Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Assessing the Vulnerability of Unmanned Aircraft Systems to Directed Acoustic Energy

The increasingly large payloads of Unmanned Aircraft Systems (UASs) are exponentially increasing the threat to the nuclear enterprise. Current mitigation using RF interference is effective, but not feasible for fully autonomous systems and is prohibited in many areas. A new approach to UAS threat mitigation is needed that does not create radio interference but is effective against any type of vehicle. At the present time there is no commercial counter-UAS system that directly assaults the mems gyros and accelerometers in the Inertial Measurement Unit on the aircraft. But lab testing has revealed resonances in some IMUs that make them susceptible to moderate amplitude acoustic monotones. Sandia's energetic materials facility has enabled a quick and thorough exploration of UAS vulnerability to directed acoustic energy by using intense acoustic impulses to destabilize or down a UAS. We have: 1) detonated/deflagrated explosive charges of various sizes; 2) accurately measured impulse pressure and pulse duration; 3) determined what magnitude of acoustic insult to the IMU disrupts flight and for how long and; 4) determined if the air blast/shock wave on aircraft/propellers disrupts flight.

42 ENGINEERING↗
DOE OSTI2023

2022 Climate Change Vulnerability Assessment and Resilience Plan Summary

Los Alamos National Laboratory (LANL, or the Laboratory) produced a Vulnerability Assessment and Resilience Plan (VARP) following Department of Energy (DOE) Guidance to assess and manage climate change related risks to the Laboratory’s assets and operations. This is a condensed summary of the Laboratory’s 2022 VARP – the full version of the document is not publicly available at this time. The VARP was led by the Pollution Prevention (P2) Program in the Environmental Protection and Compliance Division (EPC-DO) and covers the entirety of the 36-square-mile LANL site in Los Alamos, New Mexico. A Steering Committee, composed of representatives from the three main Laboratory Directorates and the Los Alamos Field Office, identified real property Critical Assets based on their Mission Dependency Index (MDI) scores. LANL used MDI scores of 70 and above, which are considered Mission-Critical, to generate a list of 141 Critical Asset facilities.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2025

Assessment of Physical Security Modeling and Simulation in the Vulnerability Assessment Process

This report provides a comprehensive assessment of physical security modeling and simulation tools available for use in the vulnerability assessment (VA) process for nuclear facilities. It outlines the historical evolution of VA methodologies, emphasizing the transition from traditional layer-based approaches to a more holistic framework that integrates detection probabilities directly into combat simulations. The document details the critical components of the VA process, including the characterization of targets, threats, and protective measures, as well as the development of adversary scenarios that reflect both insider and outsider threats. It highlights the importance of performance assurance programs, emphasizing the need for continuous evaluation and testing of security systems to ensure their effectiveness against evolving threats. Additionally, the report discusses the significance of utilizing accredited modeling and simulation tools in accredited areas to accurately represent adversary actions and the corresponding responses of protective forces. By establishing a systematic approach to VA, this document aims to enhance the overall security posture of nuclear facilities, ensuring compliance with regulatory standards while effectively mitigating risks associated with potential adversarial actions.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2025

Investigating the Vulnerabilities of the Direct Transfer Trip Scheme for Network Protector Units in the Secondary Networks of Electric Power Distribution Grids

Network protector units (NPUs) are crucial parts of the protection of secondary networks to effectively isolate faults occurring on the primary feeders. When a fault occurs on the primary feeder, there is a path of the fault current going through the service transformers that causes a negative flow of current on the NPU connected to the faulted feeder. Conventionally, NPUs rely on the direction of current with respect to the voltage to detect faults and make a correct trip decision. However, the conventional NPU logic does not allow the reverse power flow caused by distributed energy resources installed on secondary networks. The communication-assisted direct transfer trip logic for NPUs can be used to address this challenge. However, the communication-assisted scheme is exposed to some vulnerabilities arising from the disruption or corruption of the communicated data that can endanger the reliable operation of NPUs. This paper evaluates the impact of the malfunction of the communication system on the operation of communication-assisted NPU logic. To this end, the impact of packet modification and denial-of-service cyberattacks on the communication-assisted scheme are evaluated. The evaluation was performed using a hardware-in-the-loop (HIL) co-simulation testbed that includes both real-time power system and communication network digital simulators. This paper evaluates the impact of the cyberattacks for different fault scenarios and provides a list of recommendations to improve the reliability of communication-assisted NPU protection.

