Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “vulnerability analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 649 records · Page 36
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Trade-off Analysis of Operational Technologies to Advance Cyber Resilience through Automated and Autonomous Response to Threats

The advancement of cyber resilience requires a preliminary stage of characterizing the trade-off space of mitigation options and how these might affect the stability and determinism of an operational technology (OT). This first step will set the stage for the proper cyber-secure and cyber-resilient design and confirm the affects that can be considered and approved by the OT and the security groups. To provide a baseline for this discussion, this paper provides a consideration of the cyberphysical interactions, possible mitigation steps against certain attacks and their corresponding affects that lend to the security design planning and evaluation process. As an integral part of the proposed scheme this work introduces the concept of systemwide fuzzer, i.e., a tool that manipulates the system state in an effort to determine mitigation response sequences that minimize detriments and maximize benefit in accordance with specified operational requirements.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Private, public, and bottled drinking water: Shared contaminant-mixture exposures and effects challenge

Background: Humans are primary drivers of environmental–contaminant exposures worldwide, including in drinking-water (DW). In the United States, point-of-use DW (POU–DW) is supplied via private tapwater (TW), public-supply TW, and bottled water (BW). Differences in management, monitoring, and messaging and lack of directly–intercomparable exposure data influence the actual and perceived quality and safety of different DW supplies and directly impact consumer decision–making. Objectives: The purpose of this paper is to provide a meta-analysis (quantitative synthesis) of POU–DW contaminant–mixture exposures and corresponding potential human–health effects of private-TW, public-TW, and BW by aggregating exposure results and harmonizing apical–health–benchmark–weighted and bioactivity–weighted effects predictions across previous studies by this research group. Discussion: Simultaneous exposures to multiple inorganic and organic contaminants of known or suspected human-health concern are common across all three DW supplies, with substantial variability observed in each and no systematic difference in predicted cumulative risk between supplies. Differences in contaminant or contaminant–class exposures, with important implications for DW–quality improvements, were observed and attributed to corresponding differences in regulation and compliance monitoring. Conclusion: The results indicate that human-health risks from contaminant exposures are common to and comparable in all three DW–supplies, including BW. Importantly, this study’s target analytical coverage, which exceeds that currently feasible for water purveyors or homeowners, nevertheless is a substantial underestimation of the breadth of contaminant mixtures in the environment and potentially present in DW. Thus, the results emphasize the need for improved understanding of the adverse human-health implications of long-term exposures to low–level inorganic–/organic–contaminant mixtures across all three distribution pipelines and do not support commercial messaging of BW as a systematically safer alternative to public-TW. Regardless of the supply, increased public engagement in source-water protection and drinking–water treatment is necessary to reduce risks associated with long-term DW–contaminant exposures, especially in vulnerable populations, and to reduce environmental waste and plastics contamination.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS2018

Active Sensing of CO2 Emissions over Nights, Days, and Seasons (ASCENDS): Final Report of the ASCENDS Ad Hoc Science Definition Team

Improved remote sensing observations of atmospheric carbon dioxide (CO2) are critically needed to quantify, monitor, and understand the Earth's carbon cycle and its evolution in a changing climate. The processes governing ocean and terrestrial carbon uptake remain poorly understood,especially in dynamic regions with large carbon stocks and strong vulnerability to climate change,for example, the tropical land biosphere, the northern hemisphere high latitudes, and the Southern Ocean. Because the passive spectrometers used by GOSAT (Greenhouse gases Observing SATellite) and OCO-2 (Orbiting Carbon Observatory-2) require sunlit and cloud-free conditions,current observations over these regions remain infrequent and are subject to biases. These short comings limit our ability to understand and predict the processes controlling the carbon cycle on regional to global scales.In contrast, active CO2 remote-sensing techniques allow accurate measurements to be taken day and night, over ocean and land surfaces, in the presence of thin or scattered clouds, and at all times of year. Because of these benefits, the National Research Council recommended the National Aeronautics and Space Administration (NASA) Active Sensing of CO2 Emissions over Nights,Days, and Seasons (ASCENDS) mission in the 2007 report Earth Science and Applications from Space: National Imperatives for the Next Decade and Beyond. The ability of ASCENDS to collect low-bias observations in these key regions is expected to address important gaps in our knowledge of the contemporary carbon cycle.The ASCENDS ad hoc Science Definition Team (SDT), comprised of carbon cycle modeling and active remote sensing instrument teams throughout the United States (US), worked to develop the mission's requirements and advance its readiness from 2008 through 2018. Numerous scientific investigations were carried out to identify the benefit and feasibility of active CO2 remote sensing measurements for improving our understanding of CO2 sources and sinks. This report summarizes their findings and recommendations based on mission modeling studies, analysis of ancillary meteorological data products, development and demonstration of candidate technologies, anddesign studies of the ASCENDS mission concept.

