SEARCH · Engineering Papers

Results for “Vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 487 records · Page 27

All sources NASA NTRS DOE OSTI

DOE OSTI2025

Data Centers and Digital Assurance Introduction to Supply Chain and Cybersecurity for Data Centers, Session 1

The first session of the TADA (Technical Assistance for Digital Assurance) Data Centers Cohort Workshop, held on October 30, 2025, introduced foundational concepts of Digital Assurance in the context of data center and grid integration. Sponsored by the U.S. Department of Energy, the workshop brought together utilities, data center operators, developers, and vendors to address cybersecurity and supply chain vulnerabilities. The session emphasized the growing criticality of data centers within the electric grid and the need for secure, real-time, bidirectional communication. Participants explored the principles of Digital Assurance, including cybersecurity, cyber-informed engineering (CIE), and lifecycle security, and applied a threat-vulnerability-consequence framework to identify and mitigate risks at the data center–grid interface. Discussions covered a range of threats such as spoofed dispatch signals and insider threats, architectural vulnerabilities like SCADA interfaces and insecure protocols, and potential consequences including cascading grid failures. The session also raised strategic questions about business value, vendor assurance, and defining cyber boundaries and responsibilities. This foundational workshop set the stage for deeper technical analysis and the development of actionable frameworks in subsequent sessions. Session 1 of 3.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2026

Securing The Future: 2026 Manufacturing & Critical Infrastructure Threat Landscape

This report outlines the current state of manufacturing weaknesses introduced by the complexities of modern environments, including cloud services and Internet of Things (IoT) devices, with particular attention paid to the unique vulnerabilities encountered by SMMs. It also highlights CyManII’s strategic initiatives and collaborative solutions to mitigate these risks and strengthen the cybersecurity posture of the manufacturing ecosystem. Utilizing data from 2025 to inform forward-looking mitigation strategies, this report provides manufacturers with a clear understanding of both current and emerging cybersecurity threats, as well as practical opportunities to strengthen their cyber ecosystems. The following sections detail key vulnerabilities and threat vectors, along with actionable mitigation strategies, many of which have been developed or piloted through CyManII-led efforts. A thorough understanding of these risks and mitigation strategies is essential for manufacturers seeking to strengthen the security and resilience of their manufacturing operations.

3D Printing↗

DOE OSTI2023

FIND: A Synthetic weather generator to control drought Frequency, Intensity, and Duration

Water systems worldwide are experiencing climate change-induced shifts in drought properties like frequency, intensity, and duration, affecting water security and reliability. To develop and test effective drought preparedness plans, researchers often use synthetic weather generators to create hydrological scenarios that explore drought variability beyond historical records. Existing weather generators typically allow users to adjust streamflow statistics like percentiles or temporal correlation but do not directly control drought properties of frequency, intensity, and duration. To fill this gap, we propose FIND (Frequency, INtensity, and Duration) synthetic weather generator. FIND incorporates a standardized drought index to directly and in dependently control drought frequency, intensity, and duration in generated streamflow time series while preserving observed hydrological variability. Use cases for FIND include i) water systems analysis applications that seek to train and test drought strategies under historical and plausible future drought conditions, and ii) bottom-up vulnerability studies relating system vulnerability outcomes to specific changes in drought properties of frequency, intensity, and duration. Here, we demonstrate FIND’s versatility through three experiments: replicating historically observed drought properties, generating streamflow scenarios for multiple sites preserving correlation between their drought conditions, and generating a set of scenarios with direct and independent changes in drought properties. FIND source code is openly available for applications beyond the scope of this paper.

42 ENGINEERING↗

DOE OSTI2026

Investigating the Determinants of Household Capabilities Burden During Power Outages: The Case of Winter Storm Uri

Existing research primarily uses census data to identify the vulnerability of communities to hazards. These vulnerability indices provide aggregated data and are not hazard-specific nor well-validated with post-event data. In contrast, our study uses household survey data (n=1065) to understand which Texan households suffered the greatest loss of their capabilities due to power outages and other utility service disruptions during Winter Storm Uri. Inspired by the Capabilities Approach, our measures of burden include the number of household capability types disrupted during the outages (e.g., cooking, heating, refrigeration), the severity of impact for each disrupted capability, and the additional time and financial costs of coping with these disruptions. We perform a clustering analysis, and find two distinct groups in our data, consisting of ‘lesser burden' and ‘heavier burden' households. Results indicate that the households experiencing the heaviest capabilities burden were most likely to experience longer power outages and the loss of water services. They were also more likely to have a Hispanic-Latino household member, lack access to a generator, live in a rented home, have larger households with more young children, fewer adults over 65, lower household incomes, been impacted by the COVID-19 pandemic, and more family characteristics that made life harder. We also fit a logistic regression model to assess the role of outage, household, and community characteristics in predicting differences in capabilities burden. Our results offer insights into enumerating the consequences of utility service disruptions on households, which can inform more targeted and equitable resilience strategies.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

