Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “threat analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Capability Building Progression of an Insider Threat Mitigation Program at an International Research Reactor

The nuclear industry recognizes the difficulties involved in developing effective managerial and leadership skills in a highly technical and proficient workforce such as that found in nuclear facilities. Implementing an insider threat mitigation program (ITMP) within the nuclear industry is a complex and ongoing process that demands a comprehensive understanding of human behavior, an organization’s security culture, and rigorous regulatory requirements yet also accounts for facility characteristics, physical security, material flow, and activities involving nuclear material. Given the high-consequence nature of research reactor operations, even minor lapses can lead to safety, security, and reputational risks. An effective ITMP requires a defense-in-depth approach that incorporates behavioral analysis, robust vetting procedures, continuous monitoring, and cross-disciplinary coordination. It must also promote a culture of vigilance and accountability at all levels up to and including executive leadership but be flexible enough to adapt to evolving global threats and technological advances. Insider threat mitigation is not a one-time effort but rather a sustained commitment to excellence in safety and security. Establishing a culture in which personnel proactively report incidents and issues that could affect nuclear safety and security is vital to maintaining a safe and secure operational environment. This document was developed to guide senior management and research reactor organizations in creating comprehensive programs to effectively manage and mitigate insider threat behaviors and actions. It focuses on the key pillars of an effective ITMP, including the national legal framework, security culture, preventive and protective measures, cyber security, and performance evaluation. By using a systematic approach during implementation, facilities can foster environments conducive to insider threat detection and support long-term program sustainability. The document also provides strategies for improving communication across all levels of an organization, helping to eliminate barriers that hinder the development of robust ITMPs and enhance overall security culture. In today’s organizations, the concept of leveraging safety and security culture lessons to facilitate knowledge transfer is rapidly evolving to expedite insider threat management and security culture improvements. This document outlines the rationale for evaluating an ITMP based on national customs, culture, and stakeholders. The elements are all germane to reliability and trustworthiness and relate to security concerns that states may encounter. The document focuses not only on individual perceptions regarding security issues and capability building but also on team building and how to resolve concerns. The implementers of a facility’s ITMP may zero in on indicators of insider threats within their enterprise. This material will benefit organizations when it is applied using a systematic and structured approach as demonstrated throughout the document.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2024

Attack Surface of Wind Energy Technologies in the United States

Low cost, reliable electrical energy production from wind relies upon automation and control systems, arguably more so than traditional thermal generation. These same systems, however, can serve as the target of adversaries’ cyber-attacks. Idaho National Laboratory (INL), at the request of the Department of Energy’s (DOE’s) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) and Energy Efficiency and Renewable Energy’s (EERE’s) Wind Energy Technologies Office (WETO), evaluated a generalized wind plant architecture to understand the classes of potential threat actors and the vectors that could enable a cyber-attack. This evaluation explores the attack surface of a representative wind plant, identifying potential methods and vectors that an adversary could leverage to conduct a cyber-attack. Included in this assessment are some recommended mitigations and approaches. Each recommendation requires a full security evaluation, cost/benefit analysis, and risk analysis by each owner and operator.

17 WIND ENERGY↗
DOE OSTI2025

Securing Smart Manufacturing: Detection of Cyber-Physical Attacks in CNC-Based Systems

As Industry 4.0 advances, the integration of computer numerical control (CNC) machines and advanced manufacturing technologies is transforming production into smart manufacturing systems that blend physical and digital processes as cyber-physical systems. However, this increased cyber-physical connectivity exposes manufacturing systems to cyber threats that can cause severe operational and financial disruptions. This paper presents a comparative study on cyber attacks and anomaly detection techniques in manufacturing, focusing on network traffic from CNC machines. The data extracted from network packets includes machine commands and control signals exchanged between the machine's interface and control system, crucial for maintaining operational integrity. We explore two types of cyber attacks, design modification and command injection, which pose substantial risks to CNC machine productivity and system integrity. Our investigation involves experiments on a real CNC system, highlighting the urgent need for effective detection mechanisms. To address these threats, we evaluate three anomaly detection methods: dynamic time warping (DTW), rolling average, and a deep learning, long short-term memory (LSTM) time-series-based autoencoder. Each is assessed for its effectiveness in identifying anomalous behaviors caused by the attacks. Our findings demonstrate the unique strengths and limitations of each detection technique, providing a deeper understanding of their applicability in realworld manufacturing environments. The comparative analysis indicates that while certain methods are highly effective against specific attack types, others offer broader applicability across different attacks. This study contributes to the accurate detection of anomalies in CNC machining processes, thereby enhancing the reliability and security of smart manufacturing systems against diverse cyber threats.

