Results for “Secure Coding” — Page 14

NASA NTRS2001

The Paperless Solution

REI Systems, Inc. developed a software solution that uses the Internet to eliminate the paperwork typically required to document and manage complex business processes. The data management solution, called Electronic Handbooks (EHBs), is presently used for the entire SBIR program processes at NASA. The EHB-based system is ideal for programs and projects whose users are geographically distributed and are involved in complex management processes and procedures. EHBs provide flexible access control and increased communications while maintaining security for systems of all sizes. Through Internet Protocol- based access, user authentication and user-based access restrictions, role-based access control, and encryption/decryption, EHBs provide the level of security required for confidential data transfer. EHBs contain electronic forms and menus, which can be used in real time to execute the described processes. EHBs use standard word processors that generate ASCII HTML code to set up electronic forms that are viewed within a web browser. EHBs require no end-user software distribution, significantly reducing operating costs. Each interactive handbook simulates a hard-copy version containing chapters with descriptions of participants' roles in the online process.

Source record↗

DOE OSTI2017

Safety Analysis Report for Packaging, Y-12 National Security Complex, Model ES-3100 Package with Bulk HEU Contents

This safety analysis report for packaging (SARP) presents the results of the safety analysis prepared in support of the Consolidated Nuclear Security, LLC (CNS) request for licensing of the Model ES-3100 package with bulk highly enriched uranium (HEU) contents and issuance of a Type B(U) Fissile Material Certificate of Compliance. This SARP, published in the format specified in the U.S. Nuclear Regulatory Commission (NRC) Regulatory Guide 7.9 and using information provided in UCID-21218 and NRC Regulatory Guide 7.10, demonstrates that the Y-12 National Security Complex (Y-12) ES-3100 package with bulk HEU contents meets the established NRC regulations for packaging, preparation for shipment, and transportation of radioactive materials given in Title 10, Part 71, of the Code of Federal Regulations (CFR) [10 CFR 71] as well as U.S. Department of Transportation (DOT) regulations for packaging and shipment of hazardous materials given in Title 49 CFR. To protect the health and safety of the public, shipments of radioactive materials are made in packaging that is designed, fabricated, assembled, tested, procured, used, maintained, and repaired in accordance with the provisions cited above. Safety requirements addressed by the regulations that must be met when transporting radioactive materials are containment of radioactive materials, radiation shielding, and assurance of nuclear subcriticality.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2021

Safety Analysis Report For Packaging, Y-12 National Security Complex, Model ES-3100 Package with Bulk HEU Contents

This safety analysis report for packaging (SARP) presents the results of the safety analysis prepared in support of the Consolidated Nuclear Security, LLC (CNS) request for licensing of the Model ES-3100 package with bulk highly enriched uranium (HEU) contents and issuance of a Type B(U) Fissile Material Certificate of Compliance. This SARP, published in the format specified in the U.S. Nuclear Regulatory Commission (NRC) Regulatory Guide 7.9 and using information provided in UCID-21218 and NRC Regulatory Guide 7.10, demonstrates that the Y-12 National Security Complex (Y-12) ES-3100 package with bulk HEU contents meets the established NRC regulations for packaging, preparation for shipment, and transportation of radioactive materials given in Title 10, Part 71, of the Code of Federal Regulations (CFR) [10 CFR 71] as well as U.S. Department of Transportation (DOT) regulations for packaging and shipment of hazardous materials given in Title 49 CFR.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2016

A Biosequence-based Approach to Software Characterization

For many applications, it is desirable to have some process for recognizing when software binaries are closely related without relying on them to be identical or have identical segments. Some examples include monitoring utilization of high performance computing centers or service clouds, detecting freeware in licensed code, and enforcing application whitelists. But doing so in a dynamic environment is a nontrivial task because most approaches to software similarity require extensive and time-consuming analysis of a binary, or they fail to recognize executables that are similar but nonidentical. Presented herein is a novel biosequence-based method for quantifying similarity of executable binaries. Using this method, it is shown in an example application on large-scale multi-author codes that 1) the biosequence-based method has a statistical performance in recognizing and distinguishing between a collection of real-world high performance computing applications better than 90% of ideal; and 2) an example of using family tree analysis to tune identification for a code subfamily can achieve better than 99% of ideal performance.

