Search NASA⌕ Search

SEARCH · Search NASA

Results for “Secure Coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14

FEMP Cyber Security Arsenal

The FEMP Cyber Security Arsenal is a family of cyber security tools for the federal facility owners and operators. Using these tools, facility owners can evaluate their overall cybersecurity posture. These tools are web-based front-end tools. This is an upgrade of the tools available from the earlier version in DOE CODE ID: #41457

Gourisetti, Sri Nikhil Gupta↗

Bayesian calibration of stochastic agent based model via random forest

SAND2024-11403O The Bayesian Calibration of Stochastic Agent-based Model via Random Forest is a code that was developed in concurrence with an article by the same name that was written for a journal. The code reproduces simulation results and plots from the article. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

SciDAC↗

Domestic Extremism: How to Counter Threats Posed to Critical Assets

Although facilities with sensitive information, hazardous materials, critical infrastructure, or other sensitive items have security measures in place to protect those critical assets, the threat of domestic extremism (DE) has challenged those security measures in new ways. The project described in this brief report used focus groups to identify best practices, tools, or techniques relevant to preventing or countering DE and sought to identify gaps in security measures. Five focus groups with twenty-two subject matter experts from government, healthcare, and other stakeholder groups were conducted to understand how organizations protect critical assets against the DE threat. The results of the focus groups underscore the importance of organizational culture, codes of conduct, and behavior observation programs in prevention of DE events. In addition, results emphasized the value of multidisciplinary teams, employee assistance programs, and regular threat assessment as resources when responding to DE incidents. However, monitoring of social media and lack of adequate resources remain challenges when attempting to prevent or counter the DE threat.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Initial Atmospheric Transport (IAT)

SAND2022-12904 O Initial Atmospheric Transport (IAT) predicts the initial puff/plume rise resulting from either a solid rocket propellant or liquid rocket fuel fire. The code generates initial conditions for subsequent atmospheric transport calculations. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Villa, Daniel↗

RCRA Part B Permit Application Nevada National Security Site (NNSS) for Waste Management Activities at the NNSS Hazardous Waste Storage Unit (HWSU)

This volume of the permit application by the DOE’s National Nuclear Security Administration Nevada Field Office (NNSA/NFO) to the Nevada Division of Environmental Protection (NDEP) focuses on the Area 5 Hazardous Waste Storage Unit (HWSU). The HWSU was established to support testing, research, and remediation activities at the Nevada National Security Site (NNSS), a large-quantity generator of hazardous waste. The HWSU, located adjacent to the Area 5 Radioactive Waste Management Complex (RWMC), is a prefabricated, rigid steel-framed, roofed shelter used to store hazardous nonradioactive waste generated on the NNSS. No offsite-generated wastes are managed at the HWSU. Waste managed at the HWSU includes the following: Flammables/Combustibles, Acid Corrosives, Alkali Corrosives, Oxidizers/Reactives, Toxics/Poisons, and Other Regulated Materials (ORMs). A list of regulated waste codes accepted for storage at the HWSU is provided in this volume. Hazardous wastes are stored at the HWSU in containers that are compliant with U.S. Department of Transportation (DOT) regulations and compatible with the stored waste. Waste packages (e.g., drums) without inner closed containers of waste remain closed except during inspection or sampling. Transfer of uncontainerized waste between waste packages at the HWSU is prohibited. Closed inner containers may be transferred or consolidated into larger waste packages, and small closed containers may be placed into larger containers. Containers are stored on secondary containment pallets, and the unit is inspected monthly. For safety and security reasons, some of the contents of the full application are not available for public viewing. This public version of the application contains most, but not all, of the contents as submitted to the regulatory agencies.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

National Emission Standards for Hazardous Air Pollutants - Radionuclide Emissions (Calendar Year 2018)

