Search NASA⌕ Search

SEARCH · Search NASA

Results for “Detection and Defense”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Reinforcement Learning for feedback-enabled cyber resilience

The rapid growth in the number of devices and their connectivity has enlarged the attack surface and made cyber systems more vulnerable. As attackers become increasingly sophisticated and resourceful, mere reliance on traditional cyber protection, such as intrusion detection, firewalls, and encryption, is insufficient to secure the cyber systems. Cyber resilience provides a new security paradigm that complements inadequate protection with resilience mechanisms. A Cyber-Resilient Mechanism (CRM) adapts to the known or zero-day threats and uncertainties in real-time and strategically responds to them to maintain the critical functions of the cyber systems in the event of successful attacks. Feedback architectures play a pivotal role in enabling the online sensing, reasoning, and actuation process of the CRM. Reinforcement Learning (RL) is an important gathering of algorithms that epitomize the feedback architectures for cyber resilience. It allows the CRM to provide dynamic and sequential responses to attacks with limited or without prior knowledge of the environment and the attacker. In this work, we review the literature on RL for cyber resilience and discuss the cyber-resilient defenses against three major types of vulnerabilities, i.e., posture-related, information-related, and human-related vulnerabilities. Here we introduce moving target defense, defensive cyber deception, and assistive human security technologies as three application domains of CRMs to elaborate on their designs. The RL algorithms also have vulnerabilities themselves. We explain the major vulnerabilities of RL and present develop several attack models where the attacker target the information exchanged between the environment and the agent: the rewards, the state observations, and the action commands. We show that the attacker can trick the RL agent into learning a nefarious policy with minimum attacking effort. The paper introduces several defense methods to secure the RL-enabled systems from these attacks. However, there is still a lack of works that focuses on the defensive mechanisms for RL-enabled systems. Last but not least, we discuss the future challenges of RL for cyber security and resilience and emerging applications of RL-based CRMs.

97 MATHEMATICS AND COMPUTING↗

CasCollect: targeted assembly of CRISPR-associated operons from high-throughput sequencing data

Abstract CRISPR arrays and CRISPR-associated (Cas) proteins comprise a widespread adaptive immune system in bacteria and archaea. These systems function as a defense against exogenous parasitic mobile genetic elements that include bacteriophages, plasmids and foreign nucleic acids. With the continuous spread of antibiotic resistance, knowledge of pathogen susceptibility to bacteriophage therapy is becoming more critical. Additionally, gene-editing applications would benefit from the discovery of new cas genes with favorable properties. While next-generation sequencing has produced staggering quantities of data, transitioning from raw sequencing reads to the identification of CRISPR/Cas systems has remained challenging. This is especially true for metagenomic data, which has the highest potential for identifying novel cas genes. We report a comprehensive computational pipeline, CasCollect, for the targeted assembly and annotation of cas genes and CRISPR arrays—even isolated arrays—from raw sequencing reads. Benchmarking our targeted assembly pipeline demonstrates significantly improved timing by almost two orders of magnitude compared with conventional assembly and annotation, while retaining the ability to detect CRISPR arrays and cas genes. CasCollect is a highly versatile pipeline and can be used for targeted assembly of any specialty gene set, reconfigurable for user provided Hidden Markov Models and/or reference nucleotide sequences.

Podlevsky, Joshua D.↗

Prophylactic treatment with PEGylated bovine IFNλ3 effectively bridges the gap in vaccine-induced immunity against FMD in cattle

Foot-and-mouth disease (FMD) is a vesicular disease of cloven-hoofed animals with devastating economic implications. The current FMD vaccine, routinely used in enzootic countries, requires at least 7 days to induce protection. However, FMD vaccination is typically not recommended for use in non-enzootic areas, underscoring the need to develop new fast-acting therapies for FMD control during outbreaks. Interferons (IFNs) are among the immune system’s first line of defense against viral infections. Bovine type III IFN delivered by a replication defective adenovirus (Ad) vector has effectively blocked FMD in cattle. However, the limited duration of protection—usually only 1–3 days post-treatment (dpt)—diminishes its utility as a field therapeutic. Here, we test whether polyethylene glycosylation (PEGylation) of recombinant bovine IFNλ3 (PEGboIFNλ3) can extend the duration of IFN-induced prevention of FMDV infection in both vaccinated and unvaccinated cattle. We treated groups of heifers with PEGboIFNλ3 alone or in combination with an adenovirus-based FMD O1Manisa vaccine (Adt-O1M) at either 3 or 5 days prior to challenge with homologous wild type FMDV. We found that pre-treatment with PEGboIFNλ3 was highly effective at preventing clinical FMD when administered at either time point, with or without co-administration of Adt-O1M vaccine. PEGboIFNλ3 protein was detectable systemically for >10 days and antiviral activity for 4 days following administration. Furthermore, in combination with Adt-O1M vaccine, we observed a strong induction of FMDV-specific IFNγ+ T cell response, demonstrating its adjuvanticity when co-administered with a vaccine. Our results demonstrate the promise of this modified IFN as a pre-exposure prophylactic therapy for use in emergency outbreak scenarios.

