Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “THEFT”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

SURVEILLANCE DETECTION FOR TRANSPORTATION OPERATIONS PERSONNEL TO PREVENT HIJACKING, THEFT, SABOTAGE, AND MALICIOUS SECURITY EVENTS DURING TRANSPORTING NUCLEAR MATERIAL

The secure transportation of high-consequence materials, including nuclear and radiological assets, is a critical global priority in the face of escalating terrorism, security threats, and violent protests targeting these operations. Effective surveillance detection—the ability to identify, assess, and respond to potential threats across a continuum of scenarios—is paramount in addressing these challenges. This paper outlines a phased, multi-tiered training program designed to strengthen the surveillance detection capabilities of organizations responsible for nuclear material transport. The proposed training program adopts a progressive approach, gradually increasing in technical complexity to provide participants with comprehensive knowledge and tools for implementing robust security strategies. It targets a wide spectrum of stakeholders, including competent authorities, regulators, inspectors, shippers, carriers, law enforcement, and emergency response personnel, equipping them to plan, evaluate, and safeguard nuclear material transportation effectively. Each phase of the program emphasizes distinct elements of the surveillance detection continuum and transport security, focusing on critical topics such as threat identification, adversary task timelines, protective methodologies, and attack mitigation strategies. The training framework is anchored in technical exchanges and scenario-driven courses that reflect real-world complexities and challenges. By addressing the surveillance detection continuum comprehensively—from early threat assessment to active countermeasures—the program reinforces global efforts to secure nuclear assets. It aligns with international security objectives and fosters a strong security culture within participating organizations, ensuring personnel are prepared to counter potential threats and maintain the safe, secure movement of these materials. Ultimately, this initiative aims to enhance preparedness, security, and response capabilities, supporting the global mission to safeguard high-consequence materials against evolving threats.

Zineddin, Dr. Z. [ORNL] (ORCID:0009000848740725)↗

LLNL Contribution to Sandia Used Fuel Disposition - Security March 2011 Deliverable

Cleary [2007] divides the proliferation pathway into stages: diversion, facility misuse, transportation, transformation, and weapons fabrication. King [2010], using Cleary's methodology, compares a deepburn fusion-driven blanket containing weapons-grade plutonium with a PWR burning MOX fuel enrichments of 5-9%. King considers the stages of theft, transportation, transformation, and nuclear explosive fabrication. In the current study of used fuel storage security, a similar approach is appropriate. First, one must consider the adversary's objective, which can be categorized as on-site radionuclide dispersion, theft of material for later radionuclide dispersion, and theft of material for later processing and fabrication into a nuclear explosive. For on-site radionuclide dispersion, only a single proliferation pathway stage is appropriate: dispersion. That situation will be addressed in future reports. For later radionuclide dispersion, the stages are theft, transportation, and transformation (from oxide spent fuel containing both fission products and actinides to a material size and shape suitable for dispersion). For later processing and fabrication into a nuclear explosive, the stages are theft (by an outsider or by facility misuse by an insider), transportation, transformation (from oxide spent fuel containing both fission products and actinides to a metal alloy), and fabrication (of the alloy into a weapon). It should be noted that the theft and transportation stages are similar, and possibly identical, for later radionuclide dispersion and later processing and fabrication into a nuclear explosive. Each stage can be evaluated separately, and the methodology can vary for each stage. For example, King starts with the methodology of Cleary for the theft, transportation, transformation, and fabrication stages. Then, for each stage, King assembles and modifies the attributes and inputs suggested by Cleary. In the theft (also known as diversion) stage, Cleary has five high-level categories (material handling during diversion, difficulty of evading detection by the accounting system, difficulty of evading detection by the material control system, difficulty of conducting undeclared facility modifications for the purpose of diverting nuclear material, and difficulty of evading detection of the facility modifications for the purposes of diverting nuclear material). Each category has one or more subcategories. For example, the first category includes mass per significant quantity (SQ) of nuclear material, volume/SQ of nuclear material, number of items/SQ, material form (solid, liquid, powder, gas), radiation level in terms of dose, chemical reactivity, heat load, and process temperature. King adds the following two subcategories to that list: SQs available for theft, and interruptions/changes (normal and unexpected) in material stocks and flows. For the situation of an orphaned surface storage facility, this approach is applicable, with some of the categories and subcategories being modified to reflect the static situation (no additions or removals of fuel or containers). In addition, theft would require opening a large overpack and either removing a full container or opening that sealed container and then removing one or more spent nuclear fuel assemblies. These activities would require time without observation (detection), heavy-duty equipment, and some degree of protection of the thieves from radiological dose. In the transportation stage, Cleary has two high-level categories (difficulty of handling material during transportation, and difficulty of evading detection during transport). Each category has a number of subcategories. For the situation of an orphaned surface storage facility, these categories are applicable. The transformation stage of Cleary has three high-level categories (facilities and equipment needed to process diverted materials; knowledge, skills, and workforce needed to process diverted materials; and difficulty of evading detection of transformation activities). Again, there are subcategories. King [2007] adds a fourth high-level category: time required to transform the materials. For the situation of an orphaned surface storage facility, the categories are applicable, but the evaluations of each category and subcategory will be significantly different for later radionuclide dispersion than for later processing and fabrication into a nuclear explosive. The fabrication stage of Cleary has three high-level categories (difficulty associated with design, handling difficulties, and knowledge and skills needed to design and fabricate). King replaces the first two high-level categories with the Figure of Merit for Nuclear Explosives Utility (FOM), with subcategories of bare critical mass, heat content of transformed material, dose rate of transformed material, and SQs available for theft. The next section of this report describes the FOM in more detail.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Supply Chain-Based Solution to Prevent Fuel Tax Evasion: Final Report

