Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safeguards by design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

NSPWG-recommended safety requirements and guidelines for SEI nuclear propulsion

An interagency Nuclear Safety Policy Working Group (NSPWG) was chartered to recommend nuclear safety policy, requirements, and guidelines for the Space Exploration Initiative (SEI) nuclear propulsion program to facilitate the implementation of mission planning and conceptual design studies. The NSPWG developed a top-level policy to provide the guiding principles for the development and implementation of the nuclear propulsion safety program and the development of safety functional requirements. In addition, the NSPWG reviewed safety issues for nuclear propulsion and recommended top-level safety requirements and guidelines to address these issues. Safety requirements were developed for reactor start-up, inadvertent criticality, radiological release and exposure, disposal, entry, and safeguards. Guidelines were recommended for risk/reliability, operational safety, flight trajectory and mission abort, space debris and meteoroids, and ground test safety. In this paper the specific requirements and guidelines will be discussed.

Marshall, Albert C.↗

Valve Health Monitoring System Utilizing Smart Instrumentation

The valve monitoring system is a stand alone unit with network capabilities for integration into a higher level health management system. The system is designed for aiding in failure predictions of high-geared ball valves and linearly actuated valves. It performs data tracking and archiving for identifying degraded performance. The data collection types are cryogenic cycles, total cycles, inlet temperature, body temperature torsional strain, linear bonnet strain, preload position, total travel and total directional changes. Events are recorded and time stamped in accordance with the IRIG B True Time. The monitoring system is designed for use in a Class 1 Division II explosive environment. The basic configuration consists of several instrumentation sensor units and a base station. The sensor units are self contained microprocessor controlled and remotely mountable in three by three by two inches. Each unit is potted in a fire retardant substance without any cavities and limited to low operating power for maintaining safe operation in a hydrogen environment. The units are temperature monitored to safeguard against operation outside temperature limitations. Each contains 902-928 MHz band digital transmitters which meet Federal Communication Commission's requirements and are limited to a 35 foot transmission radius for preserving data security. The base-station controller correlates data from the sensor units and generates data event logs on a compact flash memory module for database uploading. The entries are also broadcast over an Ethernet network. Nitrogen purged National Electrical Manufactures Association (NEMA) Class 4 enclosures are used to house the base-station

Jensen, Scott L.↗

Experiences of Member States in Building a Nuclear Security Infrastructure for New Nuclear Power Programmes

A nuclear power programme has many benefits, but it is a major undertaking that requires careful planning and preparation as well as a substantial investment in time. It also necessitates the establishment of a sustainable national infrastructure with committed and sustained financial and human resources. While nuclear power is not unique in this respect, it is different from other sources of energy because of the risks associated with the use of nuclear material, as well as the need for compliance with international legal instruments, internationally accepted nuclear safety standards, nuclear security guidance, and safeguards requirements. The IAEA’s Milestones in the Development of a National Infrastructure for Nuclear Power, IAEA Nuclear Energy Series No. NG-G-3.1 (Rev. 1), defines a phased approach that identifies 19 infrastructure issues that should be addressed in each of the three phases of the development of a nuclear infrastructure for a nuclear power programme. The publication Evaluation of the Status of National Nuclear Infrastructure Development IAEA Nuclear Energy Series NG-T-3.2 (Rev. 2) provides a methodology to determine the status of the infrastructure conditions covering all 19 issues identified in the Milestones Approach. A companion IAEA Implementing Guide, Establishing the Nuclear Security Infrastructure for a Nuclear Power Programme, IAEA Nuclear Security Series No. 19, provides guidance on the recommended actions to be taken by a State to establish an effective national nuclear security infrastructure for a nuclear power programme using the Milestones Approach. This publication is intended to provide guidance based on the experiences and good practices of Member States with embarking nuclear power programmes as well as Member States that are expanding their nuclear power programmes. The guidance is in the form of case studies, which highlight challenges, issues, and solutions identified by Member States as lessons learned for new nuclear power programmes. This TECDOC is designed to present the experiences of Member States to assist other Member States in developing a nuclear security programme. It addresses the key actions necessary to establish an effective national nuclear security infrastructure for a nuclear power programme consistent with the three phases of the IAEA Milestones Approach. The Member States that provided case studies in this document are at different stages in the development of a nuclear power programme.

