Search NASA⌕ Search

SEARCH · Search NASA

Results for “Secure Coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Viscosity Measurements in Extreme Conditions

Radiation-hydrodynamics simulations are critical to the NNSA complex for understanding high energy density physics and for addressing problems in national security science. However, current rad-hydro codes typically do not account for viscosity, which generally leads to large uncertainties in problems involving mixing of materials under shock loading. This report details progress made towards experimental measurements of fluid viscosity at high pressures and temperatures achieved by shock wave compression techniques, as well as complementary material model development and hydrodynamic simulations.

36 MATERIALS SCIENCE↗
DOE OSTI2025

Scale-up Unlearnable Examples Learning with High-performance Computing

Recent advancements in AI models, like ChatGPT, are structured to retain user interactions, which could inadvertently include sensitive healthcare data. In the healthcare field, particularly when radiologists use AI-driven diagnostic tools hosted on online platforms, there is a risk that medical imaging data may be repurposed for future AI training without explicit consent, spotlighting critical privacy and intellectual property concerns around healthcare data usage. Addressing these privacy challenges, a novel approach known as Unlearnable Examples (UEs) has been introduced, aiming to make data unlearnable to deep learning models. A prominent method within this area, called Unlearnable Clustering (UC), has shown improved UE performance with larger batch sizes but was previously limited by computational resources (e.g., a single workstation). To push the boundaries of UE performance with theoretically unlimited resources, we scaled up UC learning across various datasets using Distributed Data Parallel (DDP) training on the Summit supercomputer. Our goal was to examine UE efficacy at high-performance computing (HPC) levels to prevent unauthorized learning and enhance data security, particularly exploring the impact of batch size on UE’s unlearnability. Utilizing the robust computational capabilities of the Summit, extensive experiments were conducted on diverse datasets such as Pets, MedMNist, Flowers, and Flowers102. Our findings reveal that both overly large and overly small batch sizes can lead to performance instability and affect accuracy. However, the relationship between batch size and unlearnability varied across datasets, highlighting the necessity for tailored batch size strategies to achieve optimal data protection. The use of Summit’s high-performance GPUs, along with the efficiency of the DDP framework, facilitated rapid updates of model parameters and consistent training across nodes. Our results underscore the critical role of selecting appropriate batch sizes based on the specific characteristics of each dataset to prevent learning and ensure data security in deep learning applications. The source code is publicly available at https: // github. com/ hrlblab/ UE_ HPC .

Zhu, Yanfan [Vanderbilt University, Nashville, TN,↗
DOE OSTI2025

ADEPT: A Pedagogical Framework for Integrating Agentic AI with Deterministic Scientific Workflows

The integration of Large Language Models (LLMs) into scientific research promises to accelerate discovery, yet a significant gap remains between the dynamic reasoning of Artificial Intelligence (AI) agents and the static, deterministic nature of canonical scientific workflows. This paper introduces ADEPT (Agentic Discovery and Exploration Platform for Tools), a reference architecture and pedagogical framework explicitly designed to bridge this gap. ADEPT's primary mission is to provide a transparent, "glass-box" environment where researchers and engineers can learn to effectively wrap established scientific software (e.g., BLAST, Nextflow pipelines) and compose it into reliable, agent-driven workflows. We describe its modular, multi-server architecture, which leverages the Model Context Protocol (MCP) for tool serving, LangGraph for robust agentic orchestration, and a secure nsjail-based sandbox for safe code execution. By prioritizing architectural clarity, safety, and modularity, ADEPT serves as an extensible blueprint for building trustworthy AI-augmented systems and fosters the collaborative development necessary to responsibly employ agentic AI for science. We provide practical examples of how to adapt and extend this framework, highlighting its utility in workforce development and AI-readiness capabilities across research and development projects.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

