Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security verification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3
All sourcesNASA NTRSDOE OSTI
DOE OSTI2015

OPNET/Simulink Based Testbed for Disturbance Detection in the Smart Grid

The important backbone of the smart grid is the cyber/information infrastructure, which is primarily used to communicate with different grid components. A smart grid is a complex cyber physical system containing a numerous and variety number of sources, devices, controllers and loads. Therefore, the smart grid is vulnerable to grid related disturbances. For such dynamic system, disturbance and intrusion detection is a paramount issue. This paper presents a Simulink and Opnet based co-simulated platform to carry out a cyber-intrusion in cyber network for modern power systems and the smart grid. The IEEE 30 bus power system model is used to demonstrate the effectiveness of the simulated testbed. The experiments were performed by disturbing the circuit breakers reclosing time through a cyber-attack. Different disturbance situations in the considered test system are considered and the results indicate the effectiveness of the proposed co-simulated scheme.

Cyber Attacks↗
DOE OSTI2024

Developing an intrinsically secure information barrier for arms control verification through machine learning

Near-term solutions are needed to allow for flexible engagement in future nuclear arms control discussions. This project developed a method for implementing an information barrier (IB) on commercial systems, shortening the research and development lifecycle for warhead verification technologies while offering improved and inherently flexible capabilities. The crux of the verification challenge remains the difficulty in developing an authenticatable IB which prevents sensitive host country information from inadvertent transmission to an inspector. Many concepts for IB’s rely on dedicated “trusted” processor modules developed with dedicated custom radiation detection systems and associated algorithms. Without a priori knowledge of the treaty item, the parameter space for measurements can be nearly infinite and robustness against spoofing without the ability to view sensitive data is key. This project has produced an unclassified framework capable of ingesting data from common gamma detectors and identifying the presence of weapons grade nuclear material at over 90% accuracy.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2025

Countering Weapons of Mass Destruction (CWMD) Zero Trust Framework: CWMD Zero Trust Principles Model

The research focuses on the critical need for enhanced cybersecurity within the Countering Weapons of Mass Destruction (CWMD) Office, specifically targeting Chemical, Biological, Radiological, and Nuclear devices. Traditional perimeter-based security models are insufficient against modern cyber threats, prompting a shift toward Zero Trust principles (ZTP) that emphasize continuous verification and stringent security for all devices. Federal directives mandate the adoption of Zero Trust (ZT) across agencies, supported by guidelines from National Institute of Standards and Technology (NIST), U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA), U.S. Department of Defense (DoD) and National Security Agency (NSA). The research involved mapping ZT guidance from these agencies to develop tailored CWMD ZTP. The study identified gaps and areas for improvement, including clear transitional guidance from traditional to ZT architectures and the focus on explicit cross cutting capabilities. Design improvements are recommended to ensure increased comprehensive protection and resilience against sophisticated cyber threats for Chemical, Biological, Radiological, and Nuclear (CBRN) devices. Collaborative efforts among federal agencies are essential for the successful deployment of an optimized ZT guidance.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2021

ESnet Secure Copy (EScp) v0.6

EScp is a high speed transfer tool with a similar command line syntax to scp. Unlike SCP it is designed to transfer files at high speed, thus far we have been able to show 100gbit/s transfers, although I expect that the throughput should scale in proportion to the network interface, i.e. I expect 400gbit/s performance on our 400gbit/s test bed. EScp achieves good performance through an innovative design (multithreaded, zero copy transfers), along with pluggable filters and I/O engines. As an example, you can switch from POSIX i/O to UIO by checking a different engine. It also natively supports encryption, and cheksums for file verification and transport security. AAA is through standard SSH (same as SCP). By taking advantage of filters, EScp supports transferring unstructured data and/or I/O to non-posix data sources. Examples include streaming data (i.e. from equipment), transferring data to the cloud, and/or supporting non-posix file systems (like HPSS).