42 ENGINEERING↗

ALPHANSO: Open-source modeling of (α, n) neutron source terms

Applications ranging from nuclear safeguards to dark matter detection require accurate predictions of neutron yields and energy spectra produced by (α, n) reactions. Legacy tools like SOURCES-4C remain widely used despite significant limitations, including outdated nuclear data, missing target nuclides, and restricted accessibility. Here, we present ALPHANSO, an open-source Python package for calculating (α, n) neutron source terms. ALPHANSO incorporates modern nuclear data libraries and formats covering all naturally occurring target nuclides and provides a transparent, modular framework for updating or extending the data as new evaluations are released. Comparison with an updated version of SOURCES-4A, NeuCBOT, and experimental measurements across a range of elements and materials shows that ALPHANSO reproduces neutron yields and spectra in good agreement with experimental data and state-of-the-art (α, n) calculations. These results demonstrate that ALPHANSO is a reliable, accessible, and modern alternative to legacy (α, n) source term codes such as SOURCES-4C. Its open-source design and modular data handling make it readily extensible to future evaluated nuclear data and low-background applications.

(α, n) reactions↗

Hyperspectral X-ray Imaging: Progress Towards Chemical Analysis in the SEM

The Hyperspectral X-ray Imaging (HXI) project will enable non-destructive chemical-state determination of nano-scale samples in the electron microscope for nuclear safeguards applications. To efficiently measure chemical state through electron-excited X-ray emission requires a combination of wide spectral bandwidth, high resolution, and high count rate capability. We are building a next-generation X-ray detector based on an array of transition edge sensors (TESs) to make these measurements possible and routine in the scanning electron microscope (SEM). Leveraging the large pixel densities afforded by microwave multiplexing readout and continuous, uninterrupted operation of a cryogen-free dilution refrigerator, this instrument will have efficiency to allow chemical species identification of nano-scale samples in hours instead of days to weeks. We describe prototype pixel designs for this HXI instrument, comprising three pixel types that will make up the hybrid TES array. Engineering design of the integrated HXI cryostat and SEM system is in progress, with full detector commissioning expected in Spring 2021 followed closely by full-scale integration with the SEM. Furthermore, we also report on the commissioning of a complementary TES-based X-ray emission spectroscopy platform for bulk samples to build a spectral library for HXI sample identification.

75 CONDENSED MATTER PHYSICS, SUPERCONDUCTIVITY AND↗

Xenith Scalable Security Economics

These slides present a high level overview of an ongoing project sponsored by NNSA. The project is focused on economic analysis of physical security design of micro reactors. The slides will be presented to NNSA's office of International Nuclear Security (INS) at a program update meeting on May 28th, 2025.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗

Cyber-Physical Tabletop Exercise for Small Modular Reactor Facilities

U.S. nuclear power facilities face increasing challenges in meeting dynamic security requirements caused by evolving and expanding threats while keeping costs reasonable to make nuclear energy competitive. This evolving threat landscape includes adversaries having offensive cyber capabilities to attack information technology (IT) systems and operation technology (OT) systems. These adversaries may have the ability to attack the physical protection system (PPS) networks with potential consequential impacts that could degrade the effectiveness of the PPS. These cyber attacks may also be used to attack the safety and operational systems used to operate and ensure the safety of the reactor. Additionally, adversaries may gain access to unmanned aerial systems (UAS) that may be used to provide reconnaissance and surveillance of the facility, provide information to the adversaries, and be equipped with kinetic capabilities such as explosives or weapons that can be used to directly attack the facility. The Department of Energy’s Office of Nuclear Energy’s Advanced Reactor Safeguards and Security (ARSS) program funded Sandia National Laboratories (SNL) and Idaho National Laboratory (INL) to develop a cyber-physical tabletop exercise (TTX). This exercise was conducted on a hypothetical small modular reactor (SMR) facility, and only considered a potential adversary cyber attack on the PPS to a physical attack on the hypothetical facility to achieve a radiological release. This cyber-physical TTX is meant to provide lessons learned to integrate the cyber security system design and the physical protection system (PPS) design to decrease design, operation, and maintenance costs as well as increase effectiveness for defending against design basis threat attacks at the facility. This TTX will also provide a framework and method for SMR and microreactor vendors to conduct their own cyber-physical TTX and gain impactful insights to improving the cyber and physical protection system design for their SMR or microreactor facility design.

42 ENGINEERING↗

An Introduction to Los Alamos National Laboratory [Slides]

The Weapon Systems Engineering Division (W) provides the system engineering and program management necessary to sustain the safety, reliability, and security of the Los Alamos National Laboratory’s assets in the active United States nuclear stockpile - the B61, W76, W78 and W88. The Division generates key certification data for Annual Assessment supporting the Laboratory Director's letter to the President on the health of those warheads. This role demands ongoing surveillance of the active stockpile and evaluation of the potential impact of any issues through design, engineering, fabrication, testing using state-of-the-art computational simulation tools and engineering test facilities. The Division works in close liaison with the several production facilities across the nuclear security complex as well as with the customers in the US Navy and Air Force.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Cybersecurity Enhancement in Digital Substations: Hidden Markov Model-Based Smart Cyber Switching and Threat Response

