Search NASA⌕ Search

SEARCH · Search NASA

Results for “identifying security consequences”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

Advanced Reactor Designs Security Analysis, Risk, and Recommendations: Risks, Consequences, and Possible by-Design Mitigation Approaches Associated with Select Advanced Reactors

Next-generation advanced reactors (ARs) incorporate enhanced safety systems, have smaller source terms, and feature compact modular designs, which should lessen their collective risk profiles. However, to fully evaluate risk, security needs to be a part of the equation. Without taking security into consideration, safety systems and components in the new ARs may be vulnerable to sabotage. These base attributes, coupled with enhanced security features specific to AR design through sound engineering and security-by-design (SeBD), should provide developers and operators with lower inherent security risk profiles. Building security early into the AR design may remove or passively secure potential critical targets from an adversary’s reach , thereby increasing overall safety and security. An integrated approach and diverse design team that includes engineering, operations, and security experts are fundamental to building security into the design without sacrificing fundamental operational efficiencies and principles. The objective of this project was to evaluate the security and safety interfaces for five classes of reactors, identify potential security vulnerabilities of structures, systems, and components (SSC), and underscore the need to consider security alongside safety in the design o f these concepts. The five reactor classes evaluated in this project and presented in this report are molten-salt reactors (MSR), high temperature gas reactors (HTGR), sodium-fast reactors (SFR), advanced light-water reactors (ALWR), and microreactors. These designs were selected because they reflect the concepts that are closest to market deployment and have received significant resource investments from the public and private sector. This project assesses the inherent security risks posed by common classes of ARs, provides a methodology and framework to assess security along with safety, and offers an analysis of potential mitigation strategies that could be incorporated. For each AR technology, the SSCs that relate to radionuclide source safety functions are discussed to understand the SSC contribution to safety and relative importance in the protective strategy for the design. The assumptions that went into evaluating each reactor concept originated from generic publicly available nonproprietary information and should not directly be used to qualify an absolute risk profile nor to rank specific AR designs. Instead, the purpose of the analysis is to understand and compare the generic inherent security risks of different AR technologies.

98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗
DOE OSTI2022

Deception-Based Cyber Attacks on Hierarchical Control Systems using Domain-Aware Koopman Learning

Industrial control systems are subject to cyber attacks that produce physical consequences. These attacks can be both hard to detect and protracted. Here, we focus on deception-based sensor bias attacks made against a hierarchical control system where the attacker attempts to be stealthy. We develop a a data-driven, optimization-based attacker model and use the Koopman operator to represent the system dynamics in a domain-aware and computationally efficient manner. Using this model, we compute several different attacks against a high-fidelity commercial building emulator and compare the impacts of those attacks to each other. Finally, we discuss some computational considerations and identify avenues for future research.

koopman operator, Cyber-Physical Security, machine↗
DOE OSTI2020

How Low Can You Go? Using Synthetic 3D Imagery to Drastically Reduce Real-World Training Data for Object Detection

Deep convolutional neural networks (DCNNs) currently provide state-of-the-art performance on image classification and object detection tasks, and there are many global security mission areas where such models could be extremely useful. Crucially, the success of these models is driven in large part by the widespread availability of high-quality open source data sets such as Image Net, Common Objects in Context (COCO), and KITTI, which contain millions of images with thousands of unique labels. However, global security relevant objects-of-interest can be difficult to obtain: relevant events are low frequency and high consequence; the content of relevant images is sensitive; and adversaries and proliferators seek to obscure their activities. For these cases where exemplar data is hard to come-by, even fine-tuning an existing model with available data can be effectively impossible. Recent work demonstrated that models can be trained using a combination of real-world and synthetic images generated from 3D representations; that such models can exceed the performance of models trained using real-world data alone; and that the generated images need not be perfectly realistic (Tremblay, et al., 2018). However, this approach still required hundreds to thousands of real-world images for training and fine tuning, which for sparse, global security-relevant datasets can be an unrealistic hurdle. In this research, we validate the performance and behavior of DCNN models as we drive the number of real-world images used for training object detection tasks down to a minimal set. We perform multiple experiments to identify the best approach to train DCNNs from an extremely small set of real-world images. In doing so, we: Develop state-of-the-art, parameterized 3D models based on real-world images and sample from their parameters to increase the variance in synthetic image training data; Use machine learning explainability techniques to highlight and correct through targeted training the biases that result from training using completely synthetic images; and Validate our results by comparing the performance of the models trained on synthetic data to one another, and to a control model created by fine-tuning an existing ImageNet-trained model with a limited number (hundreds) of real-world images.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

