Search NASA⌕ Search

SEARCH · Search NASA

Results for “Secure Coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
DOE OSTI2017

2009.3 Revision of the Evaluated Nuclear Data Library (ENDL2009.3)

LLNL's Computational Nuclear Data and Theory Group have created a 2009.3 revised release of the Evaluated Nuclear Data Library (ENDL2009.3). This library is designed to support LLNL's current and future nuclear data needs and will be employed in nuclear reactor, nuclear security and stockpile stewardship simulations with ASC codes. The ENDL2009 database was the most complete nuclear database for Monte Carlo and deterministic transport of neutrons and charged particles. It was assembled with strong support from the ASC PEM and Attribution programs, leveraged with support from Campaign 4 and the DOE/Office of Science's US Nuclear Data Program. This document lists the revisions and fixes made in a new release called ENDL2009.3, by com- paring with the existing data in the previous release ENDL2009.2. These changes are made in conjunction with the revisions for ENDL2011.3, so that both the .3 releases are as free as possible of known defects.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2024

2011.5 Revision of the Evaluated Nuclear Data Library: ENDL2011.5 (legacy and GNDS), and ENDL2011.5-direct

LLNL’s Nuclear Data and Theory Group has created the 2011.5 revised release of the Evaluated Nuclear Data Library (ENDL2011.5). ENDL2011.5 is designed to support LLNL’s current and future nuclear data needs and will be employed in nuclear reactor, nuclear security and stockpile stewardship simulations with ASC codes. This database is currently the most complete nuclear database for Monte Carlo and deterministic transport of neutrons and charged particles. This library was assembled with strong support from the ASC PEM and Attribution programs, leveraged with support from Campaign 4 and the DOE/Office of Science’s US Nuclear Data Program. This document lists the revisions made in ENDL2011.5 compared with the data existing in the original ENDL2011.2 and ENDL2011.3 releases. These changes are made in parallel with some similar revisions for ENDL2009.5. We also describe ENDL2011.5-direct that directly uses ENDF sources wherever possible.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2024

Evaluated Nuclear Data Library, with ENDL2009.5-direct (2009.5 Rev.)

LLNL’s Nuclear Data and Theory Group have created a 2009.5 revised release of the Evaluated Nuclear Data Library (ENDL2009.5). This library is designed to support LLNL’s current and future nuclear data needs and will be employed in nuclear reactor, nuclear security and stockpile stewardship simulations with ASC codes. The ENDL2009 database was the most complete nuclear database for Monte Carlo and deterministic transport of neutrons and charged particles. It was assembled with strong support from the ASC PEM and Attribution programs, leveraged with support from Campaign 4 and the DOE/Office of Science’s US Nuclear Data Program. This document lists the revisions and fixes made in a new release called ENDL2009.5, by comparing with the existing data in the previous releases ENDL2009.3 and ENDL2009.4. In addition to the legacy library ENDL2009.5 from ENDL-format files generated by Fete, an ENDL2009.5-direct library is also released, in which ENDF6-formatted sources are used wherever possible to avoid possible translation errors from Fete.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2025

Viscosity Measurements in Extreme Conditions

Radiation-hydrodynamics simulations are critical to the NNSA complex for understanding high energy density physics and for addressing problems in national security science. However, current rad-hydro codes typically do not account for viscosity, which generally leads to large uncertainties in problems involving mixing of materials under shock loading. This report details progress made towards experimental measurements of fluid viscosity at high pressures and temperatures achieved by shock wave compression techniques, as well as complementary material model development and hydrodynamic simulations.

