Results for “Computer security” — Page 51

DOE OSTI2020

NVBL (National Virtual Biotechnology Laboratory) COVID-19 Testing R&D

This virtual symposium was held to highlight the impact the U.S. Department of Energy’s (DOE) National Virtual Biotechnology Laboratory (NVBL) has had utilizing the unique capabilities of the DOE to tackle the science and technology challenges associated with COVID-19, and to discuss areas in which the NVBL can have impact in the future. With perspectives from Chris Fall, Director, Office of Science, DOE, and William A. Bookless, Principal Deputy Administrator of the National Nuclear Security Administration, the event featured Presentations from lead investigators reporting progress in: Epidemiological modeling, Therapeutics, Testing, Understanding transport of the virus, and Solving issues around supply chain challenges. In addition, keynote speakers from outside the NVBL discussed the upcoming science and technology needs in computing, testing and surveillance, and vaccines. The event was aimed at the S&T community, media, and general public.

Fitch, J. Patrick↗

DOE OSTI2020

NVBL (National Virtual Biotechnology Laboratory) Molecular Therapeutics

This virtual symposium was held to highlight the impact the U.S. Department of Energy’s (DOE) National Virtual Biotechnology Laboratory (NVBL) has had utilizing the unique capabilities of the DOE to tackle the science and technology challenges associated with COVID-19, and to discuss areas in which the NVBL can have impact in the future. With perspectives from Chris Fall, Director, Office of Science, DOE, and William A. Bookless, Principal Deputy Administrator of the National Nuclear Security Administration, the event featured Presentations from lead investigators reporting progress in: Epidemiological modeling, Therapeutics, Testing, Understanding transport of the virus, and Solving issues around supply chain challenges. In addition, keynote speakers from outside the NVBL discussed the upcoming science and technology needs in computing, testing and surveillance, and vaccines. The event was aimed at the S&T community, media, and general public.

Head, Martha (Marti)↗

DOE OSTI2020

NVBL (National Virtual Biotechnology Laboratory) Viral Fate and Transport for COVID-19

This virtual symposium was held to highlight the impact the U.S. Department of Energy’s (DOE) National Virtual Biotechnology Laboratory (NVBL) has had utilizing the unique capabilities of the DOE to tackle the science and technology challenges associated with COVID-19, and to discuss areas in which the NVBL can have impact in the future. With perspectives from Chris Fall, Director, Office of Science, DOE, and William A. Bookless, Principal Deputy Administrator of the National Nuclear Security Administration, the event featured Presentations from lead investigators reporting progress in: Epidemiological modeling, Therapeutics, Testing, Understanding transport of the virus, and Solving issues around supply chain challenges. In addition, keynote speakers from outside the NVBL discussed the upcoming science and technology needs in computing, testing and surveillance, and vaccines. The event was aimed at the S&T community, media, and general public.

Waters, Katrina↗

DOE OSTI2020

NVBL (National Virtual Biotechnology Laboratory): Pandemic Monitoring and Modeling

This virtual symposium was held to highlight the impact the U.S. Department of Energy’s (DOE) National Virtual Biotechnology Laboratory (NVBL) has had utilizing the unique capabilities of the DOE to tackle the science and technology challenges associated with COVID-19, and to discuss areas in which the NVBL can have impact in the future. With perspectives from Chris Fall, Director, Office of Science, DOE, and William A. Bookless, Principal Deputy Administrator of the National Nuclear Security Administration, the event featured Presentations from lead investigators reporting progress in: Epidemiological modeling, Therapeutics, Testing, Understanding transport of the virus, and Solving issues around supply chain challenges. In addition, keynote speakers from outside the NVBL discussed the upcoming science and technology needs in computing, testing and surveillance, and vaccines. The event was aimed at the S&T community, media, and general public.

Bhaduri, Budhu↗

DOE OSTI2020

Rapid Acceleration of Diagnostics: RADx (Tech + ATP)

This virtual symposium was held to highlight the impact the U.S. Department of Energy’s (DOE) National Virtual Biotechnology Laboratory (NVBL) has had utilizing the unique capabilities of the DOE to tackle the science and technology challenges associated with COVID-19, and to discuss areas in which the NVBL can have impact in the future. With perspectives from Chris Fall, Director, Office of Science, DOE, and William A. Bookless, Principal Deputy Administrator of the National Nuclear Security Administration, the event featured Presentations from lead investigators reporting progress in: Epidemiological modeling, Therapeutics, Testing, Understanding transport of the virus, and Solving issues around supply chain challenges. In addition, keynote speakers from outside the NVBL discussed the upcoming science and technology needs in computing, testing and surveillance, and vaccines. The event was aimed at the S&T community, media, and general public.