direct transfer trip↗
DOE OSTI2024

Vulnerability of Wetlands Due to Projected Sea-Level Rise in the Coastal Plains of the South and Southeast United States

Coastal wetlands are vulnerable to accelerated sea-level rise, yet knowledge about their extent and distribution is often limited. We developed a land cover classification of wetlands in the coastal plains of the southern United States along the Gulf of Mexico (Texas, Louisiana, Mississippi, Alabama, and Florida) using 6161 very-high (2 m per pixel) resolution WorldView-2 and WorldView-3 satellite images from 2012 to 2015. Area extent estimations were obtained for the following vegetated classes: marsh, scrub, grass, forested upland, and forested wetland, located in elevation brackets between 0 and 10 m above sea level at 0.1 m intervals. Sea-level trends were estimated for each coastal state using tide gauge data collected over the period 1983–2021 and projected for 2100 using the trend estimated over that period. These trends were considered conservative, as sea level rise in the region accelerated between 2010 and 2021. Estimated losses in vegetation area due to sea level rise by 2100 are projected to be at least 12,587 km 2 , of which 3224 km 2 would be coastal wetlands. Louisiana is expected to suffer the largest losses in vegetation (80%) and coastal wetlands (75%) by 2100. Such high-resolution coastal mapping products help to guide adaptation plans in the region, including planning for wetland conservation and coastal development.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Piperidine CD4-Mimetic Compounds Expose Vulnerable Env Epitopes Sensitizing HIV-1-Infected Cells to ADCC

The ability of the HIV-1 accessory proteins Nef and Vpu to decrease CD4 levels contributes to the protection of infected cells from antibody-dependent cellular cytotoxicity (ADCC) by preventing the exposure of Env vulnerable epitopes. Small-molecule CD4 mimetics (CD4mc) based on the indane and piperidine scaffolds such as (+)-BNM-III-170 and (S)-MCG-IV-210 sensitize HIV-1-infected cells to ADCC by exposing CD4-induced (CD4i) epitopes recognized by non-neutralizing antibodies that are abundantly present in plasma from people living with HIV. Here, we characterize a new family of CD4mc, (S)-MCG-IV-210 derivatives, based on the piperidine scaffold which engages the gp120 within the Phe43 cavity by targeting the highly conserved Asp 368 Env residue. We utilized structure-based approaches and developed a series of piperidine analogs with improved activity to inhibit the infection of difficult-to-neutralize tier-2 viruses and sensitize infected cells to ADCC mediated by HIV+ plasma. Moreover, the new analogs formed an H-bond with the α-carboxylic acid group of Asp 368 , opening a new avenue to enlarge the breadth of this family of anti-Env small molecules. Overall, the new structural and biological attributes of these molecules make them good candidates for strategies aimed at the elimination of HIV-1-infected cells.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2020

Cybersecurity Resiliency of Marine Renewable Energy Systems-Part 1: Identifying Cybersecurity Vulnerabilities and Determining Risk

Technology innovation, market demand, and the potential impacts of a changing climate are driving the marine renewable energy (MRE) industry to develop market-ready systems to provide low-carbon electricity for emerging, off-grid markets. The advanced operational and information technology devices used in MRE systems create a pathway for a cyber threat actor to gain unauthorized access to data or disrupt operation. To improve the resiliency of MRE systems as a predictable, affordable, and reliable source of energy from oceans and rivers, guidance was developed for an end users' organization that describes a framework for identifying and managing cybersecurity risk. The development of the cybersecurity guidance is based on standards described in the Risk Management Framework and Cybersecurity Framework developed by the National Institute of Standards and Technology (NIST). This paper is the first of a two-part series that describes an approach to determine the cybersecurity risk for MRE systems based on assessing potential cyber threats, identifying vulnerabilities (people, processes, and technology, including physical and operational environment), and evaluating the consequences a cyberattack would have on operation of the MRE system and impact on end users' mission and business objectives. MRE developers and stakeholders can use this approach to assess their current cybersecurity risk posture to incorporate appropriate cybersecurity controls to reduce the consequences and impacts from a cyberattack on MRE systems. This approach can be refined further as MRE systems are deployed and operational configurations are available.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