The primary source of funding for the United States transportation system is derived from motor fuel and other highway use taxes. Loss of revenue attributed to fuel-tax evasion has been assessed to be somewhere between 1 billion and 3 billion per year. Any solution that addresses this problem needs to include not only the tax-collection agencies and auditors, but also the carriers transporting oil products and the carriers customers. This report presents a system developed by the Oak Ridge National Laboratory (ORNL) for the Federal Highway Administration which has the potential to reduce or eliminate many fuel-tax evasion schemes. The solution balances the needs of tax-auditors and those of the fuel-hauling companies and their customers. The system has three main components. The on-board subsystem combined sensors, tracking and communication devices, and software (the on-board Evidential Reasoning System, or obERS) to detect, monitor, and geo-locate the transfer of fuel among different locations. The back office sub-system (boERS) used self-learning algorithms to determine the legitimacy of the fuel loading and offloading (important for tax auditors) and detect potential illicit operations such as fuel theft (important for carriers and their customers, and may justify the deployment costs). The third sub-system, the Fuel Distribution and Auditing System or FDAS, is a centralized database, which together with a user interface allows tax auditors to query the data submitted by the fuel-hauling companies and correlate different parameters to quickly identify any anomalies. Industry partners included Barger Transport of Weber City, Virginia (fleet); Air-Weigh, of Eugene, Oregon (and their wires and harnesses); Liquid Bulk Tank (LBT) of Omaha, Nebraska (three five-compartment trailers); and Innovative Software Engineering (ISE) of Coralville, Iowa(on-board telematics device and back-office system). ORNL conducted a pilot test with the three instrumented vehicles collecting real-world data during an eight-month period (October 2014 to June 2015). The vehicles logged a total of 375,000 miles and transported more than 7.5 million gallons of fuel. The drivers entered information on the telematics device about 77% of the time, with about 15% (10%) of the data showing at least one compartment with loading (offloading) valve activity, but not driver information entry for that compartment. Seven events (or about 0.7% of the trips) were identified by the boERS as having a missing fuel diversion number. The solution developed and tested in the pilot test had federal- and state-level tax auditors as its main audience. Nonetheless, the technology has to be adopted by the fuel carriers and therefore the solution had to address the needs of fuel-hauling companies and their customers (i.e., fuel theft and cocktailing). Sensors in the hatches allowed the obERS recognize when one of those were opened (always a suspicious activity, unless it happens at locations where maintenance is performed on the vehicle). The fuel-theft issue was addressed by a self-learning algorithm deployed on the boERS that continuously processed the data from the field to construct probability distributions of measures such as elapsed time of fuel loading and offloading by driver, vehicle, and compartment, valve actuation sequence, elapsed time between the first two valve actuations (by driver, compartment, and location), and other parameters. Probability thresholds, which can be set up by the carrier, determined how to classify the observed events. The boERS also kept track of valve sequencing at a given location and analyzed these actuations to help identify any suspicious activities. Technical and economic recommendations include: a) simplification of the driver data-entry task; b) reduction of system deployment cost; c) addition of capabilities that make the system more appealing to industry (i.e., identify and avoid fuel misdelivery); and d) incorporation of additional capabilities to the FDAS. Path to commercialization recommendations include: a) identify a company willing to further develop, test, and certify a hardened system with a price point the market will bear; b).transfer ERS to licensee; c) establish a fleet or fleets who want this technology for carrier benefits or trailer manufacturer who wants to offer it as optional technology; and d) identify a location for the deployment of FDAS.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Insider Threat - Material Control and Accountability Mitigation (Presentation)

