Search NASA⌕ Search

SEARCH · Search NASA

Results for “performance based security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 829 records · Page 46
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

A Data-Driven Nonparametric Approach for Probabilistic Load-Margin Assessment Considering Wind Power Penetration

A modern power system is characterized by an increasing penetration of wind power, which results in large uncertainties in its states. These uncertainties must be quantified properly; otherwise, the system security may be threatened. Facing this challenge, here we propose a cost-effective, data-driven approach to assessing a power system's load margin probabilistically. Using actual wind data, a kernel density estimator is applied to infer the nonparametric wind speed distributions, which are further merged into the framework of a vine copula. The latter enables us to simulate complex multivariate and highly dependent model inputs with a variety of bivariate copulae that precisely represent the tail dependence in the correlated samples. Furthermore, to reduce the prohibitive computational time of traditional Monte-Carlo simulations that process a large amount of samples, we propose to use a nonparametric, Gaussian-process-emulator-based reduced-order model to replace the original complicated continuation power-flow model through a Bayesian-learning framework. To accelerate the convergence rate of this Bayesian algorithm, a truncated polynomial chaos surrogate, which serves as a highly efficient, parametric Bayesian prior, is developed. This emulator allows us to execute the time-consuming continuation power-flow solver at the sampled values with a negligible computational cost. Results of simulations that are performed on several test systems reveal the impressive performance of the proposed method in the probabilistic load-margin assessment.

17 WIND ENERGY↗
DOE OSTI2023

Inventory of Public Key Cryptography in US Electric Vehicle Charging

Electric vehicles (EVs) and charging infrastructure are networked systems, which employ high-level communications in support of charging and grid service decisions. Public key cryptography (PKC) underlies much of the security and privacy protections of the information exchange. We are entering a new epoch where quantum computing threats must be seriously considered. A sufficiently large quantum computer, so named Cryptographically Relevant Quantum Computer (QRQC), will be able to perform the mathematical operations to efficiently attack the underpinnings of traditional PKC, thus jeopardizing the digital foundations for trust, communications security, and data security. Estimates suggest a QRQC can break public key encryption and digital signatures in the manner of tens to hundreds of hours, compared to traditional computing that would demand more than 10 18 years in a brute force-style attack. A consensus belief of quantum theorists, quantum experimenters, and cryptographers suggest that the quantum threat will be likely realized in the next twenty years. To address the threat, post-quantum cryptography, which is cryptosystems that are designed to be secure against both traditional and quantum computing threats, must be adopted. Migration from traditional PKC to quantum-resilient cryptography is a global undertaking and likely represents the largest transition in computing history. The nascent state of EV public key infrastructure, combined with limited adoption of the vehicle secure charging features, presents an opportunity to establish a preference for quantum-resistant cryptography as a step on the migration path. Delays will stunt the efforts as rapidly accelerating EVs sales and huge infrastructure investments will create large growing bases of long-lived vehicles and infrastructure. Migration preparations can commence while NIST continues the process to standardize post-quantum cryptography (PQC), which are quantum-resilient algorithms designed to be secure against traditional and quantum computing threats. The first step in preparing EV charging is to identify the presence of traditional public key cryptography algorithms and applications. With this objective in mind, this report is intended to advise the vehicle manufacturers, charging station manufacturers, charging station operators, charge network providers and other EV charging stakeholders with information on traditional PKC application and the potential risks when PKC becomes insecure. This report, the first in a series of reports discussing the topics existing at the confluence of post-quantum cryptography adoption and EV charging, identifies traditional public key applications employed and identifies potential consequences of leaving EV charging infrastructure vulnerable to quantum computing. The focus remains squarely on the of EV charging and infrastructure with respect to PKC and is believed by the authors to complement the NIST SP 1800-38 Migration to Post-Quantum Cryptography. While the report is centered on infrastructure, there are implications to vehicles.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2021

Demo 5: RapidClave Technology Demonstrations – Round II (Task 2)

