Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “THEFT”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3
All sourcesNASA NTRSDOE OSTI
DOE OSTI2011

Material Control and Accounting Design Considerations for High-Temperature Gas Reactors

The subject of this report is domestic safeguards and security by design (2SBD) for high-temperature gas reactors, focusing on material control and accountability (MC&A). The motivation for the report is to provide 2SBD support to the Next Generation Nuclear Plant (NGNP) project, which was launched by Congress in 2005. This introductory section will provide some background on the NGNP project and an overview of the 2SBD concept. The remaining chapters focus specifically on design aspects of the candidate high-temperature gas reactors (HTGRs) relevant to MC&A, Nuclear Regulatory Commission (NRC) requirements, and proposed MC&A approaches for the two major HTGR reactor types: pebble bed and prismatic. Of the prismatic type, two candidates are under consideration: (1) GA's GT-MHR (Gas Turbine-Modular Helium Reactor), and (2) the Modular High-Temperature Reactor (M-HTR), a derivative of Areva's Antares reactor. The future of the pebble-bed modular reactor (PBMR) for NGNP is uncertain, as the PBMR consortium partners (Westinghouse, PBMR [Pty] and The Shaw Group) were unable to agree on the path forward for NGNP during 2010. However, during the technology assessment of the conceptual design phase (Phase 1) of the NGNP project, AREVA provided design information and technology assessment of their pebble bed fueled plant design called the HTR-Module concept. AREVA does not intend to pursue this design for NGNP, preferring instead a modular reactor based on the prismatic Antares concept. Since MC&A relevant design information is available for both pebble concepts, the pebble-bed HTGRs considered in this report are: (1) Westinghouse PBMR; and (2) AREVA HTR-Module. The DOE Office of Nuclear Energy (DOE-NE) sponsors the Fuel Cycle Research and Development program (FCR&D), which contains an element specifically focused on the domestic (or state) aspects of SBD. This Material Protection, Control and Accountancy Technology (MPACT) program supports the present work summarized in this report, namely the development of guidance to support the consideration of MC&A in the design of both pebble-bed and prismatic-fueled HTGRs. The objective is to identify and incorporate design features into the facility design that will cost effectively aid in making MC&A more effective and efficient, with minimum impact on operations. The theft of nuclear material is addressed through both MC&A and physical protection, while the threat of sabotage is addressed principally through physical protection.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2012

Termination of Safeguards for Accountable Nuclear Materials at the Idaho National Laboratory

Termination of safeguards ends requirements of Nuclear Material Control and Accountability (MC&A) and thereby removes the safeguards basis for applying physical protection requirements for theft and diversion of nuclear material, providing termination requirements are met as described. Department of Energy (DOE) M 470.4 6 (Nuclear Material Control and Accountability [8/26/05]) stipulates: 1. Section A, Chapter I (1)( q) (1): Safeguards can be terminated on nuclear materials provided the following conditions are met: (a) 'If the material is special nuclear material (SNM) or protected as SNM, it must be attractiveness level E and have a measured value.' (b) 'The material has been determined by DOE line management to be of no programmatic value to DOE.' (c) 'The material is transferred to the control of a waste management organization where the material is accounted for and protected in accordance with waste management regulations. The material must not be collocated with other accountable nuclear materials.' Requirements for safeguards termination depend on the safeguards attractiveness levels of the material. For attractiveness level E, approval has been granted from the DOE Idaho Operations Office (DOE ID) to Battelle Energy Alliance, LLC (BEA) Safeguards and Security (S&S). In some cases, it may be necessary to dispose of nuclear materials of attractiveness level D or higher. Termination of safeguards for such materials must be approved by the Departmental Element (this is the DOE Headquarters Office of Nuclear Energy) after consultation with the Office of Security.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2015

Insider Threat Case Studies at Radiological and Nuclear Facilities

Seven case studies are presented. The cases include thefts of various materials and sabotage. For each case there is an overview of the incident, a timeline, a profile of the perpetrator, and a discussion of the security system failures which allowed the incident to take place.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2016

Nuclear and radiological Security: Introduction.