Williams, Bethanie [Tennessee Technological Univer↗
DOE OSTI2022

Precursor Analysis Report: Doppelpaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019

The DoppelPaymer Ransomware Attack on Petroleos Mexicanos (PEMEX) 2019 Precursor Analysis Report leverages publicly available information about the PEMEX cyber attack and catalogs anomalous observables for each technique employed in the attack. This analysis is based upon the methodology of the Cybersecurity for the Operational Technology Environment (CyOTE) program. The 2019 DoppelPaymer ransomware attack on PEMEX, Mexico’s nationalized petroleum corporation, highlights a unique threat that ransomware and cybercriminal extortion poses to Operational Technology (OT) environments in critical infrastructure. The incident began with an employee downloading commodity malware that allowed adversaries to gain initial access to PEMEX’s enterprise environment. After conducting privilege escalation, tool ingress, and data exfiltration, the adversaries deployed DoppelPaymer ransomware throughout the PEMEX enterprise environment, resulting in the company having to take dozens of systems offline for at least several days. Although PEMEX stated that their operations were not affected, the data exfiltrated from PEMEX was made available for download on DoppelPaymer’s leak site, as well as on other illicit criminal forums. This stolen data included not only company information, but also sensitive OT-specific configuration data. This incident showcases how cybercriminal exfiltration and posting of sensitive OT architecture documentation can pose security concerns for the targeted organization for years due to the long lifespan of OT assets and architectures. Researchers and analysts identified 18 unique techniques utilized during the attack with a total of 190 observables using MITRE ATT&CK® for Industrial Control Systems. The CyOTE program assesses observables accompanying techniques used prior to the triggering event to identify opportunities to detect malicious activity. If observables accompanying the attack techniques are perceived and investigated prior to the triggering event, earlier comprehension of malicious activity can take place. Fifteen of the identified techniques used during the DoppelPaymer ransomware attack were precursors to the triggering event. Analysis identified 163 observables associated with these precursor techniques, 34 of which were assessed to have an increased likelihood of being perceived in the 60 days preceding the triggering event. The response and comprehension time could have been reduced if the observables had been identified earlier. The information gathered in this report contributes to a library of observables tied to a repository of artifacts, data sources, and technique detection references for practitioners and developers to support the comprehension of indicators of attack. Asset owners and operators can use these products if they experience similar observables or to prepare for comparable scenarios.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2024

Fatigue performance of the Deeply Embedded Ring Anchor

Existing anchor solutions are limited in their applicability to the floating offshore wind industry, which demands prolonged load endurance in extreme weather conditions and varied seabed soils. This limitation restricts project feasibility and increases costs. In order to address these challenges, the Deeply Embedded Ring Anchor (DERA) is proposed to achieve substantial reductions in anchor costs through efficiency enhancements. Ensuring the long-term safety and reliability of the DERA, especially considering a minimum operational period of 25 years, necessitates a comprehensive understanding of fatigue damage. Induced by repetitive loading below material yield strength, fatigue poses a significant threat to structures exposed to waves and currents. Anchors, vital for station keeping, are susceptible to fatigue damage, particularly in the padeye area. This paper conducts a fatigue analysis, focusing on factors such as the wall thickness of the ring anchor, inner stiffeners, and stiffener thickness, to evaluate the performance of DERA in this context. The results showed that the stiffener significantly affects the elongation of the total life of the anchor. In conclusion, this paper focuses on advancing innovations like DERA, enabling the efficient utilization of offshore wind resources, and addressing safety concerns through meticulous fatigue analysis.

