Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,459 records · Page 81
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Universal Utility Data Exchange (UUDEX) – Security and Administration: Cybersecurity of Energy Delivery Systems (CEDS) Research and Development

A critical component of the Universal Utility Data Exchange (UUDEX) approach is the integrated security contained within its processing. This document describes how that security is designed and expected to be implemented by UUDEX Implementations (U-Implementations), including the UUDEX Server (U-Server) and UUDEX Clients (U-Clients). The UUDEX security hierarchy consists of three levels: 1. The UUDEX Instance (U-Instance) itself, which sits at the top of the hierarchy and contains the U-Server, the UUDEX Identity Authority (U-Identity Authority), and the UUDEX Administrator (U-Administrator) functions; 2. A group of one or more UUDEX Participants (U-Participants) that present “organizations” that participate in the U-Instance and contains the UUDEX Administrator Participant (U-U-Administrator Participant) function; 3. A group of one or more UUDEX Endpoints (U-Endpoints) that represent the individual UUDEX Publish Clients (U-Publish Client) responsible for supplying data to the U-Instance that is consumed by UUDEX Subscriber Clients (U-Subscriber Clients). U-Endpoints can be either autonomous devices that publish and subscribe data such as data exchange servers found in supervisory control and data acquisition and energy management systems, or they can be tied to users of applications that, for example, submit DOE OE-417 disturbance reports. U-Participants and U-Endpoints can be organized into UUDEX Groups (U-Groups). Any number of U-Participants or U-Endpoints can be members of a U-Group. A given U-Participant or U-Endpoint can be a member of multiple U-Groups, but a U-Group cannot contain other U-Groups. For example, a U-Group could be created to contain all U-Participant Transmission Operators within the purview of a Reliability Coordinator, and another U-Group could be created to contain all U-Participant Generator Operators within the purview of a Reliability Coordinator. U-Participants that are both Transmission Operators and Generator Operators would be members of both U-Groups. U-Participants, U-Endpoints, and U-Groups are used in the access control structures to provide access to individual UUDEX Subjects (U-Subjects). U-Groups are created by the U-Administrator and are managed by the U-Administrator or the designated U-Group Managers. U-Endpoints can be assigned UUDEX Roles (U-Roles) that can be used to further restrict access. U-Roles are assigned to individual U-Endpoints. For example, a U-Role of “Security Analyst” could be used to restrict which U-Endpoints can publish or subscribe security incident reports and vulnerability notifications, while a U-Role of “Transmission Planner” can be used to restrict which U-Endpoints can publish power system model updates. U-Role definitions are created by the U-Administrator, but the U-Roles are assigned to U-Endpoints by their respective UUDEX Participant Administrators (U-Participant Administrator). Because all information required to make security decisions is either included within the U-Endpoint’s X.509 digital certificate or stored in a datastore on the U-Server, all security decisions are performed and enforced within the U-Server. This reduces the complexity of the U-Client code and minimizes the chance for compromise of the integrity of the UUDEX security features.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

The Evaluation of Mechanical Properties of LB650 cavities

The PIP-II project’s LB650 cavities could potentially be vulnerable to mechanical deformation because of the geometric shape of the cavity due to reduced beta. The mechanical property of the niobium half-cell was measured following various heat treatments. The 5-cell cavities were tested in a controlled drop test fashion and the real-world road test. The result showed that the 900 C heat treatment was compatible with cavity handling and transportation during production. The test provides the bases of the transportation specification and shipping container design guidelines.

Holzbauer, J.↗
DOE OSTI2023

A Systematic Approach for Estimating High-Altitude Electromagnetic Pulse Coupling onto Power Generation Facility Equipment

A systematic approach is presented to evaluate the effects of high-altitude electromagnetic pulse (HEMP) signals on the equipment located inside a power generation facility. The approach uses a combination of practical measurement and simulation efforts to characterize the radio wave propagation behavior and the device immunity profile. Of particular interest in this work was estimating the vulnerability level of equipment that is connected to long cables. As an example application, a detailed study was conducted for one common class of facility equipment, and its frequency- and time-domain HEMP coupling properties were investigated as a function of terminal loading condition and cable attachment configuration. Overall, the proposed method can be generalized and applied to other electronic components and systems found in the facility environment.