The purpose of this project task was to make automotive composite part manufacturing more cost competitive for low volume production and thereby drive composite application innovation. The strategy was to incorporate low-cost preforming, snap cure resins, and RapidClave® processing to create an alternative to conventional automotive composite manufacturing based on SMC. The program used RapidClave® technology from Globe Machine Manufacturing, fast-curing (“snap cure”) epoxy resins from Hexion, and conformable/stretchable glass fiber reinforcement mats produced by Owens Corning for rapid preforming. O’Gara Armoring retrofits vehicles to meet special security needs, such as larger doors to facilitate easier entry into the vehicle. O’Gara has a variety of custom vehicles in need of custom doors that require affordable tooling to produce approximately 100 ship sets/year. The project focused on a composite door panel application provided by O’Gara that is currently made by manual chopped fiber spray-up processing. UDRI reverse-engineered the current composite door panel and created tooling for use in the RapidClave®. UDRI designed an improved composite door using MultiMat fiberglass reinforcement from Owens Corning. UDRI made snap cure resin films from Hexion resin. Finally, UDRI conducted molding trials to compare autoclave processing with RapidClave® processing. The technical goals of the project were to reduce tooling cost by 50% as compared to SMC compression molding and to reduce cycle time by 50% compared to current manual spray-up process. The approach to reduce tool costs is based on use of single sided tooling for use at 100 psi, as compared to matched metal SMC tooling. An added benefit realized from the program is that the Owens Corning mat provided more uniform thickness and improved performance. Tensile and flexural strengths and moduli were increased by at least 50%. This task also demonstrated a 75% decrease in cycle time. O’Gara is evaluating the technology demonstrated in this project for some of their current production. Additionally, there are new products O’Gara is pursuing which require higher production rates than their current products. O’Gara has identified these new products as good candidates for the RapidClave® technology. The cost advantages demonstrated by this project would then lead to significant economic development. In conclusion, this task successfully combined the RapidClave® technology from Globe with a snap cure epoxy resin film system from Hexion and preform material from Owens Corning. Further research is needed to better map the technical limits such as cycle time of these technologies. Additionally, the technology should be extended in terms of size and shape to include large parts outside of automotive applications, such as a small aircraft fuselage.

36 MATERIALS SCIENCE↗
DOE OSTI2024

Towards intelligent emergency control for large-scale power systems: Convergence of learning, physics, computing and control

Here, this paper has delved into the pressing need for intelligent emergency control in large-scale power systems, which are experiencing significant transformations and are operating closer to their limits with more uncertainties. Learning-based control methods are promising and have shown effectiveness for intelligent power system control. However, when they are applied to large-scale power systems, there are multifaceted challenges such as scalability, adaptiveness, and security posed by the complex power system landscape, which demand comprehensive solutions. The paper first proposes and instantiates a convergence framework for integrating power systems physics, machine learning, advanced computing, and grid control to realize intelligent grid control at a large scale. Our developed methods and platform based on the convergence framework have been applied to a large (more than 3000 buses) Texas power system, and tested with 56 000 scenarios. Our work achieved a 26% reduction in load shedding on average and outperformed existing rule-based control in 99.7% of the test scenarios. The results demonstrated the potential of the proposed convergence framework and DRL-based intelligent control for the future grid.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2019

Generative Adversarial Network for Synthetic Time Series Data Generation in Smart Grids

The availability of fine grained time series data is a pre-requisite for research in smart-grids. While data for transmission systems is relatively easily obtainable, issues related to data collection, security and privacy hinder the widespread public availability/accessibility of such datasets at the distribution system level. This has prevented the larger research community from effectively applying sophisticated machine learning algorithms to significantly improve the distribution-level accuracy of predictions and increase the efficiency of grid operations. Synthetic dataset generation has proven to be a promising solution for addressing data availability issues in various domains such as computer vision, natural language processing and medicine. However, its exploration in the smart grid context remains unsatisfactory. Previous works have tried to generate synthetic datasets by modeling the underlying system dynamics: an approach which is difficult, time consuming, error prone and often times infeasible in many problems. In this work, we propose a novel data-driven approach to synthetic dataset generation by utilizing deep generative adversarial networks (GAN) to learn the conditional probability distribution of essential features in the real dataset and generate samples based on the learned distribution. To evaluate our synthetically generated dataset, we measure the maximum mean discrepancy (MMD) between real and synthetic datasets as probability distributions, and show that their sampling distance converges. To further validate our synthetic dataset, we perform common smart grid tasks such as k-means clustering and short-term prediction on both datasets. Experimental results show the efficacy of our synthetic dataset approach: the real and synthetic datasets are indistinguishable by solely examining the output of these tasks.

