Search NASA⌕ Search

SEARCH · Search NASA

Results for “Secure Coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Regulations, Codes, and Standards Review for Underground Hydrogen Storage

Hydrogen continues to show promise as a viable contributor to achieving energy storage goals such as energy security and decarbonization in the United States. However, many new and expanded hydrogen use applications will require identifying methods of larger-scale storage than the solutions that currently exist for smaller storage applications. One possibility is to store large quantities of gaseous hydrogen below ground level. Underground storage of other fuels such as natural gas is already currently utilized, so much of the infrastructure and basic technologies can be used as a basis for underground hydrogen storage (UHS). A few commercial UHS facilities currently exist in the United States, including salt caverns owned and operated by Air Liquide, Linde, and Conoco Philips, but UHS is still a relatively new concept that has not been widely deployed. It is necessary to understand the safety risks and hazards associated with UHS before its use can be expanded and accepted more broadly. Many of these risks are addressed through regulations, codes, and standards (RCS) issued by governing bodies and organizations with expertise in certain hazards. This report is a review of RCS documents relevant to UHS, with a particular lens on potential technical gaps in existing guidance. These gaps may be specific to the physical properties of hydrogen or due to the different technologies relevant for hydrogen vs. natural gas storage. This is meant to be a high-level review to identify relevant documents and potential gaps. Formally addressing the individual gaps identified here within the codes and standards themselves would involve a more intensive analysis and differ based on the code or standard revision processes of the various publishing organizations. Therefore, presenting specific recommendations for revising the verbiage of the documents for UHS applications is left for future work and other publications.

08 HYDROGEN↗
DOE OSTI2025

Helical Photonic Metamaterials for Encrypted Chiral Holograms

Helical structures are among the most quintessential three-dimensional (3D) forms that exhibit mirror asymmetry, a hallmark of chirality. Various structural parameters of helices directly linked to chiroptical properties highlight their importance as essential optical metamaterials for polarization-resolved sensors, imaging, and spectroscopies. However, such function-defining properties remain incompletely understood due to fabrication challenges and the lack of a relationship between structure and optical properties. Here, helical structures are analyzed parametrically, and correlations are established that are applicable to the design of chiral helical optical metamaterials. By systematically varying independent parameters—such as from single-turn to five-turn helices and from small major radii to larger ones optimized to fit the unit cell—the underlying relationships with ellipticty are revealed. In addition to theoretical modeling, the findings are experimentally validated using 3D printing and terahertz spectroscopy. The results demonstrate that optimized helical structures are mechanically tunable and exhibit unprecedented optical properties, including broadband and high-magnitude ellipticity spectra. Being embedded in soft elastomers, helical arrays can serve as soft, stretchable optical-mechanical sensors and holograms containing encoded information, such as barcodes and quick response (QR) codes. Chiral QR codes are realized using pixelated single helices with different handedness, demonstrating their potential as advanced encryption/decryption systems for security applications and chiral metaholograms.

Encrypted QR codes↗
DOE OSTI2022

Hazardous Waste Management Progress Report [SB14]

The Department of Energy (DOE) is the owner and part operator of multiple facilities in Northern California. The facilities include those located at Lawrence Livermore National Laboratory (LLNL), Lawrence Berkeley National Laboratory (LBNL), Sandia National Laboratories/California (SNL/CA) and SLAC National Accelerator Laboratory (SLAC) among other sites. Through their operations, the facilities generate hazardous waste and, thereby, are subject to the requirements of Chapter 31 of the Title 22 California Code of Regulations, Waste Minimization. The Northern California sites are primarily research and development facilities in the areas relating to national security, high-energy physics, engineering, bioscience and environmental health and safety disciplines. As mentioned above these DOE facilities are primarily research and development facilities. The hazardous wastes generated may be associated with operations that range in size from small, bench scale R&D to major maintenance and operations waste streams. Therefore, even though this document breaks down the waste streams based on California Waste Codes (CWC), the quantities of waste within one waste code category could be from many different locations and dissimilar processes. Because of the nature of the work at the sites, it is not economically feasible to try to implement source reduction measures for every process that generates a portion of the waste stream. This document identifies the processes that generate the major portion of the waste within an identified major waste stream and reports on progress made toward source reduction. In accomplishing the mission, it is DOE’s goal to eliminate waste generation and emissions giving priority to those that may present the greatest risk to human health and the environment.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2022

