SEARCH · Engineering Papers

Results for “vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,495 records · Page 83

All sources NASA NTRS DOE OSTI

DOE OSTI2024

Clean Energy Cybersecurity Accelerator: Cohort 2 - runZero Public Report

The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) sponsors the Clean Energy Cybersecurity Accelerator™ (CECA) to expedite the deployment of emerging security technologies that address the most urgent security concerns facing modern and future electric grids. CECA Cohort 2 assessed solutions focused on hidden risks due to incomplete system visibility and device security and configuration. Improving visibility can be achieved through operational technology (OT) asset identification solutions, including capabilities like automatic discovery, vulnerability reporting, and configuration monitoring. Solutions that monitor and identify assets in information technology (IT) networks in other domains are widely used; however, there is far less adoption of monitoring solutions for operational technology environments. Wider adoption may increase with increased confidence in the ability for these solutions to understand and respond to the specific requirements of OT environments. CECA Cohort 2 evaluated the active and passive asset discovery capabilities of market-ready solutions, documented and analyzed results, and identified gaps in functionality or capabilities. This report and describes how these results can help advance the adoption of these and similar solutions in the electric sector.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

Cybersecurity Lessons Learned from Vehicle to Grid Engagement

As the transportation industry continues to become electrified, introduction of additional digital devices within associated actions such as recharging bring additional potential for cybersecurity attacks. Devices that are designed, implemented, and operated with cybersecurity as a crucial consideration exacerbate these concerns by failing to provide strict boundaries on access to and use of the equipment. Emerging use cases such as Vehicle to Grid (V2G) charging may expand the potential physical effects of a cybersecurity attack by providing indirect access to electrical components of a building microgrid or portions of the larger power grid. This paper serves as an overview of findings and recommendations based on cybersecurity testing performed at a V2G implementation site operated by a member of the Memorandum of Understanding (MOU) to Establish the Vehicle-to-Everything (V2X) Collaboration [1]. The Department of Energy Office of Cybersecurity, Energy Security, and Emergency Response is a signatory of the MOU, and has funded this research paper and associated body of work regarding V2X cybersecurity. Sandia has a large background of previous research focused on Electric Vehicle (EV) cybersecurity, such as reference [2], which includes an overall survey of EV infrastructure cybersecurity and recommendations based on those findings. This report seeks to expand knowledge of EV cybersecurity status and needs by focusing on a specific implementation of V2G charging, and providing recommendations based on the relevant findings. This report serves as a publicly available, sanitized description of applied vulnerability testing on an operational V2G implementation. A more in-depth technical version of the report is provided to the MOU partner, but not available at the time of writing due to inclusion of proprietary information. V2G charging comes with many research problems that must be solved before the technology can securely implemented in sites with unrestricted public access or where cybersecurity attacks could have increased consequences, such as government offices. V2G charging requires many stakeholders such as end users, host sites, equipment vendors, and integrators, which all rely on operational safety and security as well as security and trustworthiness of any associated financial transactions.

33 ADVANCED PROPULSION SYSTEMS↗

DOE OSTI2023

LDRD23-0184: Resilience and Hazard Risk Assessment to Prioritize Security Operations for Decisions and Impacts (RHAPSODI)

Recent examples provide a significant concern for the resilience of the U.S. electric grid and represent a need for enhanced decision-making to address an increasingly wide range of complex system interactions and potential consequences. In response, this LDRD project produced a proof-of-concept evaluation called the Resilience and Hazard Assessment to Prioritize Security Operations for Decisions and Impacts (RHAPSODI) methodology as an agile and flexible analytic framework capable of addressing multiple, diverse threats to desired electric grid performance. After empirically grounding needs for the future of U.S. electric grid resilience, this project employed the systems-theoretic process analysis (STPA) to develop a systems engineering risk model. The results of a completed feasibility study of a notional high voltage transmission system demonstrate an improved ability to incorporate both spatial (e.g., geographically distributed) and temporal (e.g., dynamic and time-dependent) elements of security risk to the gird. The success of this LDRD project provides the foundation for further evolution of the systems engineering risk model for the grid; derivation of quantitative approaches to evaluate risk and resilience performance; facilitation of agile experimenting and grid sensitivity to a range of vulnerabilities; and development of tools to assist decision-makers in enhancing U.S. electrical grid resilience.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