14 SOLAR ENERGY↗
DOE OSTI2021

Feature Extraction: Improving Remote Sensor Classification of Non-Proliferation

This research focuses on developing algorithms for nuclear non-proliferation detection using remote sensor modeling. To improve the performance of classification models, we implemented a data pipeline with feature extraction. This pipeline takes raw data and transforms it into smaller data points called features that still describe the model. Improving this classification works towards the departments of energy’s missions of ensuring American’s security and prosperity by creating technology that addresses nuclear challenges. To conduct this analysis, we used the Python programming language and some key packages, including tsfresh and TSFEL. Originally tsfresh was selected because it has the most statistical features out of all the packages. Later TSFEL was incorporated due to the additional features it can extract from data, such as temporal and spectral. However, feature extraction becomes challenging in the presence of missing values. In this case, two additional Python packages were added to our workflow, NumPy and pandas, allowing for the feature extraction process to handle unknown values. Our data pipeline was tested on data collected from a simulation that describes the process state of a physical example. The results show the pipeline’s capability to consume and extract a total 17 features from tabular data. Future work includes producing classifications using decision tree-based models such as XGBoost and improving data collection by analyzing feature importance.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2025

Smart Contracts for Power Grid Applications Using the Advanced DLT Cyber Grid Guard Testbed

In this study is presented two power system applications with distributed ledger technology (DLT) and smart contracts (SC) that were assessed in a Cyber-Grid-Guard System (CGGS) advanced testbed, with protective relays, power meters, communication devices, DLT devices, synchronized time source, clock displays and real time simulator. This CGGS testbed was set in the Advanced Protection Lab, 252 lab space of the Grid Research Integration and Deployment Center (GRID- C), at Oak Ridge National Laboratory. In power grids, customer-owned distributed energy resources (DERs) are more frequent than in the past, and the numbers of points of interconnection (POI) with customer-owned DERs have increased. Disruptive operation from DERs presents a risk to grid operations, and protective relays located at the POI are used to isolate out-of-tolerance or poorly behaving of DERs. Ensuring the integrity of data from the relays at the POI, and DLT could enhance the security of the power grids. The first application is a SC to define and control the allowable total power factor (TPF) of the DER (wind farm) output, and the terms of the SC are implemented using DLT with a CGGS for a customer-owned DER. The TPF SC was implemented by the CGGS using DLT. The experimental model was performed with a real-time simulator using a CGGS and relay in-the-loop. The data collected from the CGGS were used to execute the TPF SC. The TPF limits were between +0.9 and +1.0, and the breakers’ operation in the POI was controlled by the relay using the SC. The events were collected from the real-time simulator, CGGS, and SEL 700GT relay to validate a successful application of the TPF SC using DLT. The second application is a SC to measure and control the allowable voltage service limits (VSL) by the CGGS using DLT. The tests were performed by using a real-time simulator, CGGS and relay in-the-loop. The data was collected from the CGGS that executed the SC. The main constraints were defined based on ANSI C84.1 service voltage limits, and the operation of the breakers in the POI. The events were collected from the CGGS, and SEL 700GT relay to assess a successful operation of the VSL SC using DLT.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2020

Distributed Intrusion Detection System using Semantic-based Rules for SCADA in Smart Grid