Why is the insider a concern? There are many documented cases of nuclear material available for sale - there are more insider diversions than outsider attacks and more than 18 documented cases of theft or loss of plutonium or highly enriched uranium. Insider attributes are: have access, has authority, possesses knowledge, works with absence of timeline, can test system, and may act alone or support a team. Material control and accountability (MC&A) is an essential part of an integrated safeguards system. Objectives of MC&A are: (1) Ongoing confirmation of the presence of special nuclear material (SNM) in assigned locations; (2) Prompt investigation of anomalies that may indicate a loss of SNM; (3) Timely and localized detection of loss, diversion, or theft of a goal quantity; (4) Rapid assessment and response to detection alarms; and (5) Timely generation of information to aid in the recovery of SNM in the event of an actual loss, diversion, or theft from the purview of the MC&A system. Control and accountability of material, equipment, and data are essential to minimizing insider threats.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Regulatory Considerations for Domestic Reprocessing Facility Physical Security

U.S. advanced non-light-water reactor vendors may pursue collocated on-site reprocessing activities. Therefore, these facilities are likely to possess formula quantities, or Category I quantities, of special nuclear material (SNM) during normal operations. The U.S. Nuclear Regulatory Commission (U.S. NRC) has yet to formally establish a regulatory framework for commercial reprocessing. While Category I requirements would explicitly not apply in this circumstance under current regulatory requirements, regulatory certainty does not exist. A novel framework should be developed to ensure public health and safety while also risk-informing the physical security requirements. This report reviews the relevant background of related rulemaking activities and proposes risk-informed physical protection requirements to satisfy these objectives. Insights from NRC security-related rulemaking activities provide a substantial technical basis to approach potential establishment of physical security requirements for reprocessing facilities. If a licensee can provide justification that the material satisfies a sufficient self-protecting radiation dose threshold, the material may not be subject to theft or diversion requirements and only potential sabotage requirements would apply. Furthermore, if the material can be justified to be moderately dilute, a set of risk-informed requirements could provide adequate protection of public health and safety. A revised performance objective for prevention of theft of moderately dilute Category I SNM may be detection to allow prompt recovery by a local law enforcement agency. However, a significant caveat to the proposed categorization scheme is the unknown integration of radiological sabotage with requirements for the protection against theft. Future licensees should consult with the NRC regarding treatment of this regulatory topic. Additionally, the self-protecting radiation dose threshold (either the existing or a proposed future threshold) would need to be considered. An integrated approach may apply graded potential requirements for protection against the design basis threat of radiological sabotage currently applicable to commercial nuclear power plants and Category I SNM facilities defined within 10 CFR 73.1(a).