Tromberg, Bruce J.↗

DOE OSTI2020

NVBL (National Virtual Biotechnology Laboratory) Symposium Closing Remarks

This virtual symposium was held to highlight the impact the U.S. Department of Energy’s (DOE) National Virtual Biotechnology Laboratory (NVBL) has had utilizing the unique capabilities of the DOE to tackle the science and technology challenges associated with COVID-19, and to discuss areas in which the NVBL can have impact in the future. With perspectives from Chris Fall, Director, Office of Science, DOE, and William A. Bookless, Principal Deputy Administrator of the National Nuclear Security Administration, the event featured Presentations from lead investigators reporting progress in: Epidemiological modeling, Therapeutics, Testing, Understanding transport of the virus, and Solving issues around supply chain challenges. In addition, keynote speakers from outside the NVBL discussed the upcoming science and technology needs in computing, testing and surveillance, and vaccines. The event was aimed at the S&T community, media, and general public.

Kung, Harriet↗

DOE OSTI2020

The National Virtual Biotechnology Laboratory Symposium: Harnessing the unique strengths of DOE to tackle the biotechnology challenges of COVID-19, October 28, 2020

This virtual symposium was held to highlight the impact the U.S. Department of Energy’s (DOE) National Virtual Biotechnology Laboratory (NVBL) has had utilizing the unique capabilities of the DOE to tackle the science and technology challenges associated with COVID-19, and to discuss areas in which the NVBL can have impact in the future. With perspectives from Chris Fall, Director, Office of Science, DOE, and William A. Bookless, Principal Deputy Administrator of the National Nuclear Security Administration, the event featured Presentations from lead investigators reporting progress in: Epidemiological modeling, Therapeutics, Testing, Understanding transport of the virus, and Solving issues around supply chain challenges. In addition, keynote speakers from outside the NVBL discussed the upcoming science and technology needs in computing, testing and surveillance, and vaccines. The event was aimed at the S&T community, media, and general public.

59 BASIC BIOLOGICAL SCIENCES↗

DOE OSTI2021

Development of Reduced Glass Furnace Model to Optimize Process Operation

This was a collaborative effort between Lawrence Livermore National Security, LLC as manager and operator of Lawrence Livermore National Laboratory (LLNL) and PPG Industries to develop a reduced-order glass furnace model that enables plant operators to make informed, realtime process adjustments. This CRADA project is sponsored under the High-Performance Computing for Manufacturing (HPC4Mfg) Program of the Department of Energy's Advanced Manufacturing Office (AMO) within the Energy Efficiency and Renewable Energy (EERE) Office. This program ran from June 2016 to July 2017 with no extensions.

42 ENGINEERING↗

DOE OSTI2023

Supply Chain Binary Program Assessment Annual Report

Secure environments face a steadily increasing threat from the introduction of scientific equipment that includes extensive software components. Devices such as powerful microscopes, 3d printers, programmable logic controllers, and many others, increase our capability and scientific output. Unfortunately, they now frequently include an entire computing stack with custom software bundled along with entire operating systems. Our ability to introspect and understand binary software is extremely limited, opening up the possibility of malicious third-parties including software that compromises our critical missions.

42 ENGINEERING↗

NASA NTRS1991

Aero/fluids database system

The AFAS Database System was developed to provide the basic structure of a comprehensive database system for the Marshall Space Flight Center (MSFC) Structures and Dynamics Laboratory Aerophysics Division. The system is intended to handle all of the Aerophysics Division Test Facilities as well as data from other sources. The system was written for the DEC VAX family of computers in FORTRAN-77 and utilizes the VMS indexed file system and screen management routines. Various aspects of the system are covered, including a description of the user interface, lists of all code structure elements, descriptions of the file structures, a description of the security system operation, a detailed description of the data retrieval tasks, a description of the session log, and a description of the archival system.

Reardon, John E.↗

NASA NTRS2018

Blockchain Application Within a Multi-Sensor Satellite Architecture

With the thrust towards multi-sensor satellite architectures for earth and space exploration, such as constellations and swarms, new technologies are required to enable the transition to this future capability. One of the areas of interest is establishing secure, efficient and prioritized data and command communication pathways among ground and space-based sources for such systems. This paper presents early research results on the potential role, capabilities and value of blockchain usage within constellation and swarm satellite architectures. It demonstrates the use of blockchain's smart contract and distributed ledger capabilities for secure and prioritized multi-sensor satellite collaborative data exchanges, as well as the logging and tracking of command and control events. Adapting and utilizing this emerging technology will aid in addressing technology gaps expected from future constellation flight architectures, such as managing collective computational operations (correlation), dynamic and autonomous observation planning, time-critical events, and provenance tied to ground and space-based autonomous operations and control recordkeeping. In this scenario blockchain is applied in encrypted command transmittal to multiple, yet specific, entities enabling acknowledgement transmittals, performance scalability, and automatic event-based triggering.