The rising incidence of cyber-attacks on critical infrastructure and power grids poses significant threats to the stability and reliability of electrical substations, with potentially devastating consequences such as extended blackouts. This paper introduces an advanced cybersecurity framework aimed at safeguarding IEC 61850-based substations through the integration of software-defined networking (SDN) and digital twin (DT) technologies. The proposed DT-based framework employs smart cyber switching (SCS) for proactive threat mitigation and concurrent intelligent electronic device (CIED) for swift system restoration, thereby maintaining continuous operational integrity and robust cybersecurity defenses. Central to this framework is the adaptive port controller (APC), which enables dynamic port management to adapt to evolving threats, and an intrusion detection system (IDS) designed to detect and neutralize malicious attacks on IEC 61850-based sampled value (SV) and generic object-oriented substation event (GOOSE) messages within the substation’s communication network. Further, novel predictive intrusion detection and response (PIDR) algorithm is implemented on a digital substation (DS) to predict the best route to be taken by the attacker. The efficacy of these comprehensive cybersecurity frameworks is validated through rigorous simulations and a hardware-in-the-loop (HIL) testbed, showcasing the system’s ability to sustain substation operations amidst cyber-attacks.

Digital substation↗

Regulatory Considerations for Domestic Reprocessing Facility Physical Security

U.S. advanced non-light-water reactor vendors may pursue collocated on-site reprocessing activities. Therefore, these facilities are likely to possess formula quantities, or Category I quantities, of special nuclear material (SNM) during normal operations. The U.S. Nuclear Regulatory Commission (U.S. NRC) has yet to formally establish a regulatory framework for commercial reprocessing. While Category I requirements would explicitly not apply in this circumstance under current regulatory requirements, regulatory certainty does not exist. A novel framework should be developed to ensure public health and safety while also risk-informing the physical security requirements. This report reviews the relevant background of related rulemaking activities and proposes risk-informed physical protection requirements to satisfy these objectives. Insights from NRC security-related rulemaking activities provide a substantial technical basis to approach potential establishment of physical security requirements for reprocessing facilities. If a licensee can provide justification that the material satisfies a sufficient self-protecting radiation dose threshold, the material may not be subject to theft or diversion requirements and only potential sabotage requirements would apply. Furthermore, if the material can be justified to be moderately dilute, a set of risk-informed requirements could provide adequate protection of public health and safety. A revised performance objective for prevention of theft of moderately dilute Category I SNM may be detection to allow prompt recovery by a local law enforcement agency. However, a significant caveat to the proposed categorization scheme is the unknown integration of radiological sabotage with requirements for the protection against theft. Future licensees should consult with the NRC regarding treatment of this regulatory topic. Additionally, the self-protecting radiation dose threshold (either the existing or a proposed future threshold) would need to be considered. An integrated approach may apply graded potential requirements for protection against the design basis threat of radiological sabotage currently applicable to commercial nuclear power plants and Category I SNM facilities defined within 10 CFR 73.1(a).

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

ARC-100 Reactor Security-by-Design Summary 2025

This report applies the security-by-design methodology developed in a previous National Nuclear Security Administration–sponsored work to the ARC-100, a sodium-cooled fast reactor (SFR) being developed by ARC Clean Technology, Inc (ARC). The report contains no proprietary information specific to the ARC 100 reactor. The insights developed in this report are high-level, and generally applicable to other sodium fast reactor designs. The information presented here is the result of a qualitative safety-based analysis and would not inform any potential adversary beyond what would be found in a docketed safety analysis report. The scope of this present report covers ARC-100’s reactor core, used fuel storage, used fuel assembly wash station, cesium trap, sodium cold trap, noble gas decay tanks, used fuel dry storage facility, damaged fuel storage facility, and radioactive waste building. These systems are also compared to a generic SFR design assumed in the previous study. The security assessment results show changes in structures, systems, and components (SSCs) safety importance relative to the generic SFR SSCs. Several SSCs have higher importance rankings than others, and it is recommended that protection efforts are prioritized for these SSCs. Results from this work will furnish a technical justification for the feasibility of these solutions for the ARC reactor's design and, where applicable, identify any regulatory benefits conferred by the proactive design aspect within a risk management framework. This initiative will contribute to a more secure design of the ARC reactor and support its licensing process.