FORESTR: Finding, Organizing, Representing, Explaining, Summarizing, and Thinning Random forests

Random forests have become popular models used for data driven predictions. As a result, random forests are currently used or being considered for high-consequence mission applications in national security, such as the prediction of yield from optical signals and malware detection. While random forests may provide accurate predictions, the complexity of the algorithm causes a lack of interpretability. Random forests are an ensemble of regression or decision trees. Individual regression and decision trees are interpretable, but ensembles are inherently difficult to interpret due to the compilation of many models. We aim to increase the interpretability of random forests by finding patterns in the ensemble of trees that can be used to “thin” (or remove) trees. As a starting point, in this report, we develop a new distance metric for quantifying the similarity between trees based on their topologies (i.e., shapes). We base the metric on a novel distance metric for graphs that is a proper mathematical distance, is invariant to transformations, has registration between graphs, and computes topological evolutions between graphs. We use the tree distance metric to compute tree statistics such as a “mean tree” and to identify clusters of trees. We apply the developed methodology to a toy dataset and a mission relevant product inspection dataset to demonstrate how the metric can provide insight into random forests. Furthermore, we discuss the limitations of the approach and ideas for future research into how the metric could be used as a thinning tool to develop less complex models.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

A critical review of cyber-physical security for building automation systems

Modern Building Automation Systems (BASs), as the brain that enable the smartness of a smart building, often require increased connectivity both among system components as well as with outside entities, such as the cloud, to enable low-cost remote management, optimized automation via outsourced cloud analytics, and increased building-grid integrations. As smart buildings move towards open communication technologies, providing access to BASs through the building's intranet, or even remotely through the Internet, has become a common practice. However, increased connectivity and accessibility come with increased cyber security threats. BASs were historically developed as closed environments with limited cyber-security considerations. As a result, BASs in many buildings are vulnerable to cyber-attacks that may cause adverse consequences, such as occupant discomfort, excessive energy usage, and unexpected equipment downtime. Therefore, there is a strong need to advance the state-of-the-art in cyber-physical security for BASs and provide practical solutions for attack mitigation in buildings. However, an inclusive and systematic review of BAS vulnerabilities, potential cyber-attacks with impact assessment, detection & defense approaches, and cyber resilient control strategies is currently lacking in the literature. This review paper fills the gap by providing a comprehensive up-to-date review of cyber-physical security for BASs at three levels in commercial buildings: management level, automation level, and field level. The general BASs vulnerabilities and protocol-specific vulnerabilities for the four dominant BAS protocols (i.e., BACnet, KNX, LonWorks, and Modbus) are reviewed, followed by a discussion on four attack targets and seven potential attack scenarios. Furthermore, the impact of cyber-attacks on BASs is summarized as signal corruption, signal delaying, and signal blocking. The typical cyber-attack detection and defense approaches are identified at the three levels. Cyber resilient control strategies for BASs under attack are categorized into passive and active resilient control schemes. Open challenges and future opportunities are finally discussed.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2018

Aviation Transportation, Cyber Threats, and Network-of-Networks: Modeling Perspectives for Translating Theory to Practice

