SEARCH · Search NASA

Results for “Secure Coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

All sources NASA NTRS DOE OSTI

DOE OSTI2022

ACES: Infrastructure As Code. Model Optimization and Performance Capability

Infrastructure as Code (IaC) refers to managing infrastructure (networks, physical/virtual machines, storage, and connection topology) in a descriptive model/language, rather than configuring it manually or using interactive configuration tools. Just like source code can be compiled to generate the same binary code, IaC enables generating the same environment every time it is applied. IaC is a key DevOps practice and is generally used in conjunction with continuous integration (CI) and continuous delivery (CD). In CI, all code changes are merged into a mainline branch and validated multiple times a day as developers check in their changes to the source code. In CD on the other hand, code changes are automatically packaged for a new release-to-production on a regular basis. This typically enables teams to deliver software changes much more quickly and often. Developing and managing the ACES platform using (IaC) is vital for the robust deployment and continued sustainment of this foundational computing capability. IaC and DevOps practices will help us solve many of the common challenges often encountered in developing and maintaining compute infrastructure. First, it will make the provisioning, deployment, and maintenance of the compute infrastructure across multiple environments much more efficient. Second, these processes help make the overall system much more stable by continuously testing new changes as they are introduced to the system. Third, it allows us to be much more confident of the security controls in place since they can be tested as part of the CI process and all new changes can be audited and tracked. Finally, IaC enables the ACES Platform to be adaptable to the emerging technologies due to its ability to spin up different test beds to evaluate and incorporate these technologies. This document addresses common infrastructure-management challenges, describes what happens if they are not addressed, and highlights the value of utilizing IaC to tackle them. Finally, we will provide a high-level overview of the IaC and DevOps practices being utilized by the ACES Platform team.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2023

Los Alamos National Laboratory Floodplain Assessment for the Technical Area 8 to Technical Area 22 Natural Gas Line Replacement Project

The National Nuclear Security Administration (NNSA), a semi-autonomous agency within the U.S. Department of Energy (DOE), is proposing new construction that crosses through upper Pajarito Canyon and upper Starmer Canyon from Technical Area (TA) 8 to TA-22 at Los Alamos National Laboratory (LANL). The project proposes to install a new 12 inch natural gas line to replace the existing 70+ year old natural gas line. Replacement will prevent loss of service to several LANL TAs and Bandelier National Monument. The project activities within the 100- year floodplains include 1) new natural gas line installation to replace and existing aging gas line, 2) relocating a section of fence and 3) three construction equipment and materials storage areas. NNSA has prepared this floodplain assessment in accordance with 10 Code of Federal Regulations (CFR) Part 1022 Compliance with Floodplain and Wetland Environmental Review Requirements (10 CFR Part 1022) (CFR 2003) which was promulgated to implement DOE requirements under Executive Order 11988 Floodplain Management (EO 1977). A floodplain is defined in 10 CFR 1022 as “the lowlands adjoining inland and coastal waters and relatively flat areas and flood prone areas of offshore islands,” and a base floodplain as “the 100-year floodplain, that is, a floodplain with a 1.0 percent chance of flooding in any given year (CFR 2003).” This floodplain assessment evaluates potential impacts to floodplain values and functions from implementation of the proposed action, identifies alternatives to the Proposed Action, and allows for meaningful public comment.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2017

Cymer Extreme Ultraviolet Light (EUV) Source Final Report CRADA No. TC02195.0

This was a collaborative effort between Lawrence Livermore National Security, LLC as manager and operator of Lawrence Livermore National Laboratory (LLNL) and Cymer, LLC, an ASML company to develop laser-produced plasma extreme ultraviolet (EUV) light source technology. The technical objectives of this CRADA project were to optimize the brightness of Cymer’s current EUV source, and develop future higher output power and more efficient EUV source designs to intercept and enable the semiconductor industry’s technology roadmap. Progress toward these goals is guided by Cymer based upon its ongoing EUV research and product development, accelerated through collaborative interactions between Cymer and LLNL. This research combines Cymer’s design and execution of experiments with LLNL’s modeling, simulation and analysis. Through work on these goals, the validated operating range for LLNL’s laser-plasma interaction modeling and simulation codes was expanded.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