42 ENGINEERING↗
DOE OSTI2023

Cybersecurity Anomaly Detection in SCADA-Assisted OT Networks Using Ensemble-Based State Prediction Model

The cybersecurity threats of power system gradually grow due to the increased sophisticated interactions between Information Technology (IT) and Operational Technology (OT) networks. False data injection attack (FDIA) that aims to compromise the Supervisory Control and Data Acquisition (SCADA) measurement and disturb the system operation is one of such cyber threats. Such attacks can potentially lead to significant operational issues at the control centers and substations, and hence, result in severe physical consequences. To avoid catastrophic failure across the power grid resulting from these attacks, it is essential to arm the OT network with real-time vulnerability assessment tools. To this end, this paper outlines various drawbacks of the Purdue architecture model to defend against cyberattacks in the OT network. Furthermore, a novel ensemble-based state prediction model is proposed to detect cybersecurity anomalies in SCADA assisted OT networks. The proposed model uses control center level generation and load forecasts, scheduled, and forced outages, power flow solutions, and the substation level historical data. The hypothesis of the proposed scheme relies on the fact that additional control center and substation data can hardly be accessed and compromised by attackers. One of the vital features of the proposed scheme is an hour-ahead prediction of the operational feasibility of the SCADA measurement range at the control center and substation in real time helps in detecting anomalies in measurements across both substation and the control center.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

COVID-19 Lead Time: Evaluating the timeliness and reliability of reported COVID-19 cases and hospitalizations as leading indicators of hospitalizations and death in the US

The COVID-19 pandemic prompted a reliance on real-time data sources to understand the global spread and impact of the SARS-CoV-2 virus. Reported cases were presumed leading indicators for hospitalizations, while hospitalizations were considered predictive of deaths. However, studies have questioned the consistency of reported cases as leading indicators. This study systematically assesses the reliability of United States (US) reported cases and hospitalizations as leading indicators for hospitalizations and deaths respectively, examining the first 2.5 years of the pandemic (January 2020 - June 2022) across different phases of the pandemic and states. Using correlation analysis, population data, and forecasting accuracy measures, we investigate the temporal relationships and identify possible determinants of lead time variability. Notably, we found that the average lead time between reported cases and hospitalizations across US states is relatively short at 1.76 days, implying that reported cases might not be as effective a leading indicator for hospitalizations as previously believed. Populations with higher comorbidity burdens, such as proportion of smokers, are expected on average to have shorter lead times, possibly due to shorter time to hospitalization among these vulnerable populations.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2023

Supply Chain Cybersecurity Recommendations for Solar Photovoltaics

Solar photovoltaic (PV) cybersecurity is a growing field of research. As deployments of solar PV has increased, cyber risk has also increased. However, utility solar PV installations are not required to comply with North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) unless they meet a minimum generation threshold of 75 Megawatts (MW). Individual residential scale solar PV deployments will not meet that generation threshold and are therefore excluded from NERC CIP requirements. With most solar installations below 75MW, solar PV has been deployed with minimal oversight and highly variable cybersecurity maturity. The resources that make up the digital supply chain can include software, code, data, as well as other digital components. However as clean energy technology advances, cybersecurity threats and vulnerabilities continue to evolve and grow in sophistication. Solar PV faces a unique challenge in which it can be deployed in residential buildings and purchased by a consumer directly. This makes the supply chain of PV a unique challenge, where responsible parties for cybersecurity vary widely depending on the type of solar PV being deployed. Supply chain cybersecurity for solar PV represents a critical area for ensuring safe operations as the U.S. moves towards a clean energy future.

14 SOLAR ENERGY↗
DOE OSTI2023

Applications of Measuring and Valuing Resilience in Energy Systems

The electricity sector is vulnerable to numerous hazards that are being exacerbated by climate change, which can cause an increase in the hazards' frequency and intensity. Consumers, system regulators, system operators, and communities are now preparing to mitigate the increased risks posed by climate change. New York State's energy infrastructure resilience can be increased with targeted investments including but not limited to installing emergency backup systems, integrating microgrid solutions, weatherizing buildings, increasing energy efficiency, adding redundancy, investing in restoration and recovery, and hardening critical components. Such investments can reduce the likelihood, impact, and consequences of disruptive events but can also increase capital and operating costs. A barrier to prioritizing investments in resilience is that there is no widely established method for quantifying and assigning the benefits of resilience investments across various stakeholders. Decision-makers need better information detailing the value of resilience improvements. Developing methods to quantify, value, and price resilience helps meet resilience needs in an effective manner that also supports broader societal welfare. This report lays out considerations for quantifying and valuing resilience, discusses the current state of resilience valuation tools, and provides case studies of resilience projects that demonstrate how resilience attributes could be measured while highlighting broader, project-specific challenges to increasing resilience. Further, we present insights into methods and challenges to measuring, valuing, and enacting resilience investments.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2021