Risk of theft and malicious use of radiation sources in transit

Remote radioactive source applications require frequent transportation of sources from storage locations to remote sites. This introduces risk of theft of a source during the transportation process, with the level of risk proportional to the radioactivity of the source. To that end, theft of smaller sources, such as microcurie-level moisture density gauges, are of minor concern, but larger sources, such as those used for radiography and well logging, present more risk. Radiography sources include 192 Ir, 75 Se, or 60 Co radionuclides with radioactivity amounts at or exceeding IAEA Category 2. Well-logging sources, primarily 241 Am/Be, are used for their neutron-emission properties. 137 Cs is also used in well-logging at lower activities than in radiography but at levels that still present some risk. The vulnerability for malicious use of such sources to cause contamination and associated economic effects is dependent on the elemental chemical and physical properties, especially melting point and bulk modulus. Theft of radiography sources is somewhat common, well-logging sources less so. Theft of sources commonly occurs in concert with theft of the vehicle, with the source subsequently abandoned. There have been some instances where a source appears to have been specifically targeted. There are a variety of security measures and protocols, available and under development, to mitigate the risk of theft and assist in source recovery.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

DOE OSTI2023

Energy Transitions Initiative Partnership Project: Alaska Longline Fishermen’s Association Alternative Fuels Review

This report provides information about additional options in electrifying the Alaska Longline Fishermen’s Association (ALFA) fishing fleet. Currently, the Energy Transitions Initiative Partnership Project is prioritizing electric hybrid and battery electric options for retrofit of select fishing vessels in the fleet. However, there are other options for reducing carbon emissions among the fleet, namely hydrogen, ammonia, and biofuels. The use of these alternative fuels may be an option for the fleet in the future as ALFA addresses its vulnerabilities. A literature review of available resources on these fuels was conducted to provide information on several topics associated with implementation of these technologies, including current applications, commercially available power modules, necessary components, infrastructure, and safety codes and standards. An additional aspect that this report investigates is general sizing and refueling schedule based on operating records of multiple ships in the fleet.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2023

Energy Transitions Initiative Partnership Project: Alaska Longline Fishermen’s Association Alternative Fuels Review

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2024

Sister Rod Destructive Examinations (FY23): Appendix J: Leaching of High Burnup Used Nuclear Fuel in Deionized Water

The leaching experiment aims to understand the trends in the radiolysis-enhanced dissolution of HBU SNF when exposed to water (e.g., in-reactor or in-pool cladding failures). Specimens from a baseline M5-clad rod and a heat-treated M5 rod were cut from the fractured CIRFT specimens and placed in 100 mL deionized water for a period of 128 days. Both radial and axial sections were cut to provide different surface areas of fuel in contact with the leachate. During the four-month exposure period, aliquot samples of the leachate were analyzed using gamma spectroscopy and inductively coupled plasma - mass spectrometry (ICP-MS). The analysis quantified the amount of fuel leached into the solutions and provided individual isotopic release fractions (of 30+ isotopes) which were compared as a function of time and surface area of the fuel exposed. Consistent with existing literature, the leaching followed a trend in which isotopes of certain elements such as Cs and Mo were among the first species in the matrix to dissolve, and with the highest release rates. This was followed by a gradual matrix dissolution consisting of uranium and other actinides and a slower-than-matrix release from some isotopes, including Ru and Rh. It was also observed that the circumferential samples having less exposed fuel surface area (to begin with) leached more than the axial samples for a majority of the isotopes during the timespan of the study. Previous experiments were conducted by decladding or exposing the pellet-clad surface completely, but the samples used in this study retained the cladding. One possible explanation for the higher leaching rate of the circumferential samples is that the pellet-clad interface, which has a greater density of grain boundaries and defects, may be the most vulnerable area to leaching of fuel in the presence of water.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2023