cyber security↗

DOE OSTI2023

EyeON

EyeON: Eye on Operational technology Software Supply Chain attacks have risen drastically over the past few years, none more well-known and impactful than the SolarWinds compromise. Criminal organizations inserted an attack vector into a specific version of the source code, giving themselves an air of credibility. Once news broke on SolarWinds, identifying compromised sites was very difficult, even knowing the culprit update. Software Bills of Materials (SBOM) have been touted as the solution to reclaiming control of your software supply chain. Deployment of SBOMs has been slow, however, due to conflicting standards, opaque storage requirements, and vendor adoption. Additionally, the path from obtaining an SBOM and securing your supply chain is unclear; how can an SBOM library be leveraged to provide insight to your attack surface? The EyeON tool, sponsored by Department of Energy Cybersecurity, Energy Security, and Emergency Response (DoE CESER), aims to address these gaps by providing an encapsulated solution to tracking which updates have been installed in an enterprise, and alerting system administrators to vulnerabilities as they become known. Similar to a virus scanner, EyeON is a command line tool to parse either a single file, nested directory structure, or filesystem. It collects data such as signature (hashes), version information, VirusTotal tags, compiler, compilation date, and code signing information. Users will anonymously submit scan data periodically to DoE CESER, who will then compile a database of known software products employed by Critical Infrastructure and broadcast alerts based on discovered flaws as they arise.

Tenzing, Wangmo↗

NASA NTRS1995

Custom Turnkey Time and Frequency Systems: A structured, expandable approach

Radiocode Clocks Ltd. have developed a Turnkey Time and Frequency Generation and Distribution, System strategy based upon a bus of three, 'core' signals from which any Time code, Pulse rate or Frequency can be produced. The heart of the system is a ruggedized 19 inch, 3U Single Eurocard chassis constructed from machined 10mm aluminum alloy plate and designed to meet stringent Military, Security and Telecommunications specifications. The chassis is fitted with an advanced multilayer backplane with separate ground planes for analog and digital signals ensuring no degradation of low noise frequency references in the proximity of high speed digital pulse transmissions. The system has been designed to be used in three possible configurations: 1) As a stand alone generation and distribution instrument; 2) As a primary distribution unit in a turnkey Time and Frequency system; and 3) As a secondary distribution unit at a remote location from the Turnkey Time and Frequency System providing regeneration of core signals and correction for transmission delays. When configured as a secondary distribution unit the system will continue to provide usable outputs when one, two or even all three of the 'core' signals are lost. The instrument's placement within a system as a possible single point of system failure has required the development of very high reliability translator, synthesizer, phase locked loop and distribution modules together with a comprehensive alarm and monitoring strategy.

Wright, David F.↗

DOE OSTI2021

Distribution System Model Calibration Algorithms

SAND2021-15065 O This release contains Python code for two distribution system model calibration algorithms as well as some sample data and documentation for the algorithms and code. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Blakely, Logan↗

DOE OSTI2024

Charliecloud is not affected by CVE-2024-21626 or related vulnerabilities

As you may be aware, four vulnerabilities in popular open-source container implementations were announced on January 21. Nicknamed “Leaky Vessels” by the Snyk Security Labs team that discovered them [1], these vulnerabilities in runC (CVE-2024-21626) and Moby BuildKit (CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653) allow malicious container images or builds to execute arbitrary code on the container host with the privileges of the container runtime, i.e., a “container breakout”. Often, including typical configurations of Docker and/or Kubernetes, that means full root access.