17 WIND ENERGY↗
DOE OSTI2025

Host-specific adaptation in Fusarium oxysporum correlates with distinct accessory chromosome content in human and plant pathogenic strains

ABSTRACT Fusarium oxysporumis a cross-kingdom pathogen. While some strains cause disseminated fusariosis and blinding corneal infections in humans, others are responsible for devastating vascular wilt diseases in plants. To better understand the distinct adaptations ofF. oxysporumto animal or plant hosts, we conducted a comparative phenotypic and genetic analysis of two strains: MRL8996 (isolated from a keratitis patient) and Fol4287 (isolated from a wilted tomato [Solanum lycopersicum]). Infection of mouse corneas and tomato plants revealed that, while both strains cause symptoms in both hosts, MRL8996 caused more severe corneal disease in mice, whereas Fol4287 induced more pronounced wilting symptoms in tomato plants.In vitroassays using abiotic stress treatments revealed that the human pathogen MRL8996 was better adapted to elevated temperatures, whereas the plant pathogen Fol4287 was more tolerant to osmotic and cell wall stresses. Both strains displayed broad resistance to antifungal treatment, with MRL8996 exhibiting the paradoxical effect of increased tolerance to higher concentrations of the antifungal caspofungin. We identified a set of accessory chromosomes (ACs) that encode genes with different functions and have distinct transposon profiles between MRL8996 and Fol4287. Interestingly, ACs from both genomes also encode proteins with shared functions, such as chromatin remodeling and post-translational protein modifications. Our phenotypic assays and comparative genomics analyses lay the foundation for future studies correlating genotypes with phenotype and for developing targeted antifungals for agricultural and clinical uses. IMPORTANCE Fusarium oxysporumis a cross-kingdom fungal pathogen that infects both plants and animals. In addition to causing many devastating wilt diseases, this group of organisms was recently recognized by the World Health Organization as a high-priority threat to human health. Climate change has increased the risk ofFusariuminfections, asFusariumstrains are highly adaptable to changing environments. Deciphering fungal adaptation mechanisms is crucial to developing appropriate control strategies. We performed a comparative analysis ofFusariumstrains using an animal (mouse) and plant (tomato) host andin vitroconditions that mimic abiotic stress. We also performed comparative genomics analyses to highlight the genetic differences between human and plant pathogens and correlate their phenotypic and genotypic variations. We uncovered important functional hubs shared by plant and human pathogens, such as chromatin modification, transcriptional regulation, and signal transduction, which could be used to identify novel antifungal targets.

Microbiology↗
DOE OSTI2020

HAZARD ANALYSIS OF DIGITAL ENGINEERED SAFETY FEATURES ACTUATION SYSTEM IN ADVANCED NUCLEAR POWER PLANTS USING A REDUNDANCY-GUIDED APPROACH

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. This paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the triggers of potential single points of failure in the design of digital safety systems in advanced plant designs.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2026

Agnostic capture of pathogens for the detection and diagnostics of emerging threats

The continued emergence of pathogens, whether novel, re-emerging, or engineered, poses a persistent global biosecurity and public health challenge. Recent outbreaks, including COVID-19, Lassa fever, Marburg virus, mpox, and avian influenza, underscore the urgent need for robust systems that enable rapid surveillance, early diagnosis, and timely countermeasures before widespread human transmission occurs. In this article, we focus on early detection technologies and systematically evaluate current diagnostic and sensing modalities. We highlight sequencing and spectroscopy as two complementary approaches capable of providing broad, agnostic detection and rich biological insight. Our analysis emphasizes that scientific innovation alone is insufficient: effective preparedness also requires improved data curation, integration, and sharing to build AI-ready resources that accelerate future responses. We argue for coordinated advances in both technological capabilities and supporting infrastructure to enable the rapid identification and characterization of emerging pathogens and to fully leverage modern science against evolving infectious threats.

