Search NASA⌕ Search

SEARCH · Search NASA

Results for “research security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Fielding Freedom of Information Act (FOIA) requests at the National Security Research Center

For staff at the Lab’s National Security Research Center, fulfilling requests for information can sometimes be a bit otherworldly. Some of these requests are made under the Freedom of Information Act or FOIA, which are submitted to NNSA by the public and directed to LANL for records search and review. The topics of these requests range from technical reports to records on unidentified flying objects. “Fulfilling FOIA requests is an important part of what we do here,” said NSRC senior archivist Daniel Alcazar (WRS-NSRCMS). “It’s critical to our mission to ensure the public has access to information it has the right to see.” Congress passed the FOIA in 1967, giving any person the right to request access to federal agency records so they can better understand the U.S. Government’s operations and activities. Federal agencies are required to disclose information requested under the FOIA, unless it falls under one or more of nine exemptions protecting interests such as personal privacy, national security, and law enforcement. Often described as the law that keeps citizens in the know about the government, the FOIA is a vital part of U.S. democracy. The Laboratory’s FOIA program works with over a hundred requests for records each year. As the Lab’s classified research and technical library dedicated to information stewardship and education, the National Security Research Center (NSRC) regularly assists with these requests– as many as 45 per year. Public queries cover a spectrum of topics, but most common include requests for Manhattan Project era documents and memoranda, Los Alamos technical reports, Los Alamos-produced historical and scientific motion picture film and videos, as well as those seeking any documents or files pertaining to a former scientist, engineer or employee. While less common, Alcazar estimates that he receives a few FOIA requests a year related to unidentified flying objects (UFOs) and unexplained aerial phenomena (UAP).

99 GENERAL AND MISCELLANEOUS↗

Ameliorating Global Challenges: Globalization, Geopolitics, Basic & Applied Research, and Research Security

We are confronted with a myriad of global challenges, from extreme weather events, occurring at higher frequencies than at any point in history, to pollution, food insecurity, clean water shortages, and fundamentally limited natural resources and materials. The largest number of people inhabit our planet today and enjoy the highest standard of living - though not equally distributed across the world - compared to any prior moment in history. To sustain this quality of life, we are largely reliant on fossil fuel sources, which are responsible for more greenhouse gas emissions by weight each day than the collective weight of all humans that inhabit the planet. Ameliorating these global challenges will require elements of solutions that include advances in basic and applied research, innovative global engineering, materials discovery, new technologies, manufacturing at scale, resilient and adaptable infrastructure, carbon-free energy sources and storage technologies, and new supply chain networks and markets. Success will require constructive collaborative efforts between researchers in countries located in every continent of this planet. For any of these goals to be realized in a timely fashion, geopolitical leaders must become better educated about this existential challenge and incentivized to act.

applied research↗

Water Security: Trends, Capabilities, and Research Directions to Secure Water Infrastructure

Water and wastewater sector is target rich and resource poor ~153k water utilities, serve 80% of US population ~16k publicly-owned wastewater systems in the US serve 75% of the population Need scalable solutions to fit small and medium to large systems Federal attention to critical infrastructure continues to grow – particularly in the water sector Increase in water sector incidents and threats for large scale disruption – particularly by nation-state actors and their proxies EPA is the SRMA DHS CISA focuses on critical infrastructure protection across sectors They must work together to secure WWW systems Research capabilities to enable secure water systems Current and future threats Resilience – natural disasters, accidents, cyber-physical attacks

99 - GENERAL AND MISCELLANEOUS↗

NSRC makes vital vintage films accessible to today's weapons researchers

A few years ago, archivists at the Lab’s National Security Research Center (NSRC) rediscovered 65 special reels of nitrate motion picture film among the 20,000 film reels in the NSRC’s collections. Because nitrate film stock was discontinued in 1951, they realized that the films contained footage from the Lab’s earliest days of nuclear testing. However, nitrate film is highly toxic and flammable. Confirming this hunch would have to wait until the NSRC team devised a strategy for safely preserving and digitizing the reels. Now, after many months of planning and collaboration with LANL fire safety and industrial hygiene teams, the reels – which include footage from Operation Sandstone, Operation Ivy, and the Trinity test – have been digitized by the NSRC archivist team and are accessible to today’s researchers.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

