Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “time security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Special Nuclear Material Hold-up Measurement

Facilities that process special nuclear material (SNM) generally have a variety of equipment, shielding, and nearby radiation sources, which can pose challenges when performing nondestructive analysis (NDA) within the facility, as shown in Figure 1. In this figure, the left image features two individuals performing a holdup measurement of a large duct at a posting, utilizing a detector probe attached to a yardstick to reduce some aspect of the measurement uncertainty. Note that the distance to the holdup within the pipe from the posting cannot be accounted for. The right image similarly features several individuals guiding a holdup measurement of a ducting pipe several meters overhead, by attaching a detector probe to a long handle and lining that up with a posting on the outside of the pipe. SNM processing begets SNM holdup, and this difficulty with accurate NDA can result in unaccounted accumulation of SNM holdup within a process or area. Normal SNM processing operations can accumulate holdup within filters, pumps, pipes, ducts, other equipment, and facility support systems, as demonstrated by Figure 2. It is important for deactivation and decommissioning (D&D) gloveboxes and their ancillary equipment, material accountability, criticality safety, facility operations, waste management, radiation safety, and security to accurately characterize the location, composition, and quantity of this holdup to minimize these associated risks and potential diversion pathways. Current NDA techniques for assay of holdup are expensive, time consuming, and have high uncertainty.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2024

A Computational Review of Privacy-Preserving Mechanisms for the Smart Grid

Smart grid technologies have rapidly become one of the largest and most comprehensive sources of data for the modern utility. For the most part, data streams are seen as an essential tool that enable utilities to carry their day-to-day business operations, but they also create the need for efficient and secure data management strategies. In the context of the smart grid, ensuring data privacy is becoming an increasing concern due to a combination of factors that range from shifts in operational paradigms and rapid technology evolution to changes in legislation. Furthermore, researchers have highlighted the risks associated with improperly protected energy records. For example, energy consumption data from homes could be used to infer the behaviors and habits of home occupants through activity recognition or user profiling (Fan, 2017), which may lead to unfair service pricing, targeted advertising, or other personal security violations. Similarly, Electric Vehicles’ (EVs) charging metadata could be used to reveal private information about the owner such as their payment methods, preferred charging stations, and other locational and timing information that could be used to reconstruct the vehicle owner’s behaviors. The privacy of user data, even when used for statistical analysis or machine learning training processes, also needs to be carefully considered, as an individual’s private traits may still be vulnerable if their inclusion/exclusion greatly impacts the result or could be linked to a public dataset through cross-reference. The breach of user privacy also has severe impacts for organizations that store, transmit, or work on the data in the form of diminishing the public’s trust in them while potentially incurring legal consequences (e.g., fines and suspensions under the European Union General Data Protection Regulation, Health Insurance Portability and Accountability Act, etc.). Because of these risks, several privacy-preserving mechanisms are available to help organizations comply with privacy legislations and prevent the unauthorized and malicious use of user data. In light of these concerns, this report focuses on performing a computational review of privacy-preserving mechanisms that have received a significant amount of interest in literature. It specifically focuses on 1) homomorphic encryption, 2) zero-knowledge proofs, 3) differential privacy, and 4) federated learning. It is worth noting that although many of the methods presented in this document rely on cryptographic primitives, their intent is not to provide perfect secrecy, but rather to enable users to maintain privacy, and thus they shall not be compared or equated to other constructs that are aimed to address cybersecurity constructs.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Reflections on the role of MOOSE in Unleashing a Golden Era of American Energy Innovation

As the use of artificial intelligence spreads across most professions, projections for the expected energy consumption of these virtual assistants/workers dictate a large increase in energy production. Recent published estimates refer to up to a necessary tripling of nuclear energy production~\cite{iaea}. % TODO add citations This is supported by the new administration, calling on February 5th to "unleash Commercial Nuclear Power in the United States" and to launch the "long-awaited American nuclear renaissance"~\cite{doe-order}. The Department of Energy (DOE) is tasked with "enabl[ing] the rapid deployment and export of next generation nuclear technology". In terms of research of development, we must seek to "unleash American Energy Innovation", by "focus[ing] our time and resources on technologies that will advance basic science, grow America’s scientific leadership, reduce costs for American families [...]". To that end, the Department will "prioritize affordable, reliable, and secure energy technologies, including fossil fuels, advanced nuclear, geothermal, and hydropower." Following this call to action, we elect to examine the role of the open-source Multiphysics Object Oriented Simulation Environment (MOOSE)~\cite{moose3} in meeting the stated goals.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2026