97 MATHEMATICS AND COMPUTING↗

NASA NTRS2018

Overview of Recent EAST Testing, Modeling & Analysis

Shock Layer Radiation at NASA Ames - Background: Complex aerothermal and thermochemical phenomena of planetary entry define convective and radiative heating. A spacecraft's TPS (Thermal Protective System) mitigates heat transfer to substructure. Successful TPS design relies on verifiable characterization of these phenomena in the anticipated flight environment. - Approach: EAST (Electric Arc Shock Tube) [facility at Ames] simulates high-enthalpy, real-gas phenomena encountered by hypersonic vehicles entering planetary atmospheres by spectrally imaging the flow behind a moving shock wave. - Goal: Validate aerothermal models (DPLR (Data Parallel Line Relaxation Code) and NEQAIR (Nonequilibrium Radiative Transport and Spectra Program)), inform model improvements, reduce uncertainty and quantify design uncertainties. - Recent Relevant Projects: MSL (Mars Science Laboratory) & Mars 2020, InSight, OSIRIS-REx (Origins Spectral Interpretation Resource Identification Security Regolith Explorer), Orion EFT-1 (Exploration Flight-1) and EM-1 (Exploration Mission-1) and New Frontiers.

Brandis, Aaron↗

DOE OSTI2022

EDAT

SAND2022-13281 O EDAT is a suite of tools for analyzing time-dependent electron densities produced by time-dependent density functional theory (TDDFT) simulations of ion-irradiated materials and surfaces. The code’s key capabilities include various routines to extract the number of electrons emitted from a surface, the energy spectrum of these emitted electrons, and the number of electrons captured by the ion. The code is written in Python and can interface with multiple TDDFT codes. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Kononov, Alina↗

DOE OSTI2022

Report Series: Evaluation, Finding Of Effect, And Mitigation Documentation For Building 23-113, Mercury, Area 23, Nevada National Security Site, Nye County, Nevada

The U.S. Department of Energy (DOE) National Nuclear Security Administration Nevada Field Office (NNSA/NFO) plans to demolish Building 23-113 in Mercury (Nevada State Historic Preservation Office [SHPO] Resource No. B15236), which is on the Nevada National Security Site (NNSS) in Nye County, Nevada. Demolition of Building 23-113 is part of the long-term project to modernize the town of Mercury on the NNSS for future mission needs. The project is considered an undertaking subject to review under Title 54 of United States Code (USC) § 306108, commonly known as Section 106 of the National Historic Preservation Act, Title 54 USC § 300101, et seq., and its implementing regulations, Title 36 of the Code of Federal Regulations (36 CFR) Part 800. In 2018, Desert Research Institute (DRI) completed an architectural survey of the town of Mercury. This effort resulted in the identification, recordation, and evaluation of the Mercury Historic District (MHD, SHPO Resource No. D230), including the identification of its contributing elements (Reno et al. 2018). The MHD was recommended eligible for listing in the National Register of Historic Places (NRHP, National Register) under the Secretary of the Interior’s (SOI) Significance Criteria A and C, as defined in 36 CFR Part 60.4, as a significant concentration of buildings and structures with a direct and important association with Cold War-era nuclear testing from 1951 through 1992. It has not been evaluated under Criteria B and D to date. As part of a larger modernization program for Mercury, the NNSA/NFO and the SHPO executed the 2018 Programmatic Agreement between the National Nuclear Security Administration Nevada Field Office and the Nevada State Historic Preservation Officer regarding Modernization and Operational Maintenance of the Nevada National Security Site, at Mercury in Nye County, Nevada (the Mercury PA). The Mercury PA includes streamlined Section 106 procedures for undertakings in the MHD based on contributing element categories. Building 23-113 is identified in Appendix C of the Mercury PA as a Category I contributing element, indicating that it might be individually eligible for the NRHP. It is a historic property for the purposes of Section 106 compliance and subject to the stipulations of the Mercury PA. Per Stipulation VI of the Mercury PA, when the Area of Potential Effect (APE) for an undertaking includes Category I elements, the NNSA/NFO must evaluate the Category I elements for individual NRHP eligibility under all of the SOI Significance Criteria prior to initiating any activity that may affect the elements. Therefore, the purpose of this report is to evaluate Building 23-113 as a potential individually eligible historic property in fulfillment of Stipulation VI of the Mercury PA. The evaluation detailed herein concludes that although Building 23-113 is significant at the local level for its important role as a recreational facility on the NNSS, the building lacks sufficient integrity to convey its significance. It is not individually eligible for listing in the NRHP at any level. The building remains eligible as a contributing element to the MHD.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2015

RCRA PART B Permit Application Nevada National Security Site (NNSS) for Waste Management Activities at the NNSS Explosive Ordnance Disposal Unit (EODU)