TOSS STIG

LLNL HPC systems run a custom version of RedHat's RHEL operating system known as TOSS. In 2022, after working with DISA, Livermore Computing staff completed the STIG (Security Technical Implementation Guide) for the TOSS 4 operating system. This software project contains the source code associated with that STIG and implements checks and remediations for configuring a system in compliance with that STIG.

Lee, Ian↗
DOE OSTI2018

Nevada National Security Site Radiological Control Manual

This manual contains the radiological control requirements to be used for all radiological activities conducted by programs under the purview of the U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO). (Activities conducted under the purview of the U.S. Department of Energy, Office of Environmental Management Nevada[(EM Nevada] may require additional approval authorities as described in the EM Nevada Prime Contractor’s implementation plan.) Compliance with these requirements will ensure compliance with Title 10 Code of Federal Regulations (CFR) Part 835, “Occupational Radiation Protection.” This manual represents policies, guidelines, and best practices for implementing the DOE/NV/03624--0082, “Nevada National Security Site Radiation Protection Program,” (NNSS RPP) according to the requirements of 10 CFR 835.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2022

Nevada National Security Site Radiological Control Manual

Please have this STIP assigned, documented, and recorded in OSTI as Report Number DOE/NV/03624--0257 Revision 1 and Author as Radiological Control Managers' Council. This manual contains the radiological control requirements to be used for all radiological activities conducted by programs under the purview of the U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO). (Activities conducted under the purview of the U.S. Department of Energy, Office of Environmental Management Nevada[(EM Nevada] may require additional approval authorities as described in the EM Nevada Prime Contractor’s implementation plan.) Compliance with these requirements will ensure compliance with Title 10 Code of Federal Regulations (CFR) Part 835, “Occupational Radiation Protection.” This manual represents policies, guidelines, and best practices for implementing the DOE/NV/03624--0082, “Nevada National Security Site Radiation Protection Program,” (NNSS RPP) according to the requirements of 10 CFR 835.

61 RADIATION PROTECTION AND DOSIMETRY↗
DOE OSTI2018

Electronic Medical Record Integration for Streamlined DXA Reporting

Dual-energy X-ray absorptiometry (DXA) is the most frequently performed examination to assess bone mineral density in clinical practice. Aside from images and graphical displays, many numerical values are part of DXA reports. These values are typically manually entered into the formal report through the electronic medical record or PACS workstation. The process takes time and is prone to errors. Exporting the DXA numerical data via HL7 engine to the electronic medical record was proposed to improve reporting efficiency and accuracy. The output from the DXA unit computer was reconfigured to export the report content via the HL7 interface engine into the electronic medical record. Radiology interpretive reporting was subsequently done directly in the electronic medical record. In the evaluation of errors, 100 preliminary DXA reports before the change and 100 after the change were examined. These reports were analyzed for errors that included decimal change, number transposition, negative number issue, other incorrect number error, and failure to include prior exam for comparison. In addition, report turnaround times were evaluated before and after the changes were made. Reporting time evaluations included 1-year volume prior to change (3915 reports) and 1 month post-change (206 reports). Of 100 DEXA exams before the change, 15 final reports contained 25 numerical errors. After the change, no numerical errors in the reports were identified. Exam end to final report time decreased from 2159 to 625 min on average. Automating data transmittal from the DXA modality for report generation improves accuracy and turnaround time. This approach did not require any third party software, and healthcare information security concerns were negated since we are using our standard workstations. Secondary to the affordability and applicability to the large percentage of the population using electronic medical record systems, this type of automated workflow is recommended.

