrological data of paired events of floods and droughts

As the adverse impacts of hydrological extremes increase in many regions of the world, a better understanding of the drivers of changes in risk and impacts is essential for effective flood and drought risk management and climate adaptation. However, there is currently a lack of comprehensive, empirical data about the processes, interactions, and feedbacks in complex human–water systems leading to flood and drought impacts. Here we present a benchmark dataset containing socio-hydrological data of paired events, i.e. two floods or two droughts that occurred in the same area. The 45 paired events occurred in 42 different study areas and cover a wide range of socio-economic and hydro-climatic conditions. The dataset is unique in covering both floods and droughts, in the number of cases assessed and in the quantity of socio-hydrological data. The benchmark dataset comprises (1) detailed review-style reports about the events and key processes between the two events of a pair; (2) the key data table containing variables that assess the indicators which characterize management shortcomings, hazard, exposure, vulnerability, and impacts of all events; and (3) a table of the indicators of change that indicate the differences between the first and second event of a pair. The advantages of the dataset are that it enables comparative analyses across all the paired events based on the indicators of change and allows for detailed context- and location-specific assessments based on the extensive data and reports of the individual study areas. The dataset can be used by the scientific community for exploratory data analyses, e.g. focused on causal links between risk management; changes in hazard, exposure and vulnerability; and flood or drought impacts. The data can also be used for the development, calibration, and validation of socio-hydrological models. The dataset is available to the public through the GFZ Data Services (Kreibich et al., 2023, https://doi.org/10.5880/GFZ.4.4.2023.001).

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2021

Assessing climate-change-induced flood risk in the Conasauga River watershed: an application of ensemble hydrodynamic inundation modeling

Abstract. This study evaluates the impact of potential future climate change on flood regimes, floodplain protection, and electricity infrastructures across the Conasauga River watershed in the southeastern United States through ensemble hydrodynamic inundation modeling. The ensemble streamflow scenarios were simulated by the Distributed Hydrology Soil Vegetation Model (DHSVM) driven by (1) 1981–2012 Daymet meteorological observations and (2) 11 sets of downscaled global climate models (GCMs) during the 1966–2005 historical and 2011–2050 future periods. Surface inundation was simulated using a GPU-accelerated Two-dimensional Runoff Inundation Toolkit for Operational Needs (TRITON) hydrodynamic model. A total of 9 out of the 11 GCMs exhibit an increase in the mean ensemble flood inundation areas. Moreover, at the 1 % annual exceedance probability level, the flood inundation frequency curves indicate a ∼ 16 km2 increase in floodplain area. The assessment also shows that even after flood-proofing, four of the substations could still be affected in the projected future period. The increase in floodplain area and substation vulnerability highlights the need to account for climate change in floodplain management. Overall, this study provides a proof-of-concept demonstration of how the computationally intensive hydrodynamic inundation modeling can be used to enhance flood frequency maps and vulnerability assessment under the changing climatic conditions.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2023

Advancing uncertainty characterization for understanding projected water scarcity in multi-sector, multi-actor river basins across scales.

Invited Talk at AGU Fall Meeting 2023 Modeling how human institutions and infrastructure interact with the water cycle is essential to better understand the vulnerability, and resilience of water resources systems from the local to the global scale. This is especially true when investigating multi-sector, multi-actor responses to the effects of long-term changes and short-term shocks. It is also well recognized that uncertainty present throughout the modeling cycle (e.g., in data, functional relations, and model coupling approaches) limits our ability to trace the interactive dynamics of human-water systems, as well as to quantify their implications for management and planning. Systems with large numbers of diverse stakeholders further compound this challenge, as uncertain drivers and complex dynamics might have very disparate effects on water users. The work presented is conducted through the Integrated Multisector Multiscale Modeling (IM3) Science Focus Area, which explores how human and natural systems co-evolve in response to change. Through this multi-year effort, we have developed exploratory modeling methods to better characterize how the uncertain human and natural drivers of water scarcity yield consequential vulnerabilities in institutionally complex, multi-sectoral systems. This talk will specifically present on a series of uncertainty characterization experiments performed in the Upper Colorado River Basin, a sub-basin of the Colorado with thousands of water users. These complementary and systematic experiments are aimed at understanding: How are various uncertain stressors (e.g., climate change, demand growth) affecting the diverse water users of this basin in terms of water shortage? What are the key drivers of this shortage for each user? Methods and results from this work are used to address additional questions on the ability of adaptation to modulate the effects of these uncertain drivers, and on their compounding effects across spatial scales and through sectoral interactions.