Understanding aviation transportation infrastructure system behavior and coupling with communication networks is essential for securing and restoring functionality against cyber-enabled threats. While significant progress has been made in the past decade on developing infrastructure resilience theories based on network structure and operations, translating and generalizing them to real-world practice has often been challenging due to imperfect data and inapplicability of modeling assumptions. These typically include: 1) stylized network structures without uncertainty, 2) node homogeneity, 3) static criticality measures, and 4) unrealistic cascade models originating from single points of failure. This paper presents modeling perspectives that aim to address these theory-to-practice challenges using a well-grounded network-of-networks (NoN) construct. Real-world modeling challenges are identified and a network theory-guided conceptual NoN model is developed that may be operationalized with the U.S. national airspace system airport network (NASAN) and Federal Aviation Administration (FAA) communication network as application domain. Improving accuracy in loss of functionality estimates due to cyber events in communication networks and cascading air travel delay impacts is key for informing consequence-based decision support and risk/contingency analyses.

Bhatia, Udit↗
DOE OSTI2018

Space in 21st Century Conflict: Calibrating Risks, Tailoring Strategies (Workshop Summary)

U.S. strategic thinking on outer space security has been slow to evolve since the 1990s and the DoD finds itself struggling to develop an adaptive and cohesive strategy for the domain. Russia and China, however, have been thinking about space in a holistic and integrated way for some time. Both countries recognize that U.S. conventional strength relies heavily on technologies and systems enabled by space-based assets. Thus, holding those assets at risk represents an opportunity to asymmetrically counter America’s ability to project power. China and Russia been developing a suite of anti-satellite (ASAT) capabilities to accomplish this, to include direct-ascent weapons, space-based weapons, jammers, and cyber capabilities; both countries have also incorporated these systems into their respective tactical and strategic planning. This represents a serious threat to U.S. power projection and assurance of our regional allies and partners. Assuring the U.S.’s ability to operate in space is paramount for supporting regional security missions in both Europe and East Asia. Assuring DoD operations and capabilities in outer space, however, remains a challenge for the defense community. One solution offered by strategists is to enhance U.S. resiliency in space to turn the domain from offense dominant to defense dominant. This, they argue, can be achieved by improving space situational awareness (SSA), protecting space assets with active and passive countermeasures, disaggregating assets and leveraging new commercial space capabilities, and integrating allied space capabilities. However, many barriers remain to accomplishing these objectives. For example, some think that the classified nature of many U.S. space activities is an obstacle to deepening cooperation with commercial partners and allies. Others acknowledge the lack of a working model for incorporating cheaper, diverse, and scalable commercial space systems. Identifying where space fits into broader U.S. deterrence strategies is a subject of contention. While discussions over the past few years have focused on the practicability of deterring attacks on space assets via cross-domain threats, this line of thinking has yielded few useful insights. Consequently, defense practitioners have more recently shifted to thinking of space as part of an integrated deterrence concept, one that envisions building resiliency and defenses into our space architecture while simultaneously holding an adversary’s space-based assets at risk to enhance deterrence more broadly. However, both approaches illuminate a larger problem in the discussion of the relationship between space and deterrence: there is a lack of consensus on what it is we are trying to deter, how space fits into broader deterrence and strategic constructs, and the role of space in extended deterrence and assurance of allies. For example, is the United States’ priority to discourage attacks in space, to ensure regional power projection and alliance support capabilities, to deter broader global conflict or all of the above? Answering such questions will be an important step toward integrating space into a comprehensive defense strategy.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2026