biotherapeutics↗

Machine Intelligence to Detect, Characterise, and Defend against Influence Operations in the Information Environment

Social media has enabled a new era of manipulation in the information and cognitive domains. Deceptive content—misleading, falsified, and fabricated—is routinely created and spread in the modern social media environment with the intent to create confusion and widen political and social divides, and exploit the societal conflict exacerbated by these divides in the real-world (aka physical domain). Such disinformation campaigns demonstrate a threat to the integrity of economic, political, cultural, public health, and national security institutions around the world. In this work we overview our artificial intelligence (AI) capabilities to detect, describe, and defend against information operations on Twitter as an example social platform to understand the influence of misleading and falsified content diffusion and better enable those charged with defending against such manipulation to enable responsive parties to counter it. We first present novel linguistically-informed deep learning (DL) models for misinformation and disinformation detection, and present an in-depth linguistic analysis of psycho-linguistic markers across broad deception categories. We then demonstrate how our models perform in the multilingual and multimodal setting and categorize falsified and misleading content based on the intent to deceive. We also provide a large-scale analysis to describe user behavior and spread patterns while engaging with deceptive content and report novel findings about the immediate diffusion of deceptive content by characterizing the vulnerable sub-populations and their demographics, and explicitly measuring speed and scale of deception spread to uncover who shares deceptive content, how quickly, how much, and how evenly. In addition, we measure audience reactions to misinformation and disinformation at scale, distinguishing the reactions of users identified as bots versus humans. Finally, we take advantage of deep translation and generation models to create unique solutions for real-time defense against digital deception and discuss how to apply causal inference to prescribe and intervene into strategic communications jointly across information, cognitive, and physical domains.

artificial intelligence, deep learning, neural lan↗

Aerial Crosspolarized NQR-NMR: Buried Explosive Detection From a Safe Distance

Nuclear quadrupole resonance is a non-destructive detection and inspection technique with potential as a non-destructive test (NDT) tool. Establishment of the capability opens the door to its use in furthering the mission of the labs. There are many possible uses of the capability: explosive detection and stress/strain detection in epoxies are two of the more obvious and are the main results of this work. Enhancement of the signal-to-noise ratio (SNR) and improvements in the acquisition time of the experiment were key focuses of this work. These were achieved by combing special spin-lock pulse sequences with cross-polarization (CP) schemes to improve the signals with shorter acquisition times. A novel rotating magnetic field device was created to facilitate CP in the field. Implementation of these schemes provided a significant reduction in SNR/time.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Accelerating fissile material detection with a neutron source

A system discriminating fissile material from nonfissile material wherein a digital data acquisition unit collects data at high rate, and processes large volumes of data directly to count neutrons from the unknown source and detect excess grouped neutrons to identify fission. The system includes a Poisson neutron generator for in-beam interrogation of a possible fissile neutron source and inducing neutron emission therefrom, and a DC power supply that exhibits electrical ripple of less than one part per million. A neutron count histogram and Poisson count distribution are overlaid to provide a visual indication of the difference in correlation of natural and induced emitted neutrons from the radiation source to characterize the neutron source as fissile material or non-fissile material.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Accelerating fissile material detection with a neutron source

A method of discriminating fissile material from non-fissile material with a digital data acquisition system that collects data at high rate, and processes large volumes of data directly to count neutrons from the unknown source and detect excess grouped neutrons to identify fission. The system includes a Poisson neutron generator for in-beam interrogation of a possible fissile neutron source and inducing neutron emission therefrom, and a DC power supply that exhibits electrical ripple of less than one part per million. A neutron count histogram and Poisson count distribution are overlaid to provide a visual indication of the difference in correlation of natural and induced emitted neutrons from the radiation source to characterize the neutron source as fissile material or non-fissile material.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Hydrogels for isotopic neutron emitters and antineutrino detection and related detection systems and methods