Hadjimichael, Antonia↗

DOE OSTI2024

Screening Tool for Equitable Adoption and Deployment of Solar (STEADy Solar)

The Screening Tool for Equitable Adoption and DeploYment of Solar (STEADy Solar) is a database and mapping tool designed to promoting clean energy investments for low-income communities across the United States. The tool indicates locations that may be eligible for the Investment Tax Credit bonus adders defined in the 2022 Inflation Reduction Act (IRA) and combines this information with demographics, social vulnerability, solar technical potential, solar economics (modeled net present value), and building counts by use-type. It can be used by states, municipalities, community-based organizations, developers, and researchers to identify sites where solar projects may be economical and where federal incentives may be available to support equitable adoption of solar. Specific values include: Areas eligible for the Energy Communities Tax Credit Bonus Program (including brownfield site counts) Areas eligible for the Low Income Communities Bonus Credit Program (including Tribal Lands, and covered affordable housing project counts) Areas categorized as disadvantaged by Justice40 Commercial and Residential Solar economics characterized by the Net Present Value and Simple Payback Period Total Population, Race, and Ethnicity Median Household Income, Poverty rate, Household Tenure Social Vulnerability Count of buildings, developable rooftop solar capacity (in kWdc) and estimated annual generation potential (in kWh) on four building types: Government General Services, Government Emergency Response, Grade Schools, and Colleges/Universities. The linked report describes the STEADy dataset metadata and presents high level insights from the data. The downloadable and formatted excel dataset makes it easy for users to gain insights for their locations. Supporting .csv and shapefiles provide users with the full data to run their own analyses on equitable solar siting.

14 SOLAR ENERGY↗

DOE OSTI2020

A PROVEN APPROACH FOR EFFECTIVE COMPUTER SECURITY SELF-ASSESSMENTS AT NUCLEAR FACILITIES

A proven method for conducting cybersecurity self-assessments at nuclear power plants is now available for international use. This method was originally developed by Pacific Northwest National Laboratory, under the sponsorship of the U.S. Nuclear Regulatory Commission (NRC), for use at U.S. nuclear power plants. The “Method,” described in NUREG/CR-6847 “Cyber Security Self-Assessment Method for U.S. Nuclear Power Plants,” was originally a limited release document that was withheld from public disclosure but is now publicly available. The Method provides a systematic, phased, and risk-informed approach to help decision makers and security specialists understand their relative cybersecurity posture. Completed Method assessments may be used to support or validate selection of computer security controls to mitigate cyber threats as well as demonstrate compliance with regulations or statutes enacted by competent authorities. The Method assesses the cybersecurity posture of key systems at a nuclear facility with a focus on protection of design base functions. It considers both physical and digital elements of system vulnerabilities and the resulting potential consequences from exploitation. It is well-suited for addressing blended cyberattacks. A semi-quantitative analytical approach is used in the evaluation of potential vulnerabilities, consequences, and risks and provides a technical basis for the selection of security controls to mitigate cyberattacks. The Method’s application at U.S. nuclear power plants has been very encouraging. The only nuclear plant in the United States that did not have adverse findings during its initial NRC computer security inspection prepared for inspection through the diligent application of this self-assessment method and the implementation of recommendations that came out of that self-assessment. Nuclear facilities around the world might find application of the Method extremely helpful for making cost-effective, risk-based decisions regarding computer security and for preparing to pass computer security inspections by their competent authorities.

