Results for “Secure Coding” — Page 11

DOE OSTI2020

Electro-mechanical Modeling of Wind Turbine and Energy Storage Systems with Enhanced Inertial Response

In this paper, a coordinated control scheme for wind turbine generator (WTG) and supercapacitor energy storage system (ESS) is proposed for temporary frequency supports. Inertial control is designed by using generator torque limit considering the security of WTG system, while ESS releases its energy to compensate the sudden active power deficit during the recovery process of turbine rotor. WTG is modeled using the fatigue, aerodynamic, structure, turbulence (FAST) code, which identifies the mechanical loadings of the turbine and addresses electro-mechanical interactions in the wind energy system. A damping controller is augmented to the inertial control to suppress severe mechanical oscillations in the shaft and tower of the turbine during frequency supports. Furthermore, the result of small-signal stability analysis shows that the WTG-ESS tends to improve the stability of the whole multi-energy power grid. The major contributions of this paper will be validated by utilizing the proposed control method that combines the grid support capability and maintaining the integrity of structural design of the turbine for normal operations.

17 WIND ENERGY↗

DOE OSTI2017

Safety Analysis Report for Packaging, Y-12 National Security Complex, Model ES-3100 Package with Bulk HEU Contents

This safety analysis report for packaging (SARP) presents the results of the safety analysis prepared in support of the Consolidated Nuclear Security, LLC (CNS) request for licensing of the Model ES-3100 package with bulk highly enriched uranium (HEU) contents and issuance of a Type B(U) Fissile Material Certificate of Compliance. This SARP, published in the format specified in the U.S. Nuclear Regulatory Commission (NRC) Regulatory Guide 7.9 and using information provided in UCID-21218 and NRC Regulatory Guide 7.10, demonstrates that the Y-12 National Security Complex (Y-12) ES-3100 package with bulk HEU contents meets the established NRC regulations for packaging, preparation for shipment, and transportation of radioactive materials given in Title 10, Part 71, of the Code of Federal Regulations (CFR) [10 CFR 71] as well as U.S. Department of Transportation (DOT) regulations for packaging and shipment of hazardous materials given in Title 49 CFR. To protect the health and safety of the public, shipments of radioactive materials are made in packaging that is designed, fabricated, assembled, tested, procured, used, maintained, and repaired in accordance with the provisions cited above. Safety requirements addressed by the regulations that must be met when transporting radioactive materials are containment of radioactive materials, radiation shielding, and assurance of nuclear subcriticality.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2021

Safety Analysis Report For Packaging, Y-12 National Security Complex, Model ES-3100 Package with Bulk HEU Contents

This safety analysis report for packaging (SARP) presents the results of the safety analysis prepared in support of the Consolidated Nuclear Security, LLC (CNS) request for licensing of the Model ES-3100 package with bulk highly enriched uranium (HEU) contents and issuance of a Type B(U) Fissile Material Certificate of Compliance. This SARP, published in the format specified in the U.S. Nuclear Regulatory Commission (NRC) Regulatory Guide 7.9 and using information provided in UCID-21218 and NRC Regulatory Guide 7.10, demonstrates that the Y-12 National Security Complex (Y-12) ES-3100 package with bulk HEU contents meets the established NRC regulations for packaging, preparation for shipment, and transportation of radioactive materials given in Title 10, Part 71, of the Code of Federal Regulations (CFR) [10 CFR 71] as well as U.S. Department of Transportation (DOT) regulations for packaging and shipment of hazardous materials given in Title 49 CFR.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2016

A Biosequence-based Approach to Software Characterization

For many applications, it is desirable to have some process for recognizing when software binaries are closely related without relying on them to be identical or have identical segments. Some examples include monitoring utilization of high performance computing centers or service clouds, detecting freeware in licensed code, and enforcing application whitelists. But doing so in a dynamic environment is a nontrivial task because most approaches to software similarity require extensive and time-consuming analysis of a binary, or they fail to recognize executables that are similar but nonidentical. Presented herein is a novel biosequence-based method for quantifying similarity of executable binaries. Using this method, it is shown in an example application on large-scale multi-author codes that 1) the biosequence-based method has a statistical performance in recognizing and distinguishing between a collection of real-world high performance computing applications better than 90% of ideal; and 2) an example of using family tree analysis to tune identification for a code subfamily can achieve better than 99% of ideal performance.