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Diversion Path Analysis: A Proposed Methodology to Develop an MC&A Approach for Liquid-Fueled Molten Salt Reactors

Nuclear material control and accounting (MC&A) is a critical element of both the US Nuclear Regulatory Commission (NRC) and US Department of Energy (DOE)’s domestic safeguards and security requirements. NRC licensees are required, under Title 10 of the Code of Federal Regulations (10 CFR) Part 74 to establish and maintain an MC&A program that captures and records the quantities and locations of special nuclear material (SNM) at the facility. Along with physical protection, MC&A is a key element of domestic nuclear material safeguards that enables the NRC to ensure that SNM is controlled and accounted for. SNM, per 10 CFR Part 74, refers to plutonium, 233 U, and uranium enriched in the isotope 233 U or 235 U, but does not include source material. Periodic physical inventories, coupled with material balance evaluations, are effective and demonstrated tools to account for and detect theft or diversion of SNM in facilities containing SNM in bulk material form (i.e., not in discrete, countable items). Historically in the United States, these types of facilities have included fuel fabrication, conversion, and enrichment facilities. In comparison, reactors have relied on item counting of assemblies and control of SNM while in containment (e.g., a sealed reactor pressure vessel) because, to date, reactor fuel has been in item form. In liquid-fueled molten salt reactors (MSRs), unlike traditional light water reactors (LWRs) or bulk facilities, bulk SNM quantities can change significantly during operation as a result of depletion and transmutation. This introduces challenges to the use of traditional periodic physical inventories and material balance evaluations to detect theft or diversion of SNM in reactors that use SNM in bulk material form. Liquid-fueled (i.e., salt-fueled) MSR facilities are MSRs that use SNM within a salt eutectic as the fuel. The SNM is in a bulk material form any time it is outside of fresh or spent fuel storage containers. Some examples of when SNM will be in bulk form in the facility are during addition of fuel to the reactor system, while fuel is circulating in operation, and while fuel is in a drain tank. Periodic physical inventories and material balance evaluations can likely be effectively applied to many portions of an MSR facility, including all areas where depletion and transmutation are not significantly changing the quantities of SNM within the control area. Within an MSR facility, this would include fresh fuel receipt and loading, waste streams that may contain SNM, irradiated fuel storage outside of the reactor core, and any irradiated fuel processing that may happen after SNM has been removed from the reactor. All of these process steps could rely on measurements of SNM quantities compared with documented inventories. Any discrepancies from predicted (i.e., book) inventories and measured inventories could be quantified as inventory differences, consistent with traditional MC&A guidance from the NRC (e.g., in NUREG-1065 Revision 2, NUREG-2159 Revision 1, and RG 5.29 Revision 2). Within the reactor system, additions and removals to the book inventory include depletion of the SNM (e.g., fission of 235 U), which complicates the use of physical inventories. SNM control, however, can also likely be effectively applied to detect theft of SNM throughout a liquid-fueled MSR facility. To complement these approaches, prior technical reports have identified that a diversion path analysis may be a useful, risk-informed, and performance-based tool to determine suitable elements of an MC&A approach for the reactor system within a liquid-fueled MSR facility.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Study on Application of Distributed Network of Sensors with List Mode for NMAC Literature Review

Nuclear material accounting and control (NMAC) for nuclear security detects, deters, and resolves questions related to unauthorized removal (i.e. theft) or misuse of nuclear material. NMAC also serves as a key insider threat mitigation measure and aids in recovery of nuclear material that is missing. Effective nuclear security depends on NMAC for timely and accurate information about nuclear material types, quantities, and locations. Bulk nuclear material processing facilities, however, present unique challenges for effective NMAC due to the presence of large quantities of material in-process and the accumulation of residual material holdup within process equipment. These holdup accumulations can obscure accurate physical inventory taking and complicate efforts to resolve NMAC irregularities at the facility level. Bulk material monitoring systems often rely on material balance calculations and indirect measurement techniques, which may mask protracted theft of smaller amounts of nuclear material. These monitoring limitations have generated increased interest in continuous monitoring technologies, including distributed non-destructive assay (NDA) sensor networks capable of providing real-time or near-real-time measurement of material movement and accumulation within bulk processing environments. Recent advancements in distributed networks of NDA radiation detectors and sensing technologies provide an opportunity to address these limitations. Although such distributed sensor networks have been implemented in select facilities for IAEA Safeguards applications, their potential for supporting NMAC functions specifically tailored to nuclear security objectives remains largely unexplored. Furthermore, emerging list-mode data acquisition technologies have reached high technology readiness levels, enabling time-correlated detection of nuclear events across multiple temporal scales. These capabilities provide enhanced opportunities for accurate holdup measurement, continuous process monitoring, and improved detection of material theft or misuse over time. The increasing global expansion of civil nuclear power and development of related bulk material processing facilities, including those supporting high-assay low-enriched uranium (HALEU) and other advanced reactor fuel fabrication, further increases the need for advanced measurement and monitoring strategies for NMAC.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