The U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office (NNSA/NFO) operates the Nevada National Security Site (NNSS) and the North Las Vegas Facility (NLVF). From 1951 through 1992, the NNSS was the continental testing location for U.S. nuclear weapons.The release of radionuclides from NNSS activities has been monitored since the initiation of atmospheric testing. After 1962, testing was limited to underground detonations, which greatly reduced radiation exposure to the public. Since the end of nuclear testing in 1992, radiation monitoring has focused on detecting airborne radionuclides from historically contaminated soils. These radionuclides are derived from re-suspension of soil (primarily by wind) and emission of tritium-contaminated soil moisture through evapotranspiration. Low amounts of legacy-related tritium are also emitted to air at the NLVF, an NNSS support complex in North Las Vegas. To protect the public from harmful levels of man-made radiation, the Clean Air Act, National Emission Standards for Hazardous Air Pollutants (NESHAP) (Title 40 Code of Federal Regulations [CFR] Part 61Subpart H) limits the release of radioactivity from a U.S. Department of Energy (DOE) facility to that which would cause 10 millirem per year (mrem/y) effective dose equivalent to any member of the public. This limit does not include radiation unrelated to NNSS activities. Unrelated doses could come from naturally occurring radioactive elements, from sources such as medically or commercially used radionuclides, or from sources outside of the United States, such as Japan’s Fukushima nuclear power plant, which was damaged in 2011. NNSA/NFO demonstrates compliance with the NESHAP limit by reporting environmental measurements of radionuclide air concentrations at critical receptor locations on the NNSS (U.S. Environmental Protection Agency [EPA] and DOE 1995). This method was approved by the EPA in 2001 and has been the method used to demonstrate compliance with the 40 CFR 61.92 dose standard since 2005. Six locations on the NNSS have been established to act as critical receptor locations to demonstrate compliance with the NESHAP limit. These locations are actually pseudo-critical receptor stations because no member of the public resides at these onsite locations. Compliance is demonstrated if the measured annual average concentration is less than the NESHAP Concentration Level (CL) for Environmental Compliance listed in 40 CFR 61, Appendix E, Table 2. For multiple radionuclides, compliance is demonstrated when the sum of the fractions (determined by dividing each radionuclide’s concentration by its CL and then adding the fractions together) is less than 1.0. In 2018, the potential dose from radiological emissions to air from both current and past NNSS activities was well below the 10 mrem/y dose limit. This is demonstrated by air sampling data collected at the critical receptor air monitoring stations which had average concentrations of radioactivity that were a fraction of the CL values. Concentrations ranged from 0.1% to a maximum of 5.2% of the allowed NESHAP limit. Clean Air Package 1988 (CAP88-PC) was used to model dose to the offsite public from all 2018 NNSS radionuclide emissions. The model showed the maximally exposed individual to be on the northern end of Amargosa Valley; this individual received a potential dose of 0.07 mrem/y. The potential dose to the public from NLVF emissions was also very low at 0.000008 mrem/y, over six orders of magnitude lower than the 10 mrem/y limit.

54 ENVIRONMENTAL SCIENCES↗

Supplemental Structural Analyses Used in Support of Certification of the Defense Programs Package 3

The Defense Programs Package (DPP)-3 is to be certified by the National Nuclear Security Administration (NNSA) Packaging and Transportation Division (PTD). Certification is based on successful physical testing of the package, and six certification test units (CTUs) have been subjected to the normal conditions of transport (NCT) and hypothetical accident conditions (HAC) outlined in Title 10 of the Code of Federal Regulations Part 71 (10 CFR 71). During regulatory testing of one of the CTUs, the drum lid closure bolt closest to the impact surface failed during the HAC 30-ft side drop. One of the testing goals for this CTU was to minimize the thermal pathway from the drum exterior shell to the containment vessel (CV) flange and O-rings, leading to the maximum damage scenario in preparation for thermal testing at 1475 °F. Therefore, the puncture bar impact proceeded as originally planned by striking the side wall of the package exterior closest to the location of the CV flange. This puncture bar impact did not attempt to exploit the region of the failed drum lid closure bolt to potentially cause more damage to the package. After the conclusion of regulatory testing, the DPP-3 package finite element model was used to numerically evaluate the effects of puncture bar impacts to the drum exterior in the vicinity of the failed drum lid closure bolt to further demonstrate the robustness of the DPP-3 design. Three alternate puncture bar impact locations and orientations were evaluated to demonstrate that these puncture bar impacts would not substantially reduce the effectiveness of the DPP-3 packaging. This paper describes the supplemental finite element models performed and structural analysis results that demonstrate the alternate HAC 40-in. puncture bar impact tests would have no deleterious effect on the performance of the DPP-3.