36 MATERIALS SCIENCE↗
DOE OSTI2025

Scale-up Unlearnable Examples Learning with High-performance Computing

Recent advancements in AI models, like ChatGPT, are structured to retain user interactions, which could inadvertently include sensitive healthcare data. In the healthcare field, particularly when radiologists use AI-driven diagnostic tools hosted on online platforms, there is a risk that medical imaging data may be repurposed for future AI training without explicit consent, spotlighting critical privacy and intellectual property concerns around healthcare data usage. Addressing these privacy challenges, a novel approach known as Unlearnable Examples (UEs) has been introduced, aiming to make data unlearnable to deep learning models. A prominent method within this area, called Unlearnable Clustering (UC), has shown improved UE performance with larger batch sizes but was previously limited by computational resources (e.g., a single workstation). To push the boundaries of UE performance with theoretically unlimited resources, we scaled up UC learning across various datasets using Distributed Data Parallel (DDP) training on the Summit supercomputer. Our goal was to examine UE efficacy at high-performance computing (HPC) levels to prevent unauthorized learning and enhance data security, particularly exploring the impact of batch size on UE’s unlearnability. Utilizing the robust computational capabilities of the Summit, extensive experiments were conducted on diverse datasets such as Pets, MedMNist, Flowers, and Flowers102. Our findings reveal that both overly large and overly small batch sizes can lead to performance instability and affect accuracy. However, the relationship between batch size and unlearnability varied across datasets, highlighting the necessity for tailored batch size strategies to achieve optimal data protection. The use of Summit’s high-performance GPUs, along with the efficiency of the DDP framework, facilitated rapid updates of model parameters and consistent training across nodes. Our results underscore the critical role of selecting appropriate batch sizes based on the specific characteristics of each dataset to prevent learning and ensure data security in deep learning applications. The source code is publicly available at https: // github. com/ hrlblab/ UE_ HPC .

Zhu, Yanfan [Vanderbilt University, Nashville, TN,↗
DOE OSTI2025

ADEPT: A Pedagogical Framework for Integrating Agentic AI with Deterministic Scientific Workflows

The integration of Large Language Models (LLMs) into scientific research promises to accelerate discovery, yet a significant gap remains between the dynamic reasoning of Artificial Intelligence (AI) agents and the static, deterministic nature of canonical scientific workflows. This paper introduces ADEPT (Agentic Discovery and Exploration Platform for Tools), a reference architecture and pedagogical framework explicitly designed to bridge this gap. ADEPT's primary mission is to provide a transparent, "glass-box" environment where researchers and engineers can learn to effectively wrap established scientific software (e.g., BLAST, Nextflow pipelines) and compose it into reliable, agent-driven workflows. We describe its modular, multi-server architecture, which leverages the Model Context Protocol (MCP) for tool serving, LangGraph for robust agentic orchestration, and a secure nsjail-based sandbox for safe code execution. By prioritizing architectural clarity, safety, and modularity, ADEPT serves as an extensible blueprint for building trustworthy AI-augmented systems and fosters the collaborative development necessary to responsibly employ agentic AI for science. We provide practical examples of how to adapt and extend this framework, highlighting its utility in workforce development and AI-readiness capabilities across research and development projects.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS1982

Random digital encryption secure communication system

The design of a secure communication system is described. A product code, formed from two pseudorandom sequences of digital bits, is used to encipher or scramble data prior to transmission. The two pseudorandom sequences are periodically changed at intervals before they have had time to repeat. One of the two sequences is transmitted continuously with the scrambled data for synchronization. In the receiver portion of the system, the incoming signal is compared with one of two locally generated pseudorandom sequences until correspondence between the sequences is obtained. At this time, the two locally generated sequences are formed into a product code which deciphers the data from the incoming signal. Provision is made to ensure synchronization of the transmitting and receiving portions of the system.