Shiflett, Charles↗
DOE OSTI2019

Identity-based quantum signature scheme with strong security

Recently, Chen et al. proposed an identity-based quantum signature scheme (IDQSS). Their scheme has the advantages of the classical identity-based signature (IDS) scheme. However, Chen et al.’s scheme cannot resist against the private key generator (PKG)’s forgery attack. On the other hand, in their scheme, many rounds of quantum swap tests have to be performed by the verifier during the signature verification phase. To improve the security and efficiency of the IDQSS, a new IDQSS is proposed. In our scheme, the private key of the signer is generated by PKG according to the signer’s identity, which is used as the corresponding public key. The signer generates a quantum signature with her private key and the secret parameters shared with the verifier. Anyone can verify the quantum signature with the identity of the signer. Our scheme overcomes the security drawback of Chen et al.’s scheme and inherits the merits of the classical IDS system. It has the security properties such as information-theoretical security, non-repudiation and unforgeability. At the same time, in our scheme, the verifier need not perform any quantum swap test. Therefore, our IDQSS is more secure and efficient.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
NASA NTRS2017

Security Vulnerability Profiles of NASA Mission Software: Empirical Analysis of Security Related Bug Reports

NASA develops, runs, and maintains software systems for which security is of vital importance. Therefore, it is becoming an imperative to develop secure systems and extend the current software assurance capabilities to cover information assurance and cybersecurity concerns of NASA missions. The results presented in this report are based on the information provided in the issue tracking systems of one ground mission and one flight mission. The extracted data were used to create three datasets: Ground mission IVV issues, Flight mission IVV issues, and Flight mission Developers issues. In each dataset, we identified the software bugs that are security related and classified them in specific security classes. This information was then used to create the security vulnerability profiles (i.e., to determine how, why, where, and when the security vulnerabilities were introduced) and explore the existence of common trends. The main findings of our work include:- Code related security issues dominated both the Ground and Flight mission IVV security issues, with 95 and 92, respectively. Therefore, enforcing secure coding practices and verification and validation focused on coding errors would be cost effective ways to improve mission's security. (Flight mission Developers issues dataset did not contain data in the Issue Category.)- In both the Ground and Flight mission IVV issues datasets, the majority of security issues (i.e., 91 and 85, respectively) were introduced in the Implementation phase. In most cases, the phase in which the issues were found was the same as the phase in which they were introduced. The most security related issues of the Flight mission Developers issues dataset were found during Code Implementation, Build Integration, and Build Verification; the data on the phase in which these issues were introduced were not available for this dataset.- The location of security related issues, as the location of software issues in general, followed the Pareto principle. Specifically, for all three datasets, from 86 to 88 the security related issues were located in two to four subsystems.- The severity levels of most security issues were moderate, in all three datasets.- Out of 21 primary security classes, five dominated: Exception Management, Memory Access, Other, Risky Values, and Unused Entities. Together, these classes contributed from around 80 to 90 of all security issues in each dataset. This again proves the Pareto principle of uneven distribution of security issues, in this case across CWE classes, and supports the fact that addressing these dominant security classes provides the most cost efficient way to improve missions' security. The findings presented in this report uncovered the security vulnerability profiles and identified the common trends and dominant classes of security issues, which in turn can be used to select the most efficient secure design and coding best practices compiled by the part of the SARP project team associated with the NASA's Johnson Space Center. In addition, these findings provide valuable input to the NASA IVV initiative aimed at identification of the two 25 CWEs of ground and flight missions.

vulnerability↗
DOE OSTI2019

Novel Perovskite Semiconductors for the Detection of Special Nuclear Material

Special nuclear material (SNM) detection using portable, highly efficient detectors is of paramount importance to national security for treaty verification and nonproliferation monitoring. The most mature technology for neutron detection is the 3He proportional counter; however, despite its high efficiency and ubiquitous use, 3He detectors have significant drawbacks, including long absorption lengths, high voltage requirements, and dependence on the availability of 3 He. The goal of this project is to synthesize a novel, boron-based perovskite semiconductor crystals to create a more efficient and more portable neutron detector. This innovative material will lead to a significant decrease in power and size requirements with higher operating temperatures than other traditional solid-state detectors. Directly incorporating 10 B eliminates the need for a conversion layer and leads to high neutron absorption coefficients. In this seedling project, we successfully synthesized millimeter sized crystals using inverse temperature crystallization with sizes of 1.73 mm in length and 480 μm in thickness.

