Search NASA⌕ Search

SEARCH · Search NASA

Results for “Secure Coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15
All sourcesNASA NTRSDOE OSTI
DOE OSTI2016

Sirepo - Warp

Sirepo is an open source framework for cloud computing. The graphical user interface (GUI) for Sirepo, also known as the client, executes in any HTML5 compliant web browser on any computing platform, including tablets. The client is built in JavaScript, making use of the following open source libraries: Bootstrap, which is fundamental for cross-platform web applications; AngularJS, which provides a model–view–controller (MVC) architecture and GUI components; and D3.js, which provides interactive plots and data-driven transformations. The Sirepo server is built on the following Python technologies: Flask, which is a lightweight framework for web development; Jin-ja, which is a secure and widely used templating language; and Werkzeug, a utility library that is compliant with the WSGI standard. We use Nginx as the HTTP server and proxy, which provides a scalable event-driven architecture. The physics codes supported by Sirepo execute inside a Docker container. One of the codes supported by Sirepo is Warp. Warp is a particle-in-cell (PIC) code de-signed to simulate high-intensity charged particle beams and plasmas in both the electrostatic and electromagnetic regimes, with a wide variety of integrated physics models and diagnostics. At pre-sent, Sirepo supports a small subset of Warp’s capabilities. Warp is open source and is part of the Berkeley Lab Accelerator Simulation Toolkit.

Nagler, Robert↗
DOE OSTI2017

Department of Energy Air Emissions Annual Report Oak Ridge Reservation, Oak Ridge, Tennessee 40 Code of Federal Regulations (CFR) 61, Subpart H Calendar Year 2016

As defined in the preamble of the final rule, the entire DOE facility on the Oak Ridge Reservation (ORR) must meet the 10 mrem/yr ED standard.1 In other words, the combined ED from all radiological air emission sources from Y-12 National Security Complex (Y-12 Complex), Oak Ridge National Laboratory (ORNL), East Tennessee Technology Park (ETTP), Oak Ridge Institute for Science and Education (ORISE) and any other DOE operation on the reservation must meet the 10 mrem/yr standard. Compliance with the standard is demonstrated through emission sampling, monitoring, calculations and radiation dose modeling in accordance with approved EPA methodologies and procedures. DOE estimates the ED to many individuals or receptor points in the vicinity of ORR, but it is the dose to the maximally exposed individual (MEI) that determines compliance with the standard.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2025

OmniFed: A Modular Framework for Configurable Federated Learning from Edge to HPC

Federated Learning (FL) is critical for edge and High Performance Computing (HPC) where data is not centralized and privacy is crucial. We present OmniFed, a modular framework designed around decoupling and clear separation of concerns for configuration, orchestration, communication, and training logic. Its architecture supports configuration-driven prototyping and code-level override-what-you-need customization. We also support different topologies, mixed communication protocols within a single deployment, and popular training algorithms. It also offers optional privacy mechanisms including Differential Privacy (DP), Homomorphic Encryption (HE), and Secure Aggregation (SA), as well as compression strategies. These capabilities are exposed through well-defined extension points, allowing users to customize topology and orchestration, learning logic, and privacy/compression plugins, all while preserving the integrity of the core system. We evaluate multiple models and algorithms to measure various performance metrics. By unifying topology configuration, mixed-protocol communication, and pluggable modules in one stack, OmniFed streamlines FL deployment across heterogeneous environments. Github repository is available at https://github.com/at-aaims/OmniFed.

Tyagi, Sahil [ORNL] (ORCID:0009000783144745)↗
DOE OSTI2017

EPOXY

EPOXY is a LLVM base compiler that applies security protections to bare-metal programs on ARM Cortex-M series micro-controllers. This includes privilege overlaying, wherein operations requiring privileged execution are identified and only these operations execute in privileged mode. It also applies code integrity, control-flow hijacking defenses, stack protections, and fine-grained randomization schemes. All of its protections work within the constraints of bare-metal systems.