DOE OSTI2021

Nomenclatural issues concerning cultured yeasts and other fungi: why it is important to avoid unneeded name changes

The unambiguous application of fungal names is important to communicate scientific findings. Names are critical for (clinical) diagnostics, legal compliance, and regulatory controls, such as biosafety, food security, quarantine regulations, and industrial applications. Consequently, the stability of the taxonomic system and the traceability of nomenclatural changes is crucial for a broad range of users and taxonomists. The unambiguous application of names is assured by the preservation of nomenclatural history and the physical organisms representing a name. Fungi are extremely diverse in terms of ecology, lifestyle, and methods of study. Predominantly unicellular fungi known as yeasts are usually investigated as living cultures. Methods to characterize yeasts include physiological (growth) tests and experiments to induce a sexual morph; both methods require viable cultures. Thus, the preservation and availability of viable reference cultures are important, and cultures representing reference material are cited in species descriptions. Historical surveys revealed drawbacks and inconsistencies between past practices and modern requirements as stated in the International Code of Nomenclature for Algae, Fungi, and Plants (ICNafp). Improper typification of yeasts is a common problem, resulting in a large number invalid yeast species names. With this opinion letter, we address the problem that culturable microorganisms, notably some fungi and algae, require specific provisions under the ICNafp. We use yeasts as a prominent example of fungi known from cultures. But viable type material is important not only for yeasts, but also for other cultivable Fungi that are characterized by particular morphological structures (a specific type of spores), growth properties, and secondary metabolites. We summarize potential proposals which, in our opinion, will improve the stability of fungal names, in particular by protecting those names for which the reference material can be traced back to the original isolate.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2015

Evaluation of the concrete shield compositions from the 2010 criticality accident alarm system Benchmark experiments at the CEA VALDUC silene facility - 14454

In October 2010, a series of benchmark experiments were conducted at the French Commissariat a l'energie Atomique et aux energies Alternatives (CEA) Valduc SILENE facility. These experiments were a joint effort between the United States Department of Energy Nuclear Criticality Safety Program and the CEA. The purpose of these experiments was to create three benchmarks for the verification and validation of radiation transport codes and evaluated nuclear data used in the analysis of criticality accident alarm systems. This series of experiments consisted of three single-pulsed experiments with the SILENE reactor. For the first experiment, the reactor was bare (unshielded), whereas in the second and third experiments, it was shielded by lead and polyethylene, respectively. The polyethylene shield of the third experiment had a cadmium liner on its internal and external surfaces, which vertically was located near the fuel region of SILENE. During each experiment, several neutron activation foils and thermoluminescent dosimeters (TLDs) were placed around the reactor. Nearly half of the foils and TLDs had additional high-density magnetite concrete, high-density barite concrete, standard concrete, and/or BoroBond shields. CEA Saclay provided all the concrete, and the US Y-12 National Security Complex provided the BoroBond. Measurement data from the experiments were published at the 2011 International Conference on Nuclear Criticality (ICNC 2011) and the 2013 Nuclear Criticality Safety Division (NCSD 2013) topical meeting. Preliminary computational results for the first experiment were presented in the ICNC 2011 paper, which showed poor agreement between the computational results and the measured values of the foils shielded by concrete. Recently the hydrogen content, boron content, and density of these concrete shields were further investigated within the constraints of the previously available data. New computational results for the first experiment are now available that show much better agreement with the measured values. (authors)

42 ENGINEERING↗

DOE OSTI2020

COMET/ZEUS Activation Foils Report for Irradiations IER-241 and IER-261

The goal of this work was to determine the internal neutron spectrum of the COMET/ZEUS assembly using activation foils. Similar measurements were performed on the COMET assembly when it was located at the Los Alamos Critical Experiments Facility (LACEF) at the Los Alamos National Laboratory (LANL). The present measurements were performed after the COMET assembly was moved to the National Criticality Experiments Research Center (NCERC) located in the Device Assembly Facility (DAF) at the Nevada National Security Site (NNSS). The December 2012 COMET/ZEUS irradiation was the first in a series of experiments, and the COMET/ZEUS assembly was selected because of operational readiness and authorization to run specific targets. The August 2013 irradiation was the second in the series and involved only small changes in the configuration. This report describes the unfolding of the activation foils to determine the internal neutron spectra.