This volume of the Resource Conservation and Recovery Act (RCRA) permit application by the Department of Energy, National Nuclear Security Administration Nevada Field Office (NNSA/NFO) seeks continued operation of the Explosive Ordnance Disposal Unit (EODU) at the Nevada National Security Site (NNSS). Explosives, explosive materials, and unexploded ordnance are declared waste explosives if they are damaged, are defective, have exceeded their shelf life, are the result of environmental restoration (legacy), or are discarded explosive material from research or testing projects. This document provides a description of the regulated waste codes accepted for treatment (controlled detonations), the general design of the unit, and the processes used to safely detonate onsite-generated waste explosives and unexploded ordnance, which are defined as hazardous waste under specific regulations. The Area 11 EODU consists of a firing point (controlled access area where firing of explosives is conducted), firing pad (prepares site where explosives hazardous waste is fired), and ancillary equipment that includes an explosives magazine and firing point area. Additionally, live explosives training is conducted to ensure proficiency of the EODU operations personnel, explosives handlers, and the firing system components. Training detonations do not include waste explosives and are limited in respect to explosives volume and frequency personnel, explosives handlers, and the firing system components. Training detonations do not include waste explosives and are limited in respect to explosives volume and frequency. For safety and security reasons, some of the contents of the full application are not available for public viewing. This public version of the application contains most, but not all, of the contents as submitted to the regulatory agencies.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2016

Sirepo for Synchrotron Radiation Workshop

Sirepo is an open source framework for cloud computing. The graphical user interface (GUI) for Sirepo, also known as the client, executes in any HTML5 compliant web browser on any computing platform, including tablets. The client is built in JavaScript, making use of the following open source libraries: Bootstrap, which is fundamental for cross-platform web applications; AngularJS, which provides a model–view–controller (MVC) architecture and GUI components; and D3.js, which provides interactive plots and data-driven transformations. The Sirepo server is built on the following Python technologies: Flask, which is a lightweight framework for web development; Jinja, which is a secure and widely used templating language; and Werkzeug, a utility library that is compliant with the WSGI standard. We use Nginx as the HTTP server and proxy, which provides a scalable event-driven architecture. The physics codes supported by Sirepo execute inside a Docker container. One of the codes supported by Sirepo is the Synchrotron Radiation Workshop (SRW). SRW computes synchrotron radiation from relativistic electrons in arbitrary magnetic fields and propagates the radiation wavefronts through optical beamlines. SRW is open source and is primarily supported by Dr. Oleg Chubar of NSLS-II at Brookhaven National Laboratory.

Nagler, Robert↗

DOE OSTI2016

Sirepo - Warp

Sirepo is an open source framework for cloud computing. The graphical user interface (GUI) for Sirepo, also known as the client, executes in any HTML5 compliant web browser on any computing platform, including tablets. The client is built in JavaScript, making use of the following open source libraries: Bootstrap, which is fundamental for cross-platform web applications; AngularJS, which provides a model–view–controller (MVC) architecture and GUI components; and D3.js, which provides interactive plots and data-driven transformations. The Sirepo server is built on the following Python technologies: Flask, which is a lightweight framework for web development; Jin-ja, which is a secure and widely used templating language; and Werkzeug, a utility library that is compliant with the WSGI standard. We use Nginx as the HTTP server and proxy, which provides a scalable event-driven architecture. The physics codes supported by Sirepo execute inside a Docker container. One of the codes supported by Sirepo is Warp. Warp is a particle-in-cell (PIC) code de-signed to simulate high-intensity charged particle beams and plasmas in both the electrostatic and electromagnetic regimes, with a wide variety of integrated physics models and diagnostics. At pre-sent, Sirepo supports a small subset of Warp’s capabilities. Warp is open source and is part of the Berkeley Lab Accelerator Simulation Toolkit.

