The Kaspersky Ban: Compliance with the New FAR Clause
Understand the danger Kaspersky Lab poses to national security; Understand the new FAR clause requirements; Implement a four step action plan for compliance
SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Understand the danger Kaspersky Lab poses to national security; Understand the new FAR clause requirements; Implement a four step action plan for compliance
A data protection system is provided that allows applications to access protected data in a way that restricts applications from outputting to unauthorized targets any unprotected data derived from the protected data and that ensures that the applications do not have access to a key that allows access to the unprotected data. The data protection system provides a policy server that may execute on a service node of a high performance computing system and a data encryption process that may execute on each compute node that is allocated to an application or batch job. The policy server maintains policies of entities specifying access control for protected data. The data encryption process generates a secure execution environment for an application process and interfaces with the policy server to retrieve keys for decrypting protected data in accordance with a policy, and it decrypts and provides the decrypted data to the application process.
Critical infrastructure stakeholders need to baseline their systems to understand expected protocol communications. Baseline behaviors may vary based on operational context. Expected operations during a maintenance window, for example, may be different from normal operations. Furthermore, constructing system baselines for Industrial Control Systems (ICS) is difficult and time-consuming. ICS processes generate artifacts expressed across heterogeneous data sources such as network traffic and device logs. This paper explores the hypothesis that such ICS artifacts form a language in the language-theoretic sense. From a theoretical perspective, the variety of implementations of ICS protocols and constrained environment of OT networks provide a rich application domain for language-theoretic approaches. We present several use cases related to the practical construction of system baselines: grammars for data fusion, language dialects for device fingerprinting, and security automata for system baselining
This study describes accurate, computationally efficient models that can be implemented for practical use in predicting frost events for point-scale agricultural applications. Frost damage in agriculture is a costly burden to farmers and global food security alike. Timely prediction of frost events is important to reduce the cost of agricultural frost damage and traditional numerical weather forecasts are often inaccurate at the field-scale in complex terrain. In this paper, we developed machine learning (ML) algorithms for the prediction of such frost events near Alcalde, NM at the point-scale. ML algorithms investigated include deep neural network, convolution neural networks, and random forest models at lead-times of 6–48 h. Our results show promising accuracy (6-h prediction RMSE = 1.53–1.72°C) for use in frost and minimum temperature prediction applications. Seasonal differences in model predictions resulted in a slight negative bias during Spring and Summer months and a positive bias in Fall and Winter months. Additionally, we tested the model transferability by continuing training and testing using data from sensors at a nearby farm. We calculated the feature importance of the random forest models and were able to determine which parameters provided the models with the most useful information for predictions. We determined that soil temperature is a key parameter in longer term predictions (>24 h), while other temperature related parameters provide the majority of information for shorter term predictions. The model error compared favorable to previous ML based frost studies and outperformed the physically based High Resolution Rapid Refresh forecasting system making our ML-models attractive for deployment toward real-time monitoring of frost events and damage at commercial farming operations.
The Department of Energy's Light Water Reactor Sustainability Program is developing the scientific basis to ensure long-term reliability, productivity, safety, and security of the nuclear power industry in the United States. The Instrumentation, Information, and Control (II and C) pathway of the program aims to increase the role of advanced II and C technologies to achieve this objective. One of the pathway efforts at Idaho National Laboratory (INL) is to improve the work packages execution process by replacing the expensive, inefficient, bulky, complex, and error-prone paper-based work orders with automated work packages (AWPs). An AWP is an automated and dynamic presentation of the work package designed to guide the user through the work process. It is loaded on a mobile device, such as a tablet, and is capable of communicating with plant equipment and systems to acquire plant and procedure states. The AWP replaces those functions where a computer is more efficient and reliable than a human. To enable the automatic acquisition of plant data, it is necessary to design and develop a prototype platform for data exchange between the field instruments and the AWP mobile devices. The development of the platform aims to reveal issues and solutions generalizable to large-scale implementation of a similar system. Topics such as bandwidth, robustness, response time, interference, and security are usually associated with wireless communication. These concerns, along with other requirements, are listed in an earlier INL report. Specifically, the targeted issues and performance aspects in this work are relevant to the communication infrastructure from the perspective of promptness, robustness, expandability, and interoperability with different technologies. The development of a prompt system entailed significant performance optimization, including the use of parallel processing, parallel communication, modularity, noise filtering, and frequency tuning. A robust system was achieved by enforcing a persistent continuous data exchange that automatically detects and conveys a failure of any link or component in any part of the system, and that automatically restores the communication once the link or component is restored. An expandable topology was enabled by modularity and load sharing. The number of servers, mobile devices, and field instruments is not limited from a system structure point of view. The system interoperability was achieved by enforcing the independence of the field communication application from the mobile device application. (authors)
The secure integration and management of distributed energy resources (DER) and power aggregators in the electric grid requires secure communications and a physics-aware Command and Control (C2) strategy. A Blockchain (BC)-based overlay network was developed to provide a security layer for the existing power grid network that mitigates risks in current and legacy network and C2 protocols. By integrating a Model-Assisted Machine Learning (MAML) framework with a Secure Blockchain Overlay Network (SBON) a defense-in-depth strategy was achieved. In our approach, the MAML framework leveraged a smart contract framework to gather network data and learn the dynamics of DER to develop detection strategies for attacks targeting sensors and actuators used by DER. The MAML framework learned dynamical systems models for individual DERs to detect sensor attacks. For DER we utilized a Digital Twin (DT) to accelerate the learning process for a model resistant to stealthy attacks. The project created DT for PV inverters and BESS. The DTs were coupled with a model-assisted, data-driven learning of DER behavior. Specifically, we evaluated architectures for model-based learning with model-free fine-tuning. Additionally, differential privacy techniques were used to obfuscate data, while still allowing the computation of attack detection results based on obfuscated data. The SBON developed leverages a private permissioned blockchain network orchestrated with the Hyperledger Fabric framework. To connect the cyber world, which orchestrates the blockchain fabric, and the physical world where the power network resides, we developed a system implementation to enable the secure interaction of the physical world and the abstracted blockchain.