62 RADIOLOGY AND NUCLEAR MEDICINE↗
DOE OSTI2026

Evaluation of Real-Time Mitigation Techniques forCyber Security in IEC 61850 / IEC 62351Substations

This paper presents the design logic and implementation aspects of three potential real-time mitigation techniques capable of countering GOOSE-based attacks: (i) IEC 62351-compliant message authentication code (MAC) scheme, (ii) a semantics-enforced rule- based intrusion detection system (IDS), and (iii) a hybrid approach integrating both MAC verification and Intrusion Detection System (IDS). A comparative evaluation of these real-time mitigation approaches is conducted using a cyber-physical system(CPS) security testbed. The results show that the hybrid integration significantly enhances mitigation capability. Furthermore, the processing delays of all three methods remain within the strict delivery requirements of GOOSE communication. The study also identifies limitations that none of the techniques can fully address, highlighting areas for future work.

Liu, Chen-Ching [Virginia Polytechnic Inst. and St↗
DOE OSTI2022

Real-time Implementation of Grid Code Compliant Grid Edge Energy Management System

Integrated distributed energy resources (DER) in a distribution system need to follow grid codes to avoid violations that result in DER/circuit segment disconnection. To comply with grid code requirements at the grid edge level, network constrained grid edge energy management system (EMS) can be deployed. The objective of grid edge EMS is to provide economic solution for active and reactive power DER setpoints at each dispatch interval and ensure voltage regulation to support secure interconnection of the grid edge segment to the distribution system with multiple inverter based DER units. In this work, real-time simulation of grid code compliant grid edge EMS is deployed in a realistic feeder circuit segment. For real-time simulation, communication between the grid edge EMS and DERs is done exploiting IEC 61850-7-420. It enables interoperability among different DERs and grid edge EMS. No prior art has deployed IEC 61850-7-420 GOOSE communication protocol for grid edge EMS. Conversion of IEC 61850 GOOSE messages to Modbus communication protocol is also performed to communicate with grid edge EMS in commodity-off the shelf embedded boards in this work. The real-time simulation in OPAL-RT real-time digital simulator shows the out-performance of grid edge EMS by reducing the voltage violation in the distribution circuit.

Energy management system↗
DOE OSTI2021

Area 6 Control Point: An Architectural Survey of the Area 6 Control Point, Nevada National Security Site, Nye County, Nevada

The U.S. Department of Energy (DOE), National Nuclear Security Administration Nevada Field Office (NNSA/NFO) proposes to demolish five buildings and five accessory resources in the Area 6 Control Point at the Nevada National Security Site (NNSS) in Nye County, Nevada. The demolition and removal of the buildings and accessories constitute an undertaking subject to review under Section 106 of the National Historic Preservation Act (NHPA) (54 United States Code [USC] § 306101) and its implementing regulations, 36 Code of Federal Regulations (CFR) Part 800. The buildings and accessories were recorded in Identification and Evaluation of 14 Architectural Resources Scheduled for Demolition, Area 6 Control Point and Vicinity, Nevada National Security Site, Nye County, Nevada (Menocal et al. 2020). The report found that the five buildings were not individually eligible for listing in the National Register of Historic Places (NRHP, National Register) but were potentially eligible as contributing elements to an unrecorded Area 6 Control Point district. The report also found that the five accessory resources were not individually eligible for the NRHP but they contributed to other historic properties, including the contributing elements to the unrecorded district. Finally, the report found that the undertaking would result in an adverse effect to historic properties. The State Historic Preservation Office (SHPO) concurred with the report’s findings regarding the eligibility of the buildings and structures in the Area of Potential Effect (APE) and that the undertaking would result in an adverse effect (Reed 2020). The NNSA/NFO, in consultation with the SHPO, then developed the Memorandum of Agreement DE-GM58-21NA25543 Between the U.S. Department of Energy and the Nevada State Historic Preservation Officer Regarding Demolition of Fourteen Buildings and Structures in Area 6 of the Nevada National Security Site, Nye County, hereafter referred to as the MOA. The MOA stipulates that a district boundary be delineated with an accompanying boundary report and supporting photographs (Stipulation III.A) followed by an architectural survey of the potential historic district (Stipulation III.B). The SHPO reviewed and concurred with the proposed district boundary and accompanying boundary report and photographs (O’Neill et al. 2021) on August 23, 2021, in fulfillment of Stipulation III.A (Reed 2021). This architectural survey report has been prepared in accordance with Stipulation III.B. It includes an NRHP evaluation of the district, identifies contributing and non-contributing elements, and is accompanied by Architectural Resource Assessment (ARA) forms. The NRHP evaluation concludes that the Area 6 Control Point is recommended eligible as a historic district under the Secretary of the Interior’s Significance Criterion A at the national level as the location of the command center and various support facilities directly related to timing and firing operations for nuclear testing on the NNSS from 1951 to 1992. It is also recommended eligible under Significance Criterion C for embodying the distinctive characteristics of a nuclear command center in the context of the Cold War and as a significant and distinguishable entity. There are a total of 29 primary resources within the district boundary. Of these, 28 are recommended as contributing elements to the Area 6 Control Point Historic District and one is recommended as non-contributing.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2017