Sakalaukus Jr., Peter J.↗

Light Transport with Weak Angular Dependence in Fog: Supplemental Code

A MATLAB script for calculating the optical properties of different fog types. This is a supplemental code intended to be published along with a journal paper. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2021-1504 O

Bentz, BrianZ.↗

FY2016 Vehicle Systems Annual Progress Report

Vehicle Systems is concerned with advancing light-, medium-, and heavy-duty (HD) vehicle systems to support DOE’s goals of developing technologies for the U.S. transportation sector that enhance national energy security,increase U.S. competitiveness in the global economy, and support improvement of U.S. transportation and energy infrastructure.

33 ADVANCED PROPULSION SYSTEMS↗

Navigating United States Standards and Regulation for Digital Energy Systems

This report provides an analysis of the U.S. standards and regulatory landscape for digital energy systems, focusing on cybersecurity, safety, and reliability requirements. It examines the interplay between federal mandates, state regulations, voluntary industry standards, and utility-specific policies, highlighting critical gaps between compliance and real-world risk mitigation. While NERC CIP standards enforce cybersecurity for Bulk Electric System assets, distribution-level infrastructure and emerging technologies often fall outside mandatory oversight, creating vulnerabilities. The report identifies systemic challenges such as reliance on self-attestation, uneven state adoption of safety codes, and lagging standards for advanced technologies like battery energy storage and inverter-based resources. Through a detailed gap analysis, it underscores the urgency of proactive risk-based approaches, independent verification, and strategic engagement with state and federal entities. Recommendations include adopting tiered security frameworks, strengthening procurement practices, and addressing emerging technology risks to ensure resilient and secure digital energy infrastructure. This guidance is intended for utilities, regulators, and stakeholders navigating compliance obligations and seeking to enhance cybersecurity and safety beyond minimum standards.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

Final Technical Report on Quantifying Dependability Attributes of Software Based Safety Critical Instrumentation and Control Systems in Nuclear Power Plants