Doland, G. D.↗
DOE OSTI2018

Integrated Decision Methodology for Final Disposal of Radioactive Sources

Radioactive sources are used throughout the world, and their beneficial uses are many. Sources are at the core of many applications in different branches of industry, medicine, agriculture and research. Sources are present in a very wide range of equipment that is used for, inter alia, cancer treatment, killing bacteria in food, sterilizing medical supplies, measuring instruments such as gauges used to measure soil moisture and soil density and many other components, irradiating seeds for enhancing food production, protecting buildings from lightning strikes, mapping underground sources of water, prospecting for oil and gas reserves, measuring density of soil for construction projects, or even detecting smoke. At their “cradle” and when in use, radioactive sources are usually properly managed and controlled. It is when a source has reached the end of its useful life when they are at a higher risk of being under inadequate control, poorly managed, or even becoming orphan. Sources that have reached the end of their useful life must be carefully and safely managed. The “grave” of disused sources needs a proper disposal process to prevent them from posing a potential threat to people or the environment. To protect the public and the environment from the potential hazards of ionizing radiation, and to prevent disused sources from becoming orphan, a “cradle-to-grave” control of radioactive sources is essential, as promoted by the Code of Conduct on the Safety and Security of Radioactive Sources. This approach requires a national policy and strategy, an adequate legal and regulatory framework, and adequate resources and infrastructure. Many IAEAMember States have expressed the need for effective solutions to this challenge. There is also a gap related to the life cycle costs of potential disposal practices. This paper proposes a multi-attribute decision making methodology to compare disposal options using both economic and non-economic criteria leading to a preferred option for disposal and a strategy for final disposal of disused radioactive sources that is specific and optimized for each IAEA Member State.

Beatty, Randy↗
DOE OSTI2025

Staged Z-Pinch Modeling with Hydra and Chicago Codes (CRADA Final Report)

This was a collaborative effort between Lawrence Livermore National Security, LLC (“Contractor”), as manager and operator of Lawrence Livermore National Laboratory (“LLNL”) and Magneto Inertial Fusion Technologies, Inc. ("MIFTI" or "Participant"), to develop staged Z-pinch (SZP) modeling with HYDRA and CHICAGO codes. The contractor performed numerical simulations of the SZP to reproduce and validate Participant’s MACH2 simulations. Contractor used the state-of-the-art, radiation-magneto-hydrodynamic code HYDRA, as well as the hybrid particle-in-cell code CHICAGO. This work helped assess the physical and numerical uncertainties associated with the simulations and the overall fusion scheme. HYDRA is a well-established and validated code. This work has helped to independently assess the SZP concept to give confidence to the Participant and to the broader fusion community.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
NASA NTRS2014

IT Security Support for the Spaceport Command Control Systems Development Ground Support Development Operations

Security is one of the most if not the most important areas today. After the several attacks on the United States, security everywhere has heightened from airports to the communication among the military branches legionnaires. With advanced persistent threats (APT's) on the rise following Stuxnet, government branches and agencies are required, more than ever, to follow several standards, policies and procedures to reduce the likelihood of a breach. Attack vectors today are very advanced and are going to continue to get more and more advanced as security controls advance. This creates a need for networks and systems to be in an updated and secured state in a launch control system environment. FISMA is a law that is mandated by the government to follow when government agencies secure networks and devices. My role on this project is to ensure network devices and systems are in compliance with NIST, as outlined in FISMA. I will achieve this by providing assistance with security plan documentation and collection, system hardware and software inventory, malicious code and malware scanning, and configuration of network devices i.e. routers and IDS's/IPS's. In addition, I will be completing security assessments on software and hardware, vulnerability assessments and reporting, and conducting patch management and risk assessments. A guideline that will help with compliance with NIST is the SANS Top 20 Critical Controls. SANS Top 20 Critical Controls as well as numerous security tools, security software and the conduction of research will be used to successfully complete the tasks given to me. This will ensure compliance with FISMA and NIST, secure systems and a secured network. By the end of this project, I hope to have carried out the tasks stated above as well as gain an immense knowledge about compliance, security tools, networks and network devices, as well as policies and procedures.

security↗
DOE OSTI2019

Off-Line-of-Sight Propagation Effects on Geomagnetic EMP from High-Altitude Bursts

The three-dimensional geometry associated with off-line-of-sight gamma emission in high-altitude bursts causes delays between creation of ionization and EMP arrival along the propagation path to the ground observer. These delays make the conductivity experienced by the EMP a function of the gamma emission angle. Legacy EMP codes, such as CHAP, are one-dimensional and cannot treat this EMP arrival delay. Comparison of CHAP calculations with those using the author’s three-dimensional MACSYNC code show significant differences in amplitude and shape of the computed EMP. Thus use of CHAP appears inadvisable for National security applications of EMP relying on detailed knowledge of the field. New codes solving Maxwell’s equations in three dimensions, being developed by the EMP community, ought to be used instead.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