Nuclear security includes the prevention and detection of, and response to, theft, sabotage, unauthorized access, illegal transfer, or other malicious acts involving nuclear or other radioactive substances or their associated facilities. The presentation begins by discussing the concept and its importance, then moves on to consider threats--insider threat, sabotage, diversion of materials--with considerable emphasis on the former. The intrusion at Pelindaba, South Africa, is described as a case study. The distinction between nuclear security and security of radiological and portable sources is clarified, and the international legal framework is touched upon. The paper concludes by discussing the responsibilities of the various entities involved in nuclear security.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2011

Data Analysis

Analysis of the material protection, control, and accountability (MPC&A) system is necessary to understand the limits and vulnerabilities of the system to internal threats. A self-appraisal helps the facility be prepared to respond to internal threats and reduce the risk of theft or diversion of nuclear material. The material control and accountability (MC&A) system effectiveness tool (MSET) fault tree was developed to depict the failure of the MPC&A system as a result of poor practices and random failures in the MC&A system. It can also be employed as a basis for assessing deliberate threats against a facility. MSET uses fault tree analysis, which is a top-down approach to examining system failure. The analysis starts with identifying a potential undesirable event called a 'top event' and then determining the ways it can occur (e.g., 'Fail To Maintain Nuclear Materials Under The Purview Of The MC&A System'). The analysis proceeds by determining how the top event can be caused by individual or combined lower level faults or failures. These faults, which are the causes of the top event, are 'connected' through logic gates. The MSET model uses AND-gates and OR-gates and propagates the effect of event failure using Boolean algebra. To enable the fault tree analysis calculations, the basic events in the fault tree are populated with probability risk values derived by conversion of questionnaire data to numeric values. The basic events are treated as independent variables. This assumption affects the Boolean algebraic calculations used to calculate results. All the necessary calculations are built into the fault tree codes, but it is often useful to estimate the probabilities manually as a check on code functioning. The probability of failure of a given basic event is the probability that the basic event primary question fails to meet the performance metric for that question. The failure probability is related to how well the facility performs the task identified in that basic event over time (not just one performance or exercise). Fault tree calculations provide a failure probability for the top event in the fault tree. The basic fault tree calculations establish a baseline relative risk value for the system. This probability depicts relative risk, not absolute risk. Subsequent calculations are made to evaluate the change in relative risk that would occur if system performance is improved or degraded. During the development effort of MSET, the fault tree analysis program used was SAPHIRE. SAPHIRE is an acronym for 'Systems Analysis Programs for Hands-on Integrated Reliability Evaluations.' Version 1 of the SAPHIRE code was sponsored by the Nuclear Regulatory Commission in 1987 as an innovative way to draw, edit, and analyze graphical fault trees primarily for safe operation of nuclear power reactors. When the fault tree calculations are performed, the fault tree analysis program will produce several reports that can be used to analyze the MPC&A system. SAPHIRE produces reports showing risk importance factors for all basic events in the operational MC&A system. The risk importance information is used to examine the potential impacts when performance of certain basic events increases or decreases. The initial results produced by the SAPHIRE program are considered relative risk values. None of the results can be interpreted as absolute risk values since the basic event probability values represent estimates of risk associated with the performance of MPC&A tasks throughout the material balance area (MBA). The RRR for a basic event represents the decrease in total system risk that would result from improvement of that one event to a perfect performance level. Improvement of the basic event with the greatest RRR value produces a greater decrease in total system risk than improvement of any other basic event. Basic events with the greatest potential for system risk reduction are assigned performance improvement values, and new fault tree calculations show the improvement in total system risk. The operational impact or cost-effectiveness from implementing the performance improvements can then be evaluated. The improvements being evaluated can be system performance improvements, or they can be potential, or actual, upgrades to the system. The RIR for a basic event represents the increase in total system risk that would result from failure of that one event. Failure of the basic event with the greatest RIR value produces a greater increase in total system risk than failure of any other basic event. Basic events with the greatest potential for system risk increase are assigned failure performance values, and new fault tree calculations show the increase in total system risk. This evaluation shows the importance of preventing performance degradation of the basic events. SAPHIRE identifies combinations of basic events where concurrent failure of the events results in failure of the top event.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2011