Kawa, S. Randolph↗
DOE OSTI2023

Emulation and Adversarial Analysis of EV Charging Networks

In the effort of decarbonization and evolution of the modern electrical grid, electric vehicles (EVs) play a key part to transform the grid. However, due to the rapid adoption of EVs and the demand of the charging infrastructure required to power said EVs, risk of a cyber-attack may impose serious consequences. There is a need to analyze and protect the charging ecosystem infrastructure from cyber threats before it reaches wide-scale deployment. In an effort to secure vehicle to grid (V2G) communications, standardization is necessary for continued reliable system operation. The protocol ISO 15118 outlines controls and practices that should be implemented for secure vehicle to grid (V2G) communications. The standard is gaining momentum for American markets as the demand for EV infrastructure grows. The adoption of ISO 15118 in American markets poses several challenges: the deployment of a public key infrastructure (PKI) as outlined within the standard, interoperability of charging different EVs with chargers from different manufactures using the PKI, and scaling the ecosystem to meet the demand while managing risks. This project was created to understand potential cyber and scaling challenges of PKI for EV infrastructure through utilizing a series of emulated components mapping to what exists in the EV ecosystem today, and the components of the PKI that are under development. The key nodes within the emulation that are under development are: electric vehicle (EV), electric vehicle supply equipment (EVSE), charge network operator (CNO), certificate authority (CA), and online certificate status protocol (OCSP) that must all interact using secure and trusted communications. With these emulated components and utilizing orchestration methods to rapidly deploy and scale the components, the ability to analyze risks of the ecosystem and address gaps before the PKI ecosystem is fully deployed to production should yield a more robust and mature production charging infrastructure. Our approach will use a modular architecture of virtual machines within an orchestration platform and will target scales of 100s, 1000s, and 10,000s of entities interacting. The core research questions trying to be answered with this scope of work are: what are the impacts of a rogue CA, what are the risks of certificate revocation list (CRL) management, what is the value of OCSP stapling, what components are vulnerable to DOS attacks, and what test effective payloads may impact the components.

charging ecosystem↗
DOE OSTI2021

Detecting forest response to droughts with global observations of vegetation water content

Droughts in a warming climate have become more common and more extreme, making understanding forest responses to water stress increasingly pressing. Analysis of water stress in trees has long focused on water potential in xylem and leaves, which influences stomatal closure and water flow through the soil-plant-atmosphere continuum. At the same time, changes of vegetation water content (VWC) are linked to a range of tree responses, including fluxes of water and carbon, mortality, flammability, and more. Unlike water potential, which requires demanding in situ measurements, VWC can be retrieved from remote sensing measurements, particularly at microwave frequencies using radar and radiometry. Here, we highlight key frontiers through which VWC has the potential to significantly increase our understanding of forest responses to water stress. To validate remote sensing observations of VWC at landscape scale and to better relate them to data assimilation model parameters, we introduce an ecosystem-scale analogue of the pressure-volume curve, the non-linear relationship between 44 average leaf or branch water potential and water content commonly used in plant hydraulics. The 45 sources of variability in these ecosystem-scale pressure-volume curves and their relationship to 46 forest response to water stress are discussed. We further show to what extent diel, seasonal, and 47 decadal dynamics of VWC reflect variations in different processes relating the tree response to 48 water stress. VWC can also be used for inferring belowground conditions – which are difficult to 49 impossible to observe directly. Lastly, we discuss how a dedicated geostationary spaceborne 50 observational system for VWC, when combined with existing datasets, can capture diel and 51 seasonal water dynamics to advance the science and applications of global forest vulnerability to 52 future droughts.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Cyber risk assessment and investment optimization using game theory and ML-based anomaly detection and mitigation for wide-area control in smart grids