ILLICIT TRANSIT INTERDICTION GLOBAL ANALYSIS

This study aims to enhance the security of radioactive materials during transport by analyzing commonalities in cargo thefts conducted by non-state groups such as thieves and terrorists. This research focuses on identifying patterns and trends in the methods used to steal high-value cargo, with the goal of applying these insights to improve transport security of radioactive materials. Key questions addressed include the frequency of specific tools, techniques, and insider involvement in thefts, as well as the use of weapons, electronic jamming equipment, and specialized tools. Findings will inform security design improvements and industry practices to mitigate vulnerabilities. The study involves a comprehensive review of literature and case studies, utilizing data sources from 2018 to 2023. Articles will be selected based on their relevance to thefts of valuable cargo in transit, with a focus on incidents involving non-state actors. The methodology will include statistical and inferential analysis to identify trends, with results visualized through pie charts, frequency analyses, and terrain maps. The discussion will highlight the implications of findings and provide actionable recommendations for strengthening security measures. Limitations such as data availability and reporting inconsistencies will be acknowledged. Suggestions for future improvements will be constructed using existing case studies and expert feedback. The study’s outcomes aim to raise awareness within the industry, inform policy decisions, and enhance security protocols for radioactive material transport. Metrics for impact include the potential publication of findings, presentations at conferences to raise awareness, and the subsequent actions taken by stakeholders based on the research. By identifying trends and vulnerabilities and suggesting improvements, this research contributes to preventing the illicit use of nuclear and radiological materials.

Zineddin, Dr. Z. [ORNL] (ORCID:0009000848740725)↗

Secure Data Transfer Guidance for Industrial Control and SCADA Systems

This document was developed to provide guidance for the implementation of secure data transfer in a complex computational infrastructure representative of the electric power and oil and natural gas enterprises and the control systems they implement. For the past 20 years the cyber security community has focused on preventative measures intended to keep systems secure by providing a hard outer shell that is difficult to penetrate. Over time, the hard exterior, soft interior focus changed to focus on defense-in-depth adding multiple layers of protection, introducing intrusion detection systems, more effective incident response and cleanup, and many other security measures. Despite much larger expenditures and more layers of defense, successful attacks have only increased in number and severity. Consequently, it is time to re-focus the conventional approach to cyber security. While it is still important to implement measures to keep intruders out, a new protection paradigm is warranted that is aimed at discovering attempted or real compromises as early as possible. Put simply, organizations should take as fact that they have been, are now, or will be compromised. These compromises may be intended to steal information for financial gain as in the theft of intellectual property or credentials that lead to the theft of financial resources, or to lie silent until instructed to cause physical or electronic damage and/or denial of services. This change in outlook has been recently confirmed by the National Security Agency [19]. The discovery of attempted and actual compromises requires an increased focus on monitoring events by manual and/or automated log monitoring, detecting unauthorized changes to a system's hardware and/or software, detecting intrusions, and/or discovering the exfiltration of sensitive information and/or attempts to send inappropriate commands to ICS/SCADA (Industrial Control System/Supervisory Control And Data Acquisition) systems.