Mital, Rohit↗

DOE OSTI2020

Probabilistic Forecasting of Generators Startups and Shutdowns in the MISO System Based on Random Forest

Solving security constrained unit commitment (SCUC) problems to plan an economical generation schedule for day-head electricity market has been an important research topic in recent years. Mixed integer programming method (MIP), the-state-of-art approach for solving SCUC problem, is known computationally hard when the number of binary status variables is large. In this paper, a machine learning-based algorithm - random forest (RF), was applied to forecast the startups (SU) and shutdowns (SD) hours of generators, based on historical hourly system condition observations in the Midcontinent Independent System Operator (MISO) system. The main purpose is to reduce the number of binary status variables, by fixing the SU/SD hours to a narrow range of high confidence. This would significantly reduce the size of the decision space, and therefore speed up SCUC solutions with reduced uncertainty.

Lin, Xinming↗

NASA NTRS2014

Scalable Asset Discovery, Vulnerability Scanning, and Penetration Testing for Remote Sites and Wireless Spectrums Utilizing an Embedded Linux Plug - PwniPlug and the Raspberry Pi B+ as a Sample Pen Test

All devices attached to the NASA KSC network are subject to security vulnerability scanning and/or penetration testing. In today's changing environment, vulnerable and/or unprotected systems can easily be overlooked. Systems that are not properly managed can become a potential threat to the operational integrity of our systems and networks. This includes all NASA (internal and external) information systems within NASA KSC Internet Protocol (IP) address space, and NASA KSC facilities. The Office of the Chief Information Officer (OCIO) recommends that all NASA Centers and information systems be subject to penetration testing on a regular interval in accordance with the guidelines identified by the National Institute of Standards and Technology (NIST). (ITS-HBK-2810.04-02A) Protecting information and equipment at NASA is an area of increasing concern. In addition to the CPU's on the network; Supervisory, Control and Data Acquisition (SCADA) systems are especially vulnerable because these systems have lacked standards, use embedded controllers with little computational power and informal software, are connected to physical processes, have few operators, and are increasingly also being connected to corporate networks. The scope of work is comprised of several individual components which together build upon previous work by Drew Branch, NASA KSC Intern. The Pwn Plug is the selected COTS (Commercial-Off-The-Shelf) device chosen to test simplification of mandatory IT Security tasks. The device will be utilized to provide services to NASA KSC and enable an assessment of infrastructure soundness and regulatory compliance in an efficient, economical, and business responsive manner. The Pwn Plug is designed as a pen testing appliance which provides a hardware platform that can support commercial penetration testing efforts at significantly reduced costs. The expected outcomes are: 1) External Penetration Testing, 2) Social Engineering, 3) Procedural Documentation, 4) Recommended Remediation Action Plan, 5) System Retest & Remediation Attestation and 6) Final Reports, out briefing and Presentation. Due to physical and material constraints beyond intern and mentor control, the project was redefined as a working pen-test scenario. Limitations of lab availability and tools dictated an academic exercise. This report was developed within the scenario guidelines suggested by the project mentor. The guidelines were to be creative in developing a Pen Test program for a client.

Penetration Testing↗

DOE OSTI2021

OptimiSM v.0.0.1

SAND2021-15062 O OptimiSM is a library for solving solid mechanics problems and for rapid prototyping of computational solid mechanics research ideas. It was originally created to facilitate research and development of algorithms for contact mechanics. It is a realization of a philosophy that problems can be represented with variational least-action principles, even when there is history-dependent material behavior and contact. This opens the door to using powerful methods from non-convex optimization for solutions. The code was successful in its original purpose, but along the way, the authors realized that it could be of general use to the computational solid mechanics research community as an R&D platform. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Talamini, Brandon↗

DOE OSTI2024

cldera-tools

SAND2025-03848O CLDERA-Tools is a small library for performing online calculation of quantity of interest derived from variables in the host application. The library stores pointers to the arrays of variables of the host model and uses them at every timestep to compute desired quantity of interests (prescribed via yaml input files). Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Watkins II, Jerry↗

DOE OSTI2024

Overview and Commentary on Applying the Coordinated Vulnerability Disclosure Process to Photovoltaic System Devices