Integrated Decision Methodology for Final Disposal of Radioactive Sources

Radioactive sources are used throughout the world, and their beneficial uses are many. Sources are at the core of many applications in different branches of industry, medicine, agriculture and research. Sources are present in a very wide range of equipment that is used for, inter alia, cancer treatment, killing bacteria in food, sterilizing medical supplies, measuring instruments such as gauges used to measure soil moisture and soil density and many other components, irradiating seeds for enhancing food production, protecting buildings from lightning strikes, mapping underground sources of water, prospecting for oil and gas reserves, measuring density of soil for construction projects, or even detecting smoke. At their “cradle” and when in use, radioactive sources are usually properly managed and controlled. It is when a source has reached the end of its useful life when they are at a higher risk of being under inadequate control, poorly managed, or even becoming orphan. Sources that have reached the end of their useful life must be carefully and safely managed. The “grave” of disused sources needs a proper disposal process to prevent them from posing a potential threat to people or the environment. To protect the public and the environment from the potential hazards of ionizing radiation, and to prevent disused sources from becoming orphan, a “cradle-to-grave” control of radioactive sources is essential, as promoted by the Code of Conduct on the Safety and Security of Radioactive Sources. This approach requires a national policy and strategy, an adequate legal and regulatory framework, and adequate resources and infrastructure. Many IAEAMember States have expressed the need for effective solutions to this challenge. There is also a gap related to the life cycle costs of potential disposal practices. This paper proposes a multi-attribute decision making methodology to compare disposal options using both economic and non-economic criteria leading to a preferred option for disposal and a strategy for final disposal of disused radioactive sources that is specific and optimized for each IAEA Member State.

Beatty, Randy↗
DOE OSTI2025

Staged Z-Pinch Modeling with Hydra and Chicago Codes (CRADA Final Report)

This was a collaborative effort between Lawrence Livermore National Security, LLC (“Contractor”), as manager and operator of Lawrence Livermore National Laboratory (“LLNL”) and Magneto Inertial Fusion Technologies, Inc. ("MIFTI" or "Participant"), to develop staged Z-pinch (SZP) modeling with HYDRA and CHICAGO codes. The contractor performed numerical simulations of the SZP to reproduce and validate Participant’s MACH2 simulations. Contractor used the state-of-the-art, radiation-magneto-hydrodynamic code HYDRA, as well as the hybrid particle-in-cell code CHICAGO. This work helped assess the physical and numerical uncertainties associated with the simulations and the overall fusion scheme. HYDRA is a well-established and validated code. This work has helped to independently assess the SZP concept to give confidence to the Participant and to the broader fusion community.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2019

Off-Line-of-Sight Propagation Effects on Geomagnetic EMP from High-Altitude Bursts

The three-dimensional geometry associated with off-line-of-sight gamma emission in high-altitude bursts causes delays between creation of ionization and EMP arrival along the propagation path to the ground observer. These delays make the conductivity experienced by the EMP a function of the gamma emission angle. Legacy EMP codes, such as CHAP, are one-dimensional and cannot treat this EMP arrival delay. Comparison of CHAP calculations with those using the author’s three-dimensional MACSYNC code show significant differences in amplitude and shape of the computed EMP. Thus use of CHAP appears inadvisable for National security applications of EMP relying on detailed knowledge of the field. New codes solving Maxwell’s equations in three dimensions, being developed by the EMP community, ought to be used instead.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

Universal Utility Data Exchange (UUDEX) – Security and Administration: Cybersecurity of Energy Delivery Systems (CEDS) Research and Development

A critical component of the Universal Utility Data Exchange (UUDEX) approach is the integrated security contained within its processing. This document describes how that security is designed and expected to be implemented by UUDEX Implementations (U-Implementations), including the UUDEX Server (U-Server) and UUDEX Clients (U-Clients). The UUDEX security hierarchy consists of three levels: 1. The UUDEX Instance (U-Instance) itself, which sits at the top of the hierarchy and contains the U-Server, the UUDEX Identity Authority (U-Identity Authority), and the UUDEX Administrator (U-Administrator) functions; 2. A group of one or more UUDEX Participants (U-Participants) that present “organizations” that participate in the U-Instance and contains the UUDEX Administrator Participant (U-U-Administrator Participant) function; 3. A group of one or more UUDEX Endpoints (U-Endpoints) that represent the individual UUDEX Publish Clients (U-Publish Client) responsible for supplying data to the U-Instance that is consumed by UUDEX Subscriber Clients (U-Subscriber Clients). U-Endpoints can be either autonomous devices that publish and subscribe data such as data exchange servers found in supervisory control and data acquisition and energy management systems, or they can be tied to users of applications that, for example, submit DOE OE-417 disturbance reports. U-Participants and U-Endpoints can be organized into UUDEX Groups (U-Groups). Any number of U-Participants or U-Endpoints can be members of a U-Group. A given U-Participant or U-Endpoint can be a member of multiple U-Groups, but a U-Group cannot contain other U-Groups. For example, a U-Group could be created to contain all U-Participant Transmission Operators within the purview of a Reliability Coordinator, and another U-Group could be created to contain all U-Participant Generator Operators within the purview of a Reliability Coordinator. U-Participants that are both Transmission Operators and Generator Operators would be members of both U-Groups. U-Participants, U-Endpoints, and U-Groups are used in the access control structures to provide access to individual UUDEX Subjects (U-Subjects). U-Groups are created by the U-Administrator and are managed by the U-Administrator or the designated U-Group Managers. U-Endpoints can be assigned UUDEX Roles (U-Roles) that can be used to further restrict access. U-Roles are assigned to individual U-Endpoints. For example, a U-Role of “Security Analyst” could be used to restrict which U-Endpoints can publish or subscribe security incident reports and vulnerability notifications, while a U-Role of “Transmission Planner” can be used to restrict which U-Endpoints can publish power system model updates. U-Role definitions are created by the U-Administrator, but the U-Roles are assigned to U-Endpoints by their respective UUDEX Participant Administrators (U-Participant Administrator). Because all information required to make security decisions is either included within the U-Endpoint’s X.509 digital certificate or stored in a datastore on the U-Server, all security decisions are performed and enforced within the U-Server. This reduces the complexity of the U-Client code and minimizes the chance for compromise of the integrity of the UUDEX security features.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Calendar Year 2022 Annual Monitoring Report for Technical Area IV, Evaporation Lagoons Permit DP-530 at Sandia National Laboratories/New Mexico

