Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security verification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11
All sourcesNASA NTRSDOE OSTI
DOE OSTI2019

Monte Carlo Uncertainty Quantification in UF 6 Cylinder Neutron Emissions

In order to provide timely detection of the diversion of nuclear material, the international community needs to develop technology for safeguarding the entire fuel cycle. As such, there is significant interest in securing the front end of the fuel cycle through precise and accurate material accountancy prior to fuel irradiation. One particularly attractive solution for such problems is the development of unattended enrichment verification monitors for uranium hexafluoride (UF 6 ) transit cylinders. Systems such as the Unattended Cylinder Verification Station (UCVS) promise to provide independent nuclear material accountancy (i.e. measurements of relative enrichment, 235 U mass and total uranium mass) for all UF 6 cylinders entering and/or leaving any enrichment or fuel fabrication facilities.

07 ISOTOPE AND RADIATION SOURCES↗
DOE OSTI2020

¬¬Integration of Quantification of Margins and Uncertainties Methodology into Parallel Discrete Event Simulator Framework

Parallel Discrete Events Simulation (PDES) is becoming increasingly important to lab efforts in security and intelligence. It is used to model complex asynchronous systems such as computer networks, satellite systems, vehicular traffic, and human performance. Uncertainty Quantification (UQ) techniques have become a mainstay of Verification and Validation (V&V) efforts on physics simulations. However, PDES models are very different from traditional physics simulations, and research into UQ techniques for PDES is in its infancy. It is not clear which traditional UQ techniques can be applied to PDES, or what new techniques will need to be developed. The goal of this project was to identify existing UQ techniques that can be applied to PDES, and to develop new techniques as necessary. The project implemented or developed techniques to handle issues that do not appear in traditional physics simulations, but are common among PDES, including sampling techniques for high-dimensional homogenous inputs, response surfaces for high-variance heteroskedastic output, and characterization of skewed output distributions. These are foundational UQ techniques that must be used in any complete UQ analysis (Tong 2018).

97 MATHEMATICS AND COMPUTING↗
NASA NTRS2003

Reconfigurable Hardware Adapts to Changing Mission Demands

A new class of computing architectures and processing systems, which use reconfigurable hardware, is creating a revolutionary approach to implementing future spacecraft systems. With the increasing complexity of electronic components, engineers must design next-generation spacecraft systems with new technologies in both hardware and software. Derivation Systems, Inc., of Carlsbad, California, has been working through NASA s Small Business Innovation Research (SBIR) program to develop key technologies in reconfigurable computing and Intellectual Property (IP) soft cores. Founded in 1993, Derivation Systems has received several SBIR contracts from NASA s Langley Research Center and the U.S. Department of Defense Air Force Research Laboratories in support of its mission to develop hardware and software for high-assurance systems. Through these contracts, Derivation Systems began developing leading-edge technology in formal verification, embedded Java, and reconfigurable computing for its PF3100, Derivational Reasoning System (DRS ), FormalCORE IP, FormalCORE PCI/32, FormalCORE DES, and LavaCORE Configurable Java Processor, which are designed for greater flexibility and security on all space missions.

Source record↗
DOE OSTI2022

Verification and Validation of a Modified Numerical Algorithm for Simulation of Transient Unconfined Groundwater Flow

This report extends verification and validation testing of the NUFT package of codes (Nitao 2000a,b) to the US1P module of code designed for simulation of single-phase mixed or “coupled” saturated and unsaturated (or “variably saturated”) groundwater flow. Importantly, the verification and validation testing of US1P in this report includes performance evaluation of a modified numerical algorithm that was not included in prior quality assurance (QA) of the NUFT package by Carle et al. (2014) for Underground Test Area (UGTA) project activities, which are directed at assessment of radionuclide contamination in groundwater sourced from underground nuclear test locations at the Nevada National Security Site (NNSS). An immediate purpose of this report is to provide QA for ongoing large-scale, three-dimensional (3-D) groundwater flow modeling of transient water levels associated with longterm water supply pumping and underground nuclear testing at the NNSS (Jackson and Fenelon, 2018; Jackson et al., 2021). For UGTA activities, the QA refers to the standards of ASTM (1996) for verification and validation testing of groundwater modeling codes.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2017

A Comparison of Monte Carlo and Deterministic Solvers for keff and Sensitivity Calculations