The electric power grid is increasingly becoming susceptible to cyber attacks that exploit vulnerabilities in the smart grid control, information, and physical layers. Successful cyber attacks can have catastrophic impacts on the social and economic well-being of any nation all over the globe. It has, thus, become imperative to secure the smart grid against such adversarial actions to ensure stable, secure, and reliable operation of the grid. The existing research and industry practices prove to be inadequate in terms of providing pragmatic and effective defense methodologies and measures for long-term cybersecurity planning and real-time cybersecurity for grid operation. For example, existing works lack models that incorporate uncertain behavior of cyber-attackers and pragmatic defense measures for cyber risk assessment and cybersecurity investment optimization which often provide unreliable and strictly qualitative solutions to these problems. At the same time, with the growing number of cyber incidents in the grid, there still exists a need to develop attack-resilient algorithms for wide-area monitoring, protection, and control (WAMPAC) applications like the wide-area voltage control systems (WAVCS) for Flexible AC Transmissions Systems (FACTS) that lack in scalable and feasible solutions from the cybersecurity perspective. This dissertation proposes novel models and methodologies for: (1) Cybersecurity planning, and (2) Cybersecurity for system operation. The cybersecurity planning is achieved through cyber risk assessment and cybersecurity resource investment optimization for long-term cybersecurity of the grid using game theory and attack-defense trees. Cybersecurity for system operation consists of development of cyber anomaly detection and mitigation algorithms for flexible AC transmission system (FACTS) controller-based wide-area voltage control systems (WAVCS) using machine learning (ML), and software defined networking-based moving target defense network routing for achieving real-time cyber-physical security for grid operations. This is followed by hardware-in-the-loop (HIL) implementation and evaluation of these attack prevention, detection, and mitigation algorithms and methodologies showcasing their feasibility in a close to real-world environment. For cybersecurity planning, a novel approach involving a combination of game theory and attack defense trees (ADT) for optimal cybersecurity resource allocation in the smart grid is proposed. This methodology involves modeling of the cyber-physical smart grid substations as ADTs, defining attacker costs, defense costs, and attack probabilities for attack access points. Using game theoretical formulation, optimal defense strategies for the defender of the system to invest cybersecurity resources in the grid are obtained. Additionally, a game-theoretic framework is developed for quantitative cyber-physical risk assessment of the grid under a dynamically changing cyber threat space and uncertain behavior of cyber attackers which is further used to optimize investments in the smart grid's cybersecurity resources. The attacker, defender, and the smart grid system are modeled while incorporating attacker-stochasticity and federal guidelines for smart grid cybersecurity. This allows quantification of threat, vulnerabilities, and attack impact of the grid for quantitative risk assessment. The defender's budget to invest in the security resources in the grid is optimized based on the strategies leading to minimum system risk. The evaluation of the proposed solutions highlight the feasibility for practical implementation of these methodologies and algorithms in the smart grid, while taking the federal requirements and guidelines for smart grid security into consideration. For achieving cybersecurity for system operation, attack prevention, detection, and mitigation algorithms and methodologies are developed specifically for FACTS-based WAVCS. Anomaly detection and mitigation in the WAVCS are achieved using algorithms based on machine learning which involves offline training and testing of ML models with CPS datasets incorporating physics-based features that allow accurate distinction between system faults and cyber attacks. For attack prevention, a methodology based on software defined network (SDN)-based moving target defense (MTD) network routing is proposed that enables prevention of Denial of Service (DoS) type attacks on the smart grid communication system. Subsequently, these methodologies and algorithms are implemented and evaluated on an HIL testbed that allows for real-time attack prevention, detection, and mitigation of emulated cyber attacks on the WAVCS in a close to real-world environment. The results show highly accurate and efficient performance of the implemented algorithms and methodologies with the smart grid system operating within the NERC's system operation limits even in the presence of DoS and data integrity cyber attacks. This work opens up future research opportunities in other directions such as (1) Expanding cybersecurity planning methodologies to real-time cyber contingency analysis with different game formulations; and (2) Applying the cybersecurity for system operation algorithms to broader categories of wide-area control applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

CLEAP Project: OR-SAGE Analysis for MT, UT, and CO States

The OR-SAGE tool is designed to use industry-accepted practices in screening sites and then employ the proper array of data sources through the considerable computational capabilities of GIS technology available at ORNL. The tool was developed to screen the potential for NPP siting on a national and regional basis. However, because of the tool granularity, it is often focused specifically on the immediate area around user sites of interest. If data center siting parameters can be added to OR-SAGE, the ability to evaluate data center siting on a localized scale will be beneficial.1 More than 60 data sets have been collected and processed by ORNL to develop exclusionary, avoidance, and suitability criteria for screening sites for a variety of power generation types, including nuclear power plants. Available site evaluation parameters include population density, slope, seismic activity, proximity to cooling-water sources, proximity to hazard facilities, avoidance of protected lands and floodplains, susceptibility to landslide hazards, and many others. All siting parameters should be considered as flags to inform siting decisions and should not be used to rule in or rule out any NPP site. Once data center siting parameters are identified, appropriate data sets will be collected and processed. The OR-SAGE process is very versatile. Essentially, OR-SAGE is a visual, relational database. The database partitions the contiguous United States, a total of 720 million hectares (~1.8 billion acres), into 100-m by 100-m (1 hectare or ~2.5 acre) cells. The database is tracking just under 700 million individual land cells. Successive suitability criterion is applied to each cell in the database. User-specified thresholds can be applied to each siting parameter data layer. In this manner, a variety of scenarios can be quickly and thoroughly evaluated. Data can be added and/or revised within OR-SAGE to address user interests. Siting security assessment capability is currently being added to OR-SAGE. Security is expected to be of concern at data centers whether it is collocated with a nuclear power generating technology or not. If data center is collocated with a nuclear power generating source, the security threat attractiveness level of both will likely increase. It will be of additional benefit if a potential data center site is also assessed for security vulnerability.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Climate Adaptation Approaches for Water and Electric Utilities: A compendium of existing strategies in a changing climate