Cyber-physical system (CPS) security for the smart grid enables secure communication for the SCADA and wide-area measurement system data. Power utilities world-wide use various SCADA protocols, namely DNP3, Modbus, and IEC 61850, for the data exchanges across substation field devices, remote terminal units (RTUs), and control center applications. Adversaries may exploit compromised SCADA protocols for the reconnaissance, data exfiltration, vulnerability assessment, and injection of stealthy cyberattacks to affect power system operation. In this paper, we propose an efficient algorithm to generate robust rule sets. We integrate the rule sets into an intrusion detection system (IDS), which continuously monitors the DNP3 data traffic at a substation network and detects intrusions and anomalies in real-time. To enable CPS-aware wide-area situational awareness, we integrated the methodology into an open-source distributed-IDS (D-IDS) framework. The D-IDS facilitates central monitoring of the detected anomalies from the geographically distributed substations and to the control center. The proposed algorithm provides an optimal solution to detect network intrusions and abnormal behavior. Different types of IDS rules based on packet payload, packet flow, and time threshold are generated. Further, IDS testing and evaluation is performed with a set of rules in different sequences. The detection time is measured for different IDS rules, and the results are plotted. All the experiments are conducted at Power Cyber Lab, Iowa State University, for multiple power grid models. After successful testing and evaluation, knowledge and implementation are transferred to field deployment.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2013

Host Event Based Network Monitoring

The purpose of INL’s research on this project is to demonstrate the feasibility of a host event based network monitoring tool and the effects on host performance. Current host based network monitoring tools work on polling which can miss activity if it occurs between polls. Instead of polling, a tool could be developed that makes use of event APIs in the operating system to receive asynchronous notifications of network activity. Analysis and logging of these events will allow the tool to construct the complete real-time and historical network configuration of the host while the tool is running. This research focused on three major operating systems commonly used by SCADA systems: Linux, WindowsXP, and Windows7. Windows 7 offers two paths that have minimal impact on the system and should be seriously considered. First is the new Windows Event Logging API, and, second, Windows 7 offers the ALE API within WFP. Any future work should focus on these methods.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2012

Small Fast Spectrum Reactor Designs Suitable for Direct Nuclear Thermal Propulsion

Advancement of U.S. scientific, security, and economic interests through a robust space exploration program requires high performance propulsion systems to support a variety of robotic and crewed missions beyond low Earth orbit. Past studies, in particular those in support of both the Strategic Defense Initiative (SDI) and Space Exploration Initiative (SEI), have shown nuclear thermal propulsion systems provide superior performance for high mass high propulsive delta-V missions. The recent NASA Design Reference Architecture (DRA) 5.0 Study re-examined mission, payload, and transportation system requirements for a human Mars landing mission in the post-2030 timeframe. Nuclear thermal propulsion was again identified as the preferred in-space transportation system. A common nuclear thermal propulsion stage with three 25,000-lbf thrust engines was used for all primary mission maneuvers. Moderately lower thrust engines may also have important roles. In particular, lower thrust engine designs demonstrating the critical technologies that are directly extensible to other thrust levels are attractive from a ground testing perspective. An extensive nuclear thermal rocket technology development effort was conducted from 1955-1973 under the Rover/NERVA Program. Both graphite and refractory metal alloy fuel types were pursued. Reactors and engines employing graphite based fuels were designed, built and ground tested. A number of fast spectrum reactor and engine designs employing refractory metal alloy fuel types were proposed and designed, but none were built. The Small Nuclear Rocket Engine (SNRE) was the last engine design studied by the Los Alamos National Laboratory during the program. At the time, this engine was a state-of-the-art graphite based fuel design incorporating lessons learned from the very successful technology development program. The SNRE was a nominal 16,000-lbf thrust engine originally intended for unmanned applications with relatively short engine operations and the engine and stage design were constrained to fit within the payload volume of the then planned space shuttle. The SNRE core design utilized hexagonal fuel elements and hexagonal structural support elements. The total number of elements can be varied to achieve engine designs of higher or lower thrust levels. Some variation in the ratio of fuel elements to structural elements is also possible. Options for SNRE-based engine designs in the 25,000-lbf thrust range were described in a recent (2010) Joint Propulsion Conference paper. The reported designs met or exceeded the performance characteristics baselined in the DRA 5.0 Study. Lower thrust SNRE-based designs were also described in a recent (2011) Joint Propulsion Conference paper. Recent activities have included parallel evaluation and design efforts on fast spectrum engines employing refractory metal alloy fuels. These efforts include evaluation of both heritage designs from the Argonne National Laboratory (ANL) and General Electric Company GE-710 Programs as well as more recent designs. Results are presented for a number of not-yet optimized fast spectrum engine options.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2026