Verification and validation of our solutions for calculating the neutron reactivity for nuclear materials is a key issue to address for many applications, including criticality safety, research reactors, power reactors, and nuclear security. Neutronics codes solve variations of the Boltzmann transport equation. The two main variants are Monte Carlo versus deterministic solutions, e.g. the MCNP [1] versus PARTISN [2] codes, respectively. There have been many studies over the decades that examined the accuracy of such solvers and the general conclusion is that when the problems are well-posed, either solver can produce accurate results. However, the devil is always in the details. The current study examines the issue of self-shielding and the stress it puts on deterministic solvers. Most Monte Carlo neutronics codes use continuous-energy descriptions of the neutron interaction data that are not subject to this effect. The issue of self-shielding occurs because of the discretisation of data used by the deterministic solutions. Multigroup data used in these solvers are the average cross section and scattering parameters over an energy range. Resonances in cross sections can occur that change the likelihood of interaction by one to three orders of magnitude over a small energy range. Self-shielding is the numerical effect that the average cross section in groups with strong resonances can be strongly affected as neutrons within that material are preferentially absorbed or scattered out of the resonance energies. This affects both the average cross section and the scattering matrix.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2020

How To Maintain Effective IAEA Safeguards While Reducing Facility Impact

For almost twenty years, inspectors from the International Atomic Energy Agency have been visiting the K-Area Material Storage facility at the Savannah River Site where excess plutonium has been placed under IAEA safeguards as part of the United States Volunatary Offer Agreement. During that time, the mission of K-Area Complex has expanded from storage of nuclear matieral to glovebox operations in support of the National Nuclear Security Administration’s Plutonium Disposition program. With this change in mission, it is becoming increasingly challenging to manage facility staff radiation exposure and operating activities during the IAEA’s annual Physcial Inventory Verifications (PIV). This study has identified both near-term and long-term recommendations for IAEA monitoring protocols that would allow the IAEA to maintain effective safeguards of the material while decreasing the impact to the facility. A statisitical analysis has shown that reducing the number of containers measured during an annual PIV from 12 to 4 still ensures a high level of confidence in the confidence while reducing the inspector time in the facility amd with a corresponding significant reduction in personnel radiation exposure. A modified installation pattern of Remotely Monitored Sealing Arrays (RMSAs) is also proposed utilizing only the outer rows of arrays of stored material containers in the Stack Area (SA). The modified RMSA placement will provide equivalent protection, while significantly reducing personnel radiological exposure, manpower requirements and associated costs. With advances in technology, there are additional potential options in containment/surveillance and continuity of knowledge that would allow the agency to be outside of the facility during PIV measurements and have confidence in the accuracy and authencitity of the results.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2018

Big-Data Multi-Energy Iterative Volumetric Reconstruction Methods for As-Built Validation & Verification Applications

This document archives the results developed by the Lab Directed Research and Development (LDRD) project sponsored by Sandia National Laboratories (SNL). In this work, it is shown that SNL has developed the first known high-energy hyperspectral computed tomography system for industrial and security applications. The main results gained from this work include dramatic beam-hardening artifact reduction by using the hyperspectral reconstruction as a bandpass filter without the need for any other computation or pre-processing; additionally, this work demonstrated the ability to use supervised and unsupervised learning methods on the hyperspectral reconstruction data for the application of materials characterization and identification which is not possible using traditional computed tomography systems or approaches.

47 OTHER INSTRUMENTATION↗
DOE OSTI2019

Radiological Verification for the Remediation of LLRW at the Port Granby Project - 19210