Report analyzes plans developed by water and electric utilities to address the impacts of changes in the climate within their service territories. The analysis identifies the main types of changes that utilities address, such as sea level rise, extreme heat, and compound events such as freezing rain/show and extreme wind events. It then identifies adaptation approaches utilities have proposed or adopted to address the changes that are anticipated in their service territories. The report also identifies the mechanisms utilities (and in some cases the governments which the utilities are part of) use to ensure that energy or environmental equity is increased as a result of the resilience program. In summary, the report provides a compendium of adaptation strategies that can be used by others as they review their own need to increase climate resilience.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2025

Animal movement estimation and network-based epidemic modeling: Illustration for the swine industry in Iowa (US)

Animal movement plays a critical role in disease transmission between farms. However, in the United States, the lack of available animal shipment data, sometimes coupled with a lack of detailed information about farm demographics and characteristics, presents great challenges for epidemic modeling and prediction. In this study, we proposed a new method based on the maximum entropy to generate “synthetic” animal movement networks, considering available statistics about the premises operation type, operation size, and the distance between premises. We illustrated our method for the swine movement networks in Iowa and performed network analyses to gain insights into the swine industry. We then applied the generated networks to a network-based epidemic model to identify potential system vulnerabilities in terms of disease transmission. The model was parameterized for African Swine Fever (ASF) as the US swine industry is quite concerned about this disease. Results show that premises with a central role in the network are more vulnerable to disease outbreaks and play an important role in disease spread. Simulations with outbreaks starting from random farms reveal no significant large outbreaks, indicating the system’s relative robustness against arbitrary disease introductions. However, outbreaks originating from high out-degree farms can lead to large epidemic sizes. This underscores the importance for stakeholders and policymakers to continue improving animal movement records and traceability programs in the US and the value of making that data available to epidemiologists and modelers to better understand risk and inform strategies aimed to cost-effectively prevent and control disease transmission. Our approach could be easily adapted to estimate movement networks in other animal production systems and to inform disease spread models for various infectious diseases.

60 APPLIED LIFE SCIENCES↗
NASA NTRS2019

Complex Dynamics of Air Traffic Flow

Air traffic in the United States has continued to grow at a steady pace since 1980, except for a dip immediately after the tragic events of September 11, 2001. There are different growth scenarios associated both with the magnitude and the composition of the future air traffic. The Terminal Area Forecast (TAF), prepared every year by the FAA, projects the growth of traffic in the United States. Both Boeing and Airbus publish market outlooks for air travel annually. Although predicting the future growth of traffic is difficult, there are two significant trends: heavily congested major airports continue to see an increase in traffic, and the emergence of regional jets and other smaller aircraft with fewer passengers operating directly between non-major airports. The interaction between air traffic demand and the ability of the system to provide the necessary airport and airspace resources can be modeled as a network. The size of the resulting network varies depending on the choice of its nodes. It would be useful to understand the properties of this network to guide future design and development. Many questions, such as the growth of delay with increasing traffic demand and impact of the en route weather on future air traffic, require a systematic understanding of the properties of the air traffic network. There has been a major advance in the understanding of the behavior of networks with a large number of components. Several theories have been advanced about the evolution of large biological and engineering networks by authors in diversified disciplines like physics, mathematics, biology and computer science. Several networks exhibit a scale-free property in the sense that the probabilistic distribution of their nodes as a function of connections decreases slower than an exponential. These networks are characterized by the fact that a small number of components have a disproportionate influence on the performance of the network. Scale-free networks are tolerant to random failure of components, but are vulnerable to selective attack on components. This paper examines two network representations for the baseline air traffic system. A network defined with the 40 major airports as nodes and with standard flight routes as links has a characteristic scale: all nodes have 60 or more links and no node has more than 460 links. Another network is defined with baseline aircraft routing structure exhibits an exponentially truncated scale-free behavior. Its degree ranges from 2 connections to 2900 connections, and 225 nodes have more than 250 connections. Furthermore, those high-degree nodes are homogeneously distributed in the airspace. A consequence of this scale-free behavior is that the random loss of a single node has little impact, but the loss of multiple high-degree nodes (such as occurs during major storms in busy airspace) can adversely impact the system. Two future scenarios of air traffic growth are used to predict the growth of air traffic in the United States. It is shown that a three-times growth in the overall traffic may result in a ten-times impact on the density of traffic in certain parts of the United States.