Two-phase flow numerical analysis of electrode geometry for alkaline water electrolyzers

Hydrogen is a promising component of a future energy-secure and efficient economy, but its competitiveness depends on reducing production costs. One strategy is to operate alkaline water electrolyzers at higher current densities to increase output. However, this intensifies performance losses due to gas bubble accumulation, which blocks transport pathways and deactivates electrochemically active surfaces. Enhancing bubble evacuation through electrode design is therefore essential. Previous studies have explored various approaches — such as modifying surface morphology, applying sonication or pressure modulation, and introducing surfactants — but these efforts have addressed a limited range of conditions due to the complexity of two-phase flow and electrode geometries. Experiments have also largely been focused on either cell level improvements, which lack the information necessary to isolate each contributing factor, or on modified geometries that are not relevant to practical cell operation. From a modeling perspective, conventional Eulerian multiphase models do not track the complex gas–liquid interfacial dynamics and often neglect surface tension and contact angle effects, reducing their predictive accuracy. To provide insights on the effects of different electrode geometries on the performance of alklaine water electrolyzers this work employs an immersed boundary volume-of-fluid method to simulate bubble behavior in 3D porous electrodes. Multiple base electrode geometries, typically used in practice, with varying porosity are evaluated under a constant surface gas generation rate. Simulation data is analyzed to quantify electrode gas coverage, bubble size dynamics and other relevant metrics. Results show that porosity strongly influences bubble accumulation on electrode surfaces, with higher porosity reducing gas coverage, and its not strictly dependent on the electrode geometry. However, the electrode’s base geometry significantly affects gas accumulation at the separator gap, independent of porosity. A foam electrode geometry resulted in the lowest gas coverage of all electrodes with a median volumetric gas coverage of 11%, but at the cost of a 70% reduction in active area compared with the largest surface area electrode, while gyroid electrodes showed the best trade-off between gas coverage, particularly at the separator surface, and electrochemically active area. In conclusion, the results highlight the need for holistic electrode design strategies.

Alkaline↗
DOE OSTI2023

Seismoacoustic Signatures Observed During a Long-Term Deployment of Infrasound Sensors at the Nevada National Security Site

Earthquakes have repeatedly been shown to produce inaudible acoustic signals (<20 Hz), otherwise known as infrasound. These signals can propagate hundreds to thousands of kilometers and still be detected by ground-based infrasound arrays depending on the source strength, distance between source and receiver, and atmospheric conditions. Another type of signal arrival at infrasound arrays is the seismic induced motion of the sensor itself, or ground-motion-induced sensor noise. Measured acoustic and seismic waves produced by earthquakes can provide insight into properties of the earthquake such as magnitude, depth, and focal mechanism, as well as information about the local lithology and atmospheric conditions. Large earthquakes that produce strong acoustic signals detected at distances greater than 100 km are the most commonly studied; however, more recent studies have found that smaller magnitude earthquakes ($M$ w <2.0) can be detected at short ranges. In that vein, this study will investigate the ability for a long-term deployment of infrasound sensors (deployed as part of the Source Physics Experiments [SPE] from 2014 to 2020) to detect both seismic and infrasonic signals from earthquakes at local ranges (<50 km). Methods used include a combination of spectral analysis and automated array processing, supported by U.S. Geological Survey earthquake bulletins. Further, this investigation revealed no clear acoustic detections for short range earthquakes. However, secondary infrasound from an $M$ w 7.1 earthquake over 200 km away was detected. Important insights were also made regarding the performance of the SPE networks including detections of other acoustic sources such as bolides and rocket launches. Finally, evaluation of the infrasound arrays is performed to provide insight into optimal deployments for targeting earthquake infrasound.