Summary

An effective risk assessment system is needed to address the threat posed by an active or passive insider who, acting alone or in collusion, could attempt diversion or theft of nuclear material. The material control and accountability (MC&A) system effectiveness tool (MSET) is a self-assessment or inspection tool utilizing probabilistic risk assessment (PRA) methodology to calculate the system effectiveness of a nuclear facility's material protection, control, and accountability (MPC&A) system. The MSET process is divided into four distinct and separate parts: (1) Completion of the questionnaire that assembles information about the operations of every aspect of the MPC&A system; (2) Conversion of questionnaire data into numeric values associated with risk; (3) Analysis of the numeric data utilizing the MPC&A fault tree and the SAPHIRE computer software; and (4) Self-assessment using the MSET reports to perform the effectiveness evaluation of the facility's MPC&A system. The process should lead to confirmation that mitigating features of the system effectively minimize the threat, or it could lead to the conclusion that system improvements or upgrades are necessary to achieve acceptable protection against the threat. If the need for system improvements or upgrades is indicated when the system is analyzed, MSET provides the capability to evaluate potential or actual system improvements or upgrades. A facility's MC&A system can be evaluated at a point in time. The system can be reevaluated after upgrades are implemented or after other system changes occur. The total system or specific subareas within the system can be evaluated. Areas of potential system improvement can be assessed to determine where the most beneficial and cost-effective improvements should be made. Analyses of risk importance factors show that sustainability is essential for optimal performance and reveals where performance degradation has the greatest impact on total system risk. The risk importance factors show the amount of risk reduction achievable with potential upgrades and the amount of risk reduction achieved after upgrades are completed. Applying the risk assessment tool gives support to budget prioritization by showing where budget support levels must be sustained for MC&A functions most important to risk. Results of the risk assessment are also useful in supporting funding justifications for system improvements that significantly reduce system risk. The functional model, the system risk assessment tool, and the facility evaluation questionnaire are valuable educational tools for MPC&A personnel. These educational tools provide a framework for ongoing dialogue between organizations regarding the design, development, implementation, operation, assessment, and sustainability of MPC&A systems. An organization considering the use of MSET as an analytical tool for evaluating the effectiveness of its MPC&A system will benefit from conducting a complete MSET exercise at an existing nuclear facility.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2011

US-Russian Cooperation in Upgrading MC&A System at Rosatom Facilities: Measurement of Nuclear Materials

Improve protection of weapons-usable nuclear material from theft or diversion through the development and support of a nationwide sustainable and effective Material Control and Accountability (MC&A) program based on material measurement. The material protection, control, and accountability (MPC&A) cooperation has yielded significant results in implementing MC&A measurements at Russian nuclear facilities: (1) Establishment of MEM WG and MEMS SP; (2) Infrastructure for development, certification, and distribution of RMs; and (3) Coordination on development and implementation of MMs.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2011

Nuclear Material Control and Accountability System Effectiveness Tool (MSET)

A nuclear material control and accountability (MC&A) system effectiveness tool (MSET) has been developed in the United States for use in evaluating material protection, control, and accountability (MPC&A) systems in nuclear facilities. The project was commissioned by the National Nuclear Security Administration's Office of International Material Protection and Cooperation. MSET was developed by personnel with experience spanning more than six decades in both the U.S. and international nuclear programs and with experience in probabilistic risk assessment (PRA) in the nuclear power industry. MSET offers significant potential benefits for improving nuclear safeguards and security in any nation with a nuclear program. MSET provides a design basis for developing an MC&A system at a nuclear facility that functions to protect against insider theft or diversion of nuclear materials. MSET analyzes the system and identifies several risk importance factors that show where sustainability is essential for optimal performance and where performance degradation has the greatest impact on total system risk. MSET contains five major components: (1) A functional model that shows how to design, build, implement, and operate a robust nuclear MC&A system (2) A fault tree of the operating MC&A system that adapts PRA methodology to analyze system effectiveness and give a relative risk of failure assessment of the system (3) A questionnaire used to document the facility's current MPC&A system (provides data to evaluate the quality of the system and the level of performance of each basic task performed throughout the material balance area [MBA]) (4) A formal process of applying expert judgment to convert the facility questionnaire data into numeric values representing the performance level of each basic event for use in the fault tree risk assessment calculations (5) PRA software that performs the fault tree risk assessment calculations and produces risk importance factor reports on the facility's MC&A (software widely used in the aerospace, chemical, and nuclear power industries) MSET was peer reviewed in 2007 and validated in 2008 by benchmark testing at the Idaho National Laboratory in the United States. The MSET documents were translated into Russian and provided to Rosatom in July of 2008, and MSET is currently being evaluated for potential application in Russian Nuclear Facilities.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2013