To meet new and emerging national security issues the Laboratory is stepping up to meet another grand challenge—transitioning from observing to controlling a material’s performance. This challenge requires the best of experiment, modeling, simulation, and computational tools. MaRIE is the Laboratory’s proposed flagship experimental facility intended to meet the challenge.
Oak Ridge National Laboratory (ORNL) is the US Department of Energy’s (DOE’s) largest multiprogram science, technology, and energy laboratory with distinctive capabilities in neutron science, computing, advanced materials, and nuclear science and technology. Using these capabilities, ORNL conducts basic and applied research and development (R&D) to support DOE’s overarching mission to “ensure America’s security and prosperity by addressing its energy, environmental and nuclear challenges through transformative science and technology solutions.” As a national resource, ORNL also applies its capabilities and skills to specific needs of other federal agencies and customers through the DOE Strategic Partnership Projects (SPP) program. Information about the laboratory and its programs is available at the ORNL website. The Laboratory Directed Research and Development (LDRD) program at ORNL operates under the authority of the DOE Order 413.2C, “Laboratory Directed Research and Development,” which establishes DOE’s requirements for the program while providing the laboratory director broad flexibility for program implementation. The LDRD program funds are obtained through a charge to all laboratory programs. ORNL reports on the program status to DOE each year.
Motivation: DOE is investing in our technology for improving Energy Security; Many of these problems are grand challenges requiring moonshot type efforts; The geoscience paradigm is shifting from data sparse to data rich requiring us to take advantage of the latest computational and AI to tools optimize these systems.
Oak Ridge National Laboratory (ORNL) is the US Department of Energy’s (DOE’s) largest multiprogram science, technology, and energy laboratory. It possesses distinctive capabilities in a variety of fields, such as neutron science, computing, advanced materials, and nuclear science and technology. Using these capabilities, ORNL conducts basic and applied research and development (R&D) to support DOE’s overarching mission “to ensure America’s security and prosperity by addressing its energy, environmental and nuclear challenges through transformative science and technology solutions.” As a national resource, ORNL also applies its capabilities and skills to the specific needs of other federal agencies and customers through the DOE Strategic Partnership Projects (SPP) Program. Information about the laboratory and its programs is available on the ORNL website. The Laboratory Directed Research and Development (LDRD) Program at ORNL operates under the authority of the DOE Order 413.2C, Laboratory Directed Research and Development, which establishes DOE’s requirements for the program while providing the laboratory director broad flexibility for program implementation. The LDRD Program funds are obtained through a charge to all laboratory programs. Although it represents a relatively small portion of the overall research budget, the LDRD Program plays an essential role in maintaining the laboratory’s ability to respond to national needs. The program allows ORNL to improve its distinctive capabilities and to enhance its ability to conduct cutting-edge R&D. This report provides an overview of the LDRD Program at ORNL in FY 2023 and contains summaries of all the LDRD research projects that concluded between October 1, 2022, and September 30, 2023.
Oak Ridge National Laboratory (ORNL) is the US Department of Energy’s (DOE’s) largest multiprogram science, technology, and energy laboratory. It possesses distinctive capabilities in a variety of fields, such as neutron science, computing, advanced materials, and nuclear science and technology. Using these capabilities, ORNL conducts basic and applied research and development (R&D) to support DOE’s overarching mission “to ensure America’s security and prosperity by addressing its energy, environmental and nuclear challenges through transformative science and technology solutions.” As a national resource, ORNL also applies its capabilities and skills to the specific needs of other federal agencies and customers through the DOE Strategic Partnership Projects (SPP) Program. Information about the laboratory and its programs is available on the ORNL website. The Laboratory Directed Research and Development (LDRD) Program at ORNL operates under the authority of DOE Order 413.2C, Laboratory Directed Research and Development,3 which establishes DOE’s requirements for the program while providing the laboratory director broad flexibility for program implementation. The LDRD Program funds are obtained through a charge to all laboratory programs. Although it represents a relatively small portion of the overall research budget, the LDRD Program plays an essential role in maintaining the laboratory’s ability to respond to national needs. The program allows ORNL to improve its distinctive capabilities and to enhance its ability to conduct cutting-edge R&D. In accordance with the DOE order, R&D projects funded through the LDRD Program at ORNL support the goals of • maintaining the scientific and technical vitality of the laboratory; • enhancing the laboratory’s ability to address future DOE missions; • fostering creativity and stimulating exploration of forefront areas of science and technology; • serving as a proving ground for new concepts in R&D; and • supporting high-risk, potentially high-value R&D. This report provides an overview of the LDRD Program at ORNL in FY 2024 and contains summaries of all the LDRD research projects that concluded between October 1, 2023, and September 30, 2024.