The Port Granby Project is part of the Port Hope Area Initiative (PHAI) that Canadian Nuclear Laboratory (CNL) is using to manage long-term historic low level radioactive waste (LLRW) resulting from 60 years of uranium and radium processing operations in the urban setting of Port Hope, Ontario. Port Granby remediation scope includes constructing a new, secure long-term waste management facility (LTWMF) and supporting infrastructure and excavating and relocating LLRW and marginally contaminated soil from the Port Granby Waste Management Facility (PGWMF) which accepted waste until the 1980's to the newly constructed LTWMF. The PGWMF contains an estimated 450,000 cubic meters of LLRW deposited in unmarked and unlined trenches throughout the southern portion of the site that borders Lake Ontario. Project requirements include excavating contaminated material, verifying that the trench bottoms are below action levels using Multi-Agency Radiation Survey and Site Investigation Manual (MARSSIM) guidance, and final restoration. This paper describes challenges of meeting remediation verification requirements using traditional field and laboratory confirmation methods in areas of deep trench areas located in rugged terrain with ponded water and mud and presents a process that has expedited the traditional MARSSIM method for verification with greater productivity, and with enhanced safety and reliability as compared to the use of traditional methods alone. This enhanced process has been successfully employed for in-situ verification so that the excavated area can be backfilled and returned to a vegetative state. This enhanced process has been examined by federal regulatory staff through the course of their onsite audits and outcomes from these examinations have all been positive. The method involves a visual inspection and traditional walkover of the area to identify any areas with radiation measurements above the region's background followed by a full area survey performed using Wood's proprietary Orion ScanPlotSM system. The ScanPlotSM data is evaluated, mapped and overlaid on top of an aerial image of the surveyed area allowing remaining radiological material at surface or near surface to be quickly and easily identified for removal. Field staff then collect soil samples from evenly distributed points within the surveyed area and field screen the samples using an X-ray fluorescence (XRF) analysis for the three primary contaminates of potential concern (CoPCs) (arsenic, uranium and lead) that are indicative of the historical contamination. Samples passing XRF field screening are packaged and sent to a local laboratory for a full suite of analyses and checked against the CoPC list to assess whether the soil matches the profile for nearby native soils and passes the remediation goals. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2018

Verification and Validation of Optimization of Replacement Portal Monitoring Replay Tools

The Los Alamos National Laboratory and the Johns Hopkins Applied Physics Laboratory (APL) are both developing optimization software to fulfill the objective of Phase III of the Replacement Portal Monitoring (RPM) Program for the Department of Homeland Security. The objective of the Phase III of the RPM Program is to conduct an evaluation of three RPM systems designed to enhance mission effectiveness, gain operational efficiencies, and to address emerging mission needs against the Countering Weapons of Mass Destruction (CWMD ) nuclear threat basis and special nuclear material (SNM) used in performance testing. As such this task involves the use of global optimization algorithms.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2017

Efficient Certificate Verification for Vehicle-to-Grid Communications

While public charging stations are typically used for Electric Vehicle (EV) such as charging, home microgrids that may act as private charging stations are also expected to be used for meeting the increased EV charging demands in the future. Such home microgrids can be accessible through their smart meters, which makes advanced metering infrastructure (AMI) a viable alternative for vehicle-to-grid (V2G) communications. However, to ensure secure V2G communications using public-keys, smart meters will need to maintain certificate revocation lists (CRLs) not just for the AMI network but also for large number of EVs that may interact with them. For resource-constrained smart meters, this will increase the storage requirements and introduce additional overhead in terms of delay and CRL maintenance. To eliminate this burden, we propose keeping merely non-revoked certificates that belong to EVs, which are usually driven within the vicinity of that particular microgrid. The motivation comes from the fact that it is inefficient to distribute and store a large CRL that has revocation information about all EVs in the whole system as most of these EVs will never come to the geographic vicinity of that home microgrid. The approach ensures that any status changes of these certificates are communicated to the smart meters. We implemented the proposed approach in a realistic V2G communication scenario by using IEEE 802.11s mesh as the underlying AMI infrastructure using ns-3 simulator. The results confirmed that the proposed approach significantly reduces the certificate verification time and the storage requirements on smart meters.

25 ENERGY STORAGE↗
NASA NTRSDate not supplied

Software-Only Key Management and Cryptography (KMC) for Spacecraft Command Encryption

The Jet Propulsion Laboratory (JPL) Advanced Multi-Mission Operations System (AMMOS) in partnership with NASA’s Katherine Johnson Independent Verification and Validation (NASA IV&V) Jon McBride Software Testing and Research (JSTAR) laboratory have jointly developed a command encryption capability that provides a software-only encryption solution utilizing the CCSDS Space Data Link Security Protocol. This solution, named Key Management and Cryptography (KMC), incorporates JPL’s encryption service with the JSTAR open-source CryptoLib library, providing a solution for spacecraft command encryption, which is required per NASA standard NASA-STD-1006-A. This paper will focus on its design, usage, and operation for two SmallSat missions, along with its future expanded functionality of end-to-end spacecraft encryption.

command encryption↗
DOE OSTI2017

Closure Report for Corrective Action Unit 568: Area 3 Plutonium Dispersion Sites Nevada National Security Site, Nevada, Revision 1