cyber security↗

DOE OSTI2023

EyeON

EyeON: Eye on Operational technology Software Supply Chain attacks have risen drastically over the past few years, none more well-known and impactful than the SolarWinds compromise. Criminal organizations inserted an attack vector into a specific version of the source code, giving themselves an air of credibility. Once news broke on SolarWinds, identifying compromised sites was very difficult, even knowing the culprit update. Software Bills of Materials (SBOM) have been touted as the solution to reclaiming control of your software supply chain. Deployment of SBOMs has been slow, however, due to conflicting standards, opaque storage requirements, and vendor adoption. Additionally, the path from obtaining an SBOM and securing your supply chain is unclear; how can an SBOM library be leveraged to provide insight to your attack surface? The EyeON tool, sponsored by Department of Energy Cybersecurity, Energy Security, and Emergency Response (DoE CESER), aims to address these gaps by providing an encapsulated solution to tracking which updates have been installed in an enterprise, and alerting system administrators to vulnerabilities as they become known. Similar to a virus scanner, EyeON is a command line tool to parse either a single file, nested directory structure, or filesystem. It collects data such as signature (hashes), version information, VirusTotal tags, compiler, compilation date, and code signing information. Users will anonymously submit scan data periodically to DoE CESER, who will then compile a database of known software products employed by Critical Infrastructure and broadcast alerts based on discovered flaws as they arise.

Tenzing, Wangmo↗

DOE OSTI2021

Distribution System Model Calibration Algorithms

SAND2021-15065 O This release contains Python code for two distribution system model calibration algorithms as well as some sample data and documentation for the algorithms and code. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Blakely, Logan↗

DOE OSTI2024

Charliecloud is not affected by CVE-2024-21626 or related vulnerabilities

As you may be aware, four vulnerabilities in popular open-source container implementations were announced on January 21. Nicknamed “Leaky Vessels” by the Snyk Security Labs team that discovered them [1], these vulnerabilities in runC (CVE-2024-21626) and Moby BuildKit (CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653) allow malicious container images or builds to execute arbitrary code on the container host with the privileges of the container runtime, i.e., a “container breakout”. Often, including typical configurations of Docker and/or Kubernetes, that means full root access.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2022

EDAT

SAND2022-13281 O EDAT is a suite of tools for analyzing time-dependent electron densities produced by time-dependent density functional theory (TDDFT) simulations of ion-irradiated materials and surfaces. The code’s key capabilities include various routines to extract the number of electrons emitted from a surface, the energy spectrum of these emitted electrons, and the number of electrons captured by the ion. The code is written in Python and can interface with multiple TDDFT codes. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Kononov, Alina↗

DOE OSTI2022

Report Series: Evaluation, Finding Of Effect, And Mitigation Documentation For Building 23-113, Mercury, Area 23, Nevada National Security Site, Nye County, Nevada