03 NATURAL GAS↗

Insider Threat - Material Control and Accountability Mitigation

The technical objectives of nuclear safeguards are (1) the timely detection of diversion of significant quantities of nuclear material from peaceful uses to the manufacture of nuclear weapons or other nuclear explosive devices or for purposes unknown and (2) the deterrence of such diversion by the risk of early detection. The safeguards and security program must address both outsider threats and insider threats. Outsider threats are primarily addressed by the physical protection system. Insider threats can be any level of personnel at the site including passive or active insiders that could attempt protracted or abrupt diversion. This could occur by an individual acting alone or by collusion between an individual with material control and accountability (MC&A) responsibilities and another individual who has responsibility or control within both the physical protection and the MC&A systems. The insider threat is one that must be understood and incorporated into the safeguards posture. There have been more than 18 documented cases of theft or loss of plutonium or highly enriched uranium. The insider has access, authority, and knowledge, as well as a set of attributes, that make him/her difficult to detect. An integrated safeguards program is designed as a defense-in-depth system that seeks to prevent the unauthorized removal of nuclear material, to provide early detection of any unauthorized attempt to remove nuclear material, and to rapidly respond to any attempted removal of nuclear material. The program is also designed to support protection against sabotage, espionage, unauthorized access, compromise, and other hostile acts that may cause unacceptable adverse impacts on national security, program continuity, the health and safety of employees, the public, or the environment. Nuclear MC&A play an essential role in the capabilities of an integrated safeguards system to deter and detect theft or diversion of nuclear material. An integrated safeguards system with compensating mitigation can decrease the risk of an insider performing a malicious act without detection.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

System Effectiveness

An effective risk assessment system is needed to address the threat posed by an active or passive insider who, acting alone or in collusion, could attempt diversion or theft of nuclear material. It is critical that a nuclear facility conduct a thorough self-assessment of the material protection, control, and accountability (MPC&A) system to evaluate system effectiveness. Self-assessment involves vulnerability analysis and performance testing of the MPC&A system. The process should lead to confirmation that mitigating features of the system effectively minimize the threat, or it could lead to the conclusion that system improvements or upgrades are necessary to achieve acceptable protection against the threat. Analysis of the MPC&A system is necessary to understand the limits and vulnerabilities of the system to internal threats. Self-assessment helps the facility be prepared to respond to internal threats and reduce the risk of theft or diversion of nuclear material. MSET is a self-assessment or inspection tool utilizing probabilistic risk assessment (PRA) methodology to calculate the system effectiveness of a nuclear facility's MPC&A system. MSET analyzes the effectiveness of an MPC&A system based on defined performance metrics for MPC&A functions based on U.S. and international best practices and regulations. A facility's MC&A system can be evaluated at a point in time and reevaluated after upgrades are implemented or after other system changes occur. The total system or specific subareas within the system can be evaluated. Areas of potential performance improvement or system upgrade can be assessed to determine where the most beneficial and cost-effective improvements should be made. Analyses of risk importance factors show that sustainability is essential for optimal performance. The analyses reveal where performance degradation has the greatest detrimental impact on total system risk and where performance improvements have the greatest reduction in system risk. The risk importance factors show the amount of risk reduction achievable with potential upgrades and the amount of risk reduction actually achieved after upgrades are completed. Applying the risk assessment tool gives support to budget prioritization by showing where budget support levels must be sustained for MC&A functions most important to risk. Results of the risk assessment are also useful in supporting funding justifications for system improvements that significantly reduce system risk.

99 GENERAL AND MISCELLANEOUS↗

A Qualitative Assessment of Diversion Scenarios for an Example Sodium Fast Reactor Using the GEN IV PR&PP Methodology

FAST REACTORS;NUCLEAR ENERGY;NUCLEAR MATERIALS MANAGEMENT;PROLIFERATION;SAFEGUARDS;THEFT; A working group was created in 2002 by the Generation IV International Forum (GIF) for the purpose of developing an internationally accepted methodology for assessing the Proliferation Resistance of a nuclear energy system (NES) and its individual elements. A two year case study is being performed by the experts group using this methodology to assess the proliferation resistance of a hypothetical NES called the Example Sodium Fast Reactor (ESFR). This work demonstrates how the PR and PP methodology can be used to provide important information at various levels of details to NES designers, safeguard administrators and decision makers. The study analyzes the response of the complete ESFR nuclear energy system to different proliferation and theft strategies. The challenges considered include concealed diversion, concealed misuse and 'break out' strategies. This paper describes the work done in performing a qualitative assessment of concealed diversion scenarios from the ESFR.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

In-Device Delay: Introduction to Obscurant Physcial Protection System

The Office of Radiological Security (ORS) In-Device Delay (IDD) program has undertaken a project to research and develop a novel protection system for industrial irradiators that contain high-activity Co-60 sources. Based on adversary testing conducted by ORS, it is was determined that to successfully accomplish the theft of the target material, the adversary will require visual contact of the sources and source rack located at the bottom of the pool. Therefore, if a means of obscuring or visually hiding the sources in the pool can be achieved (while adhering to facility operations, safety, and regulatory requirements), then illicit source theft will be significantly hindered. This project aims to develop a low-cost, non-propriety obscurant that, when an adversary action is detected, the obscurant will be deployed into the pool quickly, rendering visual observation of the source problematic; however, this obscurant will not otherwise disturb the sources, source rack, and filtration system. The obscurant will remain in the pool until removed by another process.