With the current transition from analog to digital instrumentation and control systems in nuclear power plants, the number and variety of software-based systems have significantly increased. The sophisticated nature and increasing complexity of software raises trust in these systems as a significant challenge. The trust placed in a software system is typically termed software dependability. Software dependability analysis faces uncommon challenges since software systems’ characteristics differ from those of hardware systems. The lack of systematic science-based methods for quantifying the dependability attributes in software-based instrumentation as well as control systems in safety critical applications has proved itself to be a significant inhibitor to the expanded use of modern digital technology in the nuclear industry. Dependability refers to the ability of a system to deliver a service that can be trusted. Dependability is commonly considered as a general concept that encompasses different attributes, e.g., reliability, safety, security, availability and maintainability. Dependability research has progressed significantly over the last few decades. For example, various assessment models and/or design approaches have been proposed for software reliability, software availability and software maintainability. Advances have also been made to integrate multiple dependability attributes, e.g., integrating security with other dependability attributes, measuring availability and maintainability, modeling reliability and availability, quantifying reliability and security, exploring the dependencies between security and safety and developing integrated analysis models. However, there is still a lack of understanding of the dependencies between various dependability attributes as a whole and of how such dependencies are formed. To address the need for quantification and give a more objective basis to the review process -- therefore reducing regulatory uncertainty -- measures and methods are needed to assess dependability attributes early on, as well as throughout the life-cycle process of software development. In this research, extensive expert opinion elicitation is used to identify the measures and methods for assessing software dependability. Semi-structured questionnaires were designed to elicit expert knowledge. A new notation system, Causal Mechanism Graphing, was developed to extract and represent such knowledge. The Causal Mechanism Graphs were merged, thus, obtaining the consensus knowledge shared by the domain experts. In this report, we focus on how software contributes to dependability. However, software dependability is not discussed separately from the context of systems or socio-technical systems. Specifically, this report focuses on software dependability, reliability, safety, security, availability, and maintainability. Our research was conducted in the sequence of stages found below. Each stage is further examined in its corresponding chapter. Stage 1 (Chapter 2): Elicitation of causal maps describing the dependencies between dependability attributes. These causal maps were constructed using expert opinion elicitation. This chapter describes the expert opinion elicitation process, the questionnaire design, the causal map construction method and the causal maps obtained. Stage 2 (Chapter 3): Elicitation of the causal map describing the occurrence of the event of interest for each dependability attribute. The causal mechanisms for the “event of interest” were extracted for each of the software dependability attributes. The “event of interest” for a dependability attribute is generally considered to be the “attribute failure”, e.g. security failure. The extraction was based on the analysis of expert elicitation results obtained in Stage 1. Stage 3 (Chapter 4): Identification of relevant measurements. Measures for the “events of interest” and their causal mechanisms were obtained from expert opinion elicitation for each of the software dependability attributes. The measures extracted are presented in this chapter. Stage 4 (Chapter 5): Assessment of the coverage of the causal maps via measures. Coverage was assessed to determine whether the measures obtained were sufficient to quantify software dependability, and what measures are further required. Stage 5 (Chapter 6): Identification of “missing” measures and measurement approaches for concepts not covered. New measures, for concepts that had not been covered sufficiently as determined in Stage 4, were identified using supplementary expert opinion elicitation as well as literature reviews. Stage 6 (Chapter 7): Building of a detailed quantification model based on the causal maps and measurements obtained. Ability to derive such a quantification model shows that the causal models and measurements derived from the previous stages (Stage 1 to Stage 5) can form the technical basis for developing dependability quantification models. Scope restrictions have led us to prioritize this demonstration effort. The demonstration was focused on a critical system, i.e. the reactor protection system. For this system, a ranking of the software dependability attributes by nuclear stakeholders was developed. As expected for this application, the stakeholder ranking identified safety as the most critical attribute to be quantified. A safety quantification model limited to the requirements phase of development was built. Two case studies were conducted for verification. A preliminary control gate for software safety for the requirements stage was proposed and applied to the first case study. The control gate allows a cost effective selection of the duration of the requirements phase.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

TINES - Time Integration, Newton and Eigen Solver v. 1.0

SAND2021-1505 O. TINES is an open source software providing math infrastructure for solving many stiff time ordinary differential equations (ODEs) and/or differential algebraic equations (DAEs) using a batch hierarchical parallelism. The code is written using a parallel programming model (i.e., Kokkos) to future-proof the next generation parallel computing platforms such as GPU accelerators. This code is developed to support Exascale Catalytic Chemistry (ECC) Project. The code provides fundamental math helpers that can aid other research projects. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Kim, Kyungjoo↗

Stabilizer Rank Strong Simulation v.0.1

This software improves upon the Clifford gate+T gate magic state strong simulation algorithm by Brayvi and Gosset. It provides a better stabilizer state decomposition that scales as 2^{0.463t}, an improvement over 2^{0.468t}, for t T gate magic states. This code enables simulations of universal quantum computing with that asymptotic scaling cost. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525 SAND2020-14293 O

SciDAC↗

inp2cjw

inp2cjw is a utility program for hierarchical finite element analysis which converts Abaqus formatted (inp) model output from CUBIT to a format (cjw) for HFEM and HFEM-Hydro modeling codes while introducing volume, facet, and edge material properties into the model. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2021-4551 O

Weiss, ChesterJ↗

Magnesium Alloy Dislocation Dynamics, CRADA No. TC02199.0

This was a collaborative effort between Lawrence Livermore National Security, LLC as manager and operator of Lawrence Livermore National Laboratory (LLNL) and The Johns Hopkins University to develop a discrete defect dynamics method to predict the behavior of Magnesium polycrystalline alloys undergoing dynamic deformation though coupled slip and twinning building off of the ParaDiS dislocation dynamics code with finite element coupling.