Pursuant to Section 20.6.2.3104 of the New Mexico Administrative Code (NMAC), the U.S. Department of Energy/National Nuclear Security Administration/Sandia Field Office (DOE/NNSA/SFO) as owner and National Technology & Engineering Solutions of Sandia, LLC (NTESS) as operator are submitting this annual monitoring and discharge report for calendar year (CY) 2022 as required in Discharge Permit 530 (DP-530), issued by the New Mexico Environment Department (NMED) for the Pulsed Power Development Facilities Evaporation Lagoons located at Sandia National Laboratories/New Mexico (SNL/NM) Technical Area IV (TA-IV).

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2026

Integrated Security-Safety Consequence Study of a Heat Pipe Reactor

This report presents a preliminary demonstration of integrated security/safety consequence modeling to support potential physical security exemption justifications under the new Title 10 Code of Federal Regulations Part 53 licensing pathway, which allows exemptions if sabotage-induced radiological consequences do not exceed 25 rem at the site boundary two hours after release without mitigative actions. A hypothetical heat pipe microreactor subjected to direct sabotage by a 150 lbs. TNT-equivalent high-explosive device was analyzed using a simplified radionuclide release estimate based on DOE-HDBK-3010-94, implemented in the MELCOR severe accident analysis code to model release transport and attenuation through reactor/building compartments, with MELCOR outputs coupled to MACCS to compute offsite doses and the distance-to-threshold metric D 25rem . Six scenarios were evaluated to examine sensitivities to release pathway/building configuration and radionuclide form (vapor versus aerosols with different size distributions). Results show a positive correlation between leak path factor and D 25rem and indicate that reactor building compartmentalization can substantially reduce consequences (a single-story configuration reduced D 25rem by roughly an order of magnitude relative to a cavity-only configuration), while vapor versus aerosol assumptions had limited impact for the modeled two-story case on the spatial grid used.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2021

Towards Improving Container Security by Preventing Runtime Escapes

Container escapes enable the adversary to execute code on the host from inside an isolated container. Notably, these high severity escape vulnerabilities originate from three sources: (1) container profile misconfigurations, (2) Linux kernel bugs, and (3) container runtime vulnerabilities. While the first two cases have been studied in the literature, no works have investigated the impact of container runtime vulnerabilities. In this paper, to fill this gap, we study 59 CVEs for 11 different container runtimes. As a result of our study, we found that five of the 11 runtimes had nine publicly available PoC container escape exploits covering 13 CVEs. Our further analysis revealed all nine exploits are the result of a host component leaked into the container. Here, we apply a user namespace container defense to prevent the adversary from leveraging leaked host components and demonstrate that the defense stops seven of the nine container escape exploits.

42 ENGINEERING↗
DOE OSTI2015

MCNP6. Simulating Correlated Data in Fission Events

This report is a series of slides discussing the MCNP6 code and its status in simulating fission. Applications of interest include global security and nuclear nonproliferation, detection of special nuclear material (SNM), passive and active interrogation techniques, and coincident neutron and photon leakage.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2017

Coding a Weather Model: DOE-FIU Science & Technology Workforce Development Program.