Clements, AbrahamAnthony↗
DOE OSTI2022

Verification and Validation of a Modified Numerical Algorithm for Simulation of Transient Unconfined Groundwater Flow

This report extends verification and validation testing of the NUFT package of codes (Nitao 2000a,b) to the US1P module of code designed for simulation of single-phase mixed or “coupled” saturated and unsaturated (or “variably saturated”) groundwater flow. Importantly, the verification and validation testing of US1P in this report includes performance evaluation of a modified numerical algorithm that was not included in prior quality assurance (QA) of the NUFT package by Carle et al. (2014) for Underground Test Area (UGTA) project activities, which are directed at assessment of radionuclide contamination in groundwater sourced from underground nuclear test locations at the Nevada National Security Site (NNSS). An immediate purpose of this report is to provide QA for ongoing large-scale, three-dimensional (3-D) groundwater flow modeling of transient water levels associated with longterm water supply pumping and underground nuclear testing at the NNSS (Jackson and Fenelon, 2018; Jackson et al., 2021). For UGTA activities, the QA refers to the standards of ASTM (1996) for verification and validation testing of groundwater modeling codes.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2026

CONUS-wide Projected Flood Frequency and Uncertainty Estimates, Version 1.0

This dataset presents a large-ensemble of CONUS-wide projected flood frequency and uncertainty estimates across ~2.7 million NHDPlusV2 river reaches over the CONUS. The framework producing this dataset leverages a multi-model, uncertainty-aware modeling framework that allows evaluating shifts in flood frequences at the stream reach level across the CONUS. CONUS-wide ensemble streamflow projections generated from hydrologic simulations driven by downscaled and bias-corrected Coupled Model Intercomparison Project Phase 6 (CMIP6) outputs are used to derive these flood frequency and uncertainty estimates over the period 1980 - 2099. A spatially consistent regional L-moment algorithm is applied across clusters defined by the US Hydrologic Unit Code Subregions (HUC4s and HUC8s) and NHDPlusV2 stream orders to estimate flood frequencies. The dataset also includes at-site based flood estimates that allow for the comparison between local and regional approach-based estimates, assess projected changes, and characterize their uncertainties. For more reliable estimation of rare flood frequencies such as 500 and 1000-year return periods, super-ensemble based estimates are also included in the dataset. This dataset is derived to support the "Impact-Informed Dam Safety Risk Assessment for Securing Hydropower Assests" project for the US Department of Energy (DOE) Hydropower and Hydrokinetic Office (H2O). For further details, refer to Kao et al. (2022), Ghimire et al. (2023), Ghimire et al. (2025), and Hosking and Wallis (1997).

Ghimire, Ganesh [ORNL] (ORCID:0000000242843941)↗
DOE OSTI2020

SNL-NJOY-2016

This is a wrapper around the LANL NJOY-2016 code that interfaces with extended code capabilities and minor modification of the LANL NJOY-2016 code that supports modeling radiation damage to materials. The NJOY Nuclear Data Processing System is a modular computer code designed to read evaluated data in ENDF format, transform the data in various ways, and output the results as libraries designed to be used in various applications. The wrapper provided here permits Sandia-specific control parameters to be used in the input data file. The modifications incorporated here enhance the ability of NJOY to address material damage response functions for many materials, e.g. to include the NRT and arc-dpa forms of the damage energy in addition to the default NJOY-2016 implementation of the sharp-threshold Kinchin-Pease threshold energy treatment. All of the modifications provided here are being made available to the GitHub-based NJOY-2016 code. As useful enhancements found here are incorporated into the baseline NJOY-2016 code, they will be eliminated from this version so as to maintain our compatibility with the baseline NJOY-2016 code. SAND2020-13060 M Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy's National Nuclear Security Administration under contract DE-NA00035

Griffin, Patrick↗
DOE OSTI2021

PyNucleus

SAND2021-15054 O PyNucleus is a finite element code for nonlocal equations. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Glusa, Christian↗
DOE OSTI2023