Scale-free Networks↗
DOE OSTI2023

The Cost and Benefit of Enhancing Cybersecurity for Hybrid AC/DC Grids

As critical interfaces of AC grids and DC grids inside a hybrid AC/DC grid, the voltage-sourced-converter (VSC) has been demonstrated to be vulnerable to false data injection (FDI) cyber-attacks. As a result, the cyber-attack-induced AC grid frequency deviations and DC grid voltage deviations threaten the secure operation. Here, to enhance cybersecurity in a not only feasible but also cost-effective manner, this paper proposes a cost-benefit-based cyber-defense strategy for a hybrid AC/DC grid. First, this paper establishes a spatial-temporal dual cyber-attack evaluation model, in which the cyber-attack-induced frequency and voltage deviations are modelled in both a spatially and temporally dual manner. Then, the proposed cost-benefit-based cyber-defense strategy is modelled as a VSC commitment problem to achieve the trade-off between maximizing the cyber-defense benefits and minimizing the cyber-defense costs. The VSC commitment problem is then mathematically convexified into a mixed-integer second-order cone programming (MISOCP) problem, which could be efficiently solved in an event-triggered manner against unfolding cyber-attack events. Simulation results on a test hybrid AC/DC grid verified the feasibility and the cost-effectiveness of the proposed cyber-defense strategy.

cost-benefit analysis↗
NASA NTRS2013

The Effect of Agricultural Growing Season Change on Market Prices in Africa

Local agricultural production is a key element of food security in many agricultural countries in Africa. Climate change and variability is likely to adversely affect these countries, particularly as they affect the ability of smallholder farmers to raise enough food to feed themselves. Seasonality influences farmers' decisions about when to sow and harvest, and ultimately the success or failure of their crops. At a 2009 conference in the United Kingdom hosted by the Institute of Development Studies, Jennings and Magrath (2009) described farmer reports from East Asia, South Asia, Southern Africa, East Africa and Latin America. Farmers indicate significant changes in the timing of rainy seasons and the pattern of rains within seasons, including: More erratic rainfall, coming at unexpected times in and out of season; Extreme storms and unusually intense rainfall are punctuated by longer dry spells within the rainy season; Increasing uncertainty as to the start of rainy seasons in many areas; Short or transitional second rainy seasons are becoming stronger than normal or are disappearing altogether. These farmer perceptions of change are striking in that they are geographically widespread and are remarkably consistent across diverse regions (Jennings and Magrath, 2009). The impact of these changes on farmers with small plots and few resources is large. Farming is becoming riskier because of heat stress, lack of water, pests and diseases that interact with ongoing pressures on natural resources. Lack of predictability in the start and length of the growing season affects the ability of farmers to invest in appropriate fertilizer levels or improved, high yielding varieties. These changes occur at the same time as the demand for food is rising and is projected to continue to rise for the next fifty years (IAASTD, 2008). Long-term data records derived from satellite remote sensing can be used to verify these reports, providing necessary analysis and documentation required to plan effective adaptation strategies. Remote sensing data can also provide some understanding of the spatial extent of these changes and whether they are likely to continue. Given the agricultural nature of most economies on the African continent, agricultural production continues to be a critical determinant of both food security and economic growth (Funk and Brown, 2009). Crop phenological parameters, such as the start and end of the growing season, the total length of the growing season, and the rate of greening and senescence are important for planning crop management, crop diversification, and intensification. The World Food Summit of 1996 defined food security as: "when all people at all times have access to sufficient, safe, nutritious food to maintain a healthy and active life". Food security roughly depends on three factors: 1) availability of food; 2) access to food and 3) appropriate use of food, as well as adequate water and sanitation. The first factor is dependent on growing conditions and weather and climate. In a previous paper we have investigated this factor by evaluating the effect of large scale climate oscillation on land surface phenology (Brown et al., 2010). We found that all areas in Africa are significantly affected by at least one type of large scale climate oscillations and concluded that these somewhat predictable oscillations could perhaps be used to forecast agricultural production. In addition, we have evaluated changes in agricultural land surface phenology over time (Brown et al., 2012). We found that land surface phenology models, which link large-scale vegetation indices with accumulated humidity, could successfully predict agricultural productivity in several countries around the world. In this chapter we are interested in the effect of variability in peak timing of the growing season, or phenology, on the second factor of food security, food access. In this chapter we want to determine if there is a link between market prices and land surface phenology and to determine which markets are vulnerable to land surface phenology changes and variability and which market prices are not correlated.