07 ISOTOPE AND RADIATION SOURCES↗

DOE OSTI2015

Handbook: Collecting Groundwater Samples from Monitoring Wells in Frenchman Flat, CAU 98

Frenchman Flat basin on the Nevada National Security Site (NNSS) contains Corrective Action Unit (CAU) 98, which is comprised of ten underground nuclear test locations. Environmental management of these test locations is part of the Underground Test Area (UGTA) Activity conducted by the U.S. Department of Energy (DOE) under the Federal Facility Agreement and Consent Order (FFACO) (1996, as amended) with the U.S. Department of Defense (DOD) and the State of Nevada. A Corrective Action Decision Document (CADD)/Corrective Action Plan (CAP) has been approved for CAU 98 (DOE, 2011). The CADD/CAP reports on the Corrective Action Investigation that was conducted for the CAU, which included characterization and modeling. It also presents the recommended corrective actions to address the objective of protecting human health and the environment. The recommended corrective action alternative is “Closure in Place with Modeling, Monitoring, and Institutional Controls.” The role of monitoring is to verify that Contaminants of Concern (COCs) have not exceeded the Safe Drinking Water Act (SDWA) limits (Code of Federal Regulations, 2014) at the regulatory boundary, to ensure that institutional controls are adequate, and to monitor for changed conditions that could affect the closure conditions. The long-term closure monitoring program will be planned and implemented as part of the Closure Report stage after activities specified in the CADD/CAP are complete. Groundwater at the NNSS has been monitored for decades through a variety of programs. Current activities were recently consolidated in an NNSS Integrated Sampling Plan (DOE, 2014). Although monitoring directed by the plan is not intended to meet the FFACO long-term monitoring requirements for a CAU (which will be defined in the Closure Report), the objective to ensure public health protection is similar. It is expected that data collected in accordance with the plan will support the transition to long-term monitoring at each CAU. The sampling plan is designed to ensure that monitoring activities occur in compliance with the UGTA Quality Assurance Plan (DOE, 2012). The sampling plan should be referenced for Quality Assurance (QA) elements and procedures governing sampling activities. The NNSS Integrated Sampling Plan specifies the groundwater monitoring that will occur in CAU 98 until the long-term monitoring program is approved in the Closure Report. The plan specifies the wells that must be monitored and categorizes them by their sampling objective with the associated analytical requirements and frequency. Possible sample collection methods and required standard operating procedures are also presented. The intent of this handbook is to augment the NNSS Integrated Sampling Plan by providing well-specific details for the sampling professional implementing the Sampling Plan in CAU 98, Frenchman Flat. This handbook includes each CAU 98 well designated for sampling in the NNSS Integrated Sampling Plan. The following information is provided in the individual well sections: 1. The purpose of sampling. 2. A physical description of the well. 3. The chemical characteristics of the formation water. 4. Recommended protocols for purging and sampling. The well-specific information has been gathered from numerous historical and current sources cited in each section, but two particularly valuable resources merit special mention. These are the USGS NNSS website (http://nevada.usgs.gov/doe_nv/ntsarea5.cfm) and the UGTA Field Operations website (https://ugta.nv.doe.gov/sites/Field%20Operations/default.aspx). 2 Land surface elevation and measuring point for water level measurements in Frenchman Flat were a focus during CAU investigations (see Appendix B, Attachment 1 in Navarro-Intera, 2014). Both websites listed above provide information on the accepted datum for each well. A summary is found on the home page for the well on the USGS website. Additional information is available through a link in the “Available Data” section to an “MP diagram” with a photo annotated with the datum information. On the UGTA Field Operations well page, the same information is in the “Wellhead Diagram” link. Well RNM-2s does not have an annotated photo at this time. All of the CAU 98 monitoring wells are located within Area 5 of Frenchman Flat, with the exception of ER-11-2 in Area 11 (Figure 1). The wells are clustered in two areas: the northern area (Figure 2) and the central area (Figure 3). Each well is discussed below in geographic order from north to south as follows: ER-11-2, ER-5-3 shallow piezometer, ER-5-3-2, ER-5-5, RNM-1, RNM-2s, and UE-5n.

