Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,063 records · Page 59
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Technical Resilience Navigator

The Technical Resilience Navigator (TRN) is a systematic approach to identifying vulnerabilities with energy and water systems, and prioritizing solutions that reduce risk. The ultimate outcome of the TRN is a set of actionable resilience solutions that address the site's most important gaps in resilience and enhance the ability to maintain mission continuity. The TRN is designed to step users through this planning process, providing a framework to: assign roles and responsibilities; collect and document information and data; document key inputs and outputs for each of the TRN modules (Site Level Planning, Baseline Development, Risk Assessment, Solution Development, and Solution Prioritization); document prioritized list of resilience solutions; and track progress through the entire process. Currently "software as a service" at the listed website.

Rotondo, Julia↗
DOE OSTI2020

Mitigation of External Exposure of Energy Delivery System (MEEDS).

MEEDS is a cybersecurity solution that empowers under resourced owners and operators of critical energy infrastructure to rapidly identify and detect the publicly exposed and vulnerable operational technology (OT) and other critical Industrial Control and Energy Delivery Systems.

Mylrea, Michael↗
DOE OSTI2021

VARS Framework

The Verification and Validation Assuring Reliability and Security (VARS) project team has developed the proof-of-concept VARS framework which will be implemented in the form of a software tool called Risk-Informed Verification and Validation Recommendation (RIVVR). The framework will provide Energy Delivery System (EDS) stakeholders with cybersecurity focused verification and validation (V&V) approach which includes list of potentially relevant vulnerabilities to test or address, pre-procurement guidance, and separate lists of relevant standards, tools, and techniques (ST2) to be considered by utilities and vendors

Pal, Seemita↗
DOE OSTI2021

ACAT

A Physics-Informed Machine Learning (PIML) framework for better system vulnerability assessment and faster corrective action recommendation. This framework consists of deriving physics-informed priors and smart sampling algorithms to help reduce the data samples of grid models and the dimension of simulation outputs, yielding small yet representative subset of the complex system, and both supervised and unsupervised machine learning (ML) algorithms for designing corrective actions

Chen, Yousu↗
DOE OSTI2022

Cybersecurity-Tools/V2W-BERT

Software Vulnerabilities to Weakness Mapping. V2W-BERT optimizes the learnable parameters θ of Fθ in two steps. In the first step, the pre-trained BERT language model is further fine-tuned with CVE/CWE descriptions specific to cyber security. In the second step, the trained BERT model is employed in a Siamese network architecture to establish links between CVEs and CWEs. The architecture takes a specific CVE-CWE pair as input and predicts whether the CVE belongs to the CWE or not, with a confidence value. V2W-BERT includes a Mask Language Model (LM) based Reconstruction Decoder to ensure that the descriptions’ contexts are not changed too much during the training process.

Halappanavar,, Mahantesh↗
DOE OSTI2022

CityBES v2021

City Buildings, Energy, and Sustainability (CityBES) is a web-based data and computing platform, focusing on energy modeling and analysis of a city's building stock to support district or city-scale building energy efficiency programs. CityBES uses an international open data standard, CityGML, to represent and exchange 3D city models. CityBES employs EnergyPlus to simulate building energy use and savings from energy efficient retrofits. Other CityBES features include energy benchmarking, district heating and cooling system modeling, rooftop PV analysis, building performance visualization, heat resilience modeling, as well as urban scale mapping of microclimate and heat vulnerability at census tract level. Different from other tools, CityBES uses integrated open and standard 3D city building data and models each individual building using EnergyPlus. CityBES can be used by urban planners, city energy managers, building owners, utilities, energy consultants and researchers.