Climate-driven deoxygenation elevates fishing vulnerability for the ocean's widest ranging shark

Climate-driven expansions of ocean hypoxic zones are predicted to concentrate pelagic fish in oxygenated surface layers, but how expanding hypoxia and fisheries will interact to affect threatened pelagic sharks remains unknown. Here, analysis of satellite-tracked blue sharks and environmental modelling in the eastern tropical Atlantic oxygen minimum zone (OMZ) shows shark maximum dive depths decreased due to combined effects of decreasing dissolved oxygen (DO) at depth, high sea surface temperatures, and increased surface-layer net primary production. Multiple factors associated with climate-driven deoxygenation contributed to blue shark vertical habitat compression, potentially increasing their vulnerability to surface fisheries. Greater intensity of longline fishing effort occurred above the OMZ compared to adjacent waters. Higher shark catches were associated with strong DO gradients, suggesting potential aggregation along suitable DO gradients contributed to habitat compression and higher fishing-induced mortality. Fisheries controls to counteract deoxygenation effects on shark catches will be needed as oceans continue warming.

Vedor, Marisa↗
DOE OSTI2021

Gaps in global wildlife trade monitoring leave amphibians vulnerable

As the biodiversity crisis continues, we must redouble efforts to understand and curb pressures pushing species closer to extinction. One major driver is the unsustainable trade of wildlife. Trade in internationally regulated species gains the most research attention, but this only accounts for a minority of traded species and we risk failing to appreciate the scale and impacts of unregulated legal trade. Despite being legal, trade puts pressure on wild species via direct collection, introduced pathogens, and invasive species. Smaller species-rich vertebrates, such as reptiles, fish, and amphibians, may be particularly vulnerable to trading because of gaps in regulations, small distributions, and demand of novel species. Here, we combine data from five sources: online web searches in six languages, Convention on International Trade in Endangered Species (CITES) trade database, Law Enforcement Management Information System (LEMIS) trade inventory, IUCN assessments, and a recent literature review, to characterise the global trade in amphibians, and also map use by purpose including meat, pets, medicinal, and for research. We show that 1215 species are being traded (17% of amphibian species), almost three times previous recorded numbers, 345 are threatened, and 100 Data Deficient or unassessed. Traded species origin hotspots include South America, China, and Central Africa; sources indicate 42% of amphibians are taken from the wild. Newly described species can be rapidly traded (mean time lag of 6.5 years), including threatened and unassessed species. The scale and limited regulation of the amphibian trade, paired with the triptych of connected pressures (collection, pathogens, invasive species), warrants a re-examination of the wildlife trade status quo, application of the precautionary principle in regard to wildlife trade, and a renewed push to achieve global biodiversity goals.

Hughes, Alice C.↗
DOE OSTI2021

Seeding picoscale solutions for social macro goals: complex thinking in projects for vulnerable communities

This chapter presents lessons learned from two experiences of implementing sociopoliticalsustainability strategies to achieve environmental and economic sustainability.The projects were carried out in rural communities in Guinea-Bissau andJamaica, which are both vulnerable to climate change. Each experience, developedfrom a systemic perspective and under two frameworks (the water–food–energynexus and ‘Appropriate Technology’), is described in four phases (problemcharacterization, solution design, solution pre-evaluation, and implementation),with the significant findings made by the team in terms of challenges, rewards, andessential conditions for development. Both deal with environment-friendly solutionsthat solve the problems of water and energy provision. Based on complex thinking,the experiences are analyzed from the social inclusion, participation, empowerment,and learning theory viewpoints. Finally, the insights gained by the team arehighlighted: communication requirements, the level of dependency of industrializedsolutions, budget constraints, training, testing, and planning recommendations, thediversity of interaction with the communities, and partners’ skills. As a result, futureactions can exploit these experiences and contribute to the success of subsequentprojects.

Pereira Pinto, Joao↗
DOE OSTI2022

Cybersecurity vulnerability mitigation framework

Systems, methods, and computer media for mitigating cybersecurity vulnerabilities of systems are provided herein. A current cybersecurity maturity of a system can be determined based on maturity criteria. The maturity criteria can be ranked based on importance. Solution candidates for increasing the cybersecurity maturity of the system can be determined based on the ranking. The solution candidates specify cybersecurity levels for the maturity criteria. A present state value reflecting the current cybersecurity maturity of the system can be calculated. For the solution candidates, an implementation state value and a transition state value can be determined. The implementation state value represents implementation of the maturity levels of the solution candidate, and the transition state value represents a transition from the present state value to the implementation state value. Based on the transition state values, a solution candidate can be selected for the system, and the system can be modified accordingly.