(1996↗

DOE OSTI2021

On the Limits of EM Based Detection of Control Logic Injection Attacks In Noisy Environments

The difficulty in applying traditional security mechanisms in Industrial Control System (ICS) environments makes a large portion of these mission-critical assets vulnerable to cyber attacks. Therefore, there is a dire need for the development of novel security mechanisms specifically designed to protect such critical systems. Recently a lot of attention has been given to mechanisms that exploit the EM emanations of devices for defense purposes. Such practices may lead to the development of robust external and non-intrusive anomaly detection systems. Nevertheless, the majority of current work in the area neglects to consider the implications of real-life environments, particularly environmental noise. In this work, we explore the limits of EM-based anomaly detection towards identifying injection attacks in control logic software in noisy environments. Our study conducted upon both synthetically generated and real signals identified that indeed environmental noise might significantly degrade the accuracy of the anomaly detection process. Experiments done upon synthetic data indicated that assuming that signals are captured with high sampling rates, even minor code injections can be detected with above-90% accuracy in noisy environments where SNR is up to -2dB. This is true even if naive detection methods are considered. Moreover, experiments done using a real-life testbed attest that even single-instruction injections can be detected with near-perfect accuracy in relatively clean environments. Finally, noise-elimination techniques can drastically improve the reliability of the detection mechanism even in noisy environments.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2016

Active Interrogation using Photofission Technique for Nuclear Materials Control and Accountability

Innovative systems with increased sensitivity and resolution are in great demand to detect diversion and to prevent misuse in support of nuclear materials management for the U.S. fuel cycle. Nuclear fission is the most important multiplicative process involved in non-destructive active interrogation. This process produces the most easily recognizable signature for nuclear materials. In addition to thermal or high-energy neutrons, high-energy gamma rays can also excite a nucleus and cause fission through a process known as photofission. Electron linear accelerators (linacs) are widely used as the interrogating photon sources for inspection methods involving photofission technique. After photofission reactions, prompt signals are much stronger than the delayed signals, but it is difficult to quantify them in practical measurements. Delayed signals are easily distinguishable from the interrogating radiation. Linac-based, advanced inspection techniques utilizing the delayed signals after photofission have been extensively studied for homeland security applications. Previous research also showed that a unique delayed gamma ray energy spectrum exists for each fissionable isotope. In this work, high-energy delayed γ-rays were demonstrated to be signatures for detection, identification, and quantification of special nuclear materials. Such γ-rays were measured in between linac pulses using independent data acquisition systems. A list-mode system was developed to measure low-energy delayed γ-rays after irradiation. Photofission product yields of 238 U and 239 Pu were determined based on the measured delayed γ-ray spectra. The differential yields of delayed γ-rays were also proven to be able to discriminate nuclear from non-nuclear materials. The measurement outcomes were compared with Monte Carlo simulation results. It was demonstrated that the current available codes have capabilities and limitations in the simulation of photofission process. A two-fold approach was used to address the high-rate challenge in used nuclear fuel assay based on photofission technique. First, a standard HPGe preamplifier was modified to improve its capabilities in high-rate pulsed photofission environment. Second, advanced pulse processing algorithms were shown to greatly improve throughput rate without large sacrifice in energy resolution at ultra-high input count rate. Two customized gamma spectroscopy systems were also developed in real-time on FPGAs. They were shown to have promising performance matching available commercial units.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2022

Experimental Steps toward a Density Law for Chlorine-Crediting Criticality Models of Aqueous Plutonium solutions

