Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Risk Mitigation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 775 records · Page 43

Cybersecurity Considerations for Emerging Energy Technologies

AI, cloud computing, post-quantum cryptography, zero-trust architectures, microgrids, and virtual power plants. What do these things have in common? They are all emerging technologies in the clean energy space that will be a critical part of grid modernization efforts. As we work towards clean energy and decarbonization targets, these technologies, developed to solve real-world problems, will help us reach goals and achieve new efficiencies as the paradigm of grid operation shifts. However, there are growing concerns about the cybersecurity risks associated with these trending topics as they are used in critical infrastructure applications. This talk will cover gaps, challenges, and opportunities for the secure implementation of grid modernization solutions and novel energy applications of state-of-the-art networking and communications. Proactive risk mitigation strategies, including the application of cyber-informed engineering, will be discussed. Practical applications of these techniques will help provide countermeasures to the impact of cyberattacks on critical infrastructure technologies in a new, digitized grid landscape.

14 SOLAR ENERGY↗

The Building Business Network (B-Biz): Addressing Gaps in the High-Performance Building Technology Market, Especially for Underserved Customers

Increased market intelligence and business model innovation is needed to build contractor confidence in high-performance building technologies in order to increase the speed and scale of adoption to meet the U.S. Department of Energy's building stock decarbonization goals. Although there have been important innovations in energy efficiency, affordability, and decarbonization of building technologies, consumers are not purchasing these technologies at the necessary speed and scale partially due to a gap in institutional understanding around barriers contractors face in providing and servicing these technologies. Small businesses in this market must mitigate risk around high-performance building technologies, limiting their opportunities in the market and impacting the rate of adoption. The Building Business Network (B-Biz) aims to provide high-performance building technology solutions to underserved customers by collaborating with local small businesses that provide and service high-performance building technologies in communities with the lowest rates of adoption. This research explores the current market, the importance of business models, and the opportunity to utilize small businesses to address market gaps in underserved communities.

B-Biz↗

Hydrogen Equipment Enclosure Risk Reduction through Earlier Detection of Component Failures

Hydrogen component reliability and the hazard associated with failure rates is a critical area of research for the successful implementation and growth of hydrogen technology across the globe. The research team has partnered to quantify system risk reduction through earlier detection of hydrogen component failures. A model of hydrogen dispersion in a hydrogen equipment enclosure has been developed utilizing experimentally quantified hydrogen component leak rates as inputs. This model provides insight into the impact of hydrogen safety sensors and ventilation on the flammable mass within a hydrogen equipment enclosure. This model also demonstrates the change in safety sensor response time due to detector placement under various leak scenarios. The team looks to improve overall hydrogen system safety through an improved understanding of hydrogen component reliability and risk mitigation methods. This collaboration fits under the work program of IEA Hydrogen Task 43 Subtask E Hydrogen System Safety.

CFD↗

Comparison of Loads and Aeroacoustics Between Upwind and Downwind Wind Turbine Rotors

This presentation discusses the motivation, preparation, risk mitigation, execution, and results of a full-scale experiment where the rotor of a 1.5 megawatt wind turbine was operated in a downwind configuration. The experiment took place at the National Renewable Energy Laboratory Flatirons Campus in Colorado, USA, and collected conventional loads and power together with acoustic measurements from an array of four microphones. Results from load simulations complement the experiment. Fatigue loads and performance are compared between 410 minutes of downwind operation with 960 minutes of conventional upwind operations. Downwind operations cause an increase in damage equivalent loads in a few load channels. Damage equivalent load of blade root flapwise and edgewise moment and the damage equivalent load of tower base fore aft moment increase between 2% and 20% depending on the wind speed. The comparison in active power is less conclusive, but experimental results show more power in downwind than predicted by simulations. In terms of acoustics, the overall sound pressure levels are similar between upwind and downwind, but downwind worsens the metrics describing amplitude modulation.

aeroacoustics↗

Intern Deliverable Poster 2025

An Incident Response Plan (IRP) is a document that is created and maintained by an organization that provides guidance in the event of a cyber incident. The primary objectives of an IRP are to aid in the detection, response, and recovery from incidents, as well as to enhance preparation and preventative measures. An IRP should outline specific procedures at each stage of an incident, with the goal of minimizing asset damage, data leakage, and operational impact. By investing in a well-defined IRP, organizations can better manage and mitigate risks associated with cyber threats, ensuring business continuity and resilience. This poster summarizes incident response guidelines for wind energy, which faces unique cybersecurity and physical challenges.