Collision Tracking in OpenMC: Methods and Applications in Neutron Noise, Neutron Imaging, Time-of-Flight, and Multiplicity Counting

We present the development and application of a collision tracking feature within the OpenMC Monte Carlo particle transport code, designed for diverse applications such as neutron spectroscopy, scatter camera system, neutron noise, and multiplicity counting simulations. This feature enables the tracking of individual particle collisions, with potential applications in nuclear nonproliferation, reactor physics, and nuclear security. Additionally, the feature holds potential for the calibration of neutron detectors, specifically in converting light output into energy deposited within the detectors. The implementation consists of a set of filters—such as reaction type, energy, cell, and material—that constrain the set of collisions that are tracked, extensions to the Python API to enable simple input specification, and support for writing either OpenMC’s native HDF5-based format or the Monte Carlo particle list format. This feature was added to the official OpenMC release in version 0.15.3. In this work, the feature will be applied to showcase scenarios such as time-of-flight simulations, scatter-camera imaging for neutron source localization, neutron-noise analysis to extract integral kinetic parameters such as the prompt decay constant α, and multiplicity counting to estimate the mass of special nuclear materials. Ultimately, this feature aims to expand the application scope of open-source Monte Carlo particle transport codes such as OpenMC.

Monte Carlo code↗
DOE OSTI2020

Evaluating software defined networking solutions to reduce the digital attack surface of nuclear security systems

Most nuclear security systems used today were not designed for today’s threat environment. Systems that were intended to be stand alone are now interconnected. Devices that have a single purpose are built on multi-purpose platforms and communication protocols that, while effective, have no ability to authenticate authorized versus unauthorized commands. These attributes provide an attacker significant ability to affect the system, pivot throughout the interconnected networks, and remain undetected if he/she is able to compromise a single node. Software defined networking (SDN) has been used for years by information technology (IT) cloud service providers to quickly provision or remove servers or other systems to meet changing demand. The same concept has recently been applied to operational technology (OT) systems to enable very fast failover on critical systems that have stringent and deterministic (<5ms) transmit/receive times. By carefully engineering the communication flows through a network using preplanned routes and specific pathways it is possible to achieve deterministic and extremely reliable message delivery even when components fail. This engineering approach to network design has added security benefits including securing the networking control plane, eliminating network scanning and mapping, inhibiting ARP spoofing and host masquerading, eliminating unauthorized network pivoting and enabling greater situational awareness on the network. SDN in OT environments is new but early testing in electrical power and other critical infrastructure has shown it to be a very powerful tool for building reliable networks and reducing the digital attack surface of the network. The authors tested a software defined network switch on a simple physical protection system with components commonly found in nuclear security systems and found improved mitigations to denial of service attacks, lateral movement and network reconnaissance. The paper details the tests and their results.

Cyber security, Nuclear security, software defined↗
DOE OSTI2020

RAMSeS: Rapid Analysis of Mission Software Systems

Over the past few decades, software has become ubiquitous as it has been integrated into nearly every aspect of society, including household appliances, consumer electronics, industrial control systems, public utilities, government operations, and military systems. Consequently, many critical national security questions can no longer be answered convincingly without understanding software, including its purpose, its capabilities, its flaws, its communication, or how it processes and stores data. As software continues to become larger, more complex, and more widespread, our ability to answer important mission questions and reason about software in a timely way is falling behind. Today, to achieve such understanding of third-party software, we rely predominantly on the ability of reverse engineering experts to manually answer each particular mission question for every software system of interest. This approach often requires heroic human effort that nevertheless fails to meet current mission needs and will never scale to meet future needs. The result is an emerging crisis: a massive and expanding gap between the national security need to answer mission questions about software and our ability to do so. Sandia National Laboratories has established the Rapid Analysis of Mission Software Systems (RAMSeS) effort, a collaborative long-term effort aimed at dramatically improving our nation’s ability to answer mission questions about third-party software by growing an ecosystem of tools that augment the human reverse engineer through automation, interoperability, and reuse. Focusing on static analysis of binary programs, we are attempting to identify reusable software analysis components that advance our ability to reason about software, to automate useful aspects of the software analysis process, and to integrate new methodologies and capabilities into a working ecosystem of tools and experts. We aim to integrate existing tools where possible, adapt tools when modest modifications will enable them to interoperate, and implement missing capability when necessary. Although we do hope to automate a growing set of analysis tasks, we will approach this goal incrementally by assisting the human in an ever-widening range of tasks.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2023