EAM-X Potential Generator

SAND2023-06608O The EAM-X Potential Generator code establishes parameters that describe interactions between atoms in pure metals and alloys. The open-source software allows for the understanding of the relationship between general properties of atoms and macroscopic properties of metals. The code reads in values for the parameters of the model and outputs a table that describes the interactions. This code will be published by Acta Materialia along with two papers describing the method. The output of this code is meant for use by the LAMMPS simulation code created by Sandia. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Chandross, Michael↗
DOE OSTI2024

Metric DBSCAN

SAND2025-11725O Metric DBSCAN is an implementation of the popular DBSCAN clustering algorithm that works in general metric spaces. DBSCAN is a clustering algorithm, a fundamental building block in machine learning. It takes a set of objects and, given some notion of distance, identifies coherent groups of objects. With Metric DBSCAN, users can provide an arbitrary function to compute distance. Nearly all existing implementations of DBSCAN restrict distance to one of a few formulations. Metric DBScan accomplishes this cleanly and efficiently. The Python source code is on Github. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Dalbey, Keith↗
DOE OSTI2020

Oscar Seborer: Father of the Soviet Atomic Bomb?

Seventy-five years after the end of World War II, atomic spies continue to captivate and revolt the American public. Theodore "Ted" Hall, Klaus Fuchs, and David Greenglass all committed espionage at Los Alamos during the war. It has also been conjectured that there was an unidentified spy known only by the code-name PERSEUS, but there is a growing consensus among scholars that PERSEUS never existed. However, in September 2019, historians Harvey Klehr and John Earl Haynes unmasked a fourth Los Alamos spy code-named GODSEND. His name: Oscar Seborer. When the New York Times reported the story of Seborer's treachery in November 2019, almost nothing was known about his work at the Laboratory. However, recently discovered documents in the National Security Research Center (NSRC) at Los Alamos National Laboratory (LANL) offer some clues as to what GODSEND may have stolen for Stalin.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2016

University of Nevada, Reno Graduate Certificate in Nuclear Packaging

This paper describes a new Graduate Certificate in Nuclear Packaging (GCNP). Nuclear materials are currently used for large-scale production of electricity without greenhouse gas generation, advanced medical treatments, food sterilization, and sophisticated measurement technologies. In order to benefit from these uses, nuclear materials packaging must be developed, manufactured, inspected, and maintained for storage, transfer, transport, and disposal that protect the public and the environment. The U.S. Department of Energy (DOE) Packaging Certification Program (PCP) originally offered the following ten, one-day to ten-day training courses. 1. Methods for Reviewing Safety Analysis Reports for Packages and Performing Confirmatory Analysis; 2. Welding Criteria for Shipping Containers; 3. Structural Analysis and Acceptance Criteria; 4. Quality Assurance (QA) for Radioactive Material Packaging Training; 5. Application of the American Society of Mechanical Engineers (ASME) Code to Radioactive Material Transportation Packaging; 6. ARG-US Radio Frequency Identification (RFID) System for Management of Nuclear and Radioactive Materials; 7. Packaging Operations and Maintenance; 8. Packaging Leakage Test Training; 9. Management of SARP Preparation; 10. Transport Security of Radioactive Material. These courses were designed in accordance with DOE standards. They were taught at a rigorous graduate-university level by experienced technical staff who are coordinated by Argonne, Lawrence Livermore, and Savannah River National Laboratories. The courses were taught at these Laboratories or nearby locations. The PCP courses are attended by personnel from government agencies, national laboratories, and the nuclear industry, from both inside and outside the United States. Students in these classes have generally earned undergraduate or higher degrees. These courses are designed to assist student with specialized job duties, and may provide them a competitive advantage when seeking employment or promotion in the nuclear packaging and other related fields. (authors)

36 MATERIALS SCIENCE↗
DOE OSTI2024

Systems and methods for architecture-independent binary code analysis

Binaries configured for execution within respective computing environments may be disassembled into architecture-specific intermediate (AIL) representations. The AIL representations may be converted into canonical intermediate language (CIL) representations. The CIL representations may comprise normalized, architecture-independent code configured to characterize functionality of respective components of a binary (e.g., respective functions or the like). Feature vectors may be extracted from the CIL representations. The feature vectors may be used to identify components of respective binaries, assign security classifications to the binaries, and/or the like.