Criticality accident prevention is an essential safety consideration for all operations involving fissionable and fissile materials. Predictive criticality calculations using advanced neutron transport codes, such as Monte Carlo N-Particle Transport (MCNP), are invaluable tools for designing and implementing operational limits. While indispensable, these tools are limited by the quality and accuracy of the inputs that the user provides to define the modeled system. Parameters such as atomic composition, shape, and material density must be accurately defined to obtain a meaningful result. In the case of material property details for a plutonium model, accurate material characterization data is sometimes sparse. Thus limitations in calculation accuracy can be reduced by improving our knowledge of material properties in the targeted fissile systems. One of the biggest remaining challenges to accurately defining fissile systems is the description of aqueous fissile solutions. Even simple properties, such as density, are not well-known for fissile solutions relevant to nuclear energy and security. Described here are initial efforts undertaken to improve criticality calculation inputs for fissile plutonium chloride solutions in water. This effort is focused on experimentally determining accurate solution characteristics for ternary plutonium chloride/hydrochloric acid/water systems, by measurement of water activity and solution density. The effect of inputting experimental densities for these solutions into MCNP criticality calculations is compared to the traditional approach of modeling an idealized (and fictitious) plutonium-water mixture. Expansion of these efforts to a working density law for aqueous plutonium chloride solutions is also discussed.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

DOE OSTI2021

High Flux Isotope Reactor Low-Enriched Uranium Low Density Silicide Fuel Design Parameters

High Flux Isotope Reactor (HFIR) highly enriched uranium (HEU) to low-enriched uranium (LEU) conversion activities are ongoing as part of the Department of Energy (DOE) National Nuclear Security Administration (NNSA)’s nuclear nonproliferation mission. Design activities studying the conversion of HFIR from HEU to LEU fuel explored different fuel design features and shapes with a low density uranium-silicide dispersion (U 3 Si 2 -Al) fuel, which has a uranium density of 4.8 gU/cm 3 . The goal of these studies is to generate several HFIR LEU fuel designs of varying fuel fabrication complexity that meet the current HEU performance metrics and safety requirements. The documented designs will serve as references for fuel fabrication and qualification activities. Recent advancements in modeling and simulation tools enable quick prototyping of fuel designs. Shift, a Monte Carlo neutron transport and depletion tool optimized for high-performance computing (HPC) architectures, is used for efficient fuel cycle and performance metrics calculations. The HFIR Steady State Heat Transfer Code (HSSHTC) is used to vet the thermal safety margin. Also, a new automation tool that connects all fuel design analysis steps, named Python HFIR Analysis and Measurement Engine (PHAME), has been developed to expedite the design study in an efficient and reproducible manner. Leveraging these tools, several candidate fuel designs were selected for varying fabrication complexity. This report provides design feature details for four selected HFIR LEU low density U 3 Si 2 -Al fuel designs and their corresponding performance and safety metrics. Nominal, best-estimate design parameters and irradiation conditions, including fission rate densities, power densities, heat fluxes, and cumulative fission densities are provided for candidate fuel designs relevant to framing irradiation experiments to support fuel qualification efforts. Simulations show that the low density U 3 Si 2 -Al, with design features to enhance safety, can meet HEU core performance metrics and safety requirements if the reactor power is increased from 85 MW (HEU) to 95 MW (LEU) and if the active fuel length is increased from 50.80 cm (HEU) to 55.88 cm (LEU).

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2017

Charliecloud

Charliecloud is a set of scripts to let users run a virtual cluster of virtual machines (VMs) on a desktop or supercomputer. Key functions include: 1. Creating (typically by installing an operating system from vendor media) and updating VM images; 2. Running a single VM; 3. Running multiple VMs in a virtual cluster. The virtual machines can talk to one another over the network and (in some cases) the outside world. This is accomplished by calling external programs such as QEMU and the Virtual Distributed Ethernet (VDE) suite. The goal is to let users have a virtual cluster containing nodes where they have privileged access, while isolating that privilege within the virtual cluster so it cannot affect the physical compute resources. Host configuration enforces security; this is not included in Charliecloud, though security guidelines are included in its documentation and Charliecloud is designed to facilitate such configuration. Charliecloud manages passing information from host computers into and out of the virtual machines, such as parameters of the virtual cluster, input data specified by the user, output data from virtual compute jobs, VM console display, and network connections (e.g., SSH or X11). Parameters for the virtual cluster (number of VMs, RAM and disk per VM, etc.) are specified by the user or gathered from the environment (e.g., SLURM environment variables). Example job scripts are included. These include computation examples (such as a "hello world" MPI job) as well as performance tests. They also include a security test script to verify that the virtual cluster is appropriately sandboxed. Tests include: 1. Pinging hosts inside and outside the virtual cluster to explore connectivity; 2. Port scans (again inside and outside) to see what services are available; 3. Sniffing tests to see what traffic is visible to running VMs; 4. IP address spoofing to test network functionality in this case; 5. File access tests to make sure host access permissions are enforced. This test script is not a comprehensive scanner and does not test for specific vulnerabilities. Importantly, no information about physical hosts or network topology is included in this script (or any of Charliecloud); while part of a sensible test, such information is specified by the user when the test is run. That is, one cannot learn anything about the LANL network or computing infrastructure by examining Charliecloud code.

