Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Incident Response”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Cloud forensics and incident response platform

A system, method, and device for cloud forensics and incident response is provided. In an embodiment, a computer-implemented method for performing cloud forensics and incident response includes intercepting, by a cloud incident response module (CIRM), communication between a virtual machine (VM) and a hypervisor. The method also includes extracting, by the CIRM, data from the communication between the VM and the hypervisor according to a forensic policy. Intercepting and extracting the data are transparent to the VM and to the hypervisor. Intercepting and extracting the data are independent of the VM and the hypervisor.

Urias, Vincent↗
DOE OSTI2022

Washington State Cyber Incident Response Summit Event Report

On September 7 and 8, 2022, Pacific Northwest National Laboratory and Washington State Adjutant General Major General Bret Daugherty, with support from the Department of Homeland Security Cybersecurity and Infrastructure Security Agency, hosted the Washington State Cyber Incident Response Summit at Camp Murray in Washington State. The invite-only summit convened 40 key decision makers and stakeholders from across the state to discuss strategies and pilot a collaborative approach to improve cyber incident response readiness within Washington. In small working groups, participants shared incident response lessons learned, best practices, and opportunities for improvement within the water and transportation sectors. This report highlights the details of the workshop presentations and discussions.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Cybersecurity Incident Response Guide for Wind

As wind energy systems become increasingly digitized and interconnected, they face a growing array of cyber threats that can disrupt operations, compromise safety, and trigger cascading impacts across the energy ecosystem. The Wind Incident Response Guide provides a structured, wind-specific framework for preparing for, detecting, responding to, and recovering from cyber incidents. Drawing on lessons from field demonstrations, cyber-physical testbeds, and stakeholder engagement across the wind sector, this guide integrates technical, operational, and regulatory considerations to support asset owners, operators, and responders. It outlines key roles and responsibilities, maps incident response phases to wind-specific scenarios, and highlights applicable laws, regulations, standards, and best practices. By tailoring general cybersecurity principles to the unique architectures and operational constraints of wind systems—including remote access, legacy components, and environmental interfaces—this guide aims to enhance resilience, reduce response time, and support coordinated action across public and private stakeholders. It is intended as a practical resource for utilities, developers, regulators, and emergency managers working to secure the future of wind energy.

17 - WIND ENERGY↗
NASA NTRS2003

PAIRS, The GIS-Based Incident Response System for Pennsylvania, and NASA

Over the past several years the Pennsylvania Departments of Environmental Protection (DEP), Health (DOH), and Agriculture (PDA) built the GIs-based Pennsylvania West Nile Surveillance System. That system has become a model for collecting data that has a field component, laboratory component, reporting and mapping component, and a public information component. Given the success of the West Nile Virus System and the events of September 11, 2001, DEP then embarked on the development of the Pennsylvania Incident Response System, or PAIRS. PAIRS is an effective GIs-based approach to providing a system for response to incidents of any kind, including terrorism because it is building upon the existing experience, infrastructure and databases that were successfully developed to respond to the West Nile Virus by DEP, DOH, and PDA. The proposed system can be described as one that supports data acquisition, laboratory forensics, decision making/response, and communications. Decision makers will have tools to view and analyze data from various sources and, at the same time, to communicate with the large numbers of people responding to the same incident. Recent collaborations with NASA partners are creating mechanisms for the PAIRS system to incorporate space-based and other remote sensing geophysical parameters relevant to public health assessment and management, such as surface temperatures, precipitation, land cover/land use change, and humidity. This presentation will describe the PAIRS system and outline the Pennsylvania-NASA collaboration for integration of space-based data into the PAIRS system.

Conrad, Eric↗
DOE OSTI2025

AR4IR (Automated Reasoning for Incident Response) [SWR-24-103]

A basic formal methods tool with the ability to aid and/or automate a utilities’ incidence response and instills confidence that the proposed action satisfies the system’s physical constraints, the organization’s cyber policies, and will not cause violations of technical standards.

Etigowni, Sriharsha [National Renewable Energy Lab↗
DOE OSTI2020

Invite the Chaos Monkey: Test Effect Payloads for Tuning ICS Incident Response

In 2010, when Netflix moved their operational systems to the cloud, they developed a pseudo-random mechanism to cause deliberate outages and failures of key system elements to ensure that automated systems for detecting and remediating outages were mature and fully functional. This Chaos Monkey spawned an entire Simian Army designed to ensure system resilience and enable failure response before issues became outages. Through the DARPA RADICS program, Provatech, INL, and other researchers have developed a mechanism for creating controllable failures via Test Effect Payloads (TEPs) for Industrial Control Systems in order to enable an asset owner to tune network and process sensor technology, increase the effectiveness of incident response and remediation, and highlight areas where resilient technology could bring benefit to Operational Technology. This talk will explore what a TEP is, how to create a TEP, and suggest what a systematic system resilience plan using TEP’s might look like. We will also discuss how regulated entities might employ TEP’s in a compliant resilience strategy.

42 ENGINEERING↗
DOE OSTI2024

Does practice make perfect? Lessons learned from full-scale power system incident response exercise

While threats to the energy sector occur daily, few utilities get the opportunity to fully test out their detection and response mechanisms to advanced threats in the real world. With the high demand for reliability, few grid operators would allow execution of simulated cyber-attacks on their live systems. The DOE-funded Liberty Eclipse project offers a unique opportunity for small and large utilities and coops to practice their combined IT/OT responses to a live red team executing attacks against an isolated power system on an island in New York. Both cyber teams and power operations teams must work together to detect and respond to attacks, even restoring the power system against extreme impacts. Lessons learned from these exercises reveal key takeaways for understanding what a real attack against the electric sector will look like, gaps in execution of the best-laid plans when the pressure of a real event is bearing down, and how organizations can better prepare for advanced attacks by optimizing participation in exercises. This presentation will discuss successes and opportunities for improvement both in how utilities can prepare for and respond to events, as well as how full-scale IT/OT exercises can be coordinated.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2023

Ev Info And Incident Response Solutions

In post-crash situations, passengers, bystanders, and first responders are exposed to the immediate safety risks of stranded energy in electric vehicle (EV) batteries. A potentially damaged battery with an unknown state of safety might go into a thermal runaway without proper handling, leading to potential loss of life and property damage. Therefore, it is imperative to develop methods, guidelines and tools to handle the post-crash EVs appropriately and minimize safety risks from immediately after an EV accident to final disposal or re-entry to the road. This software tool: (1) provides quick access to EV specification, (2) estimate stranded energy left in an EV after a crash specific to EVs in a user-friendly way, (3) inform EV structure/disconnect for appropriate quick post-crash handling, (4) perform the calculation for the first responder to decide on onsite or offsite discharge, and (5) feature appropriate battery disposal and education/lessons learned. This software tool will directly help the emergency responders to handle EV post-crash situations effectively and safely.

Zhang, Bo [Idaho National Laboratory (INL), Idaho ↗
DOE OSTI2023

Wheelbyte Incident Response [Slides]

Wheelbyte faced some challenges regarding cyber attacks. The company reported possible exfiltration of company and customer data, along with the sudden death of an employee.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Uncertainty Analysis of Inhalation Dose Coefficients for Nuclear Incident Response

This study addressed the need to characterize variability in inhalation dose coefficients due to uncertainties in respiratory tract deposition, systemic biokinetics, and physiological parameters. A Python-based implementation of the International Commission on Radiological Protection Publication 66 Human Respiratory Tract Model was developed called the Radiological Exposure Dose Calculator (REDCAL) to propagate parameter uncertainty.

61 RADIATION PROTECTION AND DOSIMETRY↗