Remote inspection of adversary-controlled environments

Remotely monitoring the location and enduring presence of valuable items in adversary-controlled environments presents significant challenges. In this article, we demonstrate a monitoring approach that leverages the gigahertz radio-wave scattering and absorption of a room and its contents, including a set of mirrors with random orientations placed inside, to remotely verify the absence of any disturbance over time. Our technique extends to large physical systems the application of physical unclonable functions for integrity protection. Its main applications are scenarios where parties are mutually distrustful and have privacy and security constraints. Examples range from the verification of nuclear arms-control treaties to the securing of currency, artwork, or data centers.

47 OTHER INSTRUMENTATION↗
DOE OSTI2021

EMS and DMS Integration of the Coordinative Real-time Sub-Transmission Volt-Var Control Tool under High DER Penetration

This paper proposes an applicable approach to deploy the Coordinative Real-time Sub-Transmission Volt-Var Control Tool (CReST-VCT), and a holistic system integration framework considering both the energy management system (EMS) and distribution system management system (DMS). This provides an architectural basis and can serve as the implementation guideline of CReST-VCT and other advanced grid support tools, to co-optimize the operation benefits of DERs and assets in both transmission and distribution networks. Potential communication protocols for different physical domains of a real application is included. Performance and security issues are also discussed, along with specific considerations for field deployment. Finally, the paper presents a viable pathway for CReST-VCT and other advanced grid support tools, which could be integrated in an open-source standardized-based platform that supports distribution utilities.

Nguyen, Quan H.↗
DOE OSTI2026

Ambient ion focusing from a field-free region to a detector: enhanced signal for explosives and drug detection with mass spectrometry

This study demonstrates ion focusing at ambient pressure and increased ion signal by creating a voltage gradient from a field-free region to a detector, thereby improving the detection of chemicals, such as explosives and drugs. At ambient pressure, ion loss and resulting signal reduction pose challenges that limit detection sensitivity in analytical instruments. Techniques to increase sensitivity, such as atmospheric flow tube-mass spectrometry (AFT-MS), extend ion-molecule reaction times but result in significant overall ion loss due to diffusion. Ion manipulation techniques, though challenging at ambient pressure, can mitigate these losses by concentrating ions toward the detector inlet. Using SIMION, ion trajectories were modeled with a voltage gradient applied between a flow tube and a detector, revealing ion focusing at ambient pressure. Experimental verification with an atmospheric flow tube employed both mass spectrometry and Faraday plate detectors to measure ion beam profiles across varying flow rates, tube diameters, and voltage gradients. Application of a voltage gradient effectively directed ions to the axial center of the flow tube, narrowed ion beam width, and increased signal intensity by 5 to 10 times compared to conditions without a voltage gradient. This ion focusing approach shows promise for improving sensitivity in ambient-pressure instruments. This technique has the potential to enhance detection levels in security and forensic applications, with particular benefits for field-portable devices used at checkpoints to identify explosives and drugs.

ambient pressure↗
DOE OSTI2020

Devising novel methods for the controlled synthesis with morphology and size control of scintillator materials