The U.S. Department of Energy (DOE) National Nuclear Security Administration Nevada Field Office (NNSA/NFO) plans to demolish Building 23-113 in Mercury (Nevada State Historic Preservation Office [SHPO] Resource No. B15236), which is on the Nevada National Security Site (NNSS) in Nye County, Nevada. Demolition of Building 23-113 is part of the long-term project to modernize the town of Mercury on the NNSS for future mission needs. The project is considered an undertaking subject to review under Title 54 of United States Code (USC) § 306108, commonly known as Section 106 of the National Historic Preservation Act, Title 54 USC § 300101, et seq., and its implementing regulations, Title 36 of the Code of Federal Regulations (36 CFR) Part 800. In 2018, Desert Research Institute (DRI) completed an architectural survey of the town of Mercury. This effort resulted in the identification, recordation, and evaluation of the Mercury Historic District (MHD, SHPO Resource No. D230), including the identification of its contributing elements (Reno et al. 2018). The MHD was recommended eligible for listing in the National Register of Historic Places (NRHP, National Register) under the Secretary of the Interior’s (SOI) Significance Criteria A and C, as defined in 36 CFR Part 60.4, as a significant concentration of buildings and structures with a direct and important association with Cold War-era nuclear testing from 1951 through 1992. It has not been evaluated under Criteria B and D to date. As part of a larger modernization program for Mercury, the NNSA/NFO and the SHPO executed the 2018 Programmatic Agreement between the National Nuclear Security Administration Nevada Field Office and the Nevada State Historic Preservation Officer regarding Modernization and Operational Maintenance of the Nevada National Security Site, at Mercury in Nye County, Nevada (the Mercury PA). The Mercury PA includes streamlined Section 106 procedures for undertakings in the MHD based on contributing element categories. Building 23-113 is identified in Appendix C of the Mercury PA as a Category I contributing element, indicating that it might be individually eligible for the NRHP. It is a historic property for the purposes of Section 106 compliance and subject to the stipulations of the Mercury PA. Per Stipulation VI of the Mercury PA, when the Area of Potential Effect (APE) for an undertaking includes Category I elements, the NNSA/NFO must evaluate the Category I elements for individual NRHP eligibility under all of the SOI Significance Criteria prior to initiating any activity that may affect the elements. Therefore, the purpose of this report is to evaluate Building 23-113 as a potential individually eligible historic property in fulfillment of Stipulation VI of the Mercury PA. The evaluation detailed herein concludes that although Building 23-113 is significant at the local level for its important role as a recreational facility on the NNSS, the building lacks sufficient integrity to convey its significance. It is not individually eligible for listing in the NRHP at any level. The building remains eligible as a contributing element to the MHD.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2015

RCRA PART B Permit Application Nevada National Security Site (NNSS) for Waste Management Activities at the NNSS Explosive Ordnance Disposal Unit (EODU)

This volume of the Resource Conservation and Recovery Act (RCRA) permit application by the Department of Energy, National Nuclear Security Administration Nevada Field Office (NNSA/NFO) seeks continued operation of the Explosive Ordnance Disposal Unit (EODU) at the Nevada National Security Site (NNSS). Explosives, explosive materials, and unexploded ordnance are declared waste explosives if they are damaged, are defective, have exceeded their shelf life, are the result of environmental restoration (legacy), or are discarded explosive material from research or testing projects. This document provides a description of the regulated waste codes accepted for treatment (controlled detonations), the general design of the unit, and the processes used to safely detonate onsite-generated waste explosives and unexploded ordnance, which are defined as hazardous waste under specific regulations. The Area 11 EODU consists of a firing point (controlled access area where firing of explosives is conducted), firing pad (prepares site where explosives hazardous waste is fired), and ancillary equipment that includes an explosives magazine and firing point area. Additionally, live explosives training is conducted to ensure proficiency of the EODU operations personnel, explosives handlers, and the firing system components. Training detonations do not include waste explosives and are limited in respect to explosives volume and frequency personnel, explosives handlers, and the firing system components. Training detonations do not include waste explosives and are limited in respect to explosives volume and frequency. For safety and security reasons, some of the contents of the full application are not available for public viewing. This public version of the application contains most, but not all, of the contents as submitted to the regulatory agencies.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2016

Sirepo for Synchrotron Radiation Workshop

Sirepo is an open source framework for cloud computing. The graphical user interface (GUI) for Sirepo, also known as the client, executes in any HTML5 compliant web browser on any computing platform, including tablets. The client is built in JavaScript, making use of the following open source libraries: Bootstrap, which is fundamental for cross-platform web applications; AngularJS, which provides a model–view–controller (MVC) architecture and GUI components; and D3.js, which provides interactive plots and data-driven transformations. The Sirepo server is built on the following Python technologies: Flask, which is a lightweight framework for web development; Jinja, which is a secure and widely used templating language; and Werkzeug, a utility library that is compliant with the WSGI standard. We use Nginx as the HTTP server and proxy, which provides a scalable event-driven architecture. The physics codes supported by Sirepo execute inside a Docker container. One of the codes supported by Sirepo is the Synchrotron Radiation Workshop (SRW). SRW computes synchrotron radiation from relativistic electrons in arbitrary magnetic fields and propagates the radiation wavefronts through optical beamlines. SRW is open source and is primarily supported by Dr. Oleg Chubar of NSLS-II at Brookhaven National Laboratory.