HIPPO Unit Commitment Version 1

Developed for the Midcontinent Independent System Operator, Inc. (MISO), HIPPO-Unit Commitment Version 1 is for solving security constrained unit commitment problem. The model was developed to solve MISO's cases. This version of codes includes I/O module to read in MISO's csv files, modules to create a state-based mixed integer programming formulation for solving MIP, and modules to test basic procedures to solve MIP via HPC.

Source record↗
DOE OSTI2019

Addendum to the REBUS Users Guide: REBUS-PC (V.1.5)

The Department of Energy (DOE) National Nuclear Security Administration (NNSA) Material Management and Minimization (M3) Reactor Conversion Program uses the REBUS-PC computer code to provide reactor physics and core design information such as neutron flux distributions in space, energy, and time, and to track isotopic changes in fuel and neutron absorbers with burnup. REBUS-PC has evolved from the original REBUS code, which was created starting in the 1960’s to study large liquid metal cooled fast reactors. In particular, additional outputs were added to improve user convenience and some inputs were modified to improve the functionality of the software. REBUS and REBUS-PC both model the external cycle, and are very general codes with 1D, 2D, and 3D neutronics capabilities, and with complete fuel shuffling capabilities. REBUS remains an extremely efficient reactor analysis tool for use in fast reactor systems, and so development has continued at Argonne National Laboratory (ANL) to this day for non-thermal reactor applications. While retaining the efficient computational engine of REBUS, REBUS-PC has evolved to its present status with continuous development since 1999. REBUS-PC has numerous changes and enhancements directed toward the needs of the thermal reactor analyst using Windows or Linux-based computational platforms.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2025

Enabling end-to-end secure federated learning in biomedical research on heterogeneous computing environments with APPFLx

Facilitating large-scale, cross-institutional collaboration in biomedical machine learning (ML) projects requires a trustworthy and resilient federated learning (FL) environment to ensure that sensitive information such as protected health information is kept confidential. Specifically designed for this purpose, this work introduces APPFLx - a low-code, easy-to-use FL framework that enables easy setup, configuration, and running of FL experiments. APPFLx removes administrative boundaries of research organizations and healthcare systems while providing secure end-to-end communication, privacy-preserving functionality, and identity management. Furthermore, it is completely agnostic to the underlying computational infrastructure of participating clients, allowing an instantaneous deployment of this framework into existing computing infrastructures. Experimentally, the utility of APPFLx is demonstrated in two case studies: (1) predicting participant age from electrocardiogram (ECG) waveforms, and (2) detecting COVID-19 disease from chest radiographs. Here, ML models were securely trained across heterogeneous computing resources, including a combination of on-premise high-performance computing and cloud computing facilities. By securely unlocking data from multiple sources for training without directly sharing it, these FL models enhance generalizability and performance compared to centralized training models while ensuring data remains protected. In conclusion, APPFLx demonstrated itself as an easy-to-use framework for accelerating biomedical studies across organizations and healthcare systems on large datasets while maintaining the protection of private medical data.