17 - WIND ENERGY↗

Data Centers and Digital Assurance Introduction to Supply Chain and Cybersecurity for Data Centers, Session 1

The first session of the TADA (Technical Assistance for Digital Assurance) Data Centers Cohort Workshop, held on October 30, 2025, introduced foundational concepts of Digital Assurance in the context of data center and grid integration. Sponsored by the U.S. Department of Energy, the workshop brought together utilities, data center operators, developers, and vendors to address cybersecurity and supply chain vulnerabilities. The session emphasized the growing criticality of data centers within the electric grid and the need for secure, real-time, bidirectional communication. Participants explored the principles of Digital Assurance, including cybersecurity, cyber-informed engineering (CIE), and lifecycle security, and applied a threat-vulnerability-consequence framework to identify and mitigate risks at the data center–grid interface. Discussions covered a range of threats such as spoofed dispatch signals and insider threats, architectural vulnerabilities like SCADA interfaces and insecure protocols, and potential consequences including cascading grid failures. The session also raised strategic questions about business value, vendor assurance, and defining cyber boundaries and responsibilities. This foundational workshop set the stage for deeper technical analysis and the development of actionable frameworks in subsequent sessions. Session 1 of 3.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

High Value Risk Targets in Human System Risk

The Human System Risk Board (HSRB) has the overall responsibility for tracking the evolution of the top ~30 human system risks that it has identified to be associated with human spaceflight. The Board is also charged with maintaining a consistent, integrated process to mitigate those risks, and developing evidence-based risk posture recommendations. Each Risk Custodian Team (RCT) identifies High Value Risk Mitigation Targets (HVRMT) that have the highest likelihood or greatest impact in reducing their risk. These typically include areas where there are major gaps in knowledge or capability; or other targets that promise to yield returns worthy of investments in time, money and other resources by stakeholders interested in reducing Human System Risk. As part of the review of each risk the Board members consider and discuss the HVRMT statements, which are then approved by the Board Chair. High Value Risk Mitigation Targets can include research activities funded by the Human Research Program, but often involve recommending standards, monitoring, or other operational goals to reduce risk. This presentation will discuss common themes and highlights of the approved HVRTs to inform IWS attendees and the wider research community.

D M Buckland↗

Studies of Alternative Ventilation Configurations to Mitigate Airborne Exposure Risks in Office Spaces

The objective of this study was to evaluate the impact of alternative ventilation configurations on airflow patterns and potential exposure risks in office spaces. Two existing conference rooms at Sandia NM were modeled using Computational Fluid Dynamics (CFD) simulations to characterize airflow patterns and potential airborne exposure risks in well-mixed and once-through (through-flow) ventilation conditions. Multiple scenarios were studied to evaluate the impact of occupancy, Plexiglass barriers, and a modified-return airflow configuration. Experimental and visualization tests were also conducted to validate the well-mixed and through-flow models and findings. The simulations demonstrated that the modified-return airflow configuration that promoted through-flow conditions reduced pathogen concentrations within the space compared to the well-mixed airflow configuration; occupancy reduction only reduced the number of exposed individuals, and Plexiglass barriers had almost no effect. The experimentally measured air speeds at nine anemometer locations generally matched the simulated airflow velocities, and a fog-purge visualization test was also consistent with simulated results of plume movement and dissipation. The visualization tests demonstrated improvements in air change rate with the modified return, which promoted through-flow conditions, versus the original well-mixed ventilation configuration. The results of this study demonstrate that minor modifications to a space that promote through-flow conditions can improve air quality and reduce pathogen concentrations. Additional airflow modeling and testing of alternative occupied space configurations are recommended to further inform room designs that mitigate airborne exposure risks for occupants.