The purpose of this CR is to provide documentation and justification that no further corrective action is needed for the closure of CAU 568 based on the implementation of corrective actions. This includes a description of closure activities that were performed and an evaluation of the verification data. The CAP (NNSA/NFO, 2016a) and ROTC-1 (NNSA/NFO, 2016c) provide information relating to the selection of CAAs and the reasoning behind their selection. The CADD (NNSA/NFO, 2015) identifies the release sites that require additional corrective action and presents information supporting the selection of CAAs.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2017

Sampling and Analysis Plan for Verification Sampling of LANL-Derived Residual Radionuclides in Soils within Tract A-18-2 for Land Conveyance

Public Law 105-119 directs the U.S. Department of Energy (DOE) to convey or transfer parcels of land to the Incorporated County of Los Alamos or their designees and to the Department of Interior, Bureau of Indian Affairs, in trust for the Pueblo de San Ildefonso. Los Alamos National Security is tasked to support DOE in conveyance and/or transfer of identified land parcels no later than September 2022. Under DOE Order 458.1, Radiation Protection of the Public and the Environment (O458.1, 2013) and Los Alamos National Laboratory (LANL or the Laboratory) implementing Policy 412 (P412, 2014), real property with the potential to contain residual radioactive material must meet the criteria for clearance and release to the public. This Sampling and Analysis Plan (SAP) is a second investigation of Tract A-18-2 for the purpose of verifying the previous sampling results (LANL 2017). This sample plan requires 18 projectspecific soil samples for use in radiological clearance decisions consistent with LANL Procedure ENV-ES-TP-238 (2015a) and guidance in the Multi-Agency Radiation Survey and Site Investigation Manual (MARSSIM, 2000). The sampling work will be conducted by LANL, and samples will be evaluated by a LANL-contracted independent lab. However, there will be federal review (verification) of all steps of the sampling process.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2024

The Design and Evaluation of Zero Trust Architecture for Electric Vehicle Charging Infrastructure: EVs @ Scale Series on EV Charging Station Cybersecurity

Implementing a zero trust architecture can significantly bolster the security of electric vehicle (EV) charging infrastructure. EV charging infrastructure includes numerous networked interfaces, each of which can present potential vulnerabilities. When these vulnerabilities are exploited, they can compromise the entire system, leading to severe operational and security risks. Zero trust is a security model that operates on the principle of "never trust, always verify," which helps manage the attack surface and limit the scope of any potential compromises. Fundamentally, this model ensures that no entity, whether inside or outside the network, is trusted by default. The design principles of zero trust include continuous verification, strict deny-by-default access controls, and micro-segmentation. Continuous verification ensures that every request is thoroughly checked, regardless of its origin. Strict access controls enforce the principle of least privilege, allowing users and devices only the minimum necessary access to perform their functions. Micro-segmentation involves dividing the network into smaller, isolated segments to prevent lateral movement in case of a breach. In the context of EV charging infrastructure, zero trust can be implemented through various strategies. For example, multi-factor authentication (MFA) can be required for engineers to access the management interfaces and control systems of charging stations. Real-time monitoring and analysis of network traffic can help detect and respond to anomalies. Systems that do not need to communicate with each other can be micro-segmented to enhance security. All communications should adhere to predefined policies to be permitted. Additionally, encrypting communications can protect sensitive information exchanged between chargers and management systems. This paper presents a zero trust architecture specifically designed for EV charging infrastructure. Implementing zero trust not only mitigates risks but also builds a resilient infrastructure capable of withstanding and quickly recovering from cyber threats. The architecture addresses six defined security objectives. A comprehensive test plan is developed to assess the architecture against these objectives, and the results of the evaluation are reported. This approach is essential for maintaining the reliability and integrity of EV charging services in an increasingly interconnected and vulnerable digital landscape. This is the first in a planned series of papers exploring the implementation of zero trust in EV charging infrastructure. Each paper will delve into different aspects and applications of zero trust, highlighting how various work processes and requirements can lead to distinct architectural designs. These architectures will be tailored to address specific security challenges and operational needs within the EV charging ecosystem, ensuring a robust and adaptable security framework.