36 MATERIALS SCIENCE↗
NASA NTRS1986

Analyzing the security of an existing computer system

Most work concerning secure computer systems has dealt with the design, verification, and implementation of provably secure computer systems, or has explored ways of making existing computer systems more secure. The problem of locating security holes in existing systems has received considerably less attention; methods generally rely on thought experiments as a critical step in the procedure. The difficulty is that such experiments require that a large amount of information be available in a format that makes correlating the details of various programs straightforward. This paper describes a method of providing such a basis for the thought experiment by writing a special manual for parts of the operating system, system programs, and library subroutines.

Bishop, M.↗
DOE OSTI2021

MITR Low-Enriched Uranium Conversion Fluid-Structure Interaction Preliminary Design Verification

The U.S. National Nuclear Security Administration (NNSA) Office of Material Management and Minimization (M 3 ) has developed and is pursuing an integrated approach to address the persistent threat posed by unintentional proliferation of nuclear materials. The NNSA M 3 approach reduces the risk of highly enriched uranium (HEU) and plutonium falling into the hands of non-state actors by minimizing the use of and, when possible, eliminating weapons-usable nuclear material around the world. In this geopolitical context, most research and test reactors, both domestic and international, have completed or started a program of conversion from the use of HEU to low-enriched uranium (LEU) as fuel. Conversion of civilian research reactors from HEU to LEU, and the return of the HEU to the country of origin, are important components of the NNSA non-proliferation program. Worldwide, 71 reactors have been converted to the use of LEU fuel, and an additional 32 have been confirmed to be permanently shut down. The U.S., with 20 reactor conversions, is among the 39 countries on six continents where conversions have occurred. With recent conversions in Ghana and Nigeria, an important milestone was reached in completing conversion of all reactors on the continent of Africa to LEU fuel. Africa thus becomes the third continent to have completed conversion of all HEU reactors to LEU, following Australia and South America

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2023

Remote inspection of adversary-controlled environments

Remotely monitoring the location and enduring presence of valuable items in adversary-controlled environments presents significant challenges. In this article, we demonstrate a monitoring approach that leverages the gigahertz radio-wave scattering and absorption of a room and its contents, including a set of mirrors with random orientations placed inside, to remotely verify the absence of any disturbance over time. Our technique extends to large physical systems the application of physical unclonable functions for integrity protection. Its main applications are scenarios where parties are mutually distrustful and have privacy and security constraints. Examples range from the verification of nuclear arms-control treaties to the securing of currency, artwork, or data centers.

47 OTHER INSTRUMENTATION↗
DOE OSTI2023

Project: Corbomite - Product: ConsoleWorks REACT

TDi Technologies presents ConsoleWorks REACT, an advanced platform designed to tackle the complexities of cyber and operational risk assessment. This comprehensive solution goes beyond asset-focused approaches by considering the impact of both assets and people have on the security and operation of critical infrastructure, specifically targeting preventing gird mis-operation by evaluating real-time human interaction or commands with critical assets. The hypothesis suggests that by integrating the assessment of user commands into the overall risk assessment process, organizations can make more informed decisions, prioritize resources effectively, and respond promptly to potential threats. This hypothesis forms the basis for the development of a proactive and holistic risk management approach that is more comprehensive and context aware than traditional models which only look at assets, patch levels, configuration and threat intel by collecting that information off the network vs directly from the asset, human, and human interaction all in real-time. ConsoleWorks' unique man-in-the-middle architecture is a key feature that sets it apart in the cybersecurity landscape. This architecture enables the real-time observation, enforcement, and commands or interaction risk transparency of user interaction with critical infrastructure to be risk mitigated and audited as they are aggregated with device and human risk factors for a more comprehensive risk threat score across a device or group of devices. This architecture allows ConsoleWorks to act as a secure intermediary between users and critical assets, monitoring all interactions and ensuring that only authorized commands are sent to the asset to be executed. This not only enhances security but also provides a comprehensive audit trail of all user activities, contributing to compliance efforts and facilitating incident investigation and risk management. By integrating this unique architecture with our comprehensive risk assessment methodology, ConsoleWorks REACT provides a powerful solution for managing cyber and operational risks, enabling organizations to maintain a robust security posture and effectively mitigate potential threats. To that end, the primary objective of this project was to research and develop a robust solution that enables the energy industry to mitigate the risks associated with human actions that can compromise the security or operations of assets critical to energy delivery, generation, transmission and operation. ConsoleWorks REACT plays a pivotal role in achieving this goal by leveraging its unique capabilities to monitor and track all user activity. Through its Zero Trust approach, which emphasizes continuous verification, the platform ensures secure access to assets and serves as the centralized human response and notification platform for addressing cyber and operational issues.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2015