Socioeconomically-inspired modeling to justify use of fine-grain mobility data

When designing measures to control infectious disease spread, it is crucial to understand the structure of the population for which interventions are being implemented. Recent work has highlighted the need for models that incorporate demographic heterogeneity not just in age structure but also by socioeconomic status (SES). Appropriately capturing additional sources of population heterogeneity requires considerable data and model development. To understand the potential disagreement between SES-explicit or SES-agnostic disease models, we adapted Sandia’s Adaptive Recovery Model (ARM) model to consider differences in contact structure and mortality by Social Vulnerability Index (SVI) on a theoretical network. We also incorporated an Average network that did not consider SVI. By exploring disparities in vaccine and PPE uptake by SES and comparing to Average networks, as well as analyzing the influence of global vs. local contact, we found that the two model constructions often predicted different outcomes. Whether these differences are truly reflective of incorporating SES, and which model most closely represents reality, merits further investigation.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2023

Quick Talk: Resilient Communities, Maryland

Groundswell, Inc., in partnership with the Maryland Energy Administration (MEA), Ayika Solutions, the National Renewable Energy Lab (NREL), and the Baltimore Office of Sustainability, is advancing a vision for resilient, community-centered energy systems in Maryland. This effort aligns with Groundswell's commitment to a clean energy economy that equitably benefits all communities, closing gaps in representation, wages, and access to wealth generation, savings, and local jobs within a diverse energy supply chain. Project Vision and Objectives The project emphasizes "energy resilience," defined as a community’s capacity to anticipate, adapt to, and swiftly recover from power disruptions through inclusive planning and technical solutions. The approach centers on Resilience Hubs—designated community facilities equipped to support residents before, during, and after power-related disruptions. These hubs offer emergency resources, coordinate communications, and deliver essential services while reducing carbon emissions, ultimately enhancing residents' quality of life. Additionally, Resilience Hubs foster social connections, support disaster preparedness, and provide spaces for community programming and everyday use. The goals of Resilient Communities Maryland include: Developing a replicable framework for community energy resilience, applicable beyond Maryland. Defining community-led indicators of social impact and resilience. Establishing equitable decision-making processes in project design and implementation. Informing MEA of practical, community-based resilience strategies to shape future state initiatives. Approach Groundswell and its partners prioritize collaborative engagement with local stakeholders, ensuring that solutions are responsive to each community's unique needs. By integrating feedback from residents, local organizations, and government entities, the team has developed a holistic model for resilience that balances immediate benefits, such as improved emergency response, with long-term gains in social equity and environmental sustainability. Key Outcomes This initiative has produced valuable resources and insights, including: A Community Energy Resilience Framework: Designed to guide other communities in establishing energy resilience strategies tailored to their specific needs. Case Studies: Documenting best practices and lessons learned from pilot projects to serve as models for future resilience efforts. Community-Driven Impact Metrics: Highlighting the positive social impacts that resilience initiatives can bring, such as improved social connectedness and local decision-making power. Recommendations for MEA: Offering evidence-based insights to inform policies and funding opportunities that support resilient energy infrastructure in vulnerable communities. Next Steps Groundswell's final report will detail findings, including the potential for scaling resilience hubs across Maryland and other regions, with a focus on equitable access and community-driven outcomes. This project underscores the importance of aligning energy resilience with social equity, reinforcing community agency, and building systems that withstand and recover from future challenges effectively and sustainably.

14 SOLAR ENERGY↗

DOE OSTI2024

Assessing Historical Extreme Weather Event Impacts

Understanding how past extreme weather events have affected a site is an integral part of site-level resilience planning. Energy and water resilience planning has been a key priority for the federal government for many years and agencies look to develop processes for identifying and addressing critical resilience gaps at their facilities and across their sites. The purpose of this information paper is to help inform how organizations could begin structuring a comprehensive process for recording the impacts of extreme weather events in order to facilitate climate vulnerability assessments, and thus, resilience planning. The paper highlights current limitations for developing event history assessments and suggests a framework for more consistently capturing key data points.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2023

Urban Combined Heat and Power with Integrated Renewables and Energy Storage

This project demonstrated how incorporating a diverse generation and storage portfolio allows an urban district energy system to improve its efficiency by at least 50% and increase its backup power by at least 40% with a return on investment of at least ten years. The improvement was evaluated against the baseline operations for two urban district energy systems (DESs): a synthetic DES and a George Washington University DES. The DES techno-economic framework we developed yields reliability, resilience, and vulnerability indices for urban DESs (including generation and storage) with designation of which technologies improve the security and resiliency metrics by at least 20% compared to the status quo. The indices are benchmarked against baseline scenarios, and cost projections (capital cost and return on investment) to achieve the 20% improvement are reported. The energy management system we developed to conduct these analyses was incorporated into a user-friendly interface that can be used for decision-making by a user with no technical or programming background.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2024