Priedhorsky, Reid↗

DOE OSTI2015

Charliecloud

Priedhorsky, Reid↗

DOE OSTI2016

Optimizing the Performance of Radionuclide Identification Software in the Hunt for Nuclear Security Threats

The Radionuclide Analysis Kit (RNAK), my team’s most recent nuclide identification software, is entering the testing phase. A question arises: will removing rare nuclides from the software’s library improve its overall performance? An affirmative response indicates fundamental errors in the software’s framework, while a negative response confirms the effectiveness of the software’s key machine learning algorithms. After thorough testing, I found that the performance of RNAK cannot be improved with the library choice effect, thus verifying the effectiveness of RNAK’s algorithms—multiple linear regression, Bayesian network using the Viterbi algorithm, and branch and bound search.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2020

Real-time time-dependent density functional theory in Quantum Espresso and related codes

A set of subroutines that interact with an existing computer program, Quantum Espresso (QE), that takes a set of electronic orbitals from QE and propagates them forward in time in response to a number of perturbations. These perturbations include the motion of ions and a wide spectrum of applied electromagnetic fields (e.g., static magnetic fields, slowly-varying electric fields, x-rays, etc.). From the time evolution of the electronic orbitals comes time-varying values of physical observables like the electronic charge and current densities and atomic forces. These are further post-processed to yield properties of interest like stopping powers, conductivities, and the dynamic structure factor. The electronic orbitals are described in a plane wave basis and the equations of motion are carried out using a unitary or approximately unitary time propagation algorithm. Related work will include subroutines for interfacing this capability, as well as others that already exist within QE, with a fork of QE that is more extensible and modular.SAND2019-12611 M Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy's National Nuclear Security Administration under contract DE-NA0003525.

Baczewski, Andrew↗

DOE OSTI2025

Accelerating discoveries at DIII-D with the Integrated Research Infrastructure

DIII-D research is being accelerated by leveraging high performance computing (HPC) and data resources available through the National Energy Research Scientific Computing Center (NERSC) Superfacility initiative. As part of this initiative, a high-resolution, fully automated, whole discharge kinetic equilibrium reconstruction workflow was developed that runs at the NERSC for most DIII-D shots in under 20 min. This has eliminated a long-standing research barrier and opened the door to more sophisticated analyses, including plasma transport and stability. These capabilities would benefit from being automated and executed within the larger Department of Energy Advanced Scientific Computing Research program’s Integrated Research Infrastructure (IRI) framework. The goal of IRI is to empower researchers to meld DOE’s world-class research tools, infrastructure, and user facilities seamlessly and securely in novel ways to radically accelerate discovery and innovation. For transport, we are looking at producing flux matched profiles and also using particle tracing to predict fast ion heat deposition from neutral beam injection before a shot takes place. Our starting point for evaluating plasma stability focuses on the pedestal limits that must be navigated to achieve better confinement. This information is meant to help operators run more effective experiments, so it needs to be available rapidly inside the DIII-D control room. So far this has been achieved by ensuring the data is available with existing tools, but as more novel results are produced new visualization tools must be developed. In addition, all of the high-quality data we have generated has been collected into databases that can unlock even deeper insights. This has already been leveraged for model and code validation studies as well as for developing AI/ML surrogates. The workflows developed for this project are intended to serve as prototypes that can be replicated on other experiments and can be run to provide timely and essential information for ITER, as well as next stage fusion power plants.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