33 ADVANCED PROPULSION SYSTEMS↗
DOE OSTI2022

Building Blocks for Secure and Prosperous Defense Critical Supply Chains: A Case Study from Microelectronics

Securing defense-critical supply chains, built on resilient and sustainable microelectronics fabrication and deployment, is a national imperative and one that requires an investment in basic and applied research, development, and deployment into industries in (and out of) the Defense Industrial Base (DIB). Critical next steps include the development of pilots for revolutionary concepts in a new formal verification model and the Cyber-Physical Passport (CPP) concept for chain of custody. Critical infrastructure leadership should take action with a sense of urgency. Working in conjunction with the Under Secretary for Acquisition and Sustainment, the Assistant Secretary of Defense for Research and Engineering should establish pilot programs with the Defense Advanced Research Projects Agency and the service labs to build and test both concepts in legacy and new system development.. Additionally, the Pentagon may be aware that an existing Manufacturing Innovation Institute is piloting, with the semiconductor industry, cyber innovations to provide verifiable security properties and guarantees of physical functions to build a more cyber secure, resilient and efficient micro-electronics supply chain.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2025

TInCup

SAND2025-11464O TInCuP (Tag Invoked Customization Points) is a modern, header-only C++20 library that addresses the boilerplate problem in tag invoke based customization points. It provides comprehensive code generation and verification tools. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

von Winckel, Gregory [Sandia National Lab. (SNL-CA↗
NASA NTRS2009

Proceedings of the Third International Workshop on Proof-Carrying Code and Software Certification

This NASA conference publication contains the proceedings of the Third International Workshop on Proof-Carrying Code and Software Certification, held as part of LICS in Los Angeles, CA, USA, on August 15, 2009. Software certification demonstrates the reliability, safety, or security of software systems in such a way that it can be checked by an independent authority with minimal trust in the techniques and tools used in the certification process itself. It can build on existing validation and verification (V&V) techniques but introduces the notion of explicit software certificates, Vvilich contain all the information necessary for an independent assessment of the demonstrated properties. One such example is proof-carrying code (PCC) which is an important and distinctive approach to enhancing trust in programs. It provides a practical framework for independent assurance of program behavior; especially where source code is not available, or the code author and user are unknown to each other. The workshop wiII address theoretical foundations of logic-based software certification as well as practical examples and work on alternative application domains. Here "certificate" is construed broadly, to include not just mathematical derivations and proofs but also safety and assurance cases, or any fonnal evidence that supports the semantic analysis of programs: that is, evidence about an intrinsic property of code and its behaviour that can be independently checked by any user, intermediary, or third party. These guarantees mean that software certificates raise trust in the code itself, distinct from and complementary to any existing trust in the creator of the code, the process used to produce it, or its distributor. In addition to the contributed talks, the workshop featured two invited talks, by Kelly Hayhurst and Andrew Appel. The PCC 2009 website can be found at http://ti.arc.nasa.gov /event/pcc 091.

Ewen, Denney, W.↗
DOE OSTI2021

Tamper-Indicating Enclosures with Visually Obvious Tamper Response

Sandia National Laboratories is developing a way to visualize molecular changes that indicate penetration of a tamper-indicating enclosure (TIE). Such "bleeding" materials (analogous to visually obvious, colorful bruised skin that doesn't heal) allows inspectors to use simple visual observation to readily recognize that penetration into a material used as a TIE has been attempted, without providing adversaries the ability to repair damage. Such a material can significantly enhance the current capability for TIEs, used to support treaty verification regimes. Current approaches rely on time-consuming and subjective visual assessment by an inspector, external equipment, such as eddy current or camera devices, or active approaches that may be limited due to application environment. The complexity of securing whole volumes includes: (1) enclosures that are non-standard in size/shape; (2) enclosures that may be inspectorate- or facility-owned; (3) tamper attempts that are detectable but difficult or timely for an inspector to locate; (4) the requirement for solutions that are robust regarding reliability and environment (including facility handling); and (5) the need for solutions that prevent adversaries from repairing penetrations. The approach is based on a transition metal ion solution within a microsphere changing color irreversibly when the microsphere is ruptured. Investigators examine 3D printing of the microspheres as well as the spray coating formulation. The anticipated benefits of this work are passive, flexible, scalable, cost-effective TIEs with obvious and robust responses to tamper attempts. This results in more efficient and effective monitoring, as inspectors will require little or no additional equipment and will be able to detect tamper without extensive time-consuming visual examination. Applications can include custom TIEs (cabinets or equipment enclosures), spray-coating onto facility-owned items, spray-coating of walls or structures, spray-coatings of circuit boards, and 3D-printed seal bodies. The paper describes research to-date on the sensor compounds and microspheres.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