Oak Ridge National Laboratory (ORNL) is the US Department of Energy’s (DOE’s) largest multiprogram science, technology, and energy laboratory. It possesses distinctive capabilities in a variety of fields, such as neutron science, computing, advanced materials, and nuclear science and technology. Using these capabilities, ORNL conducts basic and applied research and development (R&D) to support DOE’s overarching mission “to ensure America’s security and prosperity by addressing its energy, environmental and nuclear challenges through transformative science and technology solutions.” As a national resource, ORNL also applies its capabilities and skills to the specific needs of other federal agencies and customers through the DOE Strategic Partnership Projects (SPP) Program. Information about the laboratory and its programs is available on the ORNL website. The Laboratory Directed Research and Development (LDRD) Program at ORNL operates under the authority of DOE Order 413.2C, Laboratory Directed Research and Development, which establishes DOE’s requirements for the program while providing the laboratory director broad flexibility for program implementation. The LDRD Program funds are obtained through a charge to all laboratory programs. Although it represents a relatively small portion of the overall research budget, the LDRD Program plays an essential role in maintaining the laboratory’s ability to respond to national needs. The program allows ORNL to improve its distinctive capabilities and enhance its ability to conduct cutting-edge R&D. In accordance with the DOE order, R&D projects funded through the LDRD Program at ORNL support the goals of • maintaining the scientific and technical vitality of the laboratory, • enhancing the laboratory’s ability to address future DOE missions, • fostering creativity and stimulating exploration of forefront areas of science and technology, • serving as a proving ground for new concepts in R&D, and • supporting high-risk, potentially high-value R&D. This report provides an overview of the LDRD Program at ORNL in FY 2025 and contains summaries of all the LDRD research projects that concluded between October 1, 2024, and September 30, 2025.
Oak Ridge National Laboratory (ORNL) is the US Department of Energy’s (DOE’s) largest multiprogram science, technology, and energy laboratory. It possesses distinctive capabilities in a variety of fields, such as neutron science, computing, advanced materials, and nuclear science and technology. Using these capabilities, ORNL conducts basic and applied research and development (R&D) to support DOE’s overarching mission “to ensure America’s security and prosperity by addressing its energy, environmental and nuclear challenges through transformative science and technology solutions.” As a national resource, ORNL also applies its capabilities and skills to the specific needs of other federal agencies and customers through the DOE Strategic Partnership Projects (SPP) Program. Information about the laboratory and its programs is available on the ORNL website.
The goal of the Cyber Toaster: Research Track is to address emerging national cyber threats.
The U.S. Department of Energy’s (DOE) Office of Cybersecurity, Energy Security and Emergency Response (CESER), at the request of the Deputy National Security Advisor for Cyber and Emerging Technologies, Anne Neuberger, initiated research in 2023 to develop a cybersecurity labeling proof-of-concept for energy products to expand on the Federal Communications Commission’s (FCC) proposed U.S. Cyber Trust Mark program. DOE mobilized researchers from six National Laboratories to develop and gather feedback on a proof-of concept label for solar inverters and smart meters, which serve as representative products for market-facing energy sector Industrial Internet of Things (IIoT). This report details the research team’s process across two phases and the resulting findings, which include challenges facing cyber labeling programs and recommendations to implement an expanded IIoT cyber labeling program in the U.S.
Comprehensive inventory management is central to the efficient operation of any facility that uses and stores chemicals. There are numerous software packages available that perform this function satisfactorily. Most commercially available inventory management software is regulatory or procurement focused and usually comes with upfront or monthly fees. Finally, this report describes freely downloadable software developed at Sandia National Laboratories that delivers an effective inventory management system with an additional focus on chemical security.
Los Alamos National Laboratory was established in 1943 as the home of Project Y, The Manhattan Project directed by J. Robert Oppenheimer, with the aim of developing the world’s first atomic bomb. The project was successful and on the 16 th of July 1945 the first atomic bomb was detonated at Trinity Site. This development led to the creation of Little Boy and Fat Man, the two nuclear bombs dropped in Japan to end World War II. Today the laboratory has the responsibility of ensuring that the American nuclear deterrent is safe, secure and reliable. To ensure that this important responsibility is met, the laboratory carries out science in a wide range of areas. Its responsibilities are shared with Sandia National Laboratory (SNL) and Lawrence Livermore National Laboratory (LLNL). All are laboratories managed by the Department of Energy’s National Nuclear Security Administration (NNSA).