58 GEOSCIENCES↗
DOE OSTI2025

Characterization of 6 Li-loaded pulse-shape-discriminating plastic scintillators

Lithium-loaded organic plastic scintillators combine sensitivity to γ rays with the ability to detect both fast and slow neutrons, making them valuable for applications in nuclear security and in basic nuclear and particle physics. The goal of this work is to characterize the neutron response of two custom lithium-loaded organic plastic scintillators developed at Lawrence Livermore National Laboratory. Both are ternary polystyrene-based formulations containing 1.5 wt.% 6 Li salts of isobutyric acid, but they differ in their primary and secondary dye compositions: one uses m-terphenyl as the primary fluor and with Exalite 404 as the wavelength shifter, whereas the other uses 2,5-diphenyloxazole (PPO) and 9,10-diphenyl-anthracene, respectively. The temporal response of the scintillators was measured via time-correlated single photon counting for γ-ray and neutron events. The proton light yield was measured using the double time-of-flight technique from 1.3 to 15 MeV at the 88-Inch Cyclotron at Lawrence Berkeley National Laboratory. For the slow neutron response, an AmBe source moderated with polyethylene was used, and the light output from the 6 Li(n,α)t reaction was characterized. Differences in ionization quenching and temporal response were observed between the two materials with the PPO-containing scintillator exhibiting higher ionization quenching. These results provide performance benchmarks that can guide the design and optimization of future lithium-loaded plastic scintillators for use in basic science and applications.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2019

An Initial Investigation of the Design Challenges Associated with Reliable 100GigE Packet Capture

Network security researchers often rely on Emulytics TM to provide a way to evaluate the safety and security of real world systems. This work involves running a large number of virtual machines on a distributed platform to observe how software and hardware will respond to different types of attacks. While Emulytics TM software such as minimega provide a scalable system for conducting experiments, the sheer volume of network traffic produced in an experiment can easily exceed the rate at which data can be recorded for offline analysis. As such, researchers must perform live analytics, narrow their monitoring scope or accept that they must run an experiment multiple times to capture all the information they require. In support of Sandia's commitment to Emulytics TM , we are developing new storage components for the Carlin cluster that will enable researchers to capture significantly more network traffic from their experiments. This report provides a summary of Haoda Wang's initial investigation of how new AMD Epyc storage nodes can be adapted to perform packet capture at 100Gbps speeds with minimal loss. This work found that the NVMe storage capabilities of the Epyc architecture are suitable for capturing 100Gbps Ethernet traffic. While capturing traffic with existing libraries was surprisingly challenging, we were able to develop a DPDK-based software tool that recorded network traffic to disk with minimal packet loss.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Automated Data Review of Analytical Laboratory Results at Los Alamos National Laboratory - 20299