Scintillation compositions comprising a gadolinium compound and a scintillation compound in a polymer matrix precursor. The scintillation compound comprises strontium diiodide, fac-tris(2-phenylpyridine)iridium (Ir(ppy)3), a quinine compound, or combinations thereof, or 2-(4-biphenylyl)-5 phenyl-1,3,4-oxadiazole (PBD), 2-(4-tert-butylphenyl)-5-(4-phenylphenyl)-1,3,4-oxadiazole (b-PBD), 2,5-diphenyl oxazole (PPO), 1,4-bis(5-phenyloxazol-2-yl) benzene (POPOP), or combinations thereof. Hydrogels comprising the gadolinium compound and scintillation compound in a polymer matrix are also disclosed, as are related systems and methods.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Organochlorine pesticides and risk of papillary thyroid cancer in U.S. military personnel: a nested case-control study

Background: The effects of organochlorine pesticide (OCP) exposure on the development of human papillary thyroid cancer (PTC) are not well understood. A nested case-control study was conducted with data from the U.S. Department of Defense Serum Repository (DoDSR) cohort between 2000 and 2013 to assess associations of individual OCPs serum concentrations with PTC risk. Methods: This study included 742 histologically confirmed PTC cases (341 females, 401 males) and 742 individually-matched controls with pre-diagnostic serum samples selected from the DoDSR. Associations between categories of lipid-corrected serum concentrations of seven OCPs and PTC risk were evaluated for classical PTC and follicular PTC using conditional logistic regression, adjusted for body mass index category and military branch to compute odds ratios (OR) and 95% confidence intervals (CIs). Effect modification by sex, birth cohort, and race was examined. Results: There was no evidence of associations between most of the OCPs and PTC, overall or stratified by histological subtype. Overall, there was no evidence of an association between hexachlorobenzene (HCB) and PTC, but stratified by histological subtype HCB was associated with significantly increased risk of classical PTC (third tertile above the limit of detection (LOD) vs. <LOD, OR = 1.61, 95% CI, 1.09, 2.38; p for trend = 0.05) and significantly decreased risk of follicular variant PTC (third tertile above the limit of detection (LOD) vs. <LOD, OR = 0.38, 95% CI, 0.16, 0.91; p for trend = 0.04). Further stratified by sex, risk of classical PTC was higher for females (third tertile above LOD vs. <LOD, OR = 2.23, 95% CI: 1.23, 4.06; p-trend = 0.02) than for males (OR = 1.22, 95%CI: 0.72–2.08; p-trend = 0.56), though the test for interaction by sex was not statistically significant (p-interaction = 0.30). Similarly, β-hexachlorocyclohexane (β-HCCH) was associated with a higher risk for classical PTC for women with concentrations ≥LOD versus <LOD (OR = 1.76, 95% CI: 1.07, 2.89), while the effects were null for men. There were no consistent trends when stratified by race or birth year. Conclusions: The U.S. Environmental Protection Agency has classified HCB and other OCPs we studied here as probable human carcinogens. Our findings of increased risks for classical PTC associated with increased concentrations of HCB and β-HCCH, which were stronger among females, should be replicated in future studies of other populations.

60 APPLIED LIFE SCIENCES↗

Characterizing Human Performance: Detecting Targets at High False Alarm Rates [Slides]

Analysts develop a “no threat” bias with high false alarms. If only shown alarms for actual attacks, may never actually see an alarm. We see this in the laboratory, but not often studied in applied environments. (TSA is an exception.) In this work, near-operational paradigms are useful, but difficult to construct well. Pilot testing is critical before engaging time-limited professionals. Experimental control is difficult to balance with operational realism. Grounding near-operational experiments in basic research paradigms has both advantages and disadvantages. Despite shortcomings in our second experiment, we now have a platform for experimental investigations into the human element of physical security systems.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Capability Building Progression of an Insider Threat Mitigation Program at an International Research Reactor