Gourisetti, Sri Nikhil Gupta↗
DOE OSTI2024

Interdisciplinary Approaches to Cyber-vulnerability Impact Assessment for Energy Critical Infrastructure

As energy infrastructure becomes more interconnected, understanding cybersecurity risks to production systems requires integrating operational and computer security knowledge. We interviewed 18 experts working in the field of energy critical infrastructure to compare what information they find necessary to assess the impact of computer vulnerabilities on energy operational technology. These experts came from two groups: 1) computer security experts and 2) energy sector operations experts. We find that both groups responded similarly for general categories of information and displayed knowledge about both domains, perhaps due to their interdisciplinary work at the same organization. Yet, we found notable differences in the details of their responses and in their stated perceptions of each group’s approaches to impact assessment. Their suggestions for collaboration across domains highlighted how these two groups can work together to help each other secure the energy grid. Our findings inform the development of interdisciplinary security approaches in critical-infrastructure contexts.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Investigating Formal Methods Tools and their Applicability for Hardware Vulnerability Remediation

Formal methods use mathematical logic and equations to prove that a system or code is secure. In this poster, I examine existing formal methods tools and their application for projects working to remediate vulnerabilities in hardware and hardware description language. This poster is focused on the tools ReWire and AutoGenILA and I hope to evaluate their benefits and weaknesses with the intention of creating an internal report on the application and weaknesses of existing formal methods tools and identifying gaps for future formal methods tool creation.

97 - MATHEMATICS AND COMPUTING↗
DOE OSTI2026

Hardware Aware Mitigation of Timing Side-Channel Vulnerabilities in Critical Infrastructure Software

Program runtime/timing attacks exploit variations in a program’s execution times to extract sensitive information from the program (e.g. encryption keys, sensitive variable data, intellectual property). State-of-the-art solutions to runtime sidechannel attacks attempt to balance the execution time of the sensitive code for different control flow paths to eliminate the timing leakage. However, during the mitigation process, most techniques do not consider the underlying hardware/device on which the target program is supposed to run on. This can lead to over-fixing (unnecessary extra operations), under-fixing (not solving the imbalance properly), and even failures. We propose DISARM, a joint hardware-software methodology (unlike any existing solution) for mitigating runtime side-channel vulnerabilities that utilizes timing values from real embedded devices to generate targeted software fixes. We implement DISARM to support C/C++/Java source codes and validate it across 22 standard benchmarks. DISARM outperforms state-of-the-art solutions such as PENDULUM and DifFuzzAR in terms of execution time overhead (up to −46%), code size overhead (up to −10%), and correctness (no failures) on five different embedded/edge devices.

Suha, Tasneem [University of Maine]↗
DOE OSTI2021

Passive cooling designs to improve heat resilience of homes in underserved and vulnerable communities

Disadvantaged communities face a growing threat to staying safe during heat waves, especially during coincident power outages. This study develops a methodology to evaluate the effectiveness of passive cooling measures (those that operate without power) to improve residential building heat resilience. Building performance is simulated for representative homes and on district scales in two disadvantaged communities in Fresno, California. Eleven passive measures are evaluated using four heat resilience metrics with and without grid power. Results show performance of the mitigation measures varies by building characteristics, surrounding environment, and power scenario. The two most effective measures were installing solar-control window films and adding roof insulation. For pre-1978 single-family homes, these two measures can reduce unmet degree-hours (UDH) indoors by 12% and 11% respectively without grid power, or 28% and 37% with grid power. Their respective UDH reductions at district scale typically range 8% — 20% and 4% — 12% without grid power, or 14% — 44% and 8% — 51% with grid power. Top floors have higher overheating risk than lower floors during extreme heat events with coincident power outages. Natural ventilation can help, reducing UDH by 21% — 26%. The methodology and findings from this study can help cities, communities, and utilities develop effective and targeted strategies to promote greater residential heat resilience.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