Nagler, Robert↗

DOE OSTI2016

Sirepo - Warp

Sirepo is an open source framework for cloud computing. The graphical user interface (GUI) for Sirepo, also known as the client, executes in any HTML5 compliant web browser on any computing platform, including tablets. The client is built in JavaScript, making use of the following open source libraries: Bootstrap, which is fundamental for cross-platform web applications; AngularJS, which provides a model–view–controller (MVC) architecture and GUI components; and D3.js, which provides interactive plots and data-driven transformations. The Sirepo server is built on the following Python technologies: Flask, which is a lightweight framework for web development; Jin-ja, which is a secure and widely used templating language; and Werkzeug, a utility library that is compliant with the WSGI standard. We use Nginx as the HTTP server and proxy, which provides a scalable event-driven architecture. The physics codes supported by Sirepo execute inside a Docker container. One of the codes supported by Sirepo is Warp. Warp is a particle-in-cell (PIC) code de-signed to simulate high-intensity charged particle beams and plasmas in both the electrostatic and electromagnetic regimes, with a wide variety of integrated physics models and diagnostics. At pre-sent, Sirepo supports a small subset of Warp’s capabilities. Warp is open source and is part of the Berkeley Lab Accelerator Simulation Toolkit.

Nagler, Robert↗

DOE OSTI2016

LLNL NESHAPs 2015 Annual Report - June 2016

Lawrence Livermore National Security, LLC operates facilities at Lawrence Livermore National Laboratory (LLNL) in which radionuclides are handled and stored. These facilities are subject to the U.S. Environmental Protection Agency (EPA) National Emission Standards for Hazardous Air Pollutants (NESHAPs) in Code of Federal Regulations (CFR) Title 40, Part 61, Subpart H, which regulates radionuclide emissions to air from Department of Energy (DOE) facilities. Specifically, NESHAPs limits the emission of radionuclides to the ambient air to levels resulting in an annual effective dose equivalent of 10 mrem (100 μSv) to any member of the public. Using measured and calculated emissions, and building-specific and common parameters, LLNL personnel applied the EPA-approved computer code, CAP88-PC, Version 4.0.1.17, to calculate the dose to the maximally exposed individual member of the public for the Livermore Site and Site 300.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2020

NESHAPs CY19 Report: Radionuclide Air Emission Report for 2019

Lawrence Livermore National Security, LLC operates facilities at Lawrence Livermore National Laboratory (LLNL) in which radionuclides are handled and stored. These facilities are subject to the U.S. Environmental Protection Agency (EPA) National Emission Standards for Hazardous Air Pollutants (NESHAPs) in Code of Federal Regulations (CFR) Title 40, Part 61, Subpart H, which regulates radionuclide emissions to air from Department of Energy (DOE) facilities. Specifically, NESHAPs limits the emission of radionuclides to the ambient air to levels resulting in an annual effective dose equivalent of 10 mrem (100 μSv) to any member of the public. Using measured and calculated emissions, and building-specific and common parameters, LLNL personnel applied the EPA-approved computer code, CAP88-PC, Version 4.0.1.17, to calculate the dose to the maximally exposed individual member of the public for the Livermore Site and Site 300. In 2019, LLNL maintained its compliance with 40 CFR 61, Subpart H. All radioactive air emissions resulted in calculated doses far below the annual 10 mrem (100 μSv) sitewide standard. The annual doses to the site-wide maximally exposed individual member of the public at the Livermore Site and Site 300 from planned and unplanned operations in 2019 are: Livermore Site: 4.3 x 10⁻³ mrem (4.3 x 10⁻² μSv); Site 300: 9.5 x 10⁻⁸ mrem (9.5 x 10⁻⁷ μSv).