Combinatoric Researchers at Sandia National Laboratories: An ethnographic study

Combinatorial research, the incorporation of multiple domains in a unified research agenda, is a strong contributor to the growing corpus of scientific knowledge and technological advancements worldwide. In 2019, a study team at Sandia National Laboratories (Sandia, the Labs) used a systems approach to understand if and how combinatorial research agendas were playing out at Sandia, one of America’s premiere national security research venues. The study team used the data collection effort described in this report to ground the discussion of the broad social environment and particular organizational environments within which combinatorial research agendas are developed, as described in the full study. The team interviewed twenty-five staff members engaged in combinatorial research at Sandia in New Mexico and California during the months of June – September 2019. Analysis of this corpus of ethnographic data, combined with knowledge drawn from relevant literature, concluded that there is an individual type who would be most likely to engage in combinatoric research, described by both demographic and psychographic components. This type demonstrates both intellectual depth and the curiosity which leads to breadth. The analysis also showed that Sandia as an organization and as perceived by the respondents, set up tension for the combinatorial researcher. While Sandia was generally agnostic towards combinatorial research, that agnostic posture depended on whether the researcher was able to fulfill all her customer obligations – obligations that are structured primarily in transactional relationships with customers with relatively short time horizons. This report concludes with suggestions for additional research in the ethnographic domain.

99 GENERAL AND MISCELLANEOUS↗

Overview and Commentary on Applying the Coordinated Vulnerability Disclosure Process to Photovoltaic System Devices

The rapid expansion of photovoltaic (PV) systems, particularly inverters, has introduced new cybersecurity challenges that threaten both local operations as well as the broader electrical grid’s stability. PV inverters, integrated into critical energy infrastructure are potential targets for cyber attacks due to vulnerabilities in firmware, remote access systems, and communication protocols. The Coordinated Vulnerability Disclosure (CVD) process, as defined by the Cybersecurity and Infrastructure Security Agency (CISA), provides a framework for identifying, reporting, and addressing these vulnerabilities in a transparent and collaborative manner. This report outlines the CVD process as it applies to PV systems, detailing the roles of key stakeholders, such as manufacturers, grid operators, and security researchers. The report also highlights specific challenges in managing vulnerabilities for new and legacy PV systems, which includes those introduced by insecure communications and third-party supply chain components. By adhering to the CVD process, the PV industry can mitigate cybersecurity risks, ensure regulatory compliance, and maintain consumer trust, while safeguarding the operational resilience of the energy grid. Ultimately, the effective coordination of vulnerability management is crucial for securing the future of PV systems within the critical electric grid infrastructure landscape.

14 SOLAR ENERGY↗

A comprehensive guide to CAN IDS data and introduction of the ROAD dataset

Although ubiquitous in modern vehicles, Controller Area Networks (CANs) lack basic security properties and are easily exploitable. A rapidly growing field of CAN security research has emerged that seeks to detect intrusions or anomalies on CANs. Producing vehicular CAN data with a variety of intrusions is a difficult task for most researchers as it requires expensive assets and deep expertise. To illuminate this task, we introduce the first comprehensive guide to the existing open CAN intrusion detection system (IDS) datasets. We categorize attacks on CANs including fabrication (adding frames, e.g., flooding or targeting and ID), suspension (removing an ID’s frames), and masquerade attacks (spoofed frames sent in lieu of suspended ones). We provide a quality analysis of each dataset; an enumeration of each datasets’ attacks, benefits, and drawbacks; categorization as real vs. simulated CAN data and real vs. simulated attacks; whether the data is raw CAN data or signal-translated; number of vehicles/CANs; quantity in terms of time; and finally a suggested use case of each dataset. State-of-the-art public CAN IDS datasets are limited to real fabrication (simple message injection) attacks and simulated attacks often in synthetic data, lacking fidelity. In general, the physical effects of attacks on the vehicle are not verified in the available datasets. Only one dataset provides signal-translated data but is missing a corresponding “raw” binary version. This issue pigeon-holes CAN IDS research into testing on limited and often inappropriate data (usually with attacks that are too easily detectable to truly test the method). The scarcity of appropriate data has stymied comparability and reproducibility of results for researchers. As our primary contribution, we present the Real ORNL Automotive Dynamometer (ROAD) CAN IDS dataset, consisting of over 3.5 hours of one vehicle’s CAN data. ROAD contains ambient data recorded during a diverse set of activities, and attacks of increasing stealth with multiple variants and instances of real (i.e. non-simulated) fuzzing, fabrication, unique advanced attacks, and simulated masquerade attacks. To facilitate a benchmark for CAN IDS methods that require signal-translated inputs, we also provide the signal time series format for many of the CAN captures. Our contributions aim to facilitate appropriate benchmarking and needed comparability in the CAN IDS research field.