Universal Utility Data Exchange (UUDEX) – Security and Administration: Cybersecurity of Energy Delivery Systems (CEDS) Research and Development

A critical component of the Universal Utility Data Exchange (UUDEX) approach is the integrated security contained within its processing. This document describes how that security is designed and expected to be implemented by UUDEX Implementations (U-Implementations), including the UUDEX Server (U-Server) and UUDEX Clients (U-Clients). The UUDEX security hierarchy consists of three levels: 1. The UUDEX Instance (U-Instance) itself, which sits at the top of the hierarchy and contains the U-Server, the UUDEX Identity Authority (U-Identity Authority), and the UUDEX Administrator (U-Administrator) functions; 2. A group of one or more UUDEX Participants (U-Participants) that present “organizations” that participate in the U-Instance and contains the UUDEX Administrator Participant (U-U-Administrator Participant) function; 3. A group of one or more UUDEX Endpoints (U-Endpoints) that represent the individual UUDEX Publish Clients (U-Publish Client) responsible for supplying data to the U-Instance that is consumed by UUDEX Subscriber Clients (U-Subscriber Clients). U-Endpoints can be either autonomous devices that publish and subscribe data such as data exchange servers found in supervisory control and data acquisition and energy management systems, or they can be tied to users of applications that, for example, submit DOE OE-417 disturbance reports. U-Participants and U-Endpoints can be organized into UUDEX Groups (U-Groups). Any number of U-Participants or U-Endpoints can be members of a U-Group. A given U-Participant or U-Endpoint can be a member of multiple U-Groups, but a U-Group cannot contain other U-Groups. For example, a U-Group could be created to contain all U-Participant Transmission Operators within the purview of a Reliability Coordinator, and another U-Group could be created to contain all U-Participant Generator Operators within the purview of a Reliability Coordinator. U-Participants that are both Transmission Operators and Generator Operators would be members of both U-Groups. U-Participants, U-Endpoints, and U-Groups are used in the access control structures to provide access to individual UUDEX Subjects (U-Subjects). U-Groups are created by the U-Administrator and are managed by the U-Administrator or the designated U-Group Managers. U-Endpoints can be assigned UUDEX Roles (U-Roles) that can be used to further restrict access. U-Roles are assigned to individual U-Endpoints. For example, a U-Role of “Security Analyst” could be used to restrict which U-Endpoints can publish or subscribe security incident reports and vulnerability notifications, while a U-Role of “Transmission Planner” can be used to restrict which U-Endpoints can publish power system model updates. U-Role definitions are created by the U-Administrator, but the U-Roles are assigned to U-Endpoints by their respective UUDEX Participant Administrators (U-Participant Administrator). Because all information required to make security decisions is either included within the U-Endpoint’s X.509 digital certificate or stored in a datastore on the U-Server, all security decisions are performed and enforced within the U-Server. This reduces the complexity of the U-Client code and minimizes the chance for compromise of the integrity of the UUDEX security features.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Calendar Year 2022 Annual Monitoring Report for Technical Area IV, Evaporation Lagoons Permit DP-530 at Sandia National Laboratories/New Mexico

Pursuant to Section 20.6.2.3104 of the New Mexico Administrative Code (NMAC), the U.S. Department of Energy/National Nuclear Security Administration/Sandia Field Office (DOE/NNSA/SFO) as owner and National Technology & Engineering Solutions of Sandia, LLC (NTESS) as operator are submitting this annual monitoring and discharge report for calendar year (CY) 2022 as required in Discharge Permit 530 (DP-530), issued by the New Mexico Environment Department (NMED) for the Pulsed Power Development Facilities Evaporation Lagoons located at Sandia National Laboratories/New Mexico (SNL/NM) Technical Area IV (TA-IV).