Energy Leaders: The Catalyst for Strategic Energy Management

This study investigates the crucial role energy leaders play in driving strategic energy management (SEM) and accelerating cost savings within a manufacturing organization and consequently, the industrial sector. Whereas energy efficiency can be seen as an innovative business practice with irrefutable cost benefits, its effective implementation requires strategic leadership and a structured approach. This research analyzes data collected from 120 participants representing 71 companies attending the Energy Bootcamp events organized by the U.S. Department of Energy’s (DOE) Better Plants program. The collected data focused on the state of SEM implementation, the presence and responsibilities of energy leaders, and the formation and function of energy teams. The findings reveal a significant gap between the perceived importance of SEM and its actual adoption, highlighting the need for strong leadership to drive behavioral changes by championing energy efficiency initiatives. Results indicate that effective energy leaders possess a diverse skill set, including the ability to secure top management buy-in, foster a culture of energy consciousness, and collaborate across departments. This study emphasizes the importance of empowering energy leaders with clearly defined roles and responsibilities as well as the authority to build and lead cross-functional energy teams. Furthermore, integrating energy management into existing organizational structures and leveraging readily available resources are identified as key factors for successful implementation. This research underscores how dedicated leadership and effective SEM practices help achieve industrial energy efficiency goals, providing practical insights for organizations seeking to improve performance and contribute to a resilient future.

energy leader↗
DOE OSTI2020

Securing Vehicle Charging Infrastructure

As the US electrifies the transportation sector, cyber attacks targeting vehicle charging could bring consequences to electrical system infrastructure. This is a growing area of concern as charging stations increase power delivery and must communicate to a range of entities to authorize charging, sequence the charging process, and manage load (grid operators, vehicles, OEM vendors, charging network operators, etc.). The research challenges are numerous and are complicated because there are many end users, stakeholders, and software and equipment vendors interests involved. Poorly implemented electric vehicle supply equipment (EVSE), electric vehicle (EV), or grid communication system cybersecurity could be a significant risk to EV adoption because the political, social, and financial impact of cyberattacks - or public perception of such - ripples across the industry and has lasting and devastating effects. Unfortunately, there is no comprehensive EVSE cybersecurity approach and limited best practices have been adopted by the EV/EVSE industry. There is an incomplete industry understanding of the attack surface, interconnected assets, and unsecured interfaces. Thus, comprehensive cybersecurity recommendations founded on sound research are necessary to secure EV charging infrastructure. This project is providing the power, security, and automotive industry with a strong technical basis for securing this infrastructure by developing threat models, determining technology gaps, and identifying or developing effective countermeasures. Specifically, the team is creating a cybersecurity threat model and performing a technical risk assessment of EVSE assets, so that automotive, charging, and utility stakeholders can better protect customers, vehicles, and power systems in the face of new cyber threats.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2023

Application of multi-criteria decision analysis techniques and decision support framework for informing plant select agent designation and decision making

The United States Department of Agriculture (USDA) Division of Agricultural Select Agents and Toxins (DASAT) established a list of biological agents (Select Agents List) that threaten crops of economic importance to the United States and regulates the procedures governing containment, incident response, and the security of entities working with them. Every 2 years the USDA DASAT reviews their select agent list, utilizing assessments by subject matter experts (SMEs) to rank the agents. We explored the applicability of multi-criteria decision analysis (MCDA) techniques and a decision support framework (DSF) to support the USDA DASAT biennial review process. The evaluation includes both current and non-select agents to provide a robust assessment. We initially conducted a literature review of 16 pathogens against 9 criteria for assessing plant health and bioterrorism risk and documented the findings to support this analysis. Technical review of published data and associated scoring recommendations by pathogen-specific SMEs was found to be critical for ensuring accuracy. Scoring criteria were adopted to ensure consistency. The MCDA supported the expectation that select agents would rank high on the relative risk scale when considering the agricultural consequences of a bioterrorism attack; however, application of analytical thresholds as a basis for designating select agents led to some exceptions to current designations. A second analytical approach used agent-specific data to designate key criteria in a DSF logic tree format to identify pathogens of low concern that can be ruled out for further consideration as select agents. Both the MCDA and DSF approaches arrived at similar conclusions, suggesting the value of employing the two analytical approaches to add robustness for decision making.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2021