The nuclear industry recognizes the difficulties involved in developing effective managerial and leadership skills in a highly technical and proficient workforce such as that found in nuclear facilities. Implementing an insider threat mitigation program (ITMP) within the nuclear industry is a complex and ongoing process that demands a comprehensive understanding of human behavior, an organization’s security culture, and rigorous regulatory requirements yet also accounts for facility characteristics, physical security, material flow, and activities involving nuclear material. Given the high-consequence nature of research reactor operations, even minor lapses can lead to safety, security, and reputational risks. An effective ITMP requires a defense-in-depth approach that incorporates behavioral analysis, robust vetting procedures, continuous monitoring, and cross-disciplinary coordination. It must also promote a culture of vigilance and accountability at all levels up to and including executive leadership but be flexible enough to adapt to evolving global threats and technological advances. Insider threat mitigation is not a one-time effort but rather a sustained commitment to excellence in safety and security. Establishing a culture in which personnel proactively report incidents and issues that could affect nuclear safety and security is vital to maintaining a safe and secure operational environment. This document was developed to guide senior management and research reactor organizations in creating comprehensive programs to effectively manage and mitigate insider threat behaviors and actions. It focuses on the key pillars of an effective ITMP, including the national legal framework, security culture, preventive and protective measures, cyber security, and performance evaluation. By using a systematic approach during implementation, facilities can foster environments conducive to insider threat detection and support long-term program sustainability. The document also provides strategies for improving communication across all levels of an organization, helping to eliminate barriers that hinder the development of robust ITMPs and enhance overall security culture. In today’s organizations, the concept of leveraging safety and security culture lessons to facilitate knowledge transfer is rapidly evolving to expedite insider threat management and security culture improvements. This document outlines the rationale for evaluating an ITMP based on national customs, culture, and stakeholders. The elements are all germane to reliability and trustworthiness and relate to security concerns that states may encounter. The document focuses not only on individual perceptions regarding security issues and capability building but also on team building and how to resolve concerns. The implementers of a facility’s ITMP may zero in on indicators of insider threats within their enterprise. This material will benefit organizations when it is applied using a systematic and structured approach as demonstrated throughout the document.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

D2U: Data Driven User Emulation for the Enhancement of Cyber Testing, Training, and Data Set Generation

Whether testing intrusion detection systems, conducting training exercises, or creating data sets to be used by the broader cybersecurity community, realistic user behavior is a critical component of a cyber range. Existing methods either rely on network level data or replay recorded user actions to approximate real users in a network. Our work is the first to produce generative models trained on actual user data (sequences of application usage) collected on endpoints. Once trained to the user's behavioral data, these models can generate novel sequences of actions %that appear to come from the same distribution as the training data. These sequences of actions are then fed to our custom software via configuration files, which replicate those behaviors on end devices. Notably, our models are platform agnostic and could generate behavior data for any emulation software package. In this paper we present our model generation process, software architecture, and an initial evaluation of the fidelity of our models. Our software is currently deployed in a cyber range to help evaluate the efficacy of defensive cyber technologies. We suggest additional ways that the cyber community as a whole can benefit from more realistic user behavior emulation. The data used to train our model, as well as sample configuration files produced by the model, are available at [redacted].

Oesch, T↗

Machine Learning Modeling Pipeline for Extracting Nuclear Proliferation Events of Interest from Open Data Sources (U)

In FY2020, the Savannah River National Laboratory (SRNL) and the Sanghani Center for Artificial Intelligence and Data Analytics at Virginia Polytechnic Institute and State University entered a collaboration funded by Department of Energy’s (DOE) Office of Defense Nuclear Nonproliferation Research and Development. The project’s mission was to take the first steps toward developing a demonstration prototype system that uses multiple machine learning and data analytics methods on largescale open data sources to identify new, developing, and/or undeclared nuclear programs. Given the SRNL team’s on-site perspective of events culminating in the DOE’s decision to pursue the Savannah River Plutonium Processing Facility (SRPPF), the team targeted the identification of events and indicators in retrospective datasets that pointed to the activity of “fissile core fabrication at the Savannah River Site” prior to the official announcement in May of 2018. A preliminary modeling pipeline was developed in FY20 that showed the datasets contained adequate signal for continuation of efforts. In FY21, a modular demonstration prototype modeling pipeline has continued in development for two text-based data sources: a broad internet archive (Webhose Ltd.) and a decahose Twitter database (i.e., a global sampling of one in every ten Tweets). The techniques that have been developed rely on graph theory and anomaly detection to identify contextual shifts in key words and phrases at various points in time such that indicators of events of interest could be identified and subsequently, events could be extracted from the corpuses. The foundational concept behind the approaches is that contextual shifts in key words and phrases can act as indicators of events of interest. Both datasets have proven successful in extracting events of interest related to pit production at the Savannah River Site prior to the official announcement. In addition, the pipelines have generated a wide range of events broadly summarized as: the awarding of DOE contracts at major sites, DOE investments in various programs, accidents at DOE national laboratories, speculations about the fate of pit production in the DOE complex, domestic and international shipments and receipts of nuclear materials at DOE sites, termination of non-proliferation agreements with Russia, termination of MOX, new weapons development approvals/testing, nuclear posture reviews, major DOE cleanup/production milestones, political opinions, and nuclear watch groups’ opinions, among many others.