Biomedical Research↗
DOE OSTI2019

Competing Use Analysis for Offshore Renewables and Subsea Cables

Demand for abundant and diverse resources in the oceans is growing, necessitating marine spatial planning. To inform development of Marine Hydrokinetic (MHK) and Offshore Wind (OSW) resources, the Department of Energy (DOE) has asked NREL to identify the competing uses areas between promising MHK/OSW sites and submarine power and telecommunications cables. The first step in this work is to identify and quantify the overlap between the MHK/OSW resource availability and existing cable routes. The analysis is done in terms of resource area because the task of quantifying actual impacts on available resource is a non-trivial undertaking that involves subjective decisions of identifying resource opportunities. Quantifying overlap in-terms of resource area?on the other hand?is significantly more straight forward, and useful to marine spatial planners. This dataset of polygons describes recommended setback areas from submarine cables for marine renewable energy Development. Two archive files are provided: 1. NREL Cables Setback-Polygons.zip contains the following GeoJSON files: 1.a. cables_100ft.geojson: The Code of Federal Regulations (CFR 585.301) specifies that the legal right of way for submarine cables is 100 ft (~30 meters) to either side of the cable (i.e., 200 ft wide). 1.b. cables_2z.geojson: The International Cable Protection Committee (ICPC) of the North American Submarine Cable Association (NASCA) recommends setback distances for new facilities as the maximum of 500 m or twice the bottom depth (2z), per ICPC Recommendation 13 No. 2 (Communications Security, Reliability and Interoperability Council IV 2014). For depths 250 m, 2 * depth is to be used. 1.c. cables_3z.geojson: The ICPC of NASCA recommends setback distances for new cables as the maximum of 500 m or three times the bottom depth (3z), per ICPC Recommendation 2 No. 10 (Communications Security, Reliability and Interoperability Council IV 2014). So for depths 167 m, 3 * depth is to be used. 2. NREL Submarine Cable Analysis Code Data Presentations.zip contains all files (code, data, README, etc) from release 0.1 of this Github repository for possibly regenerating the product as submarine cable configurations change: https://github.com/ecoquants/nrel-cables. For more details, please see the link to the full report for which this data product is a supplemental output: Submarine Cable Analysis for U.S. Marine Renewable Energy Development by Ben Best and Levi Kilcher National Renewable Energy Laboratory

16 TIDAL AND WAVE POWER↗
DOE OSTI2021

Secure LoRa Firmware Update with Adaptive Data Rate Techniques

Internet of Things (IoT) devices rely upon remote firmware updates to fix bugs, update embedded algorithms, and make security enhancements. Remote firmware updates are a significant burden to wireless IoT devices that operate using low-power wide-area network (LPWAN) technologies due to slow data rates. One LPWAN technology, Long Range (LoRa), has the ability to increase the data rate at the expense of range and noise immunity. The optimization of communications for maximum speed is known as adaptive data rate (ADR) techniques, which can be applied to accelerate the firmware update process for any LoRa-enabled IoT device. In this paper, we investigate ADR techniques in an application that provides remote monitoring of cattle using small, battery-powered devices that transmit data on cattle location and health using LoRa. In addition to issues related to firmware update speed, there are significant concerns regarding reliability and security when updating firmware on mobile, energy-constrained devices. A malicious actor could attempt to steal the firmware to gain access to embedded algorithms or enable faulty behavior by injecting their own code into the device. A firmware update could be subverted due to cattle moving out of the LPWAN range or the device battery not being sufficiently charged to complete the update process. To address these concerns, we propose a secure and reliable firmware update process using ADR techniques that is applicable to any mobile or energy-constrained LoRa device. The proposed system is simulated and then implemented to evaluate its performance and security properties.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Addendum 2 to the Closure Report for CAU 577 Area 5 Chromium Containing Waste Disposal Cells, NNSS, Nevada