42 ENGINEERING↗

DCS: A Case Study of Identification of Knowledge and Disposition Gaps Using Principles of Continuous Risk Management

The Human Research Program (HRP) is formulated around the program architecture of Evidence-Risk-Gap-Task-Deliverable. Review of accumulated evidence forms the basis for identification of high priority risks to human health and performance in space exploration. Gaps in knowledge or disposition are identified for each risk, and a portfolio of research tasks is developed to fill them. Deliverables from the tasks inform the evidence base with the ultimate goal of defining the level of risk and reducing it to an acceptable level. A comprehensive framework for gap identification, focus, and metrics has been developed based on principles of continuous risk management and clinical care. Research towards knowledge gaps improves understanding of the likelihood, consequence or timeframe of the risk. Disposition gaps include development of standards or requirements for risk acceptance, development of countermeasures or technology to mitigate the risk, and yearly technology assessment related to watching developments related to the risk. Standard concepts from clinical care: prevention, diagnosis, treatment, monitoring, rehabilitation, and surveillance, can be used to focus gaps dealing with risk mitigation. The research plan for the new HRP Risk of Decompression Sickness (DCS) used the framework to identify one disposition gap related to establishment of a DCS standard for acceptable risk, two knowledge gaps related to DCS phenomenon and mission attributes, and three mitigation gaps focused on prediction, prevention, and new technology watch. These gaps were organized in this manner primarily based on target for closure and ease of organizing interim metrics so that gap status could be quantified. Additional considerations for the knowledge gaps were that one was highly design reference mission specific and the other gap was focused on DCS phenomenon.

Norcross, Jason↗

GPS Spoofing Mitigation and Timing Risk Analysis in Networked Phasor Measurement Units via Stochastic Reachability

To address phasor measurement unit (PMU) vulnerability to spoofing, we propose the use of a set-valued state estimation technique known as stochastic reachability (SR)-based distributed Kalman filter (DKF) that computes secure global positioning system (GPS) timing across a network of receivers. Utilizing SR, we estimate not only GPS time but also its stochastic reachable set, which is parameterized by probabilistic zonotope (p-Zonotope). While requiring known measurement error bounds in only non-spoofed conditions, we designed a two-tiered approach. We first performed measurement-level spoofing mitigation via deviation of a measurement innovation from its expected p-Zonotope. We then performed state-level timing risk analysis via a determination of the intersection probability of the estimated p-Zonotope with an unsafe set that violates IEEE C37.118.1a-2014 standards. Finally, we validated our SR-DKF algorithm by subjecting it to a simulated receiver network to coordinate signal-level spoofing. We demonstrate improved timing accuracy and successful spoofing mitigation via the use of our SR-DKF algorithm. We also validated the robustness of the estimated timing risk as the number of receivers were varied.