Emergency department visits in California associated with wildfire PM 2.5 : differing risk across individuals and communities

The threats to human health from wildfires and wildfire smoke (WFS) in the United States (US) are increasing due to continued climate change. A growing body of literature has documented important adverse health effects of WFS exposure, but there is insufficient evidence regarding how risk related to WFS exposure varies across individual or community level characteristics. To address this evidence gap, we utilized a large nationwide database of healthcare utilization claims for emergency department (ED) visits in California across multiple wildfire seasons (May through November, 2012–2019) and quantified the health impacts of fine particulate matter <2.5 μm (PM 2.5 ) air pollution attributable to WFS, overall and among subgroups of the population. We aggregated daily counts of ED visits to the level of the Zip Code Tabulation Area (ZCTA) and used a time-stratified case-crossover design and distributed lag non-linear models to estimate the association between WFS and relative risk of ED visits. We further assessed how the association with WFS varied across subgroups defined by age, race, social vulnerability, and residential air conditioning (AC) prevalence. Over a 7 day period, PM 2.5 from WFS was associated with elevated risk of ED visits for all causes (1.04% (0.32%, 1.71%)), non-accidental causes (2.93% (2.16%, 3.70%)), and respiratory disease (15.17% (12.86%, 17.52%)), but not with ED visits for cardiovascular diseases (1.06% (–1.88%, 4.08%)). Analysis across subgroups revealed potential differences in susceptibility by age, race, and AC prevalence, but not across subgroups defined by ZCTA-level Social Vulnerability Index scores. These results suggest that PM 2.5 from WFS is associated with higher rates of all cause, non-accidental, and respiratory ED visits with important heterogeneity across certain subgroups. Notably, lower availability of residential AC was associated with higher health risks related to wildfire activity.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2021

Cyber-Informed Engineering Case Study of an Integrated Hydrogen Generation Plant

Strategies for securing digital instrumentation and control (I&C) systems within the nuclear industry are provided by multiple standards and guidance documents. However, since selection and use of security controls outlined in these documents are frequently only considered during or after installation, there are often limitations on their use, such as technological constraints related to design or operation. Furthermore, alternative controls intended to provide the same or similar security countermeasure as the primary control may also be infeasible at these stages, leaving the I&C system vulnerable to cyber-attacks. The limitations associated with ‘bolting on’ security controls late in the systems engineering lifecycle can be reduced by integrating Cyber-Informed Engineering (CIE) into the process. This paper evaluates the use of CIE during the high-level design stage of a hydrogen generation project where heat and electricity are provided by a nuclear power plant. Applying CIE to this project highlighted potential cyber vulnerabilities of the initial design, leading to recommendations for process flow and I&C system design modifications to reduce, and at times eliminate, the risk from both deliberate and unintentional cyber incidents.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2021

A Functional All-Hazard Approach to Critical Infrastructure Dependency Analysis

The critical infrastructures protection landscape is a vast and varied pattern of independent, but interconnected infrastructure systems that are essential to the function of our modern society. The U.S. policy on critical infrastructure protection has been continually evolving since the “President’s Commission on Critical Infrastructure Protection” was published in 1997. In response to these policies, federal, state, and local governments, along with research institutions, have invested a substantial amount of time and effort into identifying and analyzing critical infrastructure, their functions, and dependencies/interdependencies to better understand their vulnerabilities. To date, the ability to assess vulnerabilities, resiliency, and priorities for protecting interdependent critical infrastructure systems from an all-hazards perspective remains a difficult problem. In this paper we introduce the All-Hazards Analysis (AHA) methodology, which provides an integrated functional basis across infrastructure systems, through the implementation of a common language and a scalable level of decomposition to effectively evaluate the resilience of interconnected infrastructure systems. AHA models infrastructure systems as directed multidimensional graphs, which enable the evaluation of cross-sector interdependencies prior to, during, and after disruptive events. Finally, and by design, AHA enables the cross linking of data taxonomies to enable more effective data sharing, such as the National Critical Functions (NCF) and Infrastructure Data Taxonomy (IDT).