97 MATHEMATICS AND COMPUTING↗

Multi-INT Signature Collection and Exploitation for Security: Improving Discrimination, Analyses, and Passive Tracking Capabilities for Time- and Distance-Varying Signatures in the Seismoacoustic Regime

This project demonstrates the feasibility of a passive tracking capability for ground-based and airborne moving sources using multiple information streams from acoustic and seismic signals. These moving source types are characterized by their variability with time and distance (exemplified but not limited to the familiar doppler shift of a passing vehicle) and the signatures used for detection should have similar characteristics. We have demonstrated that time-varying sensor signatures (TVS) combined with time-stable sensor signatures provide a more complete understanding of moving source behavior. Importantly, we have collected a new, relevant LANL dataset of moving sources (small uncrewed aerial vehicle flights and ground vehicle movement), developed new signatures, and demonstrated the capability to identify, track and forecast the position of these moving sources.

42 ENGINEERING↗

A Cybersecurity Threat Profile for a Connected Lighting System

In anticipation of improved energy performance and cost savings, cities and building owners are increasingly considering “smart lighting initiatives” that aim to convert their collection of simple luminaires (i.e., lighting fixtures) into an intelligent connected lighting system (CLS) capable of remotely monitoring energy consumption and fault conditions, and possibly implementing adaptive lighting schemes. The U.S. Department of Energy (DOE) has set an national goal of tripling the energy efficiency and demand flexibility of the buildings sector by 2030, relative to 2020 levels 1. It is forecast that connected lighting systems can contribute to that goal by delivering 125 TWh of annual energy savings by 2035 2, equivalent to the annual output of 50 typical (500 MW) power plants. However, these energy savings and the DOE goal are put at significant risk if connected technologies are not adopted due to real or perceived cybersecurity concerns. Connected IoT devices such as these have historically been rife with vulnerabilities which sometimes put security considerations secondary to functionality and operability. What are the cybersecurity threats that will impact these systems, as formerly banal luminaires transition into intelligent connected devices that collect information about themselves, their surrounding environment, and possibly us? In this paper we analyze a threat profile performed on a fault-detection use case for streetlights. A threat profile establishes security requirements, justifies security measures, yields actionable controls, and effectively communicates risk to stakeholders. This effort provides critical information for making threat-based decisions to increase security at a reasonable cost, and can effectively be used by development teams, software architects, and managers to make cybersecurity a part of their ongoing culture of awareness, training, and prevention. This leads to more secure systems and better-understood security. On-premise, cloud, and hybrid architectures with different authentication mechanisms were modeled and later categorized using the Microsoft STRIDE framework. An analysis of the recommended controls for each threat was performed to determine which controls could and should be put in place by manufacturers or third-party suppliers, and which controls need to be left up the end-user to implement. Fifty-seven threats were identified. Among our key findings: (1) 65% (37/57) of the threats did not involve the luminaires, but rather the other components needed to communicate with and manage them; (2) 63% (36/57) of the threats could have been mitigated through manufacturer-implemented defensive techniques or “controls”; and (3) 23% (13/57) of the threats were dependent on the network configuration. Recommendations based on the results of this work are made to key stakeholder groups. Notably, lighting technology developers are advised to address all threats that can be reasonably controlled with baked-in technology solutions (e.g., encryption or authentication controls), and employ some form of secure supply chain management and tracking where other parts (e.g., sensors, microprocessors) of a luminaire must also be built and manufactured with the proper security controls in place. Developers should also review threats involving assets not developed in-house to understand how connectivity with other devices will affect their product during system operation and determine if a compensating control for a defense-in-depth strategy will be needed. Finally, those interested in deploying CLS should compare the differences between cloud and on-premise models to determine which is more suitable for their needs and the abilities of their security team.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Adaptive Cyber-Physical Resilience for Building Control Systems