61 RADIATION PROTECTION AND DOSIMETRY↗

Development of an international security standard for devices containing high-activity radioactive sources

Radioisotopes such as Cs-137 and Co-60 are utilized in various medical, industrial, and research applications. This radiological material can be a theft or sabotage target, which necessitates a certain level of security to adequately protect it. The presented work will explore the necessity of an international security standard for devices used in clinical settings that contain high activity radiological material and the facilities that contain these devices. This standard intends to complement existing safety standards; however, it serves a very different purpose: to reduce the threat of radiological theft and sabotage while taking into full consideration the effect on the patient, user safety, and patient workflow with the aim to minimize the unwanted effects of the security measures. The proposed standard will complement existing International Atomic Energy Agency (IAEA) guidance, published in the IAEA Nuclear Security Series. While those documents primarily focus on the state, competent authorities, and regulatory agencies, the proposed industry standard will involve device manufacturers, source producers, and medical staff.

62 RADIOLOGY AND NUCLEAR MEDICINE↗

Canada-US Blended Cyber-Physical Security Exercise (Final Report)

The Canada-US Blended Cyber-Physical Exercise was a successful, first of its kind, multiorganization and multi-laboratory exercise that culminated years of complex system development and planning. The project aimed to answer three driving research questions, (1) How do cyberattacks support malicious acts leading to theft or sabotage [at a nuclear site]? (2) What are aspects of an effective combined cyber-physical response? (3) How to evaluate effectiveness of that response? Which derived the following primary objectives, 1. The May 2023 Cyber-Physical Exercise shall present a cyber-attack scenario that supports malicious acts leading to theft or sabotage. 2. The May 2023 Cyber-Physical Exercise shall define aspects of an effective combined cyber-physical response. 3. Analysis of the May 2023 Cyber-Physical Exercise shall evaluate the effectiveness of the incident response against pre-established exercise evaluation criteria. 4. Analysis of the May 2023 Cyber-Physical Exercise shall assess the effectiveness of the evaluation criteria itself. 5. Exercises shall be performed in a real-life environment. The team believes these objectives were met, and the evidence will be presented in this report. Due to the novelty of the exercise, there were several lessons learned that will be presented in this report.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Recommendations for Secure Transport: Material Conveyance Physical Protection Technology

Nuclear material is at higher risk of theft and sabotage during transport than during any other phase of the nuclear fuel lifecycle. Nuclear materials are transported in the public domain where adversaries have an upper hand by taking advantage of the time and location of the theft or sabotage attempt. As such, even modest threat profiles for transport of nuclear and radioactive material can require substantial detection and delay measures to support timely response. Conveyance tracking augmented with technology that improves on-the-scene situational awareness at a remote monitoring center has been adopted as a de-facto standard approach for transportation security. At present, the extended tracking and situational awareness capabilities needed for a nuclear material shipment, as is provided by the purpose designed, Transportation – Security, Tracking and Reporting (T-STAR) System, do not exist in a single commercial off-the-shelf (COTS) solution. Typically, the COTS systems that excel in one area are deficient in other areas, presenting challenges to designing well-rounded, robust systems. Still, COTS solutions can offer the basic set of tracking and situational awareness capabilities by indicating last update time, current location, and route taken. By incorporating vehicle and driver performance measures via the vehicle’s controller area network (CAN bus) and video alongside other data streams allows telemetry and other shipment information to be assessed in novel ways.This paper describes the operation, capabilities and features of various conveyance protection systems and approaches, assesses emerging technologies and how they could be used through a unified interface, and enumerates additional ways to provide early detection using vehicle, onboard technologies, effective delay technologies and approaches and simple equipment to improve protection during transport.

Shannon, Michael↗