21 - SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLAN↗

Cyber-Informed Engineering Case Study of an Integrated Hydrogen Generation Plant

Strategies for securing digital instrumentation and control (I&C) systems within the nuclear industry are provided by multiple standards and guidance documents. However, since selection and use of security controls outlined in these documents are frequently only considered during or after installation, there are often limitations on their use, such as technological constraints related to design or operation. Furthermore, alternative controls intended to provide the same or similar security countermeasure as the primary control may also be infeasible at these stages, leaving the I&C system vulnerable to cyber-attacks. The limitations associated with ‘bolting on’ security controls late in the systems engineering lifecycle can be reduced by integrating Cyber-Informed Engineering (CIE) into the process. This paper evaluates the use of CIE during the high-level design stage of a hydrogen generation project where heat and electricity are provided by a nuclear power plant. Applying CIE to this project highlighted potential cyber vulnerabilities of the initial design, leading to recommendations for process flow and I&C system design modifications to reduce, and at times eliminate, the risk from both deliberate and unintentional cyber incidents.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Avionics system design for high energy fields: A guide for the designer and airworthiness specialist

Because of the significant differences in transient susceptibility, the use of digital electronics in flight critical systems, and the reduced shielding effects of composite materials, there is a definite need to define pracitices which will minimize electromagnetic susceptibility, to investigate the operational environment, and to develop appropriate testing methods for flight critical systems. The design practices which will lead to reduced electromagnetic susceptibility of avionics systems in high energy fields is described. The levels of emission that can be anticipated from generic digital devices. It is assumed that as data processing equipment becomes an ever larger part of the avionics package, the construction methods of the data processing industry will increasingly carry over into aircraft. In Appendix 1 tentative revisions to RTCA DO-160B, Environmental Conditions and Test Procedures for Airborne Equipment, are presented. These revisions are intended to safeguard flight critical systems from the effects of high energy electromagnetic fields. A very extensive and useful bibliography on both electromagnetic compatibility and avionics issues is included.

Mcconnell, Roger A.↗

Experiments for Securing Air Traffic Against Cyber-Physical System Attacks

This presentation describes experiments conducted with single board computers to investigate methods for creating trust for enabling the development of cyber-resilient air transportation systems. Methods included secure communication to prevent unauthorized access to data, consistency of data obtained via sensors and by processing, and built-in safeguards to prevent mission failure. The motivation for this work are the following. The future air transportation system needs to ensure availability, integrity, confidentiality and safety of operations. Safety of vehicles and operations is paramount for successful integration of Urban Air Mobility (UAM), Unmanned Aerial Systems (UAS), supersonic aircraft and launch vehicles with conventional aviation operations in the National Airspace System. Security is becoming critical because the sensors, networks and computers are far more vulnerable to bad actors than their mechanical or human predecessors. The goal therefore is to design and develop cyber-resilient systems that continue to function even in degraded states. The main findings are (1) off-the-shelf hardware can support development of cyber-resilient onboard flight computers and (2) trust in system design and implementation can be accomplished by integrating layers in depth (detail) and in breadth (scope).

cyber-resilient autonomy, trust, secure communicat↗

Framework for a Digital Documented Safety Analysis

This framework is developed to progress the digital implementation of digital tools applied to the DOE authorization process, with future applications to NRC SAR development/review, to accelerate the design and review processes of advanced nuclear reactors. The engineering design and licensing process for nuclear reactors is currently burdened by a document-based approach that leads to duplications and errors due to a lack of traceability among numerous static documents. Changes to design information require labor-intensive manual tracing through these documents, creating a high potential for human error. The adoption of a digital ecosystem, utilizing a digital thread to link various aspects of project design and analysis, promises dynamic documentation generation, automatic updates, and error reduction. Model Based Definition (MBD) and Product Lifecycle Management (PLM) tools are central to this digital transformation.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Testing and Evaluation of Security Response at High-Consequence Nuclear Facilities

High-consequence nuclear facilities are required to implement a physical protection system (PPS) capable of preventing a design basis threat (DBT) adversary from completing radiological sabotage or theft of nuclear material. Response forces are a core component of the PPS. A rigorous testing and evaluation program is required to ensure that the response forces are appropriately trained and equipped and are capable of meeting the regulatory and mission requirements.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

IAEA ITC28 Project Report. 28th International Training Course on the Physical Protection of Nuclear Materials and Nuclear Facilities

Sandia National Laboratories (SNL) has hosted the International Training Course on the Physical Protection of Nuclear Materials and Nuclear Facilities since 1978. This course is the flagship training course of the International Atomic Energy Agency (IAEA). On behalf of the National Nuclear Security Administration (NNSA), SNL manages, develops, and coordinates all course materials, and works closely with the IAEA to arrange all logistical details for the course. ITC-28 incorporated several new approaches based on feedback and experience with ITC-27 and earlier versions of the course. For ITC-28, an addition to the Integrated Security Facility (ISF) at SNL was a mock reactor hall with a mock reactor pool. Other facilities at the ISF include a mock processing facility, material receiving area, and central alarm station. The physical protection system at the ISF—an area that formerly housed Category I nuclear material—provides many opportunities for hands-on, real world training in the design and evaluation of a physical protection system (PPS). This document provides a brief description of ITC-28, including a summary of lessons learned and key recommendations for future development efforts.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