Prices↗
DOE OSTI2020

Dragonstone Strategy – State of Cybersecurity in the Oil & Natural Gas Sector

The oil & natural gas (ONG) system touches every corner of the nation and increased communications & control capabilities have not only allowed for greater efficiency of system operation, but have also created a massive target for adversaries to launch cyber-attacks. Like any other heavy industrial process, the ONG system relies on a complex system of information technology (IT) and operational technology (OT) devices. The current state of cyber-preparedness across the ONG industry varies from organization to organization. Among the most common challenges that ONG companies face are remote locations, longlived field assets, and lacking capabilities to find and track malware on their systems. ONG companies tend to be concerned with lack of cyber-awareness from employees, risk stemming from remote access for operations & maintenance, and software vulnerabilities within third-party equipment. Various industry and government organizations are performing research and development activities to address some of these challenges, but in many cases industry stakeholders are not aware of solutions that already exist. It is clear that a need exists for a coherent, comprehensive, multi-layered strategy for assuring the security and resilience of the nation's pipeline infrastructure against cyber threats. For a variety of reasons, the general consensus from stakeholders interviewed by LLNL is that the state of cyber-security within the electric grid is currently outpacing its ONG cousin. Existing strategies for the resilience and cyber-security of the electric grid can and should be leveraged to provide immediate benefits to the ONG system. In LLNL’s view, there are two key factors currently limiting the development of necessary cyber-practices within the ONG industry: The sheer number of differing regulatory bodies and trade groups offering both standards and best-practice recommendations for ONG cyber-security makes it difficult to create a comprehensive, directed, and coherent strategy that is applicable to all players within the ONG industry. The ONG industry is unaware of potentially useful technologies that have been developed for ensuring cyber-security of other infrastructure systems, such as the electric grid. Leveraging these technologies—and the science and engineering behind them—can provide some low-hanging fruit that can greatly improve cyber-security in the ONG industry without significant investments in terms of time and money. In the months following this report, LLNL will continue to perform outreach to key oil & gas industry stakeholders in a continual effort to identify the most pressing cyber-resilience issues in the industry. This outreach will be supplemented with LLNL’s threat intelligence capabilities to begin painting a clearer picture of the overall threat landscape faced by this sector. This assessment will be threat-informed and while the strategy itself will not be classified we will leverage intelligence analysis and adversary capabilities to identify gaps in current cybersecurity practices for oil & gas pipeline systems. Recommended efforts will be compiled into a cyber-resilience roadmap for the oil & gas pipeline sector, in which LLNL will highlight priority activities to immediately improve the state of cyber-resilience in the industry.

02 PETROLEUM↗
DOE OSTI2024

Adoption of Plug-in Electric Vehicles: Local Fuel Use and Greenhouse Gas Emissions Reductions Across the U.S.

The dependence on gasoline-powered light-duty automobiles has made U.S. households vulnerable to the burden of fuel costs. Tailpipe emissions from these vehicles constitute 58% of greenhouse gas (GHG) emissions in the U.S., which are damaging to the environment (EPA, 2023). The adoption of plug-in electric vehicles (PEVs) has been shown to effectively reduce fuel costs and GHG emissions. However, local effects on these benefits are not well understood by American consumers, potentially limiting adoption and therefore the realization of PEV benefits at scale (MacInnis & Krosnick, 2020; EY Americas, 2023). To fill this research gap, this study estimates the fuel cost savings and GHG emission reductions at the state and ZIP code levels by considering local fuel prices, vehicle class preference, average vehicle model year, fuel efficiencies, and driving intensities. The study's findings reveal that the adoption of PEVs can yield substantial benefits in terms of fuel cost savings and GHG emission reductions nationwide. Specifically, driving a battery electric vehicle (BEV) is estimated to result in annual savings of up to $\$2,200$, while driving a plug-in hybrid electric vehicle (PHEV) can lead to savings up to $\$1,500$, when compared to an internal combustion engine vehicle (ICEV) of equivalent size. Moreover, using population-weighted averages by ZIP code, BEVs and PHEVs show the potential to save 400 and 200 grams of carbon dioxide equivalent per mile, respectively, compared to a representative ICEV of the same class. The magnitude of fuel cost savings and emissions reduction vary by region due to various factors. Generally, regions with high gasoline prices, low electricity prices, preferences for larger vehicles, and high driving intensities tend to see relatively large fuel savings. The emissions reductions are more pronounced in areas with clean grids where consumer preferences lie with large vehicles. This regional variability underscores the importance of considering local contextual factors when assessing the potential benefits of PEV adoption. In more than 99% of U.S. ZIP codes, PEVs result in overall savings in fuel use (and subsequent costs) and GHG emissions. While not a central focus of this analysis, reductions in GHG tailpipe emissions from PEV adoption would also come with reductions in criteria pollutant emissions, contributing to improved local air quality depending on the PEV penetration, population density, and electricity generation infrastructure in the locality.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2023