Real-World Driving Features for Identifying Intelligent Driver Model Parameters

Driver behavior models play a significant role in representing different driving styles and the associated relationships with traffic patterns and vehicle energy consumption in simulation studies. The models often serve as a proxy for baseline human driving when assessing energy-saving strategies that alter vehicle velocity. Such models are especially important in connectivity-enabled energy-saving strategy research because they can easily adapt to changing driving conditions like posted speed limits or change in traffic light state. While numerous driver models exist, parametric driver models provide the flexibility required to represent variability in real-world driving through different combinations of model parameters. These model parameters must be informed by a representative set of parameter values for the driver model to adequately represent a real-world driver. It stands to reason that determining the parameter values from real-world driving data would serve the purpose of representing a real-world driver. Although the published literature is replete with techniques and consequences of using real-world driving data to determine parameter values for parametric driver models, none have explored them in the context of using shorter driving features where the parameter values may change over the course of a single trip for the same driver. In this study we consider the “intelligent driver model” (IDM) as our driver behavior model and use real-world driving data from the Transportation Secure Data Center (TSDC) maintained at the National Renewable Energy Laboratory (NREL). The TSDC includes real-world travel data from across the United States, from which NREL has created a wide range of driving routes consisting of road features such as speed limits, stop locations, and turn locations. The real-world driving data are categorized into different driving regimes and extracted into driving features. The driving features are then used to calibrate the parameter values for the IDM. The distribution of the parameters and the relationships among them are reported. The insights obtained from this study enable judicious usage of IDM or similar parametric driver models to represent baseline human driver behavior in simulations.

27 ARPA - Advanced Research Projects Agency-Energy↗
DOE OSTI2021

Real-World Driving Features for Identifying Intelligent Driver Model Parameters: Preprint

Driver behavior models play a significant role in representing different driving styles and the associated relationships with traffic patterns and vehicle energy consumption in simulation studies. The models often serve as a proxy for baseline human driving when assessing energy-saving strategies that alter vehicle velocity. Such models are especially important in connectivity-enabled energy-saving strategy research because they can easily adapt to changing driving conditions like posted speed limits or change in traffic light state. While numerous driver models exist, parametric driver models provide the flexibility required to represent variability in real-world driving through different combinations of model parameters. These model parameters must be informed by a representative set of parameter values for the driver model to adequately represent a real-world driver. It stands to reason that determining the parameter values from real-world driving data would serve the purpose of representing a real-world driver. While the published literature is replete with techniques and consequences of using real-world driving data to determine parameter values for parametric driver models, none have explored them in the context of using shorter driving features where the parameter values may change over the course of a single trip for the same driver. In this study we consider the “Intelligent Driver Model” (IDM) as the driver behavior model to explore and real-world driving data from the Transportation Secure Data Center (TSDC) maintained at the National Renewable Energy Laboratory (NREL). The TSDC includes real-world travel data from across the United States, from which NREL has created a wide range of driving routes consisting of road features such as speed limits, stop locations and turn locations. The real-world driving data are categorized into different driving regimes and extracted into driving features. The driving features are then used to calibrate the parameter values for the IDM. The distribution of the parameters and the relationships among them are reported. The insights obtained from this study enable judicious usage of IDM or similar parametric driver models to represent baseline human driver behavior in simulations.

27 ARPA - Advanced Research Projects Agency-Energy↗
DOE OSTI2011

Impact of post-event avoidance behavior on commercial facilities sector venues-literature review.

The terrorist attacks of September 11, 2001 (9/11), focused a great deal of interest and concern on how individual and social perceptions of risk change behavior and subsequently affect commercial sector venues. Argonne conducted a review of the literature to identify studies that quantify the direct and indirect economic consequences of avoidance behaviors that result from terrorist attacks. Despite a growing amount of literature addressing terrorism impacts, relatively little is known about the causal relationships between risk perception, human avoidance behaviors, and the economic effects on commercial venues. Nevertheless, the technical and academic literature does provide some evidence, both directly and by inference, of the level and duration of post-event avoidance behaviors on commercial venues. Key findings are summarized in this Executive Summary. Also included as an appendix is a more detailed summary table of literature findings reproduced from the full report.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2024