Investigate the Security of Electric Vehicle (EV) Ecosystem Applications

Apps that run on mobile devices are one of critical components of the electric vehicle (EV) ecosystem and pose possible threat actor points of entry that may impact the trust and security of EV charging systems in the future. Mobile apps often rely on communication between cloud servers and users, thereby creating potential points of entry for cyberattacks. Although app stores such as Apple App Store or Google Play Store generally test the security of apps, the cyber aspects may not be sufficient for many entities including DOD, federal fleets, and commercial entities. A more thorough inspection and the ability to influence developers is imminently needed. This research studies security attributes and vulnerabilities of a sample of mobile applications that support key user functions in the EV ecosystem. The study shows that all analyzed apps have security risks, categorized as either high or medium or both and a comprehensive cybersecurity guideline for developing mobile apps is necessary.

33 ADVANCED PROPULSION SYSTEMS↗

DOE OSTI2024

Efficient Hybrid Attack Graph Generation for Cyber-Physical System Resilience Experimentation (Final Project Report)

HAGEN project has developed theory, algorithms, and capabilities to assist cyber physical system modelers and operators to perform system and device-level vulnerability assessment, risk assessment, impact assessment, and mitigation planning. The project generates hybrid attack graphs for Cyber-Physical System (CPS) resilience experimentation at desired scale and speed. The project will produce composite attack datasets, algorithms, and demonstrable prototypical tools, and a library of high-impact attack sequences for a given CPS of interest. This report provided overall summary of research and development performed between FY22-24.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

DOE OSTI2024

Large-Scale Hydrogen Storage Cyber Risk Assessment

Hydrogen storage systems may become more widely deployed throughout the country, and so it is possible that individual and interconnected systems will be exposed to cyber-attacks. These events can cause physical and financial harm to employees, people in the vicinity of the facility, and the company that owns the facility. The two main ways bad actors may access information or control from a hydrogen storage facility are through information technology and operations technology devices, the former of which refers to data and information from networked devices and the latter of which refers to onsite controls for the physical system. Both types of entryways into the system should be considered when companies conduct cyber risk assessments and when regulators develop or revise relevant codes and standards. This report analyzes cybersecurity risks associated with a generic hydrogen storage system by outlining the system's purpose and the importance of its cybersecurity. The hydrogen storage system architecture and communication protocols are provided to understand potential cyber vulnerabilities. Later, an event tree analysis is performed on hydrogen operation to identify system weaknesses by outlining potential attack scenarios. This report also identifies critical cyber assets related to different hydrogen operations followed by an examination of potential threats, and the impact of cyber assets on those operational assets.

08 HYDROGEN↗

DOE OSTI2025

Nanoporous Wood Chips Based Sizable, Robust, and Low-Cost Honeycomb Vacuum Insulation Panels (DOE BENEFIT Final Research Performance Progress Report (RPPR))

Conventional vacuum insulation panels (VIPs) suffer from severe limitations including high cost, vulnerability to perforation, and significant performance degradation over time due to vacuum loss. InventWood Inc. (IW) and partnering teams completely re-engineered the VIP structure by constructing arrays of isolated vacuum-cells to enable limited cutting at designated areas (in between vacuum cells) and reduced consequential vacuum loss due to puncture. The teams also replaced the expensive vacuum insulation core materials with a low-cost commercial wood pulp and recycled long fiber. The wood pulp derived VIP can deliver an overall panel insulation of R15 (<0.01W/m·K) with over 90% thermal resistance retention after cutting (R13.5 overall, R5 along the cut edges). In addition, the vacuum-cell-array design minimizes edge losses, resulting in more durable performance, longer service life (>50 years), and higher R-value per dollar towards a cost target of <$1/ft 2 ·in. It is anticipated that the Nanochip-VIP will attract strong market interest and become an affordable insulation solution for energy efficient buildings and retrofits, leading to significant reductions in energy usage.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2024