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2026

Integrated Security-Safety Consequence Study of a Heat Pipe Reactor

This report presents a preliminary demonstration of integrated security/safety consequence modeling to support potential physical security exemption justifications under the new Title 10 Code of Federal Regulations Part 53 licensing pathway, which allows exemptions if sabotage-induced radiological consequences do not exceed 25 rem at the site boundary two hours after release without mitigative actions. A hypothetical heat pipe microreactor subjected to direct sabotage by a 150 lbs. TNT-equivalent high-explosive device was analyzed using a simplified radionuclide release estimate based on DOE-HDBK-3010-94, implemented in the MELCOR severe accident analysis code to model release transport and attenuation through reactor/building compartments, with MELCOR outputs coupled to MACCS to compute offsite doses and the distance-to-threshold metric D 25rem . Six scenarios were evaluated to examine sensitivities to release pathway/building configuration and radionuclide form (vapor versus aerosols with different size distributions). Results show a positive correlation between leak path factor and D 25rem and indicate that reactor building compartmentalization can substantially reduce consequences (a single-story configuration reduced D 25rem by roughly an order of magnitude relative to a cavity-only configuration), while vapor versus aerosol assumptions had limited impact for the modeled two-story case on the spatial grid used.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1992

Method for scrambling satellite communications

A secure communications system multiplexes segments of the information signal for keyed encoding and modulation onto a plurality of different carrier frequencies and/or polarizations, and transmits the encoded carriers to multi-channel signal summing receivers that decode the segments from all channels, to reassemble the information signal for use by authorized stations with a key. The use of the multi-channel link and the summing receiver allows the greatest number of different coding algorithms for accommodating the greatest number of discrete secure channels.

Brockman, Milton H.↗
DOE OSTI2021

Towards Improving Container Security by Preventing Runtime Escapes

Container escapes enable the adversary to execute code on the host from inside an isolated container. Notably, these high severity escape vulnerabilities originate from three sources: (1) container profile misconfigurations, (2) Linux kernel bugs, and (3) container runtime vulnerabilities. While the first two cases have been studied in the literature, no works have investigated the impact of container runtime vulnerabilities. In this paper, to fill this gap, we study 59 CVEs for 11 different container runtimes. As a result of our study, we found that five of the 11 runtimes had nine publicly available PoC container escape exploits covering 13 CVEs. Our further analysis revealed all nine exploits are the result of a host component leaked into the container. Here, we apply a user namespace container defense to prevent the adversary from leveraging leaked host components and demonstrate that the defense stops seven of the nine container escape exploits.

42 ENGINEERING↗
NASA NTRS2003

Reducing software security risk through an integrated approach research initiative model based verification of the Secure Socket Layer (SSL) Protocol

This document discusses the verification of the Secure Socket Layer (SSL) communication protocol as a demonstration of the Model Based Verification (MBV) portion of the verification instrument set being developed under the Reducing Software Security Risk (RSSR) Trough an Integrated Approach research initiative. Code Q of the National Aeronautics and Space Administration (NASA) funds this project. The NASA Goddard Independent Verification and Validation (IV&V) facility manages this research program at the NASA agency level and the Assurance Technology Program Office (ATPO) manages the research locally at the Jet Propulsion Laboratory (California institute of Technology) where the research is being carried out.

software security↗
NASA NTRS2015

Cyber Security: Big Data Think II Working Group Meeting

This presentation focuses on approaches that could be used by a data computation center to identify attacks and ensure malicious code and backdoors are identified if planted in system. The goal is to identify actionable security information from the mountain of data that flows into and out of an organization. The approaches are applicable to big data computational center and some must also use big data techniques to extract the actionable security information from the mountain of data that flows into and out of a data computational center. The briefing covers the detection of malicious delivery sites and techniques for reducing the mountain of data so that intrusion detection information can be useful, and not hidden in a plethora of false alerts. It also looks at the identification of possible unauthorized data exfiltration.

computer security↗