97 MATHEMATICS AND COMPUTING↗

Walking in his grandfather’s footsteps

During his August 11 visit to the Lab, Charles Oppenheimer participated in several events, and encountered a few surprises along the way Charles Oppenheimer never met his grandfather J. Robert Oppenheimer — the famed physicist died before Charles was born. But through family lore, popular narrative, and retracing his footsteps in Los Alamos, most recently on August 11, Charles knows this man well. Charles speaks on behalf of the Oppenheimer family, offering a perspective so many authors, filmmakers, and interviewers have forgotten to ask for. "The thing that stands out most is the family culture of being supportive of Robert Oppenheimer. It’s something I experienced as family culture … he had these really wide interests and was able to pursue them to his heart’s content," Charles said. During his visit Charles participated in a panel discussion with Department of Energy (DOE) Secretary Jennifer Granholm, DOE Under Secretary and National Nuclear Security Administration Administrator Jill Hruby, and Lab Director Thom Mason following a screening of an abbreviated version of the National Security Research Center’s (NSRC) newly-released documentary, “Oppenheimer: Science, mission, legacy.” He then toured the Bradbury Science Museum and his grandparent’s Los Alamos residence.

99 GENERAL AND MISCELLANEOUS↗

Renesan Presentation [Slides]

This presentation provides a brief overview of the history of the Laboratory spanning from the Manhattan Project until today. It also gives an overview of the Lab's National Security Research Center and the work that it does.

99 GENERAL AND MISCELLANEOUS↗

ORNL Package Testing Program Overview

When transporting radioactive or hazardous materials, safety and security are top priorities. Packaging and transportation regulations require reliable evidence that containers have passed rigorous performance tests to ensure that the public and the environment are protected from the hazardous nature of the cargo. Because of its long history in energy and security research, Oak Ridge National Laboratory (ORNL) has needed to ship hazardous packages for the past 65 years. Since the 1940s, ORNL has made significant contributions to transportation regulations and has been at the forefront of regulatory testing development. Today, ORNL is a leader in standards development and testing of designs of radioactive material packages. ORNL plays a critical role in ensuring the safe transportation of radioactive materials across the United States by executing rigorous testing campaigns of packages that contain radioactive materials. Early testing activities focused on supporting the development of transportation regulations established by both the International Atomic Energy Agency (IAEA) and the United States. Currently, all package testing activities are performed under the Package Testing Program (PTP) at the Package Evaluation Facility (PEF) located at the National Transportation Research Center (NTRC), which is about 10 miles from the main ORNL campus. The PTP develops and evaluates testing solutions, ensuring that they are safe efficient, and in compliance with regulatory requirements. The vision for the PTP is to be a world-class leader in the evaluation and testing of radioactive and hazardous material packages. The key elements necessary to fulfill this mission are an experienced and professional staff; state-of-the-art facilities, equipment, and instrumentation; and completion of challenging programs and projects important to package transportation. Collaborations with other internal and external organizations play a significant role in building stronger teams and achieving this vision. By adhering to and advancing regulatory standards, ORNL’s PTP supports development of safe and compliant packaging, safeguarding the transportation process from potential risks associated with radioactive material logistics.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

The Dynamic Tripolar Strategic Balance: A Net Assessment (Workshop Summary)

On December 9-10, the Center for Global Security Research (CGSR) at Lawrence Livermore National Laboratory (LLNL) hosted a workshop titled “The Dynamic Tripolar Strategic Balance: A Net Assessment.” The discussion was guided by the following key questions: • By what metrics should the strategic balance be assessed? • How dynamic is the balance? How fragile? • Is the United States gaining strategic advantage, losing it, or holding steady, overall? • In order to gain new advantages or re-gain advantages lost, can or should the United States prioritize some domains and accept more risk in others? If so, which ones?