Final Technical Report - Rapid Surface Microanalysis using a Low Temperature Plasma

This project focused on improving our current understanding and scientific knowledge in the area of plasma-surface interactions and plasma assisted material synthesis related to advanced microelectronics and nanotechnology. Current challenges include: controlling the interaction of Low Temperature Plasma (LTP) with a single layer of atoms to manufacture integrated circuits, continued miniaturization of integrated circuits, LTP processing of material surfaces and thin films to enable industrial scale fabrication of advanced microelectronics, synthesis of new materials, nanomaterials, nanotubes, and complex materials, Technology developed in this subtopic is of value to either (i) enable scans of surfaces (~1 sq. cm area) using various microscopies (electron, optical, other) at high resolution (micron or sub-micron resolution) rapidly (hours or days rather than years to complete a high-resolution scan of such a large surface area), or (ii) enable scans of surfaces (~1 sq. cm area) using various microscopies (electron, optical, other) at relatively low resolution rapidly, then apply algorithms to select spots for micron-scale imaging. Sputtering occurs when particles of a solid material are ejected from its surface by energetic particles from a plasma. While the degradation of the solid material and the subsequent deposition of the ejected material onto vulnerable surfaces are the usual subjects of sputtering studies, plasma science has yet to be combined with sputtering to create new diagnostics devices and systems. Small changes in the design of the plasma discharge device make it possible to create broad plasma beams for rapid scanning or small plasma beams to obtain the distribution of ejected elements with micron resolution. In the high-resolution use, the ion flux is extracted from the gas-discharge plasma and focused by a spherical emission surface to micron sizes onto the target specimen, providing very local sputtering and local elemental analysis. We call this “self-focusing”. The radiation from the excited and ionized sputtered atoms is recorded by a spectrometer through a window and fiberglass cable and analyzed with standard software packages used for optical glow discharge spectroscopy. Computer simulations of beam formation were used to verify and optimize the designs to be tested. A prototype was designed, constructed, and used to start experiments of beam formation.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

DOE OSTI2024

Large-Scale Hydrogen Storage Cyber Risk Assessment

Hydrogen storage systems are becoming more widely deployed throughout the country, and as their presence continues to grow, it is possible that individual and interconnected systems will be exposed to cyber-attacks. These events can cause physical and financial harm to employees, people in the vicinity, and to the company that owns the facility. The two main mechanisms malicious actors may access information or control from a hydrogen storage facility are through information technology and operations technology devices, the former of which refers to data and information from networked devices and the latter of which refers to onsite controls for the physical system. Both types of entryways into the system should be considered when facility managers conduct cyber risk assessments and when regulators develop or revise relevant codes and standards. This report analyzes cybersecurity risks applicable to a wide variety of hydrogen storage systems by outlining the system's purpose and the importance of its cybersecurity. The hydrogen storage system architecture and communication protocols are provided to understand potential cyber vulnerabilities. Later, an event tree analysis is performed on hydrogen operation to identify system weaknesses by outlining potential attack scenarios. This report also identifies critical cyber assets related to different hydrogen operations followed by an examination of potential threats, and the impact of cyber assets on those operational assets.

08 HYDROGEN↗

DOE OSTI2024

Clean Energy Cybersecurity Accelerator: Cohort 2 - Asimily Public Report

The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) sponsors the Clean Energy Cybersecurity Accelerator (TM) (CECA) to expedite the deployment of emerging security technologies that address the most urgent security concerns facing modern and future electric grids. CECA Cohort 2 assessed solutions focused on hidden risks due to incomplete system visibility and device security and configuration. Improving visibility can be achieved through operational technology (OT) asset identification solutions, including capabilities like automatic discovery, vulnerability reporting, and configuration monitoring. Solutions that monitor and identify assets in information technology (IT) networks in other domains are widely used; however, there is far less adoption of monitoring solutions for operational technology environments. Wider adoption may increase with increased confidence in the ability for these solutions to understand and respond to the specific requirements of OT environments. CECA Cohort 2 evaluated the active and passive asset discovery capabilities of market-ready solutions, documented and analyzed results, and identified gaps in functionality or capabilities. This report and describes how these results can help advance the adoption of these and similar solutions in the electric sector.

24 POWER TRANSMISSION AND DISTRIBUTION↗