Newport News Nuclear BWXT-Los Alamos, LLC (N3B) collects samples in support of the U.S. Department of Energy's (DOE) Office of Environmental Management (EM) Los Alamos Legacy Cleanup Contract (LLCC). N3B receives and reviews over 1.6 million sample data points annually in support of various ongoing environmental monitoring and remediation projects of the LLCC. N3B must demonstrate and document that reported external analytical laboratory data produced for the LLCC are of sufficient quality to fulfill their intended purpose and to support defensible decision making as described in EPA QA/G4 Guidance for the Data Quality Objectives Process 1994. In 2018, N3B assumed management of the LLCC along with the Environmental Information Management (EIM) database that contains all historical and current environmental data associated with the LLCC. The entire EIM database is shared between N3B, Triad National Security, LLC (Triad), and New Mexico Environment Department (NMED). These three parties jointly manage the database, its configuration, and changes / updates. All environmental data that are entered into EIM are updated and available, on a daily basis, in the linked public database Intellus New Mexico (Intellus). The quality and defensibility of the environmental data generated from sampling activities is a key component of an effective remediation process. Providing quality data is accomplished through a data assessment process that includes examination, verification, and validation. Examination is the assessment of completeness of the deliverables, identification of any reporting errors, and determining the usability of the data based on the laboratory's evaluation of its data as described in the case narrative received with the data. Verification consists of an evaluation of the Electronic Data Deliverables (EDD) data report to determine the extent to which the external analytical laboratories met method and contract-specific quality control and reporting requirements. Validation consists of determining the data quality and the extent to which the external analytical laboratories accurately and completely reported all sample and quality control results and satisfied all contract requirements. EIM contains an automatic Data Validation Module which performs automated data review (DVM ADR). DVM ADR is a tool to assist in the validation process. When DVM ADR is used in conjunction with manual examination of sample data packages, the combination of the two will meet and exceed the requirements of verification. N3B recognized an opportunity for process improvement, focusing on DVM ADR configuration and enhancements in EIM. Testing EIM's configuration provided proof of the DVM ADR's capabilities and flexibility to accurately perform routine data checks based on analytical methods and regulatory requirements. In addition, the DVM ADR module was improved through enhancements for all analytes, particularly upgrades for radiochemistry data. Extensive testing of the DVM ADR module occurred using EDDs from actual laboratory analyses on the EIM testing site. During this process, N3B manipulated EDD information to verify that the actual outcomes matched the expected outcomes. The results of this testing were shared with the database architects, and configuration improvements were identified to address these results. During this process, N3B identified that the radiochemical DVM ADR capabilities were underutilized, and so enhanced the DVM ADR functionality with respect to radioanalytical assessment. N3B environmental data uploads to Intellus on a daily basis from EIM, once the analytical data undergoes examination and verification. As such, it is important to have a high level of confidence in the quality and defensibility of the data. The process of manual examination, along with the DVM ADR, in conjunction with full validation of a percentage the data specified through the Data Quality Objectives greatly increases efficiency of data review and confidence level of the quality of the data, and gives the project managers, governmental offices, and the public expedited access to high-quality data. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2025

Improving Cyber Situational Understanding

Effective cybersecurity operations require the ability to analyze large amounts of information to assess security risks and formulate defensive strategies against adversaries. This has become more complex in recent years as the sprawl and interconnectivity of devices grows through implementation of virtualization, cloud computing, and Internet of Things (IoT). The amount of data and analysis required for effective cybersecurity command and control decisions far exceeds humans’ capacity to perform manually. We characterize the analysis problem as cyber situational understanding. The research presented to improve cyber situational understanding focuses on vulnerability analysis and threat intelligence. Regarding vulnerabilities, entities must analyze and plan work for between thousands and tens of thousands of software vulnerabilities annually. Entities heavily use network firewalls to limit vulnerability exposure. As a result, some of these vulnerabilities permit exposure to adversarial exploitation, whereas others are inaccessible and therefore present negligible risk of exploitation. Distinguishing between high and low risk software vulnerabilities requires a deep understanding of the vulnerability, network firewall protection, and characteristics of the targeted device. This problem is solved by extracting network service features from vulnerability data features using both machine-learning and natural language processing. Then, the network firewall topology is parsed to determine which vulnerabilities are reachable by adversaries. Ultimately, a state-based safety analysis ascertains which vulnerabilities are unsafe. A related vulnerability analysis problem occurs in cybersecurity operations when associating an entity’s hardware and software assets to public vulnerability databases. Assets often reveal hardware and software through installation artifacts and network service identification, and entities store these artifacts in inventory databases. However, software and hardware vendors apply a standard Common Platform Enumeration (CPE) naming convention when publicly reporting vulnerabilities. Associating these two datasets often requires many hours to days of manual inspection. The proposed solution automates the mapping approach of human analysts using fuzzy matching techniques, natural language processing, and, ultimately, machine learning to present a small set of recommendations for mapping the two datasets. The result significantly reduces human analysis time and reduces the occurrence of false positives in vulnerability notifications. Finally, cyber threat intelligence (CTI) requires associating cyber observable artifacts, such as IP addresses, URIs, and file hashes, with cyber threat tactics, techniques, and procedures. Unfortunately, most CTI data is compartmentalized across multiple organizations and cannot be shared due to the legal and reputational risk with cyber threat being associated with the entity. The approach to solving this problem inovlves using a distributed ledger with anonymous token spending and authentication. This allows a consortium of semi-trusted entities to share the workload of curating CTI for a threat sharing community’s cooperative benefit.