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Blueprint: Coordinated Vulnerability Disclosure (CVD) Adaption and Adoption Guide for Industry To Create Their Own CVD Program

This guide provides a series of steps and guidance for electric vehicle supply equipment (EVSE) industry members to set up their own coordinated vulnerability disclosure (CVD) program by utilizing the Software Engineering Institute/Computer Emergency Response Team (SEI/CERT)’s CVD how-to guide. Due to the complexity of CVD, and with the existing resources out there, this guide is intended that this portion of the blueprint is an extension of the CVD how-to guide, not meant as a replacement. This guide is meant to outline a process for what to do when you discover a vulnerability on EVSE equipment. It is written for developers, vendors and security researchers as well as management. This is not a technical document. It is meant to be accessible for both technical and non-technical roles.

33 ADVANCED PROPULSION SYSTEMS↗

The Evaluation of Machine Learning Techniques for Isotope Identification Contextualized by Training and Testing Spectral Similarity

Precise gamma-ray spectral analysis is crucial in high-stakes applications, such as nuclear security. Research efforts toward implementing machine learning (ML) approaches for accurate analysis are limited by the resemblance of the training data to the testing scenarios. The underlying spectral shape of synthetic data may not perfectly reflect measured configurations, and measurement campaigns may be limited by resource constraints. Consequently, ML algorithms for isotope identification must maintain accurate classification performance under domain shifts between the training and testing data. To this end, four different classifiers (Ridge, Random Forest, Extreme Gradient Boosting, and Multilayer Perceptron) were trained on the same dataset and evaluated on twelve other datasets with varying standoff distances, shielding, and background configurations. A tailored statistical approach was introduced to quantify the similarity between the training and testing configurations, which was then related to the predictive performance. Wilcoxon signed-rank tests revealed that the OVR-wrapped XGB significantly outperformed the other algorithms, with confidence levels of 99.0% or above for the 133Ba, 60Co, 137Cs, and 152Eu sources. The findings from this work are significant as they outline techniques to promote the development of robust ML-based approaches for isotope identification.

domain adaptation↗

Secure API-Driven Research Automation to Accelerate Scientific Discovery

The Secure Scientific Service Mesh (S3M) provides API-driven infrastructure to accelerate scientific discovery through automated research workflows. By integrating near real-time streaming capabilities, intelligent workflow orchestration, and fine-grained authorization within a service mesh architecture, S3M enables secure and flexible programmatic access to high performance computing (HPC) resources. This framework allows intelligent agents and experimental facilities to dynamically provision resources and execute complex workflows, accelerating experimental lifecycles, and enabling AI-augmented autonomous science. S3M establishes a modern foundation for scientific computing infrastructure that significantly reduces traditional barriers between researchers, computational resources, and experimental facilities.

Skluzacek, Tyler [ORNL] (ORCID:0000000322424931)↗

Enabling end-to-end secure federated learning in biomedical research on heterogeneous computing environments with APPFLx

Facilitating large-scale, cross-institutional collaboration in biomedical machine learning (ML) projects requires a trustworthy and resilient federated learning (FL) environment to ensure that sensitive information such as protected health information is kept confidential. Specifically designed for this purpose, this work introduces APPFLx - a low-code, easy-to-use FL framework that enables easy setup, configuration, and running of FL experiments. APPFLx removes administrative boundaries of research organizations and healthcare systems while providing secure end-to-end communication, privacy-preserving functionality, and identity management. Furthermore, it is completely agnostic to the underlying computational infrastructure of participating clients, allowing an instantaneous deployment of this framework into existing computing infrastructures. Experimentally, the utility of APPFLx is demonstrated in two case studies: (1) predicting participant age from electrocardiogram (ECG) waveforms, and (2) detecting COVID-19 disease from chest radiographs. Here, ML models were securely trained across heterogeneous computing resources, including a combination of on-premise high-performance computing and cloud computing facilities. By securely unlocking data from multiple sources for training without directly sharing it, these FL models enhance generalizability and performance compared to centralized training models while ensuring data remains protected. In conclusion, APPFLx demonstrated itself as an easy-to-use framework for accelerating biomedical studies across organizations and healthcare systems on large datasets while maintaining the protection of private medical data.

Biomedical Research↗