Approach to proliferation risk assessment based on multiple objective analysis framework

The approach to the assessment of proliferation risk using the methods of multi-criteria decision making and multi-objective optimization is presented. The approach allows the taking into account of the specifics features of the national nuclear infrastructure, and possible proliferation strategies (motivations, intentions, and capabilities). 3 examples of applying the approach are shown. First, the approach has been used to evaluate the attractiveness of HEU (high enriched uranium)production scenarios at a clandestine enrichment facility using centrifuge enrichment technology. Secondly, the approach has been applied to assess the attractiveness of scenarios for undeclared production of plutonium or HEU by theft of materials circulating in nuclear fuel cycle facilities and thermal reactors. Thirdly, the approach has been used to perform a comparative analysis of the structures of developing nuclear power systems based on different types of nuclear fuel cycles, the analysis being based on indicators of proliferation risk.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2017

Implementing an Information Security Program

The threats to information security have dramatically increased with the proliferation of information systems and the internet. Chemical, biological, radiological, nuclear, and explosives (CBRNe) facilities need to address these threats in order to protect themselves from the loss of intellectual property, theft of valuable or hazardous materials, and sabotage. Project 19 of the European Union CBRN Risk Mitigation Centres of Excellence Initiative is designed to help CBRN security managers, information technology/cybersecurity managers, and other decision-makers deal with these threats through the application of cost-effective information security programs. Project 19 has developed three guidance documents that are publically available to cover information security best practices, planning for an information security management system, and implementing security controls for information security.

blended attack↗
DOE OSTI2018

Effects of exposure estimation errors on estimated exposure-response relations for PM2.5

Highlights: • Recent literature has identified associations between concentrations of fine particulate matter (PM2.5) in ambient air and adverse health effects at estimated exposure concentrations below current air ambient quality standards. • The models and analyses used do not usually quantify uncertainty about exposure estimates. • Realistic errors in exposure estimates can be estimated from available air quality monitoring stations by predicting concentrations at each station from concentrations at neighboring stations. • Exposure estimation errors are large enough to obscure low-dose nonlinearities or thresholds in the true concentration-response (C-R) function, artificially making them appear to be linear at low doses. • Better estimates of C-R functions will require modeling exposure distributions and estimation errors, rather than just estimating average exposure concentrations. Associations between fine particulate matter (PM2.5) exposure concentrations and a wide variety of undesirable outcomes, from autism and auto theft to elderly mortality, suicide, and violent crime, have been widely reported. Influential articles have argued that reducing National Ambient Air Quality Standards for PM2.5 is desirable to reduce these outcomes. Yet, other studies have found that reducing black smoke and other particulate matter by as much as 70% and dozens of micrograms per cubic meter has not detectably affected all-cause mortality rates even after decades, despite strong, statistically significant positive exposure concentration-response (C-R) associations between them. This paper examines whether this disconnect between association and causation might be explained in part by ignored estimation errors in estimated exposure concentrations. We use EPA air quality monitor data from the Los Angeles area of California to examine the shapes of estimated C-R functions for PM2.5 when the true C-R functions are assumed to be step functions with well-defined response thresholds. The estimated C-R functions mistakenly show risk as smoothly increasing with concentrations even well below the response thresholds, thus incorrectly predicting substantial risk reductions from reductions in concentrations that do not affect health risks. We conclude that ignored estimation errors obscure the shapes of true C-R functions, including possible thresholds, possibly leading to unrealistic predictions of the changes in risk caused by changing exposures. Instead of estimating improvements in public health per unit reduction (e.g., per 10 µg/m{sup 3} decrease) in average PM2.5 concentrations, it may be essential to consider how interventions change the distributions of exposure concentrations.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Who is marginalized in energy justice? Amplifying community leader perspectives of energy transitions in Ghana