47 OTHER INSTRUMENTATION↗

Assessing the Risk of Crew Injury Due to Dynamic Loads During Spaceflight

Spaceflight requires tremendous amounts of energy to achieve Earth orbit and to attain escape velocity for interplanetary missions. Although the majority of the energy is managed in such a way as to limit the accelerations on the crew, several mission phases may result in crew exposure to dynamic loads. In the automotive industry, risk of serious injury can be tolerated because the probability of a crash is remote each time a person enters a vehicle, resulting in a low total risk of injury. For spaceflight, the level of acceptable injury risk must be lower to achieve a low total risk of injury because the dynamic loads are expected on each flight. To mitigate the risk of injury due to dynamic loads, the NASA Human Research Program has developed a research plan to inform the knowledge gaps and develop relevant tools for assessing injury risk. The risk of injury due to dynamic loads can be further subdivided into extrinsic and intrinsic risk factors. Extrinsic risk factors include the vehicle dynamic profile, seat and restraint design, and spacesuit design. Human tolerance to loads varies considerably depending on the direction, amplitude, and rise-time of acceleration therefore the orientation of the body to the dynamic vector is critical to determining crew risk of injury. Although a particular vehicle dynamic profile may be safe for a particular design, the seat, restraint, and suit designs can affect the risk of injury due to localized effects. In addition, characteristics intrinsic to the crewmember may also contribute to the risk of injury, such as crewmember sex, age, anthropometry, and deconditioning due to spaceflight, and each astronaut may have a different risk profile because of these factors. The purpose of the research plan is to address any knowledge gaps in the risk factors to mitigate injury risk. Methods for assessing injury risk have been well documented in other analogous industries and include human volunteer testing, human exposure to dynamic environments, post-mortem human subject (PMHS) testing, animal testing, anthropomorphic test devices (ATD), dynamic models of the human, numerical models of ATDs, and numerical models of the human. Each has inherent strengths and limitations. For example, human volunteer testing is advantageous because a population can be selected that is similar to the astronaut corps; however, because of the inherent ethical limitations, only sub-injurious conditions can be tested. PMHSs can be tested in a variety of conditions including injurious levels, but the responses are not completely analogous to living human subjects. In addition, it is exceedingly difficult to select a PMHS population that is similar to the astronaut corps. ATDs are currently widely used in the automotive industry and military because they are highly repeatable and durable. Unfortunately, because they are mechanical models of the human body, the biofidelity of the responses are limited to dynamic conditions used to validate the ATD. Numerical models of the ATD, in addition to the strengths and limitations for ATDs, are easy to use for a variety of designs before a design is fabricated, but also have additional limitations for ATDs, are easy to use for a variety of designs before a design is fabricated, but also have additional uncertainty. Dynamic models are simple and easy to use, but do not account for localized effects of the seat and suit. Finally, numerical models of the human have the potential to have the most advantages; however, the current models are not validated for the conditions expected during spaceflight. To properly assess spaceflight conditions with numerical human models, human data would be needed to optimize the model responses for those conditions. Using the appropriate assessment method with the knowledge gained for each risk factor, an appropriate approach for mitigating the risk of injury due to dynamic loads can be developed ensuring crew safety in future NASA vehicles.

Somers, J. T.↗

C-Band Airport Surface Communications System Engineering-Initial High-Level Safety Risk Assessment and Mitigation

This document is being provided as part of ITT's NASA Glenn Research Center Aerospace Communication Systems Technical Support (ACSTS) contract: "New ATM Requirements--Future Communications, C-Band and L-Band Communications Standard Development." ITT has completed a safety hazard analysis providing a preliminary safety assessment for the proposed C-band (5091- to 5150-MHz) airport surface communication system. The assessment was performed following the guidelines outlined in the Federal Aviation Administration Safety Risk Management Guidance for System Acquisitions document. The safety analysis did not identify any hazards with an unacceptable risk, though a number of hazards with a medium risk were documented. This effort represents an initial high-level safety hazard analysis and notes the triggers for risk reassessment. A detailed safety hazards analysis is recommended as a follow-on activity to assess particular components of the C-band communication system after the profile is finalized and system rollout timing is determined. A security risk assessment has been performed by NASA as a parallel activity. While safety analysis is concerned with a prevention of accidental errors and failures, the security threat analysis focuses on deliberate attacks. Both processes identify the events that affect operation of the system; and from a safety perspective the security threats may present safety risks.

Zelkin, Natalie↗

L-Band Digital Aeronautical Communications System Engineering - Initial Safety and Security Risk Assessment and Mitigation

This document is being provided as part of ITT's NASA Glenn Research Center Aerospace Communication Systems Technical Support (ACSTS) contract NNC05CA85C, Task 7: "New ATM Requirements--Future Communications, C-Band and L-Band Communications Standard Development." ITT has completed a safety hazard analysis providing a preliminary safety assessment for the proposed L-band (960 to 1164 MHz) terrestrial en route communications system. The assessment was performed following the guidelines outlined in the Federal Aviation Administration Safety Risk Management Guidance for System Acquisitions document. The safety analysis did not identify any hazards with an unacceptable risk, though a number of hazards with a medium risk were documented. This effort represents a preliminary safety hazard analysis and notes the triggers for risk reassessment. A detailed safety hazards analysis is recommended as a follow-on activity to assess particular components of the L-band communication system after the technology is chosen and system rollout timing is determined. The security risk analysis resulted in identifying main security threats to the proposed system as well as noting additional threats recommended for a future security analysis conducted at a later stage in the system development process. The document discusses various security controls, including those suggested in the COCR Version 2.0.