02 PETROLEUM↗

DOE OSTI2023

Data-driven modeling of municipal water system responses to hydroclimate extremes

Sustainable western US municipal water system (MWS) management depends on quantifying the impacts of supply and demand dynamics on system infrastructure reliability and vulnerability. Systems modeling can replicate the interactions but extensive parameterization, high complexity, and long development cycles present barriers to widespread adoption. To address these challenges, we develop the Machine Learning Water Systems Model (ML-WSM) – a novel application of data-driven modeling for MWS management. We apply the ML-WSM framework to the Salt Lake City, Utah water system, where we benchmark prediction performance on the seasonal response of reservoir levels, groundwater withdrawal, and imported water requests to climate anomalies at a daily resolution against an existing systems model. The ML-WSM accurately predicts the seasonal dynamics of all components; especially during supply-limiting conditions (KGE > 0.88, PBias < ±3%). Extreme wet conditions challenged model skill but the ML-WSM communicated the appropriate seasonal trends and relationships to component thresholds (e.g., reservoir dead pool). The model correctly classified nearly all instances of vulnerability (83%) and peak severity (100%), encouraging its use as a guidance tool that complements systems models for evaluating the influences of climate on MWS performance.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2020

Lac du Flambeau - Climate Change Resilience Initiative (Final Report)

The goals of this project were to create a comprehensive Environmental Resiliency Plan and to increase the capacity of all Lac du Flambeau Tribal Program Managers to incorporate environmental impact thinking into the everyday management of their departments. Environmental Resiliency Planning utilized current Tribal documents, which include the Integrated Resource Management Plan (IRMP), the Lac du Flambeau Tribal Emergency Management Plan (EMP), and the Lac du Flambeau Strategic Energy Plan, as guidance throughout the process. A vulnerability assessment initiated our technical process and allowed us to identify, quantify, and prioritize (or rank) the vulnerabilities in our system. This set the stage for a reduction and resilience plan as well as providing insight for revisions of existing management plans such as the Energy and Integrated Resources Management Plans

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2021

Tempus Project (Final Report)

This final technical report tracks the accomplishments of the Tempus Project to the statement of project objectives and resulting deliverables. The objective of the Tempus project was to develop and demonstrate the capabilities of a secure, modular, and customizable time synchronization platform that provides layers of protection from GPS spoofing attacks and other vulnerabilities. These vulnerabilities present a challenge to power system operators utilizing GPS-based time synchronization, as time synchronization increasingly plays a critical role in the efficient and reliable operation of power systems. The Tempus project addressed these concerns through the development of a secure, customizable time synchronization platform. The Tempus platform applies a layered approach to time security that protects from manipulation of timing systems used by power utilities. The Tempus platform consists of a component framework utilizing modularized time sources and customizable manipulation detection algorithms. With multiple time sources, and comparisons between sources and tracking sudden or subtle changes to the timing phase and time information, the Tempus system can detect and mitigate compromised timing sources.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NASA NTRS2016

Impacts of Extreme Events on Human Health

Increased Exposure to Extreme Events Key Finding 1: Health impacts associated with climate-related changes in exposure to extreme events include death, injury, or illness; exacerbation of underlying medical conditions; and adverse effects on mental health[High Confidence]. Climate change will increase exposure risk in some regions of the United States due to projected increases in the frequency and/or intensity of drought, wildfires, and flooding related to extreme precipitation and hurricanes [Medium Confidence].Disruption of Essential Infrastructure Key Finding 2: Many types of extreme events related to climate change cause disruption of infrastructure, including power, water, transportation, and communication systems, that are essential to maintaining access to health care and emergency response services and safeguarding human health [High Confidence].Vulnerability to Coastal Flooding Key Finding 3: Coastal populations with greater vulnerability to health impacts from coastal flooding include persons with disabilities or other access and functional needs, certain populations of color, older adults, pregnant women and children, low-income populations, and some occupational groups [High Confidence].Climate change will increase exposure risk to coastal flooding due to increases in extreme precipitation and in hurricane intensity and rainfall rates, as well as sea level rise and the resulting increases in storm surge.

floods↗

NASA NTRS2024

San José Urban Development: Quantifying Canopy Cover and Land Surface Temperature in San José to Identify Future Tree Planting Sites