Safety Basis Compliant Flexible Operations [Capstone Project]

Compliant nuclear operations must be weighed against the radiological risk to the worker, public, and the environment. This project set out to look at one facility at Los Alamos National Laboratory (LANL or the Laboratory) and compare the risk with the operational restrictions associated with the Technical Safety Requirements (TSRs). The hope was to identify controls that could be reduced or simplified while maintaining compliance with 10 CFR 830, Nuclear Safety Management. This would result in increasing facility operational flexibility and efficiency. Controls were identified to be simplified or eliminated based on risk. This identification was initially envisioned from the perspective of reanalysis of the accident and hazard analysis consequences. Additionally, it was envisioned that fire testing could show that the consequences of a fire are not as dramatic as analyzed. Specific facility controls were identified that cause operational inefficiencies. Based on data collection, two controls were identified for further evaluation. The first control was combustible loading within the waste storage buildings, and the second control is related to the seismic power cutoff switch. In evaluating the combustible loading control, the thought is that the fire suppression system (FSS) provides adequate protection and the combustible loading controls do not need elevation to a TSR control. The FSS, along with the Fire Protection Program, would provide protection to prevent a fire from impacting large amounts of stored waste material. The seismic switch was more of a challenge. When reviewing the facility operation, it was determined that the facility does not operate anywhere near the established material-at-risk (MAR – radioactive material) limits. By adjusting these limits, a reduced consequence could be achieved and hence, a significant risk reduction achieved. A new operating mode would be used to achieve this reduction. A reduced MAR limit was successfully used as a test case for snow removal during this project. This project expands on that trial case as related to combustible loading and the seismic power cutoff switch TSRs. This will increase the efficiency of operations with reduced TSR controls while reducing overall facility risk. This is a win-win situation for Triad National Security, LLC (Triad) and the U.S. Department of Energy (DOE). Due to schedule and budgetary constraints, not all envisioned work scope was accomplished. However, it is maintained in this report for future efforts.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2020

RAMSeS: Rapid Analysis of Mission Software Systems

Over the past few decades, software has become ubiquitous as it has been integrated into nearly every aspect of society, including household appliances, consumer electronics, industrial control systems, public utilities, government operations, and military systems. Consequently, many critical national security questions can no longer be answered convincingly without understanding software, including its purpose, its capabilities, its flaws, its communication, or how it processes and stores data. As software continues to become larger, more complex, and more widespread, our ability to answer important mission questions and reason about software in a timely way is falling behind. Today, to achieve such understanding of third-party software, we rely predominantly on the ability of reverse engineering experts to manually answer each particular mission question for every software system of interest. This approach often requires heroic human effort that nevertheless fails to meet current mission needs and will never scale to meet future needs. The result is an emerging crisis: a massive and expanding gap between the national security need to answer mission questions about software and our ability to do so. Sandia National Laboratories has established the Rapid Analysis of Mission Software Systems (RAMSeS) effort, a collaborative long-term effort aimed at dramatically improving our nation’s ability to answer mission questions about third-party software by growing an ecosystem of tools that augment the human reverse engineer through automation, interoperability, and reuse. Focusing on static analysis of binary programs, we are attempting to identify reusable software analysis components that advance our ability to reason about software, to automate useful aspects of the software analysis process, and to integrate new methodologies and capabilities into a working ecosystem of tools and experts. We aim to integrate existing tools where possible, adapt tools when modest modifications will enable them to interoperate, and implement missing capability when necessary. Although we do hope to automate a growing set of analysis tasks, we will approach this goal incrementally by assisting the human in an ever-widening range of tasks.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2023

Investigating the Impact of Irrigation on Malaria Vector Larval Habitats and Transmission Using a Hydrology‐Based Model