DOE Fellow, Andres Cremisini, completed a 10-week internship with Sandia National Laboratories (SNL) in Albuquerque, New Mexico. Under the management of Kristopher Klingler and the mentorship of Jon Bradley, he was tasked with conceiving and coding a realistic weather model for use in physical security applications. The objective was to make a weather model that could use real data to accurately predict wind and precipitation conditions at any location of interest on the globe at any user-determined time. The intern received guidance on software design, the C++ programming language and clear communication of project goals and ongoing progress. In addition, Mr. Cremisini was given license to structure the program however he best saw fit, an experience that will benefit ongoing research endeavors.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2019

Red Storm Case Study

Sandia and Cray Inc. co-developed Red Storm, a distributed memory, massively paralleled highperformance supercomputer modeled on ASCI Redl, to run computer codes used for conducting materials science simulations for national security. Supercomputers have some of the fastest highperformance systems available and are used primarily for scientific and engineering work requiring exceedingly high-speed computations. Unlike conventional computers, supercomputers have large storage capacity; more than one central processing unit to rapidly retrieve stored data and program instructions; and input/output capability.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Structural Analysis Approach for the Defense Programs Package 3 (DPP-3)

The Pacific Northwest National Laboratory (PNNL) is the design authority for a new Type B hazardous materials transportation package designated as the Defense Programs Package 3 (DPP-3) for the U.S. Department of Energy (DOE) National Nuclear Security Administration (NNSA). The DPP-3 has been developed using similar materials and fabrication methods employed in previous U.S. Nuclear Regulatory Commission (NRC), DOE, and NNSA certified packages. The DPP-3 design criteria are derived from the American Society of Mechanical Engineers (ASME) Boiler and Pressure Vessel Code (BPVC), NNSA guidance and NRC regulatory guides in order to safely and securely transport a variety of payloads. Final regulatory approval by the NNSA will require physical testing to demonstrate that the containment vessel (CV) remains leaktight after enduring the entire regulatory testing sequence prescribed in Title 10 of the Code of Federal Regulations Part 71 (10 CFR 71). In order to gain confidence that the DPP-3 will remain leaktight after testing, the DPP-3 has been structurally analyzed using the Finite Element Analysis (FEA) software LS-DYNA. The FEA analyses serve two general purposes: first, they aid in design and development of the package, and second, they advise as to which drop orientations are expected to cause the most damage during regulatory testing. This paper will discuss how the design criteria are incorporated into analytical techniques needed to evaluate the FEA structural simulation results for 10 CFR 71 conditions to give confidence the DPP-3 testing campaign will be successful.

Sakalaukus Jr., Peter J.↗
DOE OSTI2022

GABLE contract source code

Garbled Autonomous Bots Leveraging Ethereum (GABLE) uses simple but effective algorithms to permit secure private execution of garbled state machines and garbled circuits on public computing resources. This release consists of two Solidity smart contracts illustrating the GABLE approach. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525. SAND2022-7215 O

Pattengale, Nicholas↗
DOE OSTI2024

Inventory of Composable Elements (ICE) v6.0.0

The Inventory of Composable Elements (ICE) is an open source registry software platform for managing information about biological parts. It is capable of recording information about plasmids, microbial host strains and seeds, as well as DNA parts. Includes features such as DNA sequence visualization, editing and annotation, auto-aligning sequencing trace files against reference templates, SBOL XML/RDF support, and web-of-registries functionality. The web of registries functionality provides strong support for distributed interconnected use and enables sharing and transfer of biological parts across various independent ICE instances. ICE adopts modern software development principles, leveraging component-base frameworks, offering a REST API for convenient third-party integration and emphasizing scalability, security, and service integrations for dynamic content availability. The source code is hosted at https://github.com/JBEI/ice. A public instance is available at public-registry.jbei.org, where users can try out features, upload parts or simply use it for their projects.

Plahar, Hector↗
DOE OSTI2022

Generating and Analyzing Program Call Graphs using Ontology

Call graph or caller-callee relationships have been used for various kinds of static program analysis, performance analysis and profiling, and for program safety or security analysis such as detecting anomalies of program execution or code injection attacks. However, different tools generate call graphs in different formats, which prevents efficient reuse of call graph results. In this paper, we present an approach of using ontology and resource description framework (RDF) to create knowledge graphs for specifying call graphs to facilitate the construction of full-fledged and complex call graphs of computer programs, realizing more interoperable and scalable program analyses than conventional approaches. We create a formal ontology-based specification of call graph information to capture concepts and properties of both static and dynamic call graphs so different tools can collaboratively contribute to more comprehensive analysis results. Our experiments show that ontology enables merging of call graphs generated from different tools and flexible queries using a standard query interface. Index Terms—Callgraph, ontology, knowl

Dorta, E.↗