Assessing and mapping extreme wave height along the Gulf of Mexico coast

The effect of extreme waves on the coastal community includes inundation, loss of habitats, increasing shoreline erosion, and increasing risks to coastal infrastructures (e.g., ports, breakwaters, oil and gas platforms), important for supporting coastal resilience. The coastal communities along the US Gulf of Mexico are very low-lying, which makes the region particularly vulnerable to impacts of extreme waves generated by storm events. We propose assessing and mapping the risks from extreme waves for the Gulf of Mexico coast to support coastal resiliency planning. The risks will be assessed by computing n-year recurring wave height (e.g., 1, 5, 50, 100-year) using 32-year wave hindcast data and various extreme value analysis techniques including Peak- Over-Threshold and Annual Maxima method. The characteristics of the extreme waves, e.g., relations between the mean and extreme wave climates, directions associated with extreme waves, will be investigated. Hazard maps associated with extreme wave heights at different return periods will be generated to help planners identify potential risks and envision places that are less susceptible to future storm damage.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Cyber and Physical Security Analysis of GSI and Noventum Application for IoT Communications

We present our findings of the red team exercise conducted on the device and application developed by Guardian Sensors, Inc. (GSI) and Noventum. The app is used for situational awareness and control of photovoltaics (PV) and microgrid energy systems. The assessments performed are practical case scenarios that assess the risks and vulnerabilities posed by the app through targeted activities that could be engaged by an adversary. The assessment team’s results and recommendations are provided to inform on and mitigate the identified weaknesses to improve secure user authentication, connections, and communications. The recommendations in this report are not intended to be a security panacea but will add the desired defense-in-depth layer to securing communication of such interconnected systems.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

The Impacts of Developing a Port Network for Floating Offshore Wind Energy on the West Coast of the United States

Floating offshore wind is a pre-commercial industry with the potential for significant market growth on the U.S. West Coast in the near future; however, significant investment in port infrastructure will be required to enable the industry to progress from demonstration projects to efficient and cost effective commercial deployment. Developing a system of ports that can enable commercial-scale floating wind development on the West Coast of the United States will require significant levels of funding and coordination between governments, industry, ports, and local communities. A critical first step to strategically planning these resources is understanding the number of ports (and associated investment) that would be required to support different phases of offshore wind projects, including manufacturing, installation, and operation. But simply tallying up these costs is not sufficient to understand how a robust network of ports could impact local communities, the environment, workforce development, the offshore wind industry, and the West Coast region as a whole. In this report, the authors present analyses and perspectives related to port development in California, Oregon, and Washington. We describe the requirements for floating offshore wind ports that conduct manufacturing, installation, and/or service activities, and estimate the investment and time frames required to construct these ports at suitable locations in West Coast states. We develop indicators for the vulnerability and workforce accessibility of coastal communities and consider the potential risks and benefits associated with port development in these locations. We model how the proximity of an offshore wind project to installation and operations ports can impact the levelized cost of energy of the project, and then consider how these costs could be affected by local or foreign supply chains. We build upon these analyses to develop scenarios with increasing levels of offshore wind deployment and port assets on the West Coast and show how these ports could enable deployment goals to be achieved. Finally, we draw upon outreach with key floating wind stakeholders to summarize five key challenges that will need to be overcome to develop a comprehensive port network, and present potential approaches that could help to address these obstacles.