Delayed Gamma-Ray Spectroscopy for Non-Destructive Assay of Nuclear Materials

High-­energy, beta-delayed gamma-­ray spectroscopy is a potential, non-­destructive assay techniques for the independent verification of declared quantities of special nuclear materials at key stages of the fuel cycle and for directly assaying nuclear material inventories for spent fuel handling, interim storage, reprocessing facilities, repository sites, and final disposal. Other potential applications include determination of MOX fuel composition, characterization of nuclear waste packages, and challenges in homeland security and arms control verification. Experimental measurements were performed to evaluate fission fragment yields, to test methods for determining isotopic fractions, and to benchmark the modeling code package. Experimental measurement campaigns were carried out at the IAC using a photo-­neutron source and at OSU using a thermal neutron beam from the TRIGA reactor to characterize the emission of high-­energy delayed gamma rays from 235 U, 239 Pu, and 241 Pu targets following neutron induced fission. Data were collected for pure and combined targets for several irradiation/spectroscopy cycle times ranging from 10/10 seconds to 15/30 minutes.The delayed gamma-ray signature of 241 Pu, a significant fissile constituent in spent fuel, was measured and compared to 239 Pu. The 241 Pu/ 239 Pu ratios varied between 0.5 and 1.2 for ten prominent lines in the 2700-­3600 keV energy range. Such significant differences in relative peak intensities make it possible to determine relative fractions of these isotopes in a mixed sample. A method for determining fission product yields by fitting the energy and time dependence of the delayed gamma-­ray emission was developed and demonstrated on a limited 235 U data set. De-­convolution methods for determining fissile fractions were developed and tested on the experimental data. The use of high count-­rate LaBr 3 detectors was investigated as a potential alternative to HPGe detectors. Modeling capabilities were added to an existing framework and codes were adapted as needed for analyzing experiments and assessing application-­specific assay concepts. A de-­convolution analysis of the delayed gamma-­ray response spectra modeled for spent fuel assemblies was performed using the same method that was applied to the experimental spectra.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2020

Global Security & Strategic Partnership Programs

Long, proud history of expertise in uranium, lithium, high explosives, assembly/disassembly, and nuclear security and a vital part of today’s nuclear security enterprise Integral role in sustaining U.S. nuclear deterrent and reducing global nuclear threats with unique security and nonproliferation research capabilities NN and GSP Missions Bring Fresh Ideas and Solves Important National Security Problems NN and GSP Missions Keep Our Technology and People Sharp and Ready for New Challenges

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2023

Secure Data Logging and Processing with Blockchain and Machine Learning (Final Report)

Secure Data Logging and Processing with Blockchain and Machine Learning (ML) research is focused on the development of a platform to securely log and process sensor data in fossil power plants. The platform integrates two emerging technologies, blockchain and ML, and incorporates several innovative mechanisms to ensure the integrity, reliability, and resiliency of power systems. The goal is to protect the power plant from various cyberattacks such as false data injection and denial of service attacks using these technologies. The research goal was enabled by the following Research Project Objectives: 1) Secure authentication and identity verification of sensor nodes, actuators, and other equipment within a network. 2) Development of mechanisms that ensure only data sent by legitimate sensors are accepted and stored in the data repository. 3) Development of data aggregation methodologies using ML / Deep Learning (DL) algorithms to minimize noise / faulty data. 4) Implementation of the blockchain technologies to provide data security using secured IOTA framework & nodes.

20 FOSSIL-FUELED POWER PLANTS↗
DOE OSTI2014

Delayed Gamma-ray Spectroscopy for Non-Destructive Assay of Nuclear Materials

This project addresses the need for improved non-destructive assay techniques for quantifying the actinide composition of spent nuclear fuel and for the independent verification of declared quantities of special nuclear materials at key stages of the fuel cycle. High-energy delayed gamma-ray spectroscopy following neutron irradiation is a potential technique for directly assaying spent fuel assemblies and achieving the safeguards goal of quantifying nuclear material inventories for spent fuel handling, interim storage, reprocessing facilities, repository sites, and final disposal. Other potential applications include determination of MOX fuel composition, characterization of nuclear waste packages, and challenges in homeland security and arms control verification.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