An Inventory of AI-ready Benchmark Data for US Fires, Heatwaves, and Droughts

Extreme weather events, including fires, heatwaves, and droughts, have significant impacts on earth, environmental, and energy systems. Mechanistic and predictive understanding, as well as probabilistic risk assessment of these extreme weather events, are crucial for detecting, planning for, and responding to these extremes. Records of extreme weather events provide an important data source for understanding present and future extremes, but the existing data needs preprocessing before it can be used for analysis. Moreover, there are many nonstandard metrics defining the levels of severity or impacts of extremes. In this study, we compile a comprehensive benchmark data inventory of extreme weather events, including fires, heatwaves, and droughts. The dataset covers the period from 2001 to 2020 with a daily temporal resolution and a spatial resolution of 0.5°×0.5° (~55km×55km) over the continental United States (CONUS), and a spatial resolution of 1km × 1km over the Pacific Northwest (PNW) region, together with the co-located and relevant meteorological variables. By exploring and summarizing the spatial and temporal patterns of these extremes in various forms of marginal, conditional, and joint probability distributions, we gain a better understanding of the characteristics of climate extremes. The resulting AI/ML-ready data products can be readily applied to ML-based research, fostering and encouraging AI/ML research in the field of extreme weather. This study can contribute significantly to the advancement of extreme weather research, aiding researchers, policymakers, and practitioners in developing improved preparedness and response strategies to protect communities and ecosystems from the adverse impacts of extreme weather events. Usage Notes We presented a long term (2001-2020) and comprehensive data inventory of historical extreme events with daily temporal resolution covering the separate spatial extents of CONUS (0.5°×0.5°) and PNW(1km×1km) for various applications and studies. The dataset with 0.5°×0.5° resolution for CONUS can be used to help build more accurate climate models for the entire CONUS, which can help in understanding long-term climate trends, including changes in the frequency and intensity of extreme events, predicting future extreme events as well as understanding the implications of extreme events on society and the environment. The data can also be applied for risk accessment of the extremes. For example, ML/AI models can be developed to predict wildfire risk or forecast HWs by analyzing historical weather data, and past fires or heateave , allowing for early warnings and risk mitigation strategies. Using this dataset, AI-driven risk assessment models can also be built to identify vulnerable energy and utilities infrastructure, imrpove grid resilience and suggest adaptations to withstand extreme weather events. The high-resolution 1km×1km dataset ove PNW are advantageous for real-time, localized and detailed applications. It can enhance the accuracy of early warning systems for extreme weather events, helping authorities and communities prepare for and respond to disasters more effectively. For example, ML models can be developed to provide localized HW predictions for specific neighborhoods or cities, enabling residents and local emergency services to take targeted actions; the assessment of drought severity in specific communities or watersheds within the PNW can help local authorities manage water resources more effectively.

Lin, Xinming↗
DOE OSTI2021

Considerations regarding the Use of Computer Vision Machine Learning in Safety-Related or Risk-Significant Applications in Nuclear Power Plants

With the advancements made to date in the field of artificial intelligence (AI), significant potential exists to utilize AI capabilities for nuclear power plant (NPP) applications. AI can replicate human decision making and it is usually faster and more accurate than humans. For implementations that impact critical NPP applications (e.g., safety-related or non-safety systems that potentially affect overall plant risk), a deeper safety analysis of the AI methods is necessary. AI applied to NPP operations could resemble the use of digital I&C (DI&C) because such applications involve digital computer hardware and custom-designed software that input plant data, execute complex software algorithms, and output the results to a system or licensed human operator to potentially provoke an action. For AI methods to be compliant with current safety requirements for DI&C, AI compatibility must be evaluated, and AI-related gaps may exist that prevent the prompt deployment of AI in NPPs. This effort aims to evaluate how example AI technologies align with the DI&C safety framework, and discusses how they could be analyzed, modeled, tested, and validated in a manner similar to typical DI&C technologies. Because AI is a broad field that encompasses areas such as machine learning (ML), natural language processing, and computer vision, this research focused on a subset of methods categorized as the computer vision ML (CVML) methods. This report explores two CVML use cases, gauge reading and fire watch, considered relevant to the DI&C standards, as they could play a safety-critical role. For the gauge reading use case, a CVML-enabled technology that can read gauges at oblique angles is utilized. For the fire watch use case, a CVML-enabled technology is utilized that migrates fire watch from a manual (human) approach to automated fire detection. These use cases are mainly intended to give context to the CVML system discussion. This effort assumes the worst-case scenario, with the CVML system being used to replace a safety-related or risk-significant system, thus requiring evaluation. Evaluating CVML against most of the relevant safety requirements for DI&C yielded several CVML-specific considerations due to the uniqueness of its characteristics in comparison with typical DI&C systems. For example, CVML models often employ commonly used (open-source) datasets, and it is not always possible to determine the level of overlap among open-source datasets. Therefore, the independence of the developed CVML models when demonstrating diversity is questionable, therefore creating vulnerability to common cause failure (CCF). The design verification process is also impacted since the data overlap could result in overestimation of the software validation and verification (V&V) performance results. Section 2 of this report evaluates a list of the identified CVML-specific characteristics and discusses the resulting considerations and potential solutions in the context of each referenced requirement. A summation is provided in Section 3. This report is not to be used as a guideline. It was developed to identify and consider issues in the implementation of ML technologies used to augment activities that may have a bearing on plant operation. The report draws parallels to the use of DI&C technologies, for which many standards are available to guide their use in nuclear plant operation. It considers the technologies and some of the potential implications of their use in safety-related applications but is not intended to address regulatory or licensing related issues.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2025