17 WIND ENERGY↗
DOE OSTI2023

Surface structure studies in 2D and 3D Nb resonators using GI-XRD

Superconductor radio frequency (SRF) Nb-resonators are a key element in the development of new generations of particle accelerators as well as in the fabrication of 3D circuit QED architecture for quantum computing. Nevertheless, Niobium is extremally reactive to light elements such as C, N, O and H, and therefore to the impurities ordering under special conditions, e.g., cryogenic temperatures. Since these resonators are put through a series of metallurgical and chemical processes, the number of impurities in the solid increases in tens of ppm. Upon operational conditions ~1.6 K, Nb become vulnerable to H atoms ordering, which leads to the nucleation of secondary phases such as Nb-hydrides. Thereupon to the energy dissipation and eventually to the superconductivity breakdown known as Q-disease and potentially High-Field Q-slope. In this contribution, we present a detailed structural analysis by high-energy grazing-incidence X-ray diffraction of specimens extracted from 3D Nb resonators to shed light on the kinetic formation of the resulting secondary phases and their crystal phase identification upon cooling and heating cycles. To our knowledge, this is the first study carried out in resonators samples using a light source, shallow angles and temperatures near ~4 K. Consequently, this work opens new routes to understand the chemical and phase composition, crystal and electronic structure of the Nb surface at temperatures near the operating conditions as a strategy to improve the physical and functional properties of Nb superconducting resonators.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗
DOE OSTI2023

Coupled Long-Term Experiment and Model Investigation of the Differential Response of Plants and Soil Microbes in a Changing Permafrost Tundra Ecosystem

The major research goal of this project was to understand and quantify the fate of carbon stored in permafrost ecosystems using a combination of field and laboratory experiments to measure and model isotope ratios and carbon fluxes in a tundra ecosystem exposed to experimental warming. Field measurements centered on a two-factor experimental warming to increase air and soil temperatures alone, and in combination, at a tundra field site in Alaska. A second manipulation of water table was embedded within the warming treatment such that both major environmental factors (temperature, moisture) controlling ecosystem carbon dynamics were experimentally altered. The experiment was interfaced with modeling activities using both data assimilation and forward modeling approaches. Models were used to make forecasts of ecosystem carbon dynamics beyond the time frame and environmental space of the experiment itself. This project was a follow-on to previous work that made use of the same field manipulation; here we continued the experimental manipulation in order to test new hypotheses regarding long-term effects of warming and permafrost thaw and subsequent changes in moisture availability on ecosystem carbon dynamics. These results were linked with ongoing synthesis and model intercomparison activities through the Permafrost Carbon Network, which led to additional synthesis publications as a result of collaboration and data sharing from this project. As key outcomes, this project has produced new papers published in the peer-reviewed literature, archived datasets used for model-data intercomparisons, trained graduate students and postdoctoral researchers, and has raised awareness about the vulnerability of permafrost carbon to a wider audience.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Evaluation of Apex Alpha with LabWare-LIMS Data Reduction for Alpha Analyses

Savannah River Site's Environmental Bioassay Laboratory is migrating its laboratory information management system (LIMS) from SQL-LIMS to Oracle Labware-LIMS (LW-LIMS) systems to align with the Department of Energy's cyber security policies. Concurrently with the LIMS upgrade, the current VMS based Alpha Measurement System (AMS) software is being replaced with Apex Alpha software to reduce other cyber vulnerabilities, streamline procedural production aspects of data handling, and improve outdated reduction processes to align the program with requirements outlined in ANSI N13.30. The primary technical changes which are being implemented are: - Reagent contributions are added in data reduction, - Moving average background equivalent activity are used for gross signal corrections, - Measured uncertainty of both are included in the decision level and propagated uncertainty, - Tracer levels are increased for precision and accuracy improvements, and - Reports are modified for compliance.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2022

SoK: A Framework for and Analysis of Software Bill of Materials Tools

Modern software development has gradually become more complex, leveraging available open-source software and third party components. This practice has raised questions about the provenance, licensing, versioning and compliance of reused code and its dependencies. Furthermore, it is par ticularly important to review such code fragments and third party components for known-vulnerabilities before they are included in a software product. A Software Bill of Materials (SBoM) is a mechanism to achieve such an analysis, provid ing transparency and visibility into a software product to both the software developer and its respective consumer. An SBoM lists information and details about all the elements constituting a piece of software and can, therefore, be used to evaluate associated security risk. While the concept of SBoMs is growing in popularity, it is still fairly new to many organizations, causing them to potentially struggle with pro ducing and processing SBoMs and limiting their widespread adoption. In this work, we delve into the area of SBoMs and present the state-of-the-art SBoM tools, creating a framework for analysis and categorizing them based on a diverse set of features and functionalities. We are the first to provide a detailed analysis of 83 open-source SBoM tools along with a perspective on how a potential SBoM user can select a tool based on their specific requirements. Our work aims to help promote understanding of this domain, thereby encouraging and furthering its overall adoption. We additionally seek to pave a path for future work in this area by providing recommendations to tool developers and users, researchers, and standardizing organizations.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2023