Hong, Tianzhen↗
DOE OSTI2023

EyeON

EyeON: Eye on Operational technology Software Supply Chain attacks have risen drastically over the past few years, none more well-known and impactful than the SolarWinds compromise. Criminal organizations inserted an attack vector into a specific version of the source code, giving themselves an air of credibility. Once news broke on SolarWinds, identifying compromised sites was very difficult, even knowing the culprit update. Software Bills of Materials (SBOM) have been touted as the solution to reclaiming control of your software supply chain. Deployment of SBOMs has been slow, however, due to conflicting standards, opaque storage requirements, and vendor adoption. Additionally, the path from obtaining an SBOM and securing your supply chain is unclear; how can an SBOM library be leveraged to provide insight to your attack surface? The EyeON tool, sponsored by Department of Energy Cybersecurity, Energy Security, and Emergency Response (DoE CESER), aims to address these gaps by providing an encapsulated solution to tracking which updates have been installed in an enterprise, and alerting system administrators to vulnerabilities as they become known. Similar to a virus scanner, EyeON is a command line tool to parse either a single file, nested directory structure, or filesystem. It collects data such as signature (hashes), version information, VirusTotal tags, compiler, compilation date, and code signing information. Users will anonymously submit scan data periodically to DoE CESER, who will then compile a database of known software products employed by Critical Infrastructure and broadcast alerts based on discovered flaws as they arise.

Tenzing, Wangmo↗
DOE OSTI2024

Nvd Search To Stix

This code is a python based application that queries the National Vulnerability Database (NVD) API search term and CPE endpoints. It then sifts through the API response and uses the STIX2 python package to create STIX SDOs, SROs, and SCOs from the applicable data. If there are CWEs associated with the bundle, it queries the OpenCVE API for information on the weakness, then translates that data to STIX as well. It then combines all the data into a STIX bundle and outputs it to a JSON file.

Beckman, BryanR [Idaho National Laboratory (INL), ↗
DOE OSTI2025

Optimal Mitigation Planning For Adversarial Scenarios

We propose a generalized framework which performs an optimal partitioning of a limited budget into various organizational sectors in order to improve the cybersecurity of a smart device or component in the Cyber Physical Energy System (CPS). The framework identifies the adversarial threats and possible attack sequences which can be performed to exploit cyber vulnerabilities of the component. Thereafter, we formulate an Mixed Integer Linear Programming (MILP) optimization problem which aims to evaluate the optimal budget partitions in order to minimize the number of highly likely attack sequences. Though we provide results for using the framework in CPES, the proposed methodology can be extended for multiple domains with a set of known adversarial and mitigation actions.

Purohit, Sumit [Pacific Northwest National Laborat↗
DOE OSTI2025

Cyber Informed Engineering Cie Analysis Tool

Main Benefits: • Collaborate on assessment via the web and access and share assessments on your mobile device. • Helps you maximize your cybersecurity investment and resources • Saves you significant time and money by eliminating the requirement to research each government and industry standard in order to understand your cybersecurity posture • Contains easy to follow, step by step instructions to guide you through the process of identifying the cybersecurity posture of your organization • Provides a place to begin with cybersecurity improvement and a way to prioritize your tasks and budgets. • Covers all major cyber relevant topic areas for a comprehensive assessment of your organization’s cybersecurity posture. • Dives deep into the details of each topic area. • Contributes to the organization's risk management and decision-making process • Highlights vulnerabilities and gaps in your organization's IT and control systems. • Raises awareness and facilitates discussion on cybersecurity within your organization • Educates the controls system community on cyber security.

Hansen, Barry [Idaho National Laboratory (INL), Id↗
DOE OSTI2025

OGhidra

This is an AI driven Binary Analysis tool. It uses locally hosted Agentic AI's to automatically reverse engineer binaries to find malware and vulnerabilities.

Wang, Enoch↗
DOE OSTI2026

A Reverse Logistics Tool For Ev Battery Recycling And Repurposing,

The demand for electric vehicles (EVs) in the United States is projected to rise significantly, with sales expected to reach approximately 4.1 million units by 2030. However, the U.S. remains heavily reliant on imports for the batteries and critical raw materials—such as lithium, cobalt, and nickel—that power these vehicles. As of 2024, around 70% of these imports originate from China. This dependency has become even more precarious following China’s imposition of export restrictions in April 2025, a retaliatory move against U.S. tariffs. These developments highlight the strategic vulnerabilities posed by China’s dominant position in the critical materials market. Compounding the issue, decades of intensive extraction have severely depleted global reserves of critical materials, widening the gap between supply and growing demand. This situation underscores the urgent need for the U.S. and other nations to diversify their sources of critical materials and enhance domestic capabilities to secure these resources—an essential step toward ensuring long-term energy security. At the end of their lifecycle—whether due to the battery’s degradation or the retirement of the vehicle—EV batteries are often improperly disposed of or sent to landfills. However, many of these batteries still retain usable capacity and can follow one of three alternative pathways: (a) Re-used: deployed in another vehicle with a shorter driving range, (b) Re-purposed: utilized act as a backup storage/power for data centers, solar panels, and e-scotters or (c) Recycled: broken down to recover the critical materials. To that end, the proposed tool (REBORN) is designed to optimize the reverse logistics network for battery repurposing and recycling. Its goal is to minimize associated costs while identifying optimal locations for battery collection and processing. Ultimately, REBORN ensures that each battery is used to its fullest potential.