DOE OSTI2025

Automated Programmable Logic Controller Memory Forensics Using RGB Image Analysis and Deep Learning

The introduction of Industry 4.0 and Internet-based technologies has enhanced industrial control system operations but have inadvertently increased their vulnerabilities to cyber attacks. When an industrial control system is compromised, security analysts need to identify the root cause quickly to start the recovery process and develop mitigation strategies. Memory forensics is critical in the incident analysis process to ascertain what occurred. Approaches for analyzing the persistent memory in industrial control devices are limited and almost nonexistent for volatile memory. This chapter proposes an automated methodology for programmable logic controller memory dump analysis using computer vision and deep learning techniques. The methodology converts the sequences of bytes in a programmable logic controller memory dump to red-green-blue pixels and employs a deep learning model that learns the underlying patterns and features of pre-labeled forensic artifacts in images and segments them into distinct regions. The trained model is employed to automatically segment new memory images and identify forensic artifacts. Evaluation of the methodology on a Schneider Electric Modicon M221 programmable logic controller under code injection and code modification attacks demonstrates its ability to detect attack artifacts in memory dumps.

Asmar Awad, Rima [ORNL] (ORCID:0000000233407742)↗

DOE OSTI2022

US Department of Energy, Office of Science High Performance Computing Facility Operational Assessment 2021: Oak Ridge Leadership Computing Facility

Oak Ridge National Laboratory’s (ORNL’s) Leadership Computing Facility (OLCF) continues to surpass its operational target goals of supporting users; delivering fast, reliable computational ecosystems; creating innovative solutions for high-performance computing (HPC) needs; contributing to the community to build the next generation HPC workforce, and managing risks, safety, and security associated with operating some of the most powerful computers in the world. The results can be seen in the cutting-edge science conducted by users and the praise from the research community. Calendar year (CY) 2021 saw continued excellence in research supported by the OLCF’s leadership-class computing resources, including Summit (the nation’s most powerful supercomputer), the global scratch file system Alpine, the Scalable Protected Infrastructure (SPI), the Exploratory Visualization Environment for Research in Science and Technology (EVEREST), and the archival mass-storage resource High-Performance Storage System (HPSS). While maintaining access and exceptional user support for Summit, the OLCF continued to make progress on the installation and deployment of Frontier, which will be the nation’s first exascale system when it comes online at the start of CY 2023. Users have already begun running and optimizing scientific codes on Crusher, the OLCF test and development system equipped with Frontier’s architecture. Throughout the year, the OLCF maintained a strong culture of operational excellence, including risk management, workplace safety, and cybersecurity. The OLCF’s rigorous risk management strategy anticipated and mitigated risks, and at this time there are no high-priority operational risks. Similarly, ORNL and the OLCF were committed to operating under the US Department of Energy’s (DOE’s) safety regulations that ensure a safe workplace. Technical staff tracked and monitored existing threats and vulnerabilities within the OLCF while continually developing tools and practices to enhance operations without increasing the facility’s risk. CY 2021 was filled with outstanding results and accomplishments, including a very high rating from users on overall satisfaction for the eighth consecutive year; a tremendous number of node hours delivered to 1,671 researchers on Summit; and the successful delivery of the allocation split of roughly 60%, 20%, and 20% of core-hours offered for the Innovative and Novel Computational Impact on Theory and Experiment (INCITE), Advanced Scientific Computing Research Leadership Computing Challenge (ALCC), and Director’s Discretionary (DD) programs, respectively (Section 2). COVID-19 research remained a focus in 2021, and the ALCC and DD programs allocated over 1 million Summit hours to the COVID-19 High Performance Computing Consortium. These accomplishments, coupled with the high utilization rates (i.e., overall and capability usage), represent the fulfillment of the promise of leadership class machines: efficient facilitation of leadership-class computational applications.

97 MATHEMATICS AND COMPUTING↗