Enabling Cybersecurity, Situational Awareness and Resilience in Distribution Grids with High Penetration of Photovoltaics (CARE-PV) (Final Report)

Since legacy distribution systems have very limited visibility beyond the substation, high penetration of PV at the grid edge presents some unique operational challenges. One approach to address these challenges is to use information from advanced metering infrastructure (AMI) and µPMUs. However, exploiting this information is impacted by a number of factors, including multi-timescale measurements, volume of data generated, communication network impairments (e.g., information loss and latency) and susceptibility to cyber-attacks. Therefore, one of the critical tasks involved in the management of a distribution grid is to develop complete situational awareness by integrating cyber-security mechanisms with state estimation strategies and leveraging this situational awareness to assure energy services at strategic locations while exploiting AMI/PV inverter/ µPMU data. This CARE-PV project addresses the fundamental challenges in situational awareness and resilience to cyber and physical vectors by exploiting the synergy between innovative modeling, estimation, data analytics, testing and validation using smart PV inverters designed at K-State and facilities at NREL. Specifically, the project involved the development, testing and validation of the following novel enabling technologies: (Thrust 1) Resilience to cyber vectors that impact data integrity was addressed via a two-level defense strategy that combines cyber intrusion detection using self-learning, cooperative smart PV inverters, and a novel moving target defense framework to combat data integrity attacks. (Thrust 2) Resilience to cyber-physical vectors that impact situational awareness by limiting data availability was addressed via novel centralized and decentralized, sparsity-based static and dynamic state estimation approaches that enhance observability even when the underlying system is unobservable. (Thrust 3) Leveraging a unique probabilistic sensitivity analysis approach accompanied by one-of-a-kind dominant influencer set computation, the vulnerability of critical infrastructure at strategic locations was evaluated so that proactive PV-based control strategies can be used to support operations under normal/outage scenarios. These CARE-PV project innovations were demonstrated on both small-scale IEEE and larger utility-scale testbeds (Thrust 4). Feedback from Industry Advisory Board members was used to formulate a commercialization pathway for a subset of CARE-PV technologies. These CARE-PV technologies will ultimately lead to reliable and secure, large-scale integration of renewable energy and mitigate the risk of energy disruption resulting from cyber incidents and other emerging threats within the energy environment.

14 SOLAR ENERGY↗
DOE OSTI2023

Inventory of Public Key Cryptography in US Electric Vehicle Charging

Electric vehicles (EVs) and charging infrastructure are networked systems, which employ high-level communications in support of charging and grid service decisions. Public key cryptography (PKC) underlies much of the security and privacy protections of the information exchange. We are entering a new epoch where quantum computing threats must be seriously considered. A sufficiently large quantum computer, so named Cryptographically Relevant Quantum Computer (QRQC), will be able to perform the mathematical operations to efficiently attack the underpinnings of traditional PKC, thus jeopardizing the digital foundations for trust, communications security, and data security. Estimates suggest a QRQC can break public key encryption and digital signatures in the manner of tens to hundreds of hours, compared to traditional computing that would demand more than 10 18 years in a brute force-style attack. A consensus belief of quantum theorists, quantum experimenters, and cryptographers suggest that the quantum threat will be likely realized in the next twenty years. To address the threat, post-quantum cryptography, which is cryptosystems that are designed to be secure against both traditional and quantum computing threats, must be adopted. Migration from traditional PKC to quantum-resilient cryptography is a global undertaking and likely represents the largest transition in computing history. The nascent state of EV public key infrastructure, combined with limited adoption of the vehicle secure charging features, presents an opportunity to establish a preference for quantum-resistant cryptography as a step on the migration path. Delays will stunt the efforts as rapidly accelerating EVs sales and huge infrastructure investments will create large growing bases of long-lived vehicles and infrastructure. Migration preparations can commence while NIST continues the process to standardize post-quantum cryptography (PQC), which are quantum-resilient algorithms designed to be secure against traditional and quantum computing threats. The first step in preparing EV charging is to identify the presence of traditional public key cryptography algorithms and applications. With this objective in mind, this report is intended to advise the vehicle manufacturers, charging station manufacturers, charging station operators, charge network providers and other EV charging stakeholders with information on traditional PKC application and the potential risks when PKC becomes insecure. This report, the first in a series of reports discussing the topics existing at the confluence of post-quantum cryptography adoption and EV charging, identifies traditional public key applications employed and identifies potential consequences of leaving EV charging infrastructure vulnerable to quantum computing. The focus remains squarely on the of EV charging and infrastructure with respect to PKC and is believed by the authors to complement the NIST SP 1800-38 Migration to Post-Quantum Cryptography. While the report is centered on infrastructure, there are implications to vehicles.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2023