Nanoscale scintillators represent an important class of materials underlying the functioning of high resolution, high ‘light yield’ radiation detection equipment, applicable for medicine in addition to security and environmental monitoring. This current study has focused on the controlled synthesis of Cs 2 ZnX 4 (X = Cl, Br) not only due to its very fast and promising radioluminescence decay time but also because no reliable synthesis protocols have been reported for producing nanoscale motifs of this material, to date. Solution-based methods can be used to synthesize products, possessing different, discrete morphologies with the ability to dictate particle size and shape. Specifically, we have demonstrated that a hot injection technique can be used to fabricate nanoscale rods and plates. Using this method, we systematically studied the effect of varying reaction variables, such as (i) reaction temperature, (ii) surfactants, and (iii) reaction time. As synthesized nanorods of Cs 2 ZnCl 4 possessed lengths of 101.3 ± 24.4 nm with widths of 17.3 ± 4.5 nm, whereas Cs 2 ZnBr 4 , created under identical conditions, were characterized by lengths of 206 ± 50 nm and widths of 26.7 ± 12.6 nm. Ligand-assisted re-precipitation (LARP) was used to produce the corresponding micron-sized particles. Under these conditions, we successfully synthesized spindles and spherical particles of Cs 2 ZnCl 4 with sizes of 1.58 ± 0.16 μm and 1.03 ± 0.34 μm, respectively, whereas plates of Cs 2 ZnBr 4 were prepared with average sizes of 0.76 ± 0.21 μm. High resolution synchrotron mapping, using the hard X-ray nanoprobe at NSLS II, was used to confirm the expected spatial distribution of Cs, Zn, and Cl within the as-produced crystals. Nanorods of Cs 2 ZnCl 4 and Cs 2 ZnBr 4 were subsequently tested for scintillation light yield and decay times. Preliminary results showed that Cs 2 ZnCl 4 maintained a light yield of 100–300 photons per MeV with a fast decay component of 2.6 ns. Finally, the Cs 2 ZnBr 4 analogue did not give rise to any perceptible scintillation emission.

36 MATERIALS SCIENCE↗
DOE OSTI2022

Dynamically tunable multicolor emissions from zero-dimensional Cs 3 LnCl 6 (Ln: europium and terbium) nanocrystals with wide color gamut

This study demonstrates dynamically tunable multicolor emissions from a single component, zero-dimensional (0-D) cesium europium chloride (Cs 3 EuCl 6 ) and cesium terbium chloride (Cs 3 TbCl 6 ) nanocrystals (NCs). Highly uniform colloidal Cs 3 EuCl 6 and Cs 3 TbCl 6 NCs are synthesized via the heating-up method. Excitation-wavelength-dependent multicolor emissions from Cs 3 EuCl 6 and Cs 3 TbCl 6 NCs are observed. Under excitation of 330–400 nm, both NCs exhibit blue photoluminescence (PL). Under wavelengths shorter than 330 nm, characteristic red and green emissions are observed from Cs 3 EuCl 6 and Cs 3 TbCl 6 , respectively, owing to the atomic emissions from the f-orbitals in trivalent europium (Eu 3+ ) and terbium (Tb 3+ ) ions. Cs 3 EuCl 6 and Cs 3 TbCl 6 NCs exhibit broadband excitation spectra and enhanced absorption properties. Particularly, Cs 3 EuCl 6 NCs exhibit a very narrow full-width at half-maximum in both blue and red PL and no overlap between the two spectra. Further, the photophysical properties of these NCs are further investigated to understand the multicolor PL origins by time-resolved and temperature-dependent PL measurements. Finally, the potential applications of Cs 3 EuCl 6 and Cs 3 TbCl 6 NCs as anti-counterfeiting inks for high-level security are demonstrated. Given their broadband excitation with enhanced absorption properties and dynamically tunable colors with a wide color gamut, Cs 3 EuCl 6 and Cs 3 TbCl 6 NCs have great potential as novel multicolor NC emitters for many emerging applications.