Huff, Philip↗
DOE OSTI2018

Fast Approximate Union Volume in High Dimensions with Line Samples

The classical problem of calculating the volume of the union of d-dimensional balls is known as "Union Volume." We present line-sampling approximation algorithms for Union Volume. Our methods may be extended to other Boolean operations, such as setminus; or to other shapes, such as hyper-rectangles. The deterministic, exact approaches for Union Volume do not scale well to high dimensions. However, we adapt several of these exact approaches to approximation algorithms based on sampling. We perform local sampling within each ball using lines. We have several variations, depending on how the overlapping volume is partitioned, and depending on whether radial, axis-aligned, or other line patterns are used. Our variations fall within the family of Monte Carlo sampling, and hence have about the same theoretical convergence rate, 1 /$\sqrt{M}$, where M is the number of samples. In our limited experiments, line-sampling proved more accurate per unit work than point samples, because a line sample provides more information, and the analytic equation for a sphere makes the calculation almost as fast. We performed a limited empirical study of the efficiency of these variations. We suggest a more extensive study for future work. We speculate that different ball arrangements, differentiated by the distribution of overlaps in terms of volume and degree, will benefit the most from patterns of line samples that preferentially capture those overlaps. Acknowledgement We thank Karl Bringman for explaining his BF-ApproxUnion (ApproxUnion) algorithm [3] to us. We thank Josiah Manson for pointing out that spoke darts oversample the center and we might get a better answer by uniform sampling. We thank Vijay Natarajan for suggesting random chord sampling. The authors are grateful to Brian Adams, Keith Dalbey, and Vicente Romero for useful technical discussions. This work was sponsored by the Laboratory Directed Research and Development (LDRD) Program at Sandia National Laboratories. This material is based upon work supported by the U.S. Department of Energy, Office of Science, Office of Advanced Scientific Computing Research (ASCR), Applied Mathematics Program. Sandia National Laboratories is a multi-mission laboratory managed and operated by National Technology and Engineering Solutions of Sandia, LLC., a wholly owned subsidiary of Honeywell International, Inc., for the U.S. Department of Energy's National Nuclear Security Administration under contract DE-NA0003525.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2017

System Engineering Analysis For Improved Scout Business Information Systems

The project uses system engineering principles to address the need of Boy Scout leaders for an integrated system to facilitate advancement and awards records, leader training and planning for meetings and activities. Existing products to address needs of Scout leaders and relevant stakeholders function to support record keeping and some communication functions but opportunity exists for a better system to fully integrate these functions with training delivery and recording, activity planning along with feedback and information gathering from stakeholders. Key stakeholders for the sytem include Scouts and their families, leaders, training providers, sellers of supplies and awards, content generators and facilities that serve Scout activities. Key performance parameters for the system are protection of personal information, availability of current information, information accuracy and information content that has depth. Implementation concepts considered for the system include (1) owned and operated by Boy Scouts of America, (2) Contracted out to a vendor (3) distributed system that functions with BSA managed interfaces. The selected concept is to contract out to a vendor to maximize the likelihood of successful integration and take advantage of the best technology. Development of requirements considers three key use cases (1) System facilitates planning a hike with training needed satisfied in advance and advancement recording real time (2) Scheduling and documenting in-person training, (3) Family interested in Scouting receives information and can request follow-up. Non-functional requirements are analyzed with the Quality Function Deployment tool. Requirement addressing frequency of backup, compatibility with legacy and new technology, language support, software update are developed to address system reliability and intuitive interface. System functions analyzed include update of activity database, maintenance of advancement status, archive of documents, and monitoring of content that is accessible. The study examines risks associated with information security, technological change and continued popularity of Scouting. Mitigation is based on system functions that are defined. The approach to developing an improved system for facilitating Boy Scout leader functions was iterative with insights into capabilities coming in the course of working through the used cases and sequence diagrams.

97 MATHEMATICS AND COMPUTING↗