Characterizing the Geothermal Lithium Resource at the Salton Sea

The energy transition towards a more sustainable and renewable future is a pivotal global endeavor. Central to this shift for the United States is the critical role of domestically sourced lithium, a key mineral in the production of high-performance batteries essential for electric vehicles and renewable energy storage systems. This has driven the United States to invest heavily in a domestic supply chain for batterygrade lithium to enhance energy security, reduce supply chain vulnerabilities, and foster economic growth by tapping into local resources. A notable example is the Biden Administration’s “American Battery Materials Initiative,” which was included in the $2.8-billion Bipartisan Infrastructure Law (The White House, 2022).

25 ENERGY STORAGE↗
DOE OSTI2023

Requirements and Recommendations for a Physical Attack Characterization Framework

This study seeks to identify existing frameworks or develop requirements and recommendations for a new framework that can consistently characterize physical attacks, analogous to MITRE ATT&CK®. MITRE ATT&CK is widely used across government, research organizations, and the cyber security community to characterize cyber attack tactics, techniques, and procedures (TTPs) in a consistent and commonly understood manner. While physical attack taxonomies, methodologies, and other tools for evaluating physical security do exist, many are sector and/or facility-type specific—and therefore not able to provide comparable scenarios across sectors—or are more focused on security assessment instead of the characterization of attacks themselves. A MITRE ATT&CK analog for physical attacks on critical infrastructure would provide a common language and structure for analysis of physical attacks. Existing attack characterization methodologies do not robustly address cyber-physical security risks. To fully understand a facility’s security needs, it is important to understand the entire vulnerability landscape from both a physical and a cyber perspective. To underscore this need, organizations such as the Cybersecurity and Infrastructure Security Agency (CISA) are calling for a coordinated approach to cyber and physical security, which they refer to as cyber and physical security convergence. A physical attack characterization framework that could be used jointly with MITRE ATT&CK would help support a more robust analysis in support of convergence, enabling the consistent characterization of attacks that utilize both cyber and physical tactics and techniques. This could provide analysts and stakeholders with a clearer understanding of how security mitigations deployed in the physical realm impact security risks in the cyber realm, and vice versa. In this study, the project team evaluates existing physical security taxonomies and methodologies to assess whether an existing method can be used to create a “physical half” of MITRE ATT&CK. This study then provides requirements and recommendations for a framework that can leverage aspects of existing methodologies. The goal of the final framework is for it to be widely adopted and referenced, regardless of critical infrastructure sector, facility type, or facility components. This study also identifies applicable use cases for when and how a framework could be applied across the various critical infrastructure sectors for a variety of attack types or motivations. Through a literature review of existing security-focused methodologies and taxonomies, engagement with relative stakeholders, evaluation of potential physical attack framework use cases, and subsequent identification of requirements, this study identified the following key findings and recommendations: There is a need for a new physical attack characterization framework; A physical attack framework should be interoperable with the MITRE ATT&CK framework; A physical attack framework should be broadly applicable, but with detailed tactics, techniques, and procedures that encompass the entire attack path; A physical attack framework should be based on observed or feasible events; A physical attack framework should adapt features from existing methodologies, frameworks, and taxonomies; A physical attack framework should be owned, overseen, and maintained by one organization.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