Abstract A combination of accelerated population growth and severe droughts has created pressure on food security and driven the development of irrigation schemes across sub‐Saharan Africa. Irrigation has been associated with increased malaria risk, but risk prediction remains difficult due to the heterogeneity of irrigation and the environment. While investigating transmission dynamics is helpful, malaria models cannot be applied directly in irrigated regions as they typically rely only on rainfall as a source of water to quantify larval habitats. By coupling a hydrologic model with an agent‐based malaria model for a sugarcane plantation site in Arjo, Ethiopia, we demonstrated how incorporating hydrologic processes to estimate larval habitats can affect malaria transmission. Using the coupled model, we then examined the impact of an existing irrigation scheme on malaria transmission dynamics. The inclusion of hydrologic processes increased the variability of larval habitat area by around two‐fold and resulted in reduction in malaria transmission by 60%. In addition, irrigation increased all habitat types in the dry season by up to 7.4 times. It converted temporary and semi‐permanent habitats to permanent habitats during the rainy season, which grew by about 24%. Consequently, malaria transmission was sustained all‐year round and intensified during the main transmission season, with the peak shifted forward by around 1 month. Lastly, we evaluated the spatiotemporal distribution of adult vectors under the effect of irrigation by resolving habitat heterogeneity. These findings could help larval source management by identifying transmission hotspots and prioritizing resources for malaria elimination planning.

60 APPLIED LIFE SCIENCES↗
DOE OSTI2021

Repository-Scale Performance Assessment Incorporating Postclosure Criticality

A key objective of the United States Department of Energy’s (DOE) Office of Nuclear Energy’s Spent Fuel and Waste Science and Technology Campaign is to better understand the technical basis, risks, and uncertainty associated with the safe and secure disposition of spent nuclear fuel (SNF) and high-level radioactive waste. Commercial nuclear power generation in the United States has resulted in thousands of metric tons of SNF, the disposal of which is the responsibility of the DOE (Nuclear Waste Policy Act of 1982, as amended). Any repository licensed to dispose of SNF must meet requirements regarding the long-term performance of that repository. For an evaluation of the long-term performance of the repository, one of the events that may need to be considered is the SNF achieving a critical configuration during the postclosure period. Of particular interest is the potential behavior of SNF in dual-purpose canisters (DPCs), which are currently licensed and being used to store and transport SNF but were not designed for permanent geologic disposal. A study has been initiated to examine the potential consequences, with respect to long-term repository performance, of criticality events that might occur during the postclosure period in a hypothetical repository containing DPCs. The first phase (a scoping phase) consisted of developing an approach to creating the modeling tools and techniques that may eventually be needed to either include or exclude criticality from a performance assessment (PA) as appropriate; this scoping phase is documented in Price et al. (2019a). In the second phase, that modeling approach was implemented and future work was identified, as documented in Price et al. (2019b). This report gives the results of a repository-scale PA examining the potential consequences of postclosure criticality, as well as the information, modeling tools, and techniques needed to incorporate the effects of postclosure criticality in the PA.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2022

The evolution of the Human Systems and Simulation Laboratory in nuclear power research

The events at Three Mile Island in the United States brought about fundamental changes in the ways that simulation would be used in nuclear operations. The need for research simulators was identified to scientifically study human-centered risk and make recommendations for process control system designs. This paper documents the human factors research conducted at the Human Systems and Simulation Laboratory (HSSL) since its inception in 2010 at Idaho National Laboratory. The facility’s primary purposes are to provide support to utilities for system upgrades and to validate modernized control room concepts. In the last decade, however, as nuclear industry needs have evolved, so too have the purposes of the HSSL. Thus, beyond control room modernization, human factors researchers have evaluated the security of nuclear infrastructure from cyber adversaries and evaluated human-in-the-loop simulations for joint operations with an integrated hydrogen generation plant. Lastly, our review presents research using human reliability analysis techniques with data collected from HSSL-based studies and concludes with potential future directions for the HSSL, including severe accident management and advanced control room technologies.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