Environmental health↗
DOE OSTI2023

Application of multi-criteria decision analysis techniques and decision support framework for informing select agent designation for agricultural animal pathogens

The United States Department of Agriculture (USDA), Division of Agricultural Select Agents and Toxins (DASAT) established a list of biological agents and toxins (Select Agent List) that potentially threaten agricultural health and safety, the procedures governing the transfer of those agents, and training requirements for entities working with them. Every 2 years the USDA DASAT reviews the Select Agent List, using subject matter experts (SMEs) to perform an assessment and rank the agents. To assist the USDA DASAT biennial review process, we explored the applicability of multi-criteria decision analysis (MCDA) techniques and a Decision Support Framework (DSF) in a logic tree format to identify pathogens for consideration as select agents, applying the approach broadly to include non-select agents to evaluate its robustness and generality. We conducted a literature review of 41 pathogens against 21 criteria for assessing agricultural threat, economic impact, and bioterrorism risk and documented the findings to support this assessment. The most prominent data gaps were those for aerosol stability and animal infectious dose by inhalation and ingestion routes. Technical review of published data and associated scoring recommendations by pathogen-specific SMEs was found to be critical for accuracy, particularly for pathogens with very few known cases, or where proxy data (e.g., from animal models or similar organisms) were used to address data gaps. The MCDA analysis supported the intuitive sense that select agents should rank high on the relative risk scale when considering agricultural health consequences of a bioterrorism attack. However, comparing select agents with non-select agents indicated that there was not a clean break in scores to suggest thresholds for designating select agents, requiring subject matter expertise collectively to establish which analytical results were in good agreement to support the intended purpose in designating select agents. The DSF utilized a logic tree approach to identify pathogens that are of sufficiently low concern that they can be ruled out from consideration as a select agent. In contrast to the MCDA approach, the DSF rules out a pathogen if it fails to meet even one criteria threshold. Both the MCDA and DSF approaches arrived at similar conclusions, suggesting the value of employing the two analytical approaches to add robustness for decision making.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2024

PLC Vulnerabilities and Mitigations

Programmable Logic Controllers (PLCs) are used extensively in many high-importance industrial and nonindustrial settings including controlling elevators, manufacturing machines, and utility facilities such as power and natural gas, however cybersecurity protection for them has been neglected. Within recent years, PLCs have been put under more security scrutiny and experts have advocated for changes from the addition of protocol encryption and network segmentation to intrusion detection systems on the PLCs themselves. While PLC security is critical, a large portion of the PLCs available today will never receive these changes due to being legacy or the difficulty of overhauling the security on existing systems. Due to the infeasibility of applying many recommended security measures towards currently available machines, we aim to provide realistic and affordable best practices for hardening PLCs. We will first conduct security analysis and consider attack vectors within our target PLC. Once we’ve analyzed the device’s security, we will evaluate a variety of mitigation methods and create guidelines to effectively reduce the threat posed by PLC attacks with minimal disruption to operations.

42 ENGINEERING↗
DOE OSTI2024

Collection and Analysis of Telemetry for CyOTE Heuristics (CATCH)

The Collection and Analysis of Telemetry for CyOTE Heuristics (CATCH) provides a framework for augmenting an organization’s existing security controls with CyOTE developed analyses. CATCH collects, stores, analyzes, and creates STIX reports on anomalous data. CATCH connects the CyOTE analysis framework together with the MITRE ICS ATT&CK® patterns and highlights areas of improvement and further research. This tool is designed to enhance an organization’s security controls by providing a structured approach to collecting, storing, analyzing, and reporting anomalous data.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

A Growing Freshwater Lens in the Arctic Ocean With Sustained Climate Warming Disrupts Marine Ecosystem Function