77 NANOSCIENCE AND NANOTECHNOLOGY↗
DOE OSTI2020

Genomics of sorghum local adaptation to a parasitic plant

Host–parasite coevolution can maintain high levels of genetic diversity in traits involved in species interactions. In many systems, host traits exploited by parasites are constrained by use in other functions, leading to complex selective pressures across space and time. Here, we study genome-wide variation in the staple crop Sorghum bicolor (L.) Moench and its association with the parasitic weed Striga hermonthica (Delile) Benth., a major constraint to food security in Africa. We hypothesize that geographic selection mosaics across gradients of parasite occurrence maintain genetic diversity in sorghum landrace resistance. Suggesting a role in local adaptation to parasite pressure, multiple independent loss-of-function alleles at sorghum LOW GERMINATION STIMULANT 1 (LGS1) are broadly distributed among African landraces and geographically associated with S. hermonthica occurrence. However, low frequency of these alleles within S. hermonthica-prone regions and their absence elsewhere implicate potential trade-offs restricting their fixation. LGS1 is thought to cause resistance by changing stereochemistry of strigolactones, hormones that control plant architecture and below-ground signaling to mycorrhizae and are required to stimulate parasite germination. Consistent with trade-offs, we find signatures of balancing selection surrounding LGS1 and other candidates from analysis of genome-wide associations with parasite distribution. Experiments with CRISPR–Cas9-edited sorghum further indicate that the benefit of LGS1-mediated resistance strongly depends on parasite genotype and abiotic environment and comes at the cost of reduced photosystem gene expression. Our study demonstrates long-term maintenance of diversity in host resistance genes across smallholder agroecosystems, providing a valuable comparison to both industrial farming systems and natural communities.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2021

Achieving Runtime State Verification Assurance in Critical Cyber-Physical Infrastructures

Industrial Cyber-Physical Systems (ICPS) are an essential backbone of national critical infrastructures. They help monitor and control crucial cyber-enabled services such as energy generation. Commonly ICPS monitors the physical process through Supervisory Control and Data Acquisition (SCADA) systems. The SCADA ecosystem takes critical real-time and future system operational decisions based on the runtime state behavior of field sensors. Traditional SCADA systems use legacy and insecure communication protocols such as the Modbus protocol that lack adequate security mechanisms to provide robust runtime state behavior assurance of constrained field sensors. Therefore, constrained field sensors are commonly vulnerable to standard semantic attacks that gradually change the behavior state of infected devices. This paper discusses process integrity assurance techniques necessary to enhance the security of behavior-based protocols such as the Modbus protocol. The Runtime State Verification (RSV) protocol proposed in this paper aims to address semantic attacks in the SCADA ecosystem by integrating behavior-based Mandatory Results Automata (MRA) and a Hyperledger Fabric (HLF) network. The RSV protocol provides high process integrity assurance through enhanced behavior-based MRA suitable for the constrained field devices. A proof of concept of the RSV protocol has been evaluated in an emulated water-tube boiler. Preliminary evaluations of the RSV protocol aimed to measure the efficiency of the proposed protocol by monitoring an Combustion Efficiency (CE) process necessary to preserve optimal combustion, thus minimizing costs and future maintenance of water-tube boilers. We analyze the overall network overhead and latency of the proposed RSV protocol by evaluating the HLF network performance and comparing the proposed RSV protocol with the state-ofart BloSPAI protocol. Through the preliminary evaluations of the proposed RSV protocol, this paper demonstrates that the proposed RSV protocol overcomes the shortcomings and network overhead of the BloSPAI protocol by integrating behavior-based authentication through novel MRAs and HLF networks.

Rivera, Abel Gomez↗
DOE OSTI2020

A holistic cyber-physical security protocol for authenticating the provenance and integrity of structural health monitoring imagery data

Modern infrastructure systems, such as bridges, dams, power generation stations, and buildings increasingly have an intrinsic cyber-physical nature to them. Infrastructure now commonly, includes actuators, network connections, sensors, control systems, and computational resources. It is of increasing concern that modern infrastructure is vulnerable to cyber-attacks that can damage both the cyber and physical nature of the infrastructure. To date, the physical and cyber health of infrastructure has been considered separately. However, the increasing concerns associated with the cyber-physical security of infrastructure coupled with the emergence of 5G networks made using components that are not universally considered trustworthy, and the emergence of techniques for creating deepfakes and adversarial examples suggests the time has come to begin considering cyber health and structural health with a more holistic approach. In this work, a protocol is developed for ensuring the imagery data captured by a structural health monitoring system can be unambiguously attributed to legitimate sensors associated with the structural health monitoring system. A computer vision approach based on the idea of mutual information is then presented to detect damage in an image. This work presents the protocol for authenticating the provenance of imager data and demonstrates that this protocol does not have overly adverse effects when used with the mutual information-based technique for detecting damage in the resulting imagery data.