36 MATERIALS SCIENCE↗

Volume 9: Critical Facility with Add-On Ion Beam

Completion of the originally planned critical facility has been considered as part of the High Flux Isotope Reactor (HFIR) Sustaining and Enhancing Neutron Science Initiative at Oak Ridge National Laboratory (ORNL). A working group of ORNL staff members was formed to develop the idea and to recommend one or more configurations to best support future HFIR operations and scientific capacities. HFIR was designed with a critical pool in the reactor bay that was projected to be outfitted as a critical facility. The primary purpose of the planned critical facility was to measure the subcritical worth of fresh fuel elements to support startup requirements. However, the Y-12 National Security Complex already housed a critical facility that was used for this purpose. This report presents the working group’s efforts, including determination of the proposed critical facility’s high-impact benefits. A generic low-power critical facility would be employed for reactor physics measurements, code and data validation, reactor operator and staff training, and education. This facility would be instrumental in supporting current HFIR operations, conversion of HFIR to low-enriched uranium, existing light water reactor operations, and advanced reactor development and deployment.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Strengthening the Security of Operational Technology: Understanding Contemporary Bill of Materials

The evolution of cyber-physical infrastructure has made its security more challenging. The last few years have witnessed a convergence of hardware and software segments in various domains, including operational technology (OT) which is responsible for carrying out critical tasks such as monitoring and controlling power grids, nuclear plants, transportation, and emergency services. Both hardware and software encapsulate numerous open source and proprietary subcomponents, making it crucial for end-users to understand the composition of the products they are using. For example, wind turbines incorporate thousands of lines of code (software) used for the turbine's design, planning, operation, and analytics in addition to the numerous hardware subcomponents that construct it. Due to the highly complex nature of software and hardware, knowledge of the components and subcomponents is required to mitigate cyber vulnerabilities and defend against cyberattacks. There has also been a transformation from a traditional linear supply chain into a global, dynamic, diverse, and interconnected system. The digitization of the supply chain makes it easier to find and exploit vulnerabilities. Critical infrastructures (e.g., power grids, oil, natural gas, water, and wastewater) rely on OT to function, and if the OT is compromised, equipment damage and potential interruption of services could result. A significant security measure to protect OT systems from disruption is to develop a supply chain bill of materials (BoM) corresponding to the software and hardware used in OT, along with attestations amongst vendors and asset owners. A supply chain BoM is a proactive way to understand the inherent vulnerabilities in the system and mitigate them in advance of being exploited. BoMs bolster the trust placed in the digital infrastructure and enhance software supply chain security by sustaining the management of component obsolescence and compliance, along with the seclusion of unsafe segments of a specific product. Adopting BoM tools is becoming increasingly important across various government sectors, as evidenced by the recent U.S. executive order on cybersecurity (NIST 2021). This paper aims to classify BoMs based on structure, functionality, component type, and architecture. The work also discusses case studies to further highlight the benefits of BoMs. In addition, it identifies missing pieces in existing BoM implementations so that future research may identify bounds on where it could expect to make improvements and directly enable researchers to identify promising areas for exploration. Further, the authors provide valuable recommendations to tool developers, researchers, and standardizing organizations (policymakers), additionally benefitting critical infrastructure owners and government executives. This aids in paving a path for future work, thereby, providing suggestions to determine a tool for consumers that best suit their needs.

97 MATHEMATICS AND COMPUTING↗