Cyber security, Nuclear security, Self-assessment↗

DOE OSTI2020

The Nuclear Digital I&C System Supply Chain Cyber-Attack Surface

The nuclear supply chain attack surface is a large, complex network of interconnected stakeholders and activities. The global economy has widened and deepened the supply chain, resulting in larger numbers of geographically dispersed locations and increased difficulty ensuring the authenticity and security of digital assets. Although the nuclear industry has made significant strides in securing facilities from cyber-attacks, the supply chain remains vulnerable. This paper outlines supply chain threats and vulnerabilities and provides a Digital I&C System Supply Chain Cyber-Attack Surface diagram to illustrate the complexity of securing hardware, firmware, software, and system information throughout the entire supply chain lifecycle. The knowledge presented in this paper provides a foundation to use in cybersecurity supply chain risk analysis and to guide future supply chain research and development efforts leading to enhancement of a nuclear facility’s overall security posture.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

DOE OSTI2020

A Mathematical Framework for Representing Cyber-Physical System Interdependencies and Resilience

U.S. critical infrastructure is increasingly composed of integrated cyber-physical systems (CPS) whose components are operationally interdependent. These interdependencies can create additional vulnerabilities beyond those that are typically evaluated through independent physical and cyber risk assessments. These additional vulnerabilities, previously undetected at the sub-system and/or component level, could cause cascading effects across both the physical and cyber domains that could lead to infrastructure disruption or failure. This paper will review an initial mathematical framework developed to help understand the dynamics of these interfacing physical and cyber components at a holistic system level. The resulting framework also provides a method for modeling and assessing the resilience of CPS in complex and adaptive systems. It frames the system in terms of mission performance and the potential effects to performance caused by attacks that are cyber, physical, or blended in nature. The framework utilizes a systems-based, state-space modeling approach to reason about risk, resilience, and interdependencies in CPS. Probabilities are applied to each CPS component regarding a threat (both man-made and natural) and the likelihood of that particular component being impacted, along with indirect impact to other interdependent components. These component-level impacts from threats then translate into mission-level impact and systemic state change.

Brigantic, Robert T.↗

DOE OSTI2021

Cybersecurity for Electric Vehicle Fast-Charging Infrastructure: Preprint

The integration of electric vehicles (EVs) into electric grid operations can potentially leave the grid vulnerable to cyberattacks from both legacy and new equipment and protocols, including extreme fast-charging infrastructure. This paper introduces a co-simulation platform to perform cyber vulnerability analysis of EV charging infrastructure and its dependencies on communications and control systems. Grid impact scenarios through linkages to power system simulation tools such as OpenDSS and vehicle infrastructure-specific attack paths are discussed. An adaptive platform that assists with predicting and solving evolving cybersecurity challenges is demonstrated with a cyber-energy emulation that accelerates the analysis of cyberattacks and system behavior.

47 OTHER INSTRUMENTATION↗

DOE OSTI2021

Cybersecurity for Fast Charging EV Infrastructure

ADVANCED PROPULSION SYSTEMS,POWER TRANSMISSION AND↗

DOE OSTI2020

Deconstructing the Nuclear Supply Chain Cyber-Attack Surface

The nuclear supply chain cyber-attack surface is a large, complex network of interconnected stakeholders and activities. The global economy has widened and deepened the supply chain resulting in larger numbers of geographically dispersed locations and increased difficulty ensuring the authenticity and security of digital assets. Although the nuclear industry has made significant strides in securing facilities from cyber-attacks, the supply chain remains vulnerable. This paper provides further details on each of the elements in the Digital I&C System Supply Chain Cyber-Attack Surface, including supply chain lifecycle activities, key stakeholders, touchpoints, and attack types. Deconstructing this attack surface provides insights into supply chain threats, vulnerabilities, and consequences. These insights will lead to improvements in cybersecurity supply chain risk analysis, development of new cybersecurity supply chain processes and tools, and enhancement of overall supply chain resilience.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