There is a divide in energy access studies, between technologically-focused modeling papers in engineering and economics, and energy justice frameworks and principles grounded in social sciences. Quantitative computational models are necessary when analyzing energy, and more specifically electricity, systems, as they are technologically-complex systems that can diverge from intuitive patterns. To assure energy justice, these models must be reflective of, and informative to, a wide range of stakeholders, including households and communities alongside utilities, governments, and others. Yet, moving from a qualitative understanding of preferences to quantitative modeling is challenging. In this perspective piece, we pilot the use of the value-focused thinking framework to inform stakeholder engagement. The result is a strategic objective hierarchy that highlights the tradeoffs and the social, economic and technological factors that need to be measured in models. We apply the process in Ghana, using a survey, stakeholder workshops, and follow-up interviews to uncover key tradeoffs and stakeholder-derived objectives. We discuss three key areas that have been rarely, if ever, well-represented in energy models: (1) the relationship between the dynamics of electricity end-use and the technology and economic structure of the system; (2) explicit tradeoffs between electricity access, cost, and reliability as defined by stakeholders; and (3) the definition of new objectives, such as minimizing hazards related to theft. We conclude that this model of engagement provides an opportunity to tie together rigorous qualitative analysis and stakeholder engagement with crucial quantitative models of the electricity system.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2014

Technical solutions to nonproliferation challenges

The threat of nuclear terrorism is real and poses a significant challenge to both U.S. and global security. For terrorists, the challenge is not so much the actual design of an improvised nuclear device (IND) but more the acquisition of the special nuclear material (SNM), either highly enriched uranium (HEU) or plutonium, to make the fission weapon. This paper provides two examples of technical solutions that were developed in support of the nonproliferation objective of reducing the opportunity for acquisition of HEU. The first example reviews technologies used to monitor centrifuge enrichment plants to determine if there is any diversion of uranium materials or misuse of facilities to produce undeclared product. The discussion begins with a brief overview of the basics of uranium processing and enrichment. The role of the International Atomic Energy Agency (IAEA), its safeguard objectives and how the technology evolved to meet those objectives will be described. The second example focuses on technologies developed and deployed to monitor the blend down of 500 metric tons of HEU from Russia's dismantled nuclear weapons to reactor fuel or low enriched uranium (LEU) under the U.S.-Russia HEU Purchase Agreement. This reactor fuel was then purchased by U.S. fuel fabricators and provided about half the fuel for the domestic power reactors. The Department of Energy established the HEU Transparency Program to provide confidence that weapons usable HEU was being blended down and thus removed from any potential theft scenario. Two measurement technologies, an enrichment meter and a flow monitor, were combined into an automated blend down monitoring system (BDMS) and were deployed to four sites in Russia to provide 24/7 monitoring of the blend down. Data was downloaded and analyzed periodically by inspectors to provide the assurances required.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2016

Cyber Norms for Civilian Nuclear Power Plants

The international community agrees that the safe operation of civilian nuclear infrastructure is in every population’s best interest. One challenge each government must address is defining and agreeing to a set of acceptable norms of behavior in cyberspace as they relate to these facilities. The introduction of digital systems and networking technologies into these environments has led to the possibility that control and supporting computer systems are now accessible and exploitable, especially where interconnections to global information and communications technology (ICT) networks exist. The need for norms of behavior in cyberspace includes what is expected of system architects and cyber defenders as well as adversaries who should abide by rules of engagement even while conducting acts that violate national and international laws. The goal of this paper is to offer three behavioral cyber norms to improve the overall security of the ICT and Operational Technology (OT) networks and systems that underlie the operations of nuclear facilities. These norms of behavior will be specifically defined with the goals of reducing the threats associated to the theft of nuclear materials, accidental release of radiation and sabotage of nuclear processes. These norms would also include instances where an unwitting attacker or intelligence collection entity inadvertently makes their way into a nuclear facility network or system and can recognize they are in a protected zone and an approach to ensuring that these zones are not exploitable by bad actors to place their sensitive cyber effect delivery systems.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2023