Jung, HweeKwon↗
DOE OSTI2021

Learning Management System User Requirements for the National Nuclear Security Administration's International Nuclear Safeguards Engagement Program

The National Nuclear Security Administration's (NNSA) International Nuclear Safeguards Engagement Program (INSEP) is considering investing in new tools that would allow the program to support its partner states from a distance. At the same time, the program is considering approaches that would allow several organizations, including NNSA, IAEA, national laboratories and contractor staff, to collaborate in the development and maintenance of instructional content. Software systems known as Learning Management Systems (LMSs) might represent a mechanism through which INSEP could accomplish these goals (collaborative development and remote support). To assess the usefulness of an LMS, INSEP has specified its needs for delivering online training and compared those needs to the capability of a range of LMSs. This comparison will allow INSEP to determine whether an LMS would be a useful tool and may set the stage for a "make-buy" decision in the future. The study team concluded that INSEP's content development and delivery needs align well with the capabilities of the leading LMSs on the market today and that that INSEP performance requirements allow for a customized approach using existing training portals that are already available to NNSA. Additional work would be required to specify the desired processes for developing online training and outreach materials, structuring the databases, specifying the data that should be collected, and detailing the desired system reports and documentation.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
DOE OSTI2021

Studying Corrosion Using Miniaturized Particle Attached Working Electrodes and the Nafion Membrane

We developed a new approach to attach particles onto a conductive layer as a working electrode (WE) in a microfluidic electrochemical cell with three electrodes. Nafion, an efficient proton transfer molecule, is used to form a thin protection layer to secure particle electrodes. Spin coating is used to develop a thin and even layer of Nafion membrane. The effects of Nafion (5 wt% 20 wt%) and spinning rates were evaluated using multiple sets of replicates. The electrochemical performance of various devices was demonstrated. Additionally, the electrochemical performance of the devices is used to select and optimize fabrication conditions. The results show that a higher spinning rate and a lower Nafion concentration (5 wt%) induce a better performance, using cerium oxide (CeO2) particles as a testing model. The WE surfaces were characterized using atomic force microscopy (AFM), scanning electron microscopy-focused ion beam (SEM-FIB), time-of-flight secondary ion mass spectrometry (ToF-SIMS), and X-ray photoelectron spectroscopy (XPS). The comparison between the pristine and corroded WE surfaces shows that Nafion is redistributed after potential is applied. Our results verify that Nafion membrane offers a reliable means to secure particles onto electrodes. Furthermore, the electrochemical performance is reliable and reproducible. Thus, this approach provides a new way to study more complex and challenging particles, such as uranium oxide, in the future.

42 ENGINEERING↗
DOE OSTI2022

A Tool Kit for Generating Simulated Radiation Measurements for Advanced Reactor Safeguards and Security

A tool kit was developed to simulate and analyze passive radiation measurements of molten salt reactor (MSR) operations to support development of nuclear safeguards approaches for this emerging reactor technology. A Transient Simulation Framework of Reconfigurable Modules (TRANSFORM) multiphysics simulation of an MSR produces time-dependent isotopic inventories at user-selected locations within the model. The tool kit implements the Gamma Detector Response and Analysis Software (GADRAS) application programming interface to inject the TRANSFORM isotopic inventories extracted/processed by a Python pipeline into GADRAS models of user-defined geometries. The TRANSFORM inventories are the source terms used to obtain synthetic measurements from GADRAS-defined detectors. The speed of TRANSFORM and GADRAS simulations enables surveying the large design space of MSRs (e.g., fuel type, fuel salt composition, number of loops) and the plethora of measurements (e.g., location, detector type, and collimation) within the reactor. This has enabled timely assessment of the various measurement locations and detectors to identify the most effective and efficient safeguards approach for a specific MSR design. Lastly, the tool kit also simulates extracted samples that can be aged to a desired dose, enabling stakeholders to optimize a measurement plan to use sample analysis as an element within a broader material accountancy plan.

Westphal, Greg↗
DOE OSTI2024

Formal Methods for Provably Secure Software and Firmware

This project addresses a gap observed in verifying the programming in embedded devices used in international arms control: namely verifying that embedded programming in an arms control device does exactly what it is supposed to do, no more and no less, every time without fail, and without disclosing unauthorized information accidentally or intentionally. In critical military, aerospace, and industrial safety systems this problem is sometimes addressed using formal methods (FM). This multi-year project seeks to identify formal methods toolsets useable in arms control regimes, with emphasis on applicability, ease of use, long term availability, and support.

formal methods, Arms Control Verification↗