The urban heat island effect refers to the phenomenon of substantially increased temperatures in urban areas compared to their surrounding suburban or rural counterparts. The City of San José’s Department of Parks, Recreation and Neighborhood Services (PRNS) and Department of Transportation (DOT) work to mitigate the UHI effect through urban forestry initiatives. The PRNS and DOT partnered with NASA DEVELOP to identify areas in need of tree plantings. We examined land surface temperature (LST) throughout the city using data from the Thermal Infrared Sensor (TIRS) and TIRS-2 on NASA’s Landsat 8 and 9 satellites from 2013 to 2024. We also assessed canopy cover in parks using LiDAR data collected in 2020 for the United States Geological Survey’s 3D Elevation Program, and measured vegetation greenness using the Normalized Difference Vegetation Index (NDVI) with PlanetScope imagery from 2018 to 2024. We evaluated social and environmental factors that influence the distribution of heat event impacts by creating a heat vulnerability index. We found that heat is concentrated in urban areas and that poor vegetation health is associated with high LST. We also found that socially vulnerable communities are disproportionately located in areas of high environmental risk. These analyses allow the partners to prioritize tree plantings in parks near areas of high social and environmental risk. We determined that Earth observations can be used to inform urban forestry decision making, but because methodologies for using LiDAR to assess canopy cover vary greatly, it is difficult to make comparisons across different canopy cover assessments.

land surface temperature↗

DOE OSTI2021

Cybersecurity concerns for the energy sector in the maritime domain

The world has seen a number of high-profile maritime disasters in recent months and years, and has felt the impact of them. At the same time, the world has also seen a number of high-profile cyberattacks. It has felt their impact, as well. And, likely no sector has been more affected by the maritime and cyber incidents than the energy sector, as fuel prices often spike or trough, and access to energy resources can become an instant source of concern, tension, or even conflict. As energy sectors—in all their forms—continue to rely on the maritime domain or even increase that reliance, they must be mindful that traditional maritime threats—like piracy, theft, and weather events—are not the only threats they face today. Maritime cybersecurity concerns are among the most potentially disruptive to energy-sector interests and, yet, are among the least understood and least addressed. This paper identifies nine areas in which the energy sector faces harmful cyber vulnerabilities in the maritime domain, to provide enough insight and examples to allow for action to be taken to reduce the risk of harm from these different vulnerabilities. The paper develops the example of offshore wind energy to model how to assess cyber considerations more fully. Ultimately, it concludes with a series of recommendations that offer policymakers, energy-sector actors, and security and law-enforcement professionals steps to minimize the exposure of the maritime energy sector to harmful cyberattacks.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2024

Addressing Consequence within Operational Risk (O.T. Gagnon III) 9-18-2024

Addressing Consequence within Operational Risk: Why threats and security are just not that important! When dealing with cyber or physical risk within any critical infrastructure (CI) environment, don’t concern yourself with vulnerabilities and threats, at least not at first! Also, don’t be overly fixated on “securing the systems” within the organization. The endeavor of tackling operational risk focused on consequences in any critical infrastructure environment to include the complex Aviation ecosystem is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure environment in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure environment as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space. When it comes to cyber risks, before an organization can consider vulnerabilities within and threats to its operations, it must first have a solid understanding of the consequences existing inside its infrastructure environment. Idaho National Lab’s Consequence-Driven, Cyber-Informed Engineering is offered as an example of this approach to effective and efficient cyber risk mitigation.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2022

Climatic controls on soil and saprock nitrogen distribution and persistence in the Sierra Nevada

Nitrogen (N) is an essential nutrient in soil that regulates plant growth, terrestrial sequestration of atmospheric carbon dioxide, and persistence of organic compounds. However, major knowledge gaps remain about how climate change may impact N accumulation and persistence, especially in deep soil and saprock (friable weakly weathered bedrock). Our objective was to understand how climate impacts the accumulation of N in soil and saprock and how climate impacts soil N distribution, persistence, and mechanisms of N persistence. We investigated N concentration in bulk soil and density fractions. We estimated N persistence along a bio-climatic sequence—sites range from a low-elevation oak savannah, mid-elevation pine-oak/mixed-conifer forest, to a high-elevation subalpine forest—in the southern Sierra Nevada in California. A combination of radiocarbon and elemental composition measurements along with a first-order kinetic model was used. The N concentration in the bulk soil and density fractions declined with depth, and there was a relatively greater mineral-associated heavy fraction (HF) N in deeper samples. The cooler/wetter mixed conifer site held 37% of profile N in saprock, which was greater than that of the entire soil profile at the drier/hotter oak savannah. The majority of N in soil, which was in the HF, was not influenced by climate proxies tested. However, both unprotected and occluded fractions of N were strongly influenced by climate. Soil N mean residence time (MRT) showed that drier/hotter climates have a shorter MRT, compared to mid-elevation sites with cooler/wetter climates. The effect of climate on deep saprock N storage might be indirect, primarily through climatic influence on the thickness of saprock. Overall, our findings suggest the mineral-associated HF N pool will not be vulnerable to changes in climate and will continue to contribute to the persistent soil N pool. The amount of topsoil and subsoil unprotected and occluded N can be explained by gross primary productivity and mean annual precipitation indicating that changes in climate can influence N partitioning. N stored in deep soil and saprock may be less vulnerable to climate than N stored in drier/hotter climates with less deeply stored N. It is critical to dig deeper to understand terrestrial ecosystems’ response to climate.