Chelation ion chromatography as an automated, and cost-effective analytical technique for REE determination: method development and applications

Rare earth elements (REEs), as critical minerals, have important uses in modern energy and technologies, yet are vulnerable to potential supply chain disruptions. To establish domestic REE supply chain, efficient REE detection methods for resource characterization and mineral processing will be needed to accelerate innovations for domestic REE recovery. This study developed a rapid, novel, and cost-effective for REE detection method using ion chromatography (IC) for aqueous samples. Various REE-targeted eluent gradients and post-column agent compositions were tested on the chelation ion chromatography (CIC) with UV-vis detector for optimal separation and quantification of REEs within approximately 20 min. The single-channel pump to deliver the post-column solution to UV-vis detector was replaced with a 4-channel gradient pump, to increase operation and maintenance efficiencies. After method optimization, resulting calibration curves for more than ten REEs achieved high coefficients of determination (R2>0.999) and low relatively standard deviations (below 3.24%), demonstrating sub-ppm level detection limits (0.0897 to 0.1149 mg/L). The reliability of the CIC method was validated through comparison with inductively coupled plasma mass spectrometry (ICP-MS), showing strong agreement in REE recovery from certified standards. The impact of metal ions and salts on REE recovery using CIC was also systematically investigated. CIC consistently exhibited reliable performance in the presence of salt solutions such as NaCl and Na₂SO₄ (up to 10,000 mg/L). Our study also found the presence of high concentrations of Al ions (at 10,000 mg/L) significantly influenced REE determination, and elevated concentrations of Ca ions affected the recovery of specific REEs, including La, Ce, and Pr. The CIC method was further tested on REE-containing eluents from solvent extraction tests out of fly ash leachates. REE detection from these real processing fluids were reported to achieve 90% to 100% recovery rate from our IC method, compared to ICP-MS results. This study underscores the potential of CIC as a reliable and efficient alternative for REE determination in complex matrices. It also highlights the importance of minimizing select interfering metal ions in solutions to ensure accurate results. The REE CIC method presents a promising, low-maintenance, salt-tolerant, and cost-effective alternative to traditional analytical methods for REE analysis.

detection of rare earth elements (REE)↗
DOE OSTI2021

On the Limits of EM Based Detection of Control Logic Injection Attacks In Noisy Environments

The difficulty in applying traditional security mechanisms in Industrial Control System (ICS) environments makes a large portion of these mission-critical assets vulnerable to cyber attacks. Therefore, there is a dire need for the development of novel security mechanisms specifically designed to protect such critical systems. Recently a lot of attention has been given to mechanisms that exploit the EM emanations of devices for defense purposes. Such practices may lead to the development of robust external and non-intrusive anomaly detection systems. Nevertheless, the majority of current work in the area neglects to consider the implications of real-life environments, particularly environmental noise. In this work, we explore the limits of EM-based anomaly detection towards identifying injection attacks in control logic software in noisy environments. Our study conducted upon both synthetically generated and real signals identified that indeed environmental noise might significantly degrade the accuracy of the anomaly detection process. Experiments done upon synthetic data indicated that assuming that signals are captured with high sampling rates, even minor code injections can be detected with above-90% accuracy in noisy environments where SNR is up to -2dB. This is true even if naive detection methods are considered. Moreover, experiments done using a real-life testbed attest that even single-instruction injections can be detected with near-perfect accuracy in relatively clean environments. Finally, noise-elimination techniques can drastically improve the reliability of the detection mechanism even in noisy environments.

97 MATHEMATICS AND COMPUTING↗