Srinivas, SrikarV. [Idaho National Laboratory (INL↗
DOE OSTI2026

AIF for Vis (Active Inference for simulating human interpretation of data visualization) [SWR-26-084]

AIF for Vis contains the Active Inference models and analysis scripts used to study a simple visualization-interpretation task: estimating the average value of two bars in a bar chart. The work is a proof of concept for translating hypothesized cognitive strategies into executable, inspectable process models. We implement two idealized strategies inspired by dual-process accounts of visualization-aided decision making: *Fast model: a compressed, heuristic strategy that estimates the visual midpoint of the two bars and maintains a single belief over their average. *Slow model: a sequential, analytic strategy that estimates the two bar heights separately and maintains them in working memory before computing an average. Both models use a common Active-Inference-inspired framework for sequential perception, belief updating, action selection, and reporting. Their different internal representations produce distinct predicted vulnerabilities: *the Fast model is more susceptible to tick-salience bias; *the Slow model is more susceptible to working-memory decay. The repository includes the model implementations, scripts used for the experiments reported in the paper, precomputed trial-level results, and plotting scripts.

Goldwyn, Harrison [National Laboratory of the Rock↗
DOE OSTI2024

A Functional Survey of the Regulatory Landscape of Estrogen Receptor–Positive Breast Cancer Evolution

Abstract Only a handful of somatic alterations have been linked to endocrine therapy resistance in hormone-dependent breast cancer, potentially explaining ∼40% of relapses. If other mechanisms underlie the evolution of hormone-dependent breast cancer under adjuvant therapy is currently unknown. In this work, we employ functional genomics to dissect the contribution of cis-regulatory elements (CRE) to cancer evolution by focusing on 12 megabases of noncoding DNA, including clonal enhancers, gene promoters, and boundaries of topologically associating domains. Parallel epigenetic perturbation (CRISPRi) in vitro reveals context-dependent roles for many of these CREs, with a specific impact on dormancy entrance and endocrine therapy resistance. Profiling of CRE somatic alterations in a unique, longitudinal cohort of patients treated with endocrine therapies identifies a limited set of noncoding changes potentially involved in therapy resistance. Overall, our data uncover how endocrine therapies trigger the emergence of transient features which could ultimately be exploited to hinder the adaptive process. Significance: This study shows that cells adapting to endocrine therapies undergo changes in the usage or regulatory regions. Dormant cells are less vulnerable to regulatory perturbation but gain transient dependencies which can be exploited to decrease the formation of dormant persisters.

Oncology↗
DOE OSTI2023

The Future of Supercells in the United States

A supercell is a distinct type of intense, long-lived thunderstorm that is defined by its quasi-steady, rotating updraft. Supercells are responsible for most damaging hail and deadly tornadoes, causing billions of dollars in losses and hundreds of casualties annually. This research uses high-resolution, convection-permitting climate simulations across 15-yr epochs that span the twenty-first century to assess how supercells may change across the United States. Specifically, the study explores how late-twentieth-century supercell populations compare with their late-twenty-first-century counterparts for two—intermediate and pessimistic—anthropogenic climate change trajectories. An algorithm identifies, segments, and tracks supercells in the simulation output using updraft helicity, which measures the magnitude of corkscrew flow through a storm’s updraft and is a common proxy for supercells. Results reveal that supercells will be more frequent and intense in future climates, with robust spatiotemporal shifts in their populations. Supercells are projected to become more numerous in regions of the eastern United States, while decreasing in frequency in portions of the Great Plains. Supercell risk is expected to escalate outside of the traditional severe storm season, with supercells and their perils likely to increase in late winter and early spring months under both emissions scenarios. Conversely, the latter part of the severe storm season may be curtailed, with supercells expected to decrease midsummer through early fall. These results suggest the potential for more significant tornadoes, hail, and extreme rainfall that, when combined with an increasingly vulnerable society, may produce disastrous consequences.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2026