58 GEOSCIENCES↗

DOE OSTI2021

Development of energetic and enzymatic limitations on microbial carbon cycling in soils

Soil organic carbon (SOC) constitutes an important reservoir in the global carbon cycle that is vulnerable to transformation and loss from land use and climate change. Anoxic conditions protect SOC from microbial degradation through limiting the energetics of respiration and inhibiting extracellular oxidative enzymes. Given growing evidence of prevalent anaerobic microsites in upland soils, we designed an experiment testing the development of dissolved organic carbon (DOC) signatures of energetic and enzymatic limitations on microbial carbon utilization across simulated soil aggregates or peds. Reactors comprised a soil column “aggregate” underlying an advective “macropore” channel. Soils received downward diffusive inputs of aerated porewater media with added nitrate, sulfate, or no amendment—where native ferrihydrite served as dominant anaerobic terminal electron acceptor (TEA). After 40 days, added nitrate resulted in highest bulk respiration and DOC production while sulfate did not differ from the control. Nominal oxidation state of carbon (NOSC) was higher (more favorable) with added TEAs at soil surfaces and decreased with depth, while NOSC in the non-amended soil remained lower and constant with depth. DOC generally increased with depth, which along with decreasing NOSC values indicates joint electron-donor and acceptor control over respiration energetics. Of all organic compound classes, only the relative abundance of phenolics increased between 0 and 0.5 cm depth, which aligns with the oxic-anoxic transition and suggests oxidative enzyme inhibition. Furthermore, our results suggest that oxygen limitation within upland soil aggregates may preserve SOC via both energetic and enzymatic C protection mechanisms, which are vulnerable upon exposure to oxygen.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2024

Linkages between riverine flooding risk and economic damage over the continental United States

Economic damages from riverine flooding are expected to grow because of climate change. Yet, there are few 7 studies analyzing flooding damages in the U.S. that clearly measure the roles of hazard, exposure, and vulnerability 8 separately and locally. A lack of this knowledge prohibits spatially detailed predictions of future damages. By being 9 able to separate into these three risk factors, we provide all necessary inputs for uncertainty analysis of the flooding-10 damages forecasts that can incorporate new predictive scenarios for each component. To analyze the flooding risk 11 factors of non-coastal counties within the contiguous U.S. between 1999-2018, we gathered information on (1) 12 property and human damages from flooding, (2) maximum annual river discharge, (3) the number of housing units 13 and the years in which they were built, and (4) the incidence of flooding events. We used the method of trimmed 14 least absolute deviated and trimmed least square estimators to obtain the individual impact of hazard, exposure, and 15 vulnerability in the context of censored flooding damages for panel data. The resulting estimates indicate that 16 exposure has been the main driver of flooding risk for most counties in the U.S. Here, we use these estimates to describe 17 the main source of flooding risk for non-coastal counties for the 1999-2018 period.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2026

Enhancing Building Resilience: Maintaining Energy Efficiency and Thermal Comfort During Power Outages in Cold Climates

The increasing frequency and intensity of extreme weather events, such as heatwaves and cold snaps, present significant challenges to building energy performance and occupant comfort. Highly correlated with climate events are widespread long duration power interruptions that may affect thousands of buildings and millions of customers. This study evaluates the impact of building energy performance and occupant thermal comfort in medium-sized office buildings in a cold climate region. Using energy models representing pre-1980 and 2019 vintages, simulations were conducted to assess energy performance under typical weather conditions and occupant thermal comfort during power interrupted extreme cold snap and heatwave climate events under both current 2020s and future 2050s weather conditions. The results show a projected 33% increase in cooling energy demand and a 19% reduction in heating energy by 2050. Findings reveal that older buildings are more susceptible to cold discomfort during cold snaps, while modern airtight buildings are more vulnerable to overheating during heatwaves. Various passive energy efficiency measures, such as improved infiltration control, thermal windows, solar-controlled windows, and cool envelopes, were evaluated for their ability to mitigate thermal discomforts. Solar controlled windows and weatherstripping contribute to reducing cold thermal discomfort by 21% during a power-interrupted cold snap. Solar-controlled windows were found to reduce hot thermal discomfort by 34% during a future power-interrupted heatwave. The study highlights the importance of targeted retrofitting strategies to enhance thermal resilience, especially during power outages, to ensure occupant safety and comfort during extreme climate events.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