Zelkin, Natalie↗

Mitigating Thermal Runaway Risk in Lithium Ion Batteries

The JSC/NESC team has successfully demonstrated Thermal Runaway (TR) risk reduction in a lithium ion battery for human space flight by developing and implementing verifiable design features which interrupt energy transfer between adjacent electrochemical cells. Conventional lithium ion (li-Ion) batteries can fail catastrophically as a result of a single cell going into thermal runaway. Thermal runaway results when an internal component fails to separate electrode materials leading to localized heating and complete combustion of the lithium ion cell. Previously, the greatest control to minimize the probability of cell failure was individual cell screening. Combining thermal runaway propagation mitigation design features with a comprehensive screening program reduces both the probability, and the severity, of a single cell failure.

Darcy, Eric↗

A prototype cooling blanket for mitigating occupant overheating risk in a hot indoor environment: Modeling and assessments

Conventional ways of cooling a room or an entire house for occupant thermal comfort during summer consume a significant amount of energy and are vulnerable to overheating risk during power outages that lead to loss of cooling system operations. This study investigates a low-power cooling blanket, as a Personal Cooling System (PCS), that covers the upper human body for direct cooling during a five-day heat wave in a single-family house. A modeling framework is developed for evaluating the thermal and energy performance of the cooling blanket, which builds upon the co-simulation of three models: a house energy model, a personal thermal comfort model, and a cooling blanket model. Simulation results show that under the power outage scenario, the cooling blanket can greatly reduce the occupant heat stress with a reduction of daily hours of exceedance (discomfort hours defined as TSV>2) by up to 17.2 h (a 95.3 % improvement from the baseline power outage without the blanket). The cooling blanket, equipped with an innovative electrocaloric heat pump (COP as high as 10.1) consumes 6.31 W and can be operated by a portable battery for several days. The cooling blanket consumes only 0.28 % of the electricity of a central air-conditioning system running to provide cooling for the whole house during the five-day heatwave period. The findings justify further research of electrocaloric wearable PCS as low-power effective cooling to ensure thermal survivability of occupants during extreme indoor environments.

Electrocaloric heat pump↗

Modeling and mitigating airborne pathogen risk factors in school buses

Computational fluid dynamics (CFD) models were developed to simulate the impact of different ventilation scenarios on airborne exposure risks in a 72-passenger school bus. Here, scenarios and factors that were investigated included a moving vs. stationary bus, impacts of a heating unit within the bus, and impacts of alternative ventilation scenarios with different combinations of openings (e.g., windows, door, emergency hatch). Results of the simulations showed that when the bus was stationary, use of the heater increased receptor concentrations unless there was another opening. When the bus was moving, simulations with at least two sets of openings separated from each other in the forward and aft directions produced a through-flow condition that reduced concentrations via dilution from outside air by a factor of ten or more. A single opening in a moving bus generally increased concentrations throughout the cabin due to increased mixing with minimal ventilation. The cumulative exposure risk (time-averaged concentrations) was found to be inversely correlated to the air exchange rate. Stationary and moving-bus scenarios that yielded above ~20 air changes per hour resulted in the lowest cumulative exposures. Recommendations from this study were implemented in new safety and operating procedures by the Albuquerque Public Schools Transportation Center.

60 APPLIED LIFE SCIENCES↗

Application Guide for the Cyber-Resilient Design Framework for Hybrid Systems

As the energy landscape evolves, hybrid power plants—integrating multiple renewable energy sources (e.g., solar, wind, and battery storage) with the bulk power electric system—play a crucial role in meeting growing energy demands. However, with a hybrid power plant’s increased number of components, complex network connectivity and digitization of controls, these systems face growing cybersecurity risks. To help mitigate these risks, Idaho National Laboratory (INL) presents this application guide specifically designed for operators and systems engineers to evaluate the cybersecurity resilience of their hybrid power plant’s design.

14 SOLAR ENERGY↗