Nagler, Robert↗

DOE OSTI2016

LLNL NESHAPs 2015 Annual Report - June 2016

Lawrence Livermore National Security, LLC operates facilities at Lawrence Livermore National Laboratory (LLNL) in which radionuclides are handled and stored. These facilities are subject to the U.S. Environmental Protection Agency (EPA) National Emission Standards for Hazardous Air Pollutants (NESHAPs) in Code of Federal Regulations (CFR) Title 40, Part 61, Subpart H, which regulates radionuclide emissions to air from Department of Energy (DOE) facilities. Specifically, NESHAPs limits the emission of radionuclides to the ambient air to levels resulting in an annual effective dose equivalent of 10 mrem (100 μSv) to any member of the public. Using measured and calculated emissions, and building-specific and common parameters, LLNL personnel applied the EPA-approved computer code, CAP88-PC, Version 4.0.1.17, to calculate the dose to the maximally exposed individual member of the public for the Livermore Site and Site 300.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2020

NESHAPs CY19 Report: Radionuclide Air Emission Report for 2019

Lawrence Livermore National Security, LLC operates facilities at Lawrence Livermore National Laboratory (LLNL) in which radionuclides are handled and stored. These facilities are subject to the U.S. Environmental Protection Agency (EPA) National Emission Standards for Hazardous Air Pollutants (NESHAPs) in Code of Federal Regulations (CFR) Title 40, Part 61, Subpart H, which regulates radionuclide emissions to air from Department of Energy (DOE) facilities. Specifically, NESHAPs limits the emission of radionuclides to the ambient air to levels resulting in an annual effective dose equivalent of 10 mrem (100 μSv) to any member of the public. Using measured and calculated emissions, and building-specific and common parameters, LLNL personnel applied the EPA-approved computer code, CAP88-PC, Version 4.0.1.17, to calculate the dose to the maximally exposed individual member of the public for the Livermore Site and Site 300. In 2019, LLNL maintained its compliance with 40 CFR 61, Subpart H. All radioactive air emissions resulted in calculated doses far below the annual 10 mrem (100 μSv) sitewide standard. The annual doses to the site-wide maximally exposed individual member of the public at the Livermore Site and Site 300 from planned and unplanned operations in 2019 are: Livermore Site: 4.3 x 10⁻³ mrem (4.3 x 10⁻² μSv); Site 300: 9.5 x 10⁻⁸ mrem (9.5 x 10⁻⁷ μSv).

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2024

LLNL NESHAPs 2023 Annual Report

Lawrence Livermore National Security, LLC operates facilities at Lawrence Livermore National Laboratory (LLNL) in which radionuclides are handled and stored. These facilities are subject to the U.S. Environmental Protection Agency (EPA) National Emission Standards for Hazardous Air Pollutants (NESHAPs) in Code of Federal Regulations (CFR) Title 40, Part 61, Subpart H, which regulates radionuclide emissions to air from Department of Energy (DOE) facilities. Specifically, NESHAPs limits the emission of radionuclides to the ambient air to levels resulting in an annual effective dose equivalent of 10 mrem (100 µSv) to any member of the public. Using measured and calculated emissions, and building-specific and common parameters, LLNL personnel applied the EPA-approved computer code, CAP88-PC, Version 4.1.1.0, to calculate the dose to the maximally exposed individual member of the public for the Livermore Site and Site 300.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2016

Sirepo for Synchrotron Radiation Workshop

Sirepo is an open source framework for cloud computing. The graphical user interface (GUI) for Sirepo, also known as the client, executes in any HTML5 compliant web browser on any computing platform, including tablets. The client is built in JavaScript, making use of the following open source libraries: Bootstrap, which is fundamental for cross-platform web applications; AngularJS, which provides a model–view–controller (MVC) architecture and GUI components; and D3.js, which provides interactive plots and data-driven transformations. The Sirepo server is built on the following Python technologies: Flask, which is a lightweight framework for web development; Jinja, which is a secure and widely used templating language; and Werkzeug, a utility library that is compliant with the WSGI standard. We use Nginx as the HTTP server and proxy, which provides a scalable event-driven architecture. The physics codes supported by Sirepo execute inside a Docker container. One of the codes supported by Sirepo is the Synchrotron Radiation Workshop (SRW). SRW computes synchrotron radiation from relativistic electrons in arbitrary magnetic fields and propagates the radiation wavefronts through optical beamlines. SRW is open source and is primarily supported by Dr. Oleg Chubar of NSLS-II at Brookhaven National Laboratory.

Nagler, Robert↗