One of the most robust changes in the hydrological cycle predicted by Earth System Models (ESMs) during the remainder of 21st century is an increase in the difference between precipitation and evapotranspiration (P-E) in arctic and boreal regions. We explore the long-term consequences of this change for marine ecosystems in the Arctic Ocean using the Community Earth System Model forced with a business as usual scenario of future greenhouse gas concentrations. We find that by the year 2300 increases in freshwater delivery considerably reduce Arctic Ocean surface salinity, creating a freshwater lens that has far-reaching impacts on marine biogeochemistry. The expanding freshwater lens limits vertical nutrient supply into the euphotic zone by enhancing vertical stratification and accelerating surface lateral mixing with surface waters in the North Atlantic, which become increasingly nutrient depleted from weakening of the Atlantic Meridional Overturning Circulation (AMOC). The resulting increase in nutrient stress reduces marine export production in the Arctic Ocean by 53% in 2300 relative to the 1990s and triggers a shift in community composition with small phytoplankton replacing diatoms. At the same time, the seasonal timing of export production undergoes a 2-month forward shift, with the peak advancing from July to May. This suggests that the threat to food webs and higher trophic levels may intensify after the year 2100 as gains in productivity from sea ice loss saturate and freshwater impacts on nutrient stress continue to strengthen. Our analysis highlights the critical importance of changing terrestrial hydrology and land-ocean coupling as drivers of long-term biogeochemical change in the Arctic Ocean and the necessity of multi-century climate change projections.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2022

Microgrid Conceptual Design Guidebook | 2022

This guide is meant to assist communities – from residents to energy experts to decision makers – in developing a conceptual microgrid design that meets site-specific energy resilience goals. Using the framework described in this guidebook, stakeholders can come together and start to quantify site-specific vulnerabilities, identify the most significant risks to delivery of electricity, and establish electric outage tolerances across the community. In addition to establishing minimum service needs, this framework encourages communities to consider broader sustainability goals and policy constraints and begin to estimate up-front costs associated with the installation of alternative microgrid solutions. The framework guides a community through data collection and a high-level assessment of its needs, constraints, and priorities, prior to engaging engineers, vendors, and contractors. The first sections of this guidebook provide a high-level primer on electric systems. The latter sections include guidance for step-by-step data gathering and analysis of site conditions. The ultimate product resulting from the stepwise approach is a conceptual microgrid design. A conceptual design is defined as an initial design (10%-20% complete) that considers the specific threats, needs, limitations, and investment options for a given location. Going through this exercise and developing the conceptual microgrid design as a community ensures the same community members who will ultimately live with the solution are the developers of its foundational design. Often, these are also the very same people who understand system tolerances and needs the best and are therefore the ideal candidates for establishing these criteria. Especially when it comes to evaluating critical infrastructure, it is the community that best understands the most critical services. The framework is intended to facilitate a systematic approach to planning for resilience and provide a deeper understanding of how to use a framework to make decisions around microgrid solutions. Like many processes where tradeoffs need to be considered, this is often an iterative process. If this guide serves to help educate and empower communities who are beginning the process of deploying a microgrid, it has met the goal of its authors.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2024

Large-Scale Hydrogen Storage Cyber Risk Assessment

Hydrogen storage systems may become more widely deployed throughout the country, and so it is possible that individual and interconnected systems will be exposed to cyber-attacks. These events can cause physical and financial harm to employees, people in the vicinity of the facility, and the company that owns the facility. The two main ways bad actors may access information or control from a hydrogen storage facility are through information technology and operations technology devices, the former of which refers to data and information from networked devices and the latter of which refers to onsite controls for the physical system. Both types of entryways into the system should be considered when companies conduct cyber risk assessments and when regulators develop or revise relevant codes and standards. This report analyzes cybersecurity risks associated with a generic hydrogen storage system by outlining the system's purpose and the importance of its cybersecurity. The hydrogen storage system architecture and communication protocols are provided to understand potential cyber vulnerabilities. Later, an event tree analysis is performed on hydrogen operation to identify system weaknesses by outlining potential attack scenarios. This report also identifies critical cyber assets related to different hydrogen operations followed by an examination of potential threats, and the impact of cyber assets on those operational assets.