Haile, Jedediah T.↗
DOE OSTI2023

Orca2

SAND2024-03236O Orca2 is a trajectory design and optimization code for constructing and solving problems numerically defined on homogeneous manifolds. Orca2 solves numerical trajectory design and optimization problems defined on Lie-type domains and operates primarily as a library requiring a user to write additional C++ code to leverage it. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Sparapany, Michael↗
DOE OSTI2025

Impala

SAND2025-07450O Impala is a software tool that performs Bayesian model calibration for emulator-based models. The program uses R code to perform the calculations. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Tucker, James [Sandia National Lab. (SNL-CA), Live↗
DOE OSTI2025

TInCup

SAND2025-11464O TInCuP (Tag Invoked Customization Points) is a modern, header-only C++20 library that addresses the boilerplate problem in tag invoke based customization points. It provides comprehensive code generation and verification tools. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

von Winckel, Gregory [Sandia National Lab. (SNL-CA↗
DOE OSTI2023

An Architectural Survey of the Area 25 Nuclear Rocket Development Station, Nevada National Security Site, Nye County, Nevada (Volume 1 of 3)

The U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO), and the U.S. Department of Energy Environmental Management Nevada Program (EM NV) plan to implement corrective action activities (under the Federal Facility Agreement and Consent Order, agreed to by the State of Nevada) and demolition of the Engine Maintenance, Assembly, and Disassembly (E-MAD) facility and the Test Cell C Historic District. These are major components of the unrecorded Nuclear Rocket Development Station (NRDS) Historic District, which is eligible for inclusion in the National Register of Historic Places (NRHP, National Register). The NRDS is in Area 25 of the Nevada National Security Site (NNSS), formerly known as the Nevada Test Site, in Nye County, Nevada. Demolition and removal of the buildings and accessories constitutes an undertaking subject to review under Section 106 of the National Historic Preservation Act (54 United States Code [USC] § 306101) and its implementing regulations, 36 Code of Federal Regulations (CFR) Part 800.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

Fermilab s Transition to Token Authentication

Fermilab is the first High Energy Physics institution to transition from X.509 user certificates to authentication tokens in production systems. All of the experiments that Fermilab hosts are now using JSON Web Token (JWT) access tokens in their grid jobs. Many software components have been either updated or created for this transition, and most of the software is available to others as open source. The tokens are defined using the WLCG Common JWT Profile. Token attributes for all the tokens are stored in the Fermilab FERRY system which generates the configuration for the CILogon token issuer. High security-value refresh tokens are stored in Hashicorp Vault configured by htvault-config, and JWT access tokens are requested by the htgettoken client through its integration with HTCondor. The Fermilab job submission system jobsub was redesigned to be a lightweight wrapper around HTCondor. For automated job submissions a managed tokens service was created to reduce duplication of effort and knowledge of how to securely keep tokens active. The existing Fermilab file transfer tool ifdh was updated to work seamlessly with tokens, as well as the Fermilab POMS (Production Operations Management System) which is used to manage automatic job submission and the RCDS (Rapid Code Distribution System) which is used to distribute analysis code via the CernVM FileSystem. The dCache storage system was reconfigured to accept tokens for authentication in place of X.509 proxy certificates. As some services and sites have not yet implemented token support, proxy certificates are still sent with jobs for backwards compatibility but some experiments are beginning to transition to stop using them. There have been some glitches and learning curve issues but in general the system has been performing well and is being improved as operational problems are addressed.

Dykstra, David↗