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2024

LLNL NESHAPs 2023 Annual Report

Lawrence Livermore National Security, LLC operates facilities at Lawrence Livermore National Laboratory (LLNL) in which radionuclides are handled and stored. These facilities are subject to the U.S. Environmental Protection Agency (EPA) National Emission Standards for Hazardous Air Pollutants (NESHAPs) in Code of Federal Regulations (CFR) Title 40, Part 61, Subpart H, which regulates radionuclide emissions to air from Department of Energy (DOE) facilities. Specifically, NESHAPs limits the emission of radionuclides to the ambient air to levels resulting in an annual effective dose equivalent of 10 mrem (100 µSv) to any member of the public. Using measured and calculated emissions, and building-specific and common parameters, LLNL personnel applied the EPA-approved computer code, CAP88-PC, Version 4.1.1.0, to calculate the dose to the maximally exposed individual member of the public for the Livermore Site and Site 300.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2016

Sirepo for Synchrotron Radiation Workshop

Sirepo is an open source framework for cloud computing. The graphical user interface (GUI) for Sirepo, also known as the client, executes in any HTML5 compliant web browser on any computing platform, including tablets. The client is built in JavaScript, making use of the following open source libraries: Bootstrap, which is fundamental for cross-platform web applications; AngularJS, which provides a model–view–controller (MVC) architecture and GUI components; and D3.js, which provides interactive plots and data-driven transformations. The Sirepo server is built on the following Python technologies: Flask, which is a lightweight framework for web development; Jinja, which is a secure and widely used templating language; and Werkzeug, a utility library that is compliant with the WSGI standard. We use Nginx as the HTTP server and proxy, which provides a scalable event-driven architecture. The physics codes supported by Sirepo execute inside a Docker container. One of the codes supported by Sirepo is the Synchrotron Radiation Workshop (SRW). SRW computes synchrotron radiation from relativistic electrons in arbitrary magnetic fields and propagates the radiation wavefronts through optical beamlines. SRW is open source and is primarily supported by Dr. Oleg Chubar of NSLS-II at Brookhaven National Laboratory.

Nagler, Robert↗

DOE OSTI2016

Sirepo - Warp

Sirepo is an open source framework for cloud computing. The graphical user interface (GUI) for Sirepo, also known as the client, executes in any HTML5 compliant web browser on any computing platform, including tablets. The client is built in JavaScript, making use of the following open source libraries: Bootstrap, which is fundamental for cross-platform web applications; AngularJS, which provides a model–view–controller (MVC) architecture and GUI components; and D3.js, which provides interactive plots and data-driven transformations. The Sirepo server is built on the following Python technologies: Flask, which is a lightweight framework for web development; Jin-ja, which is a secure and widely used templating language; and Werkzeug, a utility library that is compliant with the WSGI standard. We use Nginx as the HTTP server and proxy, which provides a scalable event-driven architecture. The physics codes supported by Sirepo execute inside a Docker container. One of the codes supported by Sirepo is Warp. Warp is a particle-in-cell (PIC) code de-signed to simulate high-intensity charged particle beams and plasmas in both the electrostatic and electromagnetic regimes, with a wide variety of integrated physics models and diagnostics. At pre-sent, Sirepo supports a small subset of Warp’s capabilities. Warp is open source and is part of the Berkeley Lab Accelerator Simulation Toolkit.

Nagler, Robert↗

DOE OSTI2017

Department of Energy Air Emissions Annual Report Oak Ridge Reservation, Oak Ridge, Tennessee 40 Code of Federal Regulations (CFR) 61, Subpart H Calendar Year 2016

As defined in the preamble of the final rule, the entire DOE facility on the Oak Ridge Reservation (ORR) must meet the 10 mrem/yr ED standard.1 In other words, the combined ED from all radiological air emission sources from Y-12 National Security Complex (Y-12 Complex), Oak Ridge National Laboratory (ORNL), East Tennessee Technology Park (ETTP), Oak Ridge Institute for Science and Education (ORISE) and any other DOE operation on the reservation must meet the 10 mrem/yr standard. Compliance with the standard is demonstrated through emission sampling, monitoring, calculations and radiation dose modeling in accordance with approved EPA methodologies and procedures. DOE estimates the ED to many individuals or receptor points in the vicinity of ORR, but it is the dose to the maximally exposed individual (MEI) that determines compliance with the standard.

54 ENVIRONMENTAL SCIENCES↗