08 HYDROGEN↗
DOE OSTI2024

Large-Scale Hydrogen Storage Cyber Risk Assessment

Hydrogen storage systems are becoming more widely deployed throughout the country, and as their presence continues to grow, it is possible that individual and interconnected systems will be exposed to cyber-attacks. These events can cause physical and financial harm to employees, people in the vicinity, and to the company that owns the facility. The two main mechanisms malicious actors may access information or control from a hydrogen storage facility are through information technology and operations technology devices, the former of which refers to data and information from networked devices and the latter of which refers to onsite controls for the physical system. Both types of entryways into the system should be considered when facility managers conduct cyber risk assessments and when regulators develop or revise relevant codes and standards. This report analyzes cybersecurity risks applicable to a wide variety of hydrogen storage systems by outlining the system's purpose and the importance of its cybersecurity. The hydrogen storage system architecture and communication protocols are provided to understand potential cyber vulnerabilities. Later, an event tree analysis is performed on hydrogen operation to identify system weaknesses by outlining potential attack scenarios. This report also identifies critical cyber assets related to different hydrogen operations followed by an examination of potential threats, and the impact of cyber assets on those operational assets.

08 HYDROGEN↗
DOE OSTI2025

Exponential Backoff and Its Security Implications for Safety-Critical OT Protocols over TCP/IP Networks

The convergence of Operational Technology (OT) and Information Technology (IT) networks has become increasingly prevalent with the growth of Industrial Internet of Things (IIoT) applications. This shift, while enabling enhanced automation, remote monitoring, and data sharing, also introduces new challenges related to communication latency and cybersecurity. Oftentimes, legacy OT protocols were adapted to the TCP/IP stack without an extensive review of the ramifications to their robustness, performance, or safety objectives. To further accommodate the IT/OT convergence, protocol gateways were introduced to facilitate the migration from serial protocols to TCP/IP protocol stacks within modern IT/OT infrastructure. However, they often introduce additional vulnerabilities by exposing traditionally isolated protocols to external threats. This study investigates the security and reliability implications of migrating serial protocols to TCP/IP stacks and the impact of protocol gateways, utilizing two widely used OT protocols: Modbus TCP and DNP3. Our protocol analysis finds a significant safety-critical vulnerability resulting from this migration, and our subsequent tests clearly demonstrate its presence and impact. A multi-tiered testbed, consisting of both physical and emulated components, is used to evaluate protocol performance and the effects of device-specific implementation flaws. Through this analysis of specifications and behaviors during communication interruptions, we identify critical differences in fault handling and the impact on time-sensitive data delivery. The findings highlight how reliance on lower-level IT protocols can undermine OT system resilience, and they inform the development of mitigation strategies to enhance the robustness of industrial communication networks.

DNP3↗
DOE OSTI2020

CCE Phase 2: System-of-System Analysis

During Phase 1, Consequence Prioritization, the CCE Team identified High Consequence Events (HCEs) that can be accomplished through cyber means to impact critical functions, services, and processes. During Phase 2, System-of-Systems Analysis (SoS Analysis), the CCE Team will conduct a systematic review and analysis of information related to the equipment, systems, processes, operations, maintenance, testing, and procurement practices based on the HCEs identified in Phase 1.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2021

Analysis of digitized herbarium records and community science observations provides a glimpse of downy mildew species diversity of North America, reveals potentially undescribed species, and documents the need for continued digitization and collecting

Downy mildew diseases caused by Peronosporaceae cause significant crop losses globally, with several emerging and resurgent threats in recent decades. Biodiversity data from digitized herbarium specimens provide an opportunity to develop a baseline census of species diversity, however, these resources may represent aggregations of nonrandom and opportunistic collecting efforts, which could lead to spurious results. Here, the MyCoPortal census of digitized herbarium records for downy mildew species collected from North America 1800 to present were analyzed. From 9838 unique records, 196 species were identified, reflecting ~28% of known species diversity. Temporal and geographic collecting biases were observed, with 90% of the collections made prior to 1960 and the efforts of six “super-collectors” accounting for 25% of the collections. The presence of 50–100 undescribed species in North America was inferred from the records. Together, these results highlight the need for continued downy mildew collections, taxonomic research and digitization efforts.

59 BASIC BIOLOGICAL SCIENCES↗