The UCAR Africa Initiative: Recent insights, challenges, and opportunities to foster collaborative research for environmental sustainability

Africa is increasingly being exposed to the negative impacts of climate and environmental change, while having less capacity to respond compared to other continents. The vulnerability partially results from unprecedented demographic growth, urbanization, and industrialization. However, the continent has still largely been underserved by the broader Earth System Science (ESS) community, as evidenced by the limited amount of ESS data and research that cover Africa compared to other areas of the world. Here we present the recent University Corporation for Atmospheric Research (UCAR) Africa Initiative that aims to enhance environmental sustainability in Africa by fostering international collaborative research partnerships co-led by African scientists. Specifically, we outline urgent challenges and opportunities identified through an international workshop in six areas of ESS namely (1) air quality and health, (2) weather, (3) climate, (4) land and water, (5) social science perspectives, and (6) developing equitable collaboration and sustainable infrastructure. We highlight examples of successful partnerships and conclude with recommendations to advance collaborative, actionable ESS research that addresses Africa’s critical environmental challenges.

African weather and land variability↗
DOE OSTI2025

Advancing Urban Water Resilience: Coproducing Knowledge through Civic–Academic Global Partnerships on Water and Climate

As extreme weather events become more pronounced, the vulnerabilities associated with the urban water supply and wastewater systems in megacities are intensified in multiple interconnected dimensions. These multifaceted water challenges can benefit from enhanced cross-sectoral collaboration and sharing of critical knowledge, which are essential for sustainable and adaptive water governance frameworks. In this context, the Megacity Alliance for Water and Climate (MAWAC)–Europe and North America Region (ENAR) Working Group convened a workshop in March 2023, followed by a subsequent workshop in London, United Kingdom, from 11 to 13 September 2024. These workshops aimed to investigate and devise solutions for the cascading hazards with water systems. The solutions examined various aspects focused on climate adaptation and mitigation, stormwater management, and the governance of water and wastewater systems. Additionally, discussions highlighted the importance of community engagement, economic considerations, equity, and effective communication in addressing these pressing challenges. Over the course of 3 days, experts from academia, government agencies, and industry engaged in meaningful discussions on digital modeling for integrated water management, climate-informed urban planning, and public–private–academic partnerships (Fig. 1). Case studies from cities such as New York, Los Angeles, London, Paris, and Chicago highlighted innovative governance strategies for managing water and wastewater systems, promoting water reuse, planning infrastructure, and fostering stakeholder-driven and stakeholder-informed adaptation. The workshop participants emphasized the need for data-driven decision-making, scalable governance models, and knowledge-sharing networks to enhance urban water governance for sustainability and resilience. This workshop report presents the key takeaways from the 3-day convening, providing a roadmap for integrating scientific research, policy frameworks, and emerging technologies to address water challenges faced by megacities.

Hydrologic models↗
DOE OSTI2026

Record-Breaking Atmospheric River Drives April 2024 Extreme Precipitation in the United Arab Emirates and the Surrounding Gulf Region

In mid-April 2024, the United Arab Emirates (UAE) and the surrounding Gulf region experienced unprecedented rainfall and catastrophic flooding, causing widespread damage, loss of life, and significant economic costs. During the 3-day period from 15 to 17 April, rainfall in the UAE exceeded 100 mm in the hardest-hit areas, with more than 170% of the typical annual precipitation recorded in just 72 h. The event was associated with exceptionally strong integrated water vapor transport (IVT), driven by a persistent low pressure system and a focused corridor of moisture transport. This environment, combined with favorable dynamical and convective conditions, triggered intense thunderstorms and widespread flooding. This article examines the role of an atmospheric river (AR) in the April 2024 extreme precipitation event, emphasizing the contribution of extreme IVT to preconditioning and amplifying the heavy rainfall. While this event has previously been described primarily in terms of a mesoscale convective system (MCS) and potential vorticity (PV) streamers, here we document and illustrate its close relationship to a record-breaking moisture transport corridor. This AR-based perspective highlights how large-scale moisture-transport frameworks can complement synoptic and mesoscale analyses in understanding extreme rainfall in arid and semiarid regions such as the UAE and the Gulf. The event serves as a stark example of the vulnerabilities faced by arid regions, where atmospheric conditions conducive to extreme flooding may become more frequent in the future.

Massoud, Elias [ORNL] (ORCID:0000000217725361)↗