Corrective Action Unit (CAU) 577, “Area 5 Chromium Containing Waste Disposal Cells,” includes five low-level waste cells at the Nevada National Security Site Area 5 Radioactive Waste Management Site where buried waste received from Nuclear Fuel Services, Inc., was subsequently determined to contain chromium that exceeded the toxicity characteristic leaching procedure regulatory limit, which would require the waste to carry hazardous waste code D007. CAU 577 was created to satisfy the requirements of the Settlement Agreement (SA) executed between the Nevada Division of Environmental Protection (NDEP) and the U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office (NNSA/NFO) on April 25, 2019 (NDEP 2019). The SA required that the chromium-containing waste received from NFS would be addressed following the closure process laid out in the Federal Facility Agreement and Consent Order (FFACO). The FFACO process ensures proper closure of the chromium-containing waste and documentation of that closure through FFACO-type documents. The following three Corrective Action Sites (CASs) were closed, and their closure was documented in the Closure Report for Corrective Action Unit 577: Area 5 Chromium Containing Waste Disposal Cells, Nevada National Security Site, Nevada, DOE/EMNV--0030, dated September 2021 (U.S. Department of Energy [DOE] Environmental Management [EM] Nevada Program 2021a): • CAS 05-21-02, Waste Disposal Cell 12 • CAS 05-21-03, Waste Disposal Cell 15 • CAS 05-21-04, Waste Disposal Cell 17 Closure of the following CAS was previously documented in the Addendum to the Closure Report for Corrective Action Unit 577: Area 5 Chromium Containing Waste Disposal Cells, Nevada National Security Site, Nevada, DOE/EMNV--0030-ADD, dated September 2022 (DOE EM Nevada Program 2022): • CAS 05-21-05, Waste Disposal Cell 20 This second addendum to the Closure Report documents the closure activities that have occurred for CAS 05-21-06, Waste Disposal Cell 21. This is the last CAS in CAU 577. The final waste shipment was placed in the waste disposal cell on November 21, 2022. Following this, closure activities began on November 28, 2022, and were conducted according to the Corrective Action Decision Document/Corrective Action Plan (CADD/CAP) for CAU 577 (DOE EM Nevada Program 2021b). The following closure activities were performed: • Constructing an engineered evapotranspiration cover • Installing two subsidence monuments and vadose zone monitoring equipment • Seeding the cover with a mixture of native plant species • Installing four concrete monuments on the corners of the cover and placing two use restriction (UR) warning signs on each monument These activities fulfill applicable federal and state regulations for closure of CAS 05-21-06 and minimize potential future exposure pathways to buried waste. Completed closure activities are also consistent with closure of the nine historical Resource Conservation and Recovery Act (RCRA) units included in Section 10.2.2 of the RCRA Permit that governs hazardous waste management activities at the Nevada National Security Site (Permit NEV HW0101) (NDEP 2023). UR documentation for this CAS is included in Appendix B of this report. The post-closure plan is presented in detail in the CADD/CAP for CAU 577 (DOE EM Nevada Program 2021b), and the requirements are summarized in Section 5.2 of this document. In accordance with paragraph 5D of the SA, a request to incorporate the requirements for post-closure monitoring of CAU 577 was included with the permit application for RCRA Permit NEV HW0101 that was submitted in January 2022 (NNSA/NFO 2022). The request included the post-closure requirements for the three CASs that had been closed at the time of submittal of the application as well as requirements that would be implemented upon future approval of closure of the remaining two CASs. All CAU 577 post-closure monitoring requirements have been captured in the April 4, 2023, Revision 7 of the RCRA Permit (NDEP 2023). As the RCRA Permit NEV HW0101 has been revised since the submittal of the original CAU 577 Closure Report (DOE EM Nevada Program 2021a) and Addendum 1 (DOE EM Nevada Program 2022), the post-closure requirements in this Addendum 2 report do not align with the previous documents. Specific changes resulting from the issuance of Revision 7 of the RCRA Permit are discussed in Section 5.2 of this report. The requirements in this report are consistent with the current permit (NDEP 2023) and supersede all requirements listed in the CAU 577 Closure Report and Addendum 1. All CAU 577 post-closure requirements should be conducted in accordance with the version of the RCRA Permit that is current at the time of the activities being performed. The DOE EM Nevada Program is requesting a Notice of Completion from NDEP for closure of CAU 577. Although CAU 577 is not a legacy site, the FFACO process is being followed to ensure proper closure of the chromium-containing waste. Therefore, transfer of CAU 577 from Appendix III of the FFACO to Appendix IV, Closed Corrective Action Units, is requested, as all closure activities have been completed.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2023