Malicious Cyber Activity Detection using Zigzag Persistence

In this study we synthesize zigzag persistence from topological data analysis with autoencoder-based approaches to detect malicious cyber activity, and derive analytic insights. Cybersecurity aims to safeguard computers, networks, and servers from various forms of malicious attacks, including network damage, data theft, and activity monitoring. We focus on the cybersecurity domain and investigate the detection of malicious activity using log data. We consider the dynamics of the log data and explore the changing topology of a hypergraph representation of this data to gain insights into the underlying activity. These hypergraphs capture complex interactions between processes, together with their temporal information. To study the changing topology we use zigzag persistence, which captures how topological features persist at multiple dimensions over time. We observe that this detects malicious activity in a cyber data set. To automate this detection we implement an autoencoder trained on a vectorization of the resulting zigzag persistence barcodes. Our experimental results demonstrate the effectiveness of the autoencoder in detecting malicious activity. Overall, this study highlights the potential of zigzag persistence and its combination with temporal hypergraphs for analyzing cybersecurity log data and detecting malicious behavior.

hypergraphs, temporal hypergraph, topological data↗
DOE OSTI2023

Informing and Engaging the Future Workforce on Generation IV International Forum Reactor Systems

Generation IV reactors are six nuclear reactor designs, Sodium Fast reactor (SFR), Very High Temperature Reactor (VHTR), Gas cooled Fast Reactor (GFR), Molten Salt Reactor (MSR), Lead Fast Reactor (LFR), and Supercritical Water Reactor (SCWR), that are considered to be the most promising in light of various criteria based on the following objectives: • continuation of the progress made by Generation III water reactors in terms of competitiveness and safety; • more effective use of uranium resources; • less radioactive waste, especially high-level, long-lived waste; • greater protection against malicious acts and the diversion or theft of nuclear materials. The GIF Education and Training Working Group (ETWG) launched two major initiatives in 2016 and in 2021 to not only inform and educate but also to engage the future workforce in support of these reactor systems. This paper will present an overview of the GIF EWTG webinar series as well as the 2021 Pitch your Gen IV Research Competition which is followed by the 2023 Pitch your Gen IV Research. Competition

Paviet, Patricia D.↗
DOE OSTI2013

Security by Design Handbook

This document is a draft Security-by-Design (SeBD) handbook produced to support the Work Plan of the Nuclear Security Summit to share best practices for nuclear security in new facility design. The Work Plan calls on States to “encourage nuclear operators and architect/engineering firms to take into account and incorporate, where appropriate, effective measures of physical protection and security culture into the planning, construction, and operation of civilian nuclear facilities and provide technical assistance, upon request, to other States in doing so.” The materials for this document were generated primarily as part of a bilateral project to produce a SeBD handbook as a collaboration between the Japan Atomic Energy Agency (JAEA) Nuclear Nonproliferation Science and Technology Center and Sandia National Laboratories (SNL), which represented the US Department Energy (DOE) National Nuclear Security Administration (NNSA) under a Project Action Sheet PAS-PP04. Input was also derived based on tours of the Savannah River Site (SRS) and Japan Nuclear Fuel Limited (JNFL) Rokkasho Mixed Oxide Fuel fabrication facilities and associated project lessons-learned. For the purposes of the handbook, SeBD will be described as the system-level incorporation of the physical protection system (PPS) into a new nuclear power plant or nuclear facility resulting in a PPS design that minimizes the risk of malicious acts leading to nuclear material theft; nuclear material sabotage; and facility sabotage as much as possible through features inherent in (or intrinsic to) the design of the facility. A four-element strategy is presented to achieve a robust, durable, and responsive security system.

Snell, Mark Kamerer↗