The main goal of the project is to develop an AI-based process layer cybersecurity suite for detection, isolation and mitigation of cyber-attack effects on operation of building energy management systems (BEMS). The following constituent key technologies were developed under the program towards fulfilling the program objectives: (1) developed a high fidelity BEMS testbed for generation of training data and validation of developed technologies; (2) developed a physics informed ML based attack detection and localization module (ADL) capable of detecting high impact stealthy attacks (HISA - attacks causing 30% energy utilization but no immediate visible impact otherwise) with 98% accuracy; (3) developed a methodology to determine ’representative days’ to limit the data required for training; (4) developed a virtual sensing system that can reconstruct affected sensors with 10% error for the same HISA set; (5) developed a resilient model predictive control system that can continue operation of the BEMS without jeopardizing stability for the HISA set; and (6) integrated and deployed all the constituent modules and demonstrated the efficacy of the technology in real-time in a hardware in loop simulation.

42 ENGINEERING↗

The Ancient Salicoid Genome Duplication Event: A Platform for Reconstruction of De Novo Gene Evolution in Populus trichocarpa

Orphan genes are characteristic genomic features that have no detectable homology to genes in any other species and represent an important attribute of genome evolution as sources of novel genetic functions. Here, we identified 445 genes specific to Populus trichocarpa. Of these, we performed deeper reconstruction of 13 orphan genes to provide evidence of de novo gene evolution. Populus and its sister genera Salix are particularly well suited for the study of orphan gene evolution because of the Salicoid whole-genome duplication event which resulted in highly syntenic sister chromosomal segments across the Salicaceae. We leveraged this genomic feature to reconstruct de novo gene evolution from intergenera, interspecies, and intragenomic perspectives by comparing the syntenic regions within the P. trichocarpa reference, then P. deltoides, and finally Salix purpurea. Furthermore, we demonstrated that 86.5% of the putative orphan genes had evidence of transcription. Additionally, we also utilized the Populus genome-wide association mapping panel, a collection of 1,084 undomesticated P. trichocarpa genotypes to further determine putative regulatory networks of orphan genes using expression quantitative trait loci (eQTL) mapping. Functional enrichment of these eQTL subnetworks identified common biological themes associated with orphan genes such as response to stress and defense response. We also identify a putative cis-element for a de novo gene and leverage conserved synteny to describe evolution of a putative transcription factor binding site. Overall, 45% of orphan genes were captured in trans-eQTL networks.

59 BASIC BIOLOGICAL SCIENCES↗

Women as a Force Multiplier for Bringing Nuclear Forensic Capabilities to the International Stage

In 2009, the US Department of Energy National Nuclear Security Administration’s (NNSA’s) Defense Nuclear Nonproliferation Program initiated a new nuclear forensics outreach effort under its Confidence Building Measures Program. Little did they know that the timing could not have been better. This article focuses on the early years (2009–2015) of the NNSA’s international nuclear forensics outreach, specifically the efforts and experiences of the women who helped establish this program, building it from a fledgling, bilateral effort into an enduring technical capacity provider engaging with dozens of countries and multilateral organizations. At the onset of the program, nuclear forensics was an emerging priority within the US Government and receiving increased focus from international organizations through high-level diplomatic efforts such as the Nuclear Security Summit and Global Initiative to Combat Nuclear Terrorism. Additionally, working-level initiatives were gaining traction through the International Atomic Energy Agency and the Nuclear Forensics International Technical Working Group. Over the next 6 years, a small team comprising a uniquely large number of women NNSA federal, contract, and national laboratory staff served as key leaders engaging with the international community to strengthen global technical nuclear forensics capacity and best practices. The program continues today under the Nuclear Smuggling Detection and Deterrence Program as Investigation Support. The experiences shared here detail a unique time period when the new technical discipline of nuclear forensics was beginning to mature and gain international traction. The authors have made every effort to remember history correctly and be as inclusive as possible. A wealth of training, guidance, and exercise documentation was developed in the 2009–2015 time frame, much of which still serves as the foundation for today’s even more extensive program and community of dedicated technical and diplomatic practitioners.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