Flexible visualization of a 3rd party Intrusion Prevention (Security) tool: A use case with the ELK stack

A difficult aspect of cyber security is the ability to achieve automated real time intrusion prevention across various sets of systems. To this extent, several companies are offering comprehensive solutions that leverage an "accuracy of scale" and moving much of the intelligence and detection on the Cloud, relying on an ever-growing set of data and analytics to increase decision accuracy. Often, they provide tools to visualize the decision workflows in attack prevention (as well as tune the algorithm) but those solutions are not always practical as companies see the problem as "global" that is, from a unified Cyber-security standpoint. However, a key to a successful Cyber-security program is transparency and trust: from an experimental team viewpoint, this specifically means having the ability to immediately see what and from where, who has been blocked and being able to inform the community in case of a revoked access without the need for filing a "ticket" (that may eventually be answered) – in other words, rapid response to their user-base is essential but solutions targeting "sub-groups" in an organization are not often available. We have come up with a versatile solution leveraging the ELK stack (Elasticsearch, Logstash, & Kibana) and an IPS (Intrusion Prevention System) based WAF (Web Application Firewall) from Signal Sciences. Signal Science allows the streaming of detailed logs in a Logstash format suitable for custom solutions for visualization. By combining these two tools, we have strengthened our security posture and enabled individual experiments to monitor their own traffic. Specifically, the IPS WAF provides unique data such as country of origin, protocol, response code, source IP, and paths accessed. In this contribution, we will show how we engineered a visualization solution so experiment groups could access a dashboard with predefined graphs but also, where they can create individual customizable dashboards used to display blocked traffic and troubleshoot latency issues. We will discuss the details and procedures for developing and configuring these tools and how it benefits cyber security postures across our scientific based environment.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2024

Addendum to Architectural Documentation and National Register of Historic Places Evaluations of Built-Environment Resources at Los Alamos National Laboratory, Los Alamos County, New Mexico

The Los Alamos National Laboratory contracted Statistical Research, Inc. (SRI), to document and evaluate 110 facilities for listing in the National Register of Historic Places (National Register). This effort was conducted in compliance with Section 110 of the National Historic Preservation Act of 1966, as amended; the Code of Federal Regulations (36 CFR 800); the Programmatic Agreement among the U.S. Department of Energy, National Nuclear Security Administration, Los Alamos Field Office, the New Mexico State Historic Preservation Office and the Advisory Council on Historic Preservation Concerning Management of the Historic Properties at Los Alamos National Laboratory, Los Alamos New Mexico; and A Plan for the Management of the Cultural Heritage at Los Alamos National Laboratory, New Mexico (LANL’s Cultural Resources Management Plan) (2017).

99 GENERAL AND MISCELLANEOUS↗