The rapid expansion of photovoltaic (PV) systems, particularly inverters, has introduced new cybersecurity challenges that threaten both local operations as well as the broader electrical grid’s stability. PV inverters, integrated into critical energy infrastructure are potential targets for cyber attacks due to vulnerabilities in firmware, remote access systems, and communication protocols. The Coordinated Vulnerability Disclosure (CVD) process, as defined by the Cybersecurity and Infrastructure Security Agency (CISA), provides a framework for identifying, reporting, and addressing these vulnerabilities in a transparent and collaborative manner. This report outlines the CVD process as it applies to PV systems, detailing the roles of key stakeholders, such as manufacturers, grid operators, and security researchers. The report also highlights specific challenges in managing vulnerabilities for new and legacy PV systems, which includes those introduced by insecure communications and third-party supply chain components. By adhering to the CVD process, the PV industry can mitigate cybersecurity risks, ensure regulatory compliance, and maintain consumer trust, while safeguarding the operational resilience of the energy grid. Ultimately, the effective coordination of vulnerability management is crucial for securing the future of PV systems within the critical electric grid infrastructure landscape.

14 SOLAR ENERGY↗

NASA NTRS2009

Towards a Certified Lightweight Array Bound Checker for Java Bytecode

Dynamic array bound checks are crucial elements for the security of a Java Virtual Machines. These dynamic checks are however expensive and several static analysis techniques have been proposed to eliminate explicit bounds checks. Such analyses require advanced numerical and symbolic manipulations that 1) penalize bytecode loading or dynamic compilation, 2) complexify the trusted computing base. Following the Foundational Proof Carrying Code methodology, our goal is to provide a lightweight bytecode verifier for eliminating array bound checks that is both efficient and trustable. In this work, we define a generic relational program analysis for an imperative, stackoriented byte code language with procedures, arrays and global variables and instantiate it with a relational abstract domain as polyhedra. The analysis has automatic inference of loop invariants and method pre-/post-conditions, and efficient checking of analysis results by a simple checker. Invariants, which can be large, can be specialized for proving a safety policy using an automatic pruning technique which reduces their size. The result of the analysis can be checked efficiently by annotating the program with parts of the invariant together with certificates of polyhedral inclusions. The resulting checker is sufficiently simple to be entirely certified within the Coq proof assistant for a simple fragment of the Java bytecode language. During the talk, we will also report on our ongoing effort to scale this approach for the full sequential JVM.

Pichardie, David↗

NASA NTRSDate not supplied

In-Depth Modeling and Simulation Analysis of Artemis Missions Using the Impact Probabilistic Risk Assessment Tool

BACKGROUND The Artemis campaign is a Moon exploration program with a series of six planned missions, five of which will be crewed. These five crewed missions will contain a single mission segment (space flight), or multiple mission segments involving space flight (Orion), lunar landing (LTV) and/or space habitat (Gateway). Each crewed segment faces the risk of unique medical conditions, necessitating medical sets/kits tailored to those specificities. To support and enable a data-driven and evidence-based decision-making process through out a mission’s life cycle, a software tool called IMPACT was developed. Using probabilistic risk assessment (PRA) methodologies, IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a novel tool built for analyzing the possibility of encountering complex medical risks during space flight, and for identifying the medical resources and capabilities needed to treat those potential at-risk medical conditions. IMPACT achieves this by performing hundreds of thousands of Monte Carlo simulations of missions to build aggregate pictures of medical risk. During an extended simulation modeling phase, IMPACT generated analytical results for medical risks, and the medical resources and capabilities to address those risks, for every segment of every crewed Artemis mission. This presentation will highlight the reliability, consistency and validity of IMPACT’s computational modeling techniques and will showcase the library of analytical outcomes generated for the Artemis missions. OVERVIEW During the early stages of IMPACT’s design, architecture and technical requirements collection, “scenarios” (use cases) - achievement goals required for acceptance testing, were identified by stakeholders. IMPACT successfully completed the scenario testing requirements and undertook an extensive operational run phase utilizing a wide range of input combinations with a goal of delivering a cohesive, trustworthy, reliable, vast, and diverse body of evidence. The intent of these modeling runs was to validate consistency in output, ensure solidity of executable operations and to streamline processes by identifying areas requiring efficiency improvements. Using the many missions of Artemis, IMPACT ran variations of operational runs to assess the output for acceptable, as well as unusual characteristics. This rigorous long-term “shakedown” analysis was implemented to help build a collective body of evidence to aid in securing a high level of confidence, reliability, and validity in the output, whether from the applicational components of IMPACT, or the entirety of the operational process. ANTICIPATED ANALYSIS AND CONCLUSION This presentation will discuss the various categories of input criteria; the comparisons in the application of these input criteria to various Artemis missions; the preparation and collection of the body of evidence, and reliability of the computational modeling techniques. This paper serves as an initial analytical overview of IMPACT’s probabilistic risk assessment (PRA) medical risk outputs covering Artemis missions and is not intended to be deemed the official medical response for the Artemis campaign.

Crew Composition↗