HTTPS Web Servers
This software is contains reference implementations for how to secure and harden Linux Web Servers for compliance with OMB M-15-13 compliance requirements.
Lee, Ian↗
SEARCH · Engineering Papers
Results for “Security Requirements”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Cybersecurity Certification Standard for Distributed Energy and Inverter Based Resources
NREL and UL co-presented on their joint effort to develop a cybersecurity certification standard for distributed energy resources (DERs) at a meeting of the Cybersecurity Advisory Team for State Solar (CATSS). The advisory team is hosted by NASEO & NARUC. The presentation outlined the benefits of a cybersecurity certification standard, the outcomes of previous initiatives, how this effort reflects the evolving electric grid, and the role of state energy offices. UL explained their role as a trusted third party with expertise to lead this effort and the process from Outline of Investigation (OOI) to a certification standard.
BPS↗
Hybrid Model-Based and Data-Driven Fault Detection and Diagnostics for Commercial Buildings: Preprint
Commercial buildings often experience faults that produce undesirable behavior in building systems. Building faults waste energy, decrease occupants' comfort, and increase operating costs. Automated fault detection and diagnosis (FDD) tools for buildings help building owners discover and identify the root causes of faults in building systems, equipment, and controls. Proper implementation of FDD has the potential to simultaneously improve comfort, reduce energy use, and narrow the gap between actual and optimal building performance. However, conventional rule-based FDD requires expensive instrumentation and valuable engineering labor, which limit deployment opportunities. This paper presents a hybrid, automated FDD approach that combines building energy models and statistical learning tools to detect and diagnose faults noninvasively, using minimal sensors, with little customization. We compare and contrast the performance of several hybrid FDD algorithms for a small security building. Our results indicate that the algorithms can detect and diagnose several common faults, but more work is required to reduce false positive rates and improve diagnosis accuracy.
32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
Hybrid Model-Based and Data-Driven Fault Detection and Diagnostics for Commercial Buildings
Commercial buildings often experience faults that produce undesirable behavior in building systems. Building faults waste energy, decrease occupants' comfort, and increase operating costs. Automated fault detection and diagnosis (FDD) tools for buildings help building owners discover and identify the root causes of faults in building systems, equipment, and controls. Proper implementation of FDD has the potential to simultaneously improve comfort, reduce energy use, and narrow the gap between actual and optimal building performance. However, conventional rule-based FDD requires expensive instrumentation and valuable engineering labor, which limit deployment opportunities. This paper presents a hybrid, automated FDD approach that combines building energy models and statistical learning tools to detect and diagnose faults noninvasively, using minimal sensors, with little customization. We compare and contrast the performance of several hybrid FDD algorithms for a small security building. Our results indicate that the algorithms can detect and diagnose several common faults, but more work is required to reduce false positive rates and improve diagnosis accuracy.
32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
Nuclear Material Management Database Development at the Nevada National Security Site
The Nuclear Material Management & Storage (NMM&S) program at the Nevada National Security Site (NNSS) have the responsibility for the life-cycle management of accountable nuclear materials (NM) in accordance with Department of Energy (DOE) Order 410.2, “Management of Nuclear Materials” and for ensuring workers are protected from exposure to nuclear materials stored outside of an authorized shipping package under DOE Manual 441.1-1. To ensure these responsibilities were addressed in an effective, concise, and secure manner the development of NMM&S databases was undertaken. Using the existing database server structure and data acquired from the official Material Control & Accountability (MC&A) accounting program development of two separate applications, one for O 410.2 inventory requirements (NMIA) and one for M441, were begun in September 2015. The databases were deployed onto the production server in January 2017. The inventory database allows for entering NM characterization data, production of O 410.2 reports, and the ability to retain history files. The M441 database screens NM to determine if it is subject to the manual's requirements, ability to pull in unclassified RadCon materials, and provide reports as required by NMM&S, NM owners, and headquarters programs. These two databases provide NMM&S the ability to better ensure safe and secure packaging, storage, stabilization, consolidation, or disposition of NM and achieve life-cycle management goals.
12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
2012 SARA Students Technical Report
The Service Academy Research Associates (SARA) program provides an opportunity for Midshipmen and Cadets from US Service Academies to participate in research at Los Alamos National Laboratory (LANL), Lawrence Livermore National Laboratory (LLNL), and Sandia National Laboratory for several weeks during the summer as part of their summer training assignments. During the summer of 2012, three Midshipmen were assigned to work with the XCP Division at LANL for approximately 5-6 weeks. As one of the nation's top national security science laboratories, LANL stretches across 36 square miles, has over 2,100 facilities, and employs over 9,000 individuals including a significant number of students and postdocs. LANL's mission is to 'apply science and technology to: ensure the safety, security, and reliability of the US nuclear deterrent, reduce global threats, and solve other emerging national security challenges.' While LANL officially operates under the US Department of Energy (DoE), fulfilling this mission requires mutual cooperation with the US Department of Defense (DoD) as well. LANL's high concentration of knowledge and experience provides interns a chance to perform research in many disciplines, and its connection with the DoD in both operation and personnel gives SARA students insight to career possibilities both during and after military service. SARA students have plenty of opportunity to enjoy hiking, camping, the Los Alamos YMCA, and many other outdoor activities in New Mexico while staying at the Buffalo Thunder Resort, located 20 miles east of the lab. XCP Division is the Computational Physics division of LANL's Weapons Department. Working with XCP Division requires individuals to be Q cleared by the DoE. This means it is significantly more convenient for SARA students to be assigned to XCP Division than their civilian counterparts as the DoD CNWDI clearance held by SARA students is easily transferred to the lab prior to the students arriving at the start of the summer. SARA students working with XCP Division were given a comprehensive introduction into nuclear engineering and physics, nuclear weapons, and radiation transport and detection via texts and lectures at various classification levels. Students also attended tours of several prominent facilities at LANL including TA-41 Ice House, TA-55 PF-4 plutonium facility, the Nicholas C. Metropolis Center for Modeling and Simulation, also known as the Secure Computing Center (SCC), and the Dual-Axis Radiological Hydro Test (DARHT) facility; in addition, SARA students accompanied by LANL staff traveled to Minot AFB in North Dakota for tours of the 5th Bomb Wing and 91st Missile Wing facilities. Students participated in a week long class on the Monte Carlo N Particle (MCNP) code to supplement their understanding of radiation transport simulations. SARA students were then tasked with using this knowledge to model radiation detectors and use MCNP to compare their models to experimental data and previously accepted models.
45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
Enabling end-to-end secure federated learning in biomedical research on heterogeneous computing environments with APPFLx
Facilitating large-scale, cross-institutional collaboration in biomedical machine learning (ML) projects requires a trustworthy and resilient federated learning (FL) environment to ensure that sensitive information such as protected health information is kept confidential. Specifically designed for this purpose, this work introduces APPFLx - a low-code, easy-to-use FL framework that enables easy setup, configuration, and running of FL experiments. APPFLx removes administrative boundaries of research organizations and healthcare systems while providing secure end-to-end communication, privacy-preserving functionality, and identity management. Furthermore, it is completely agnostic to the underlying computational infrastructure of participating clients, allowing an instantaneous deployment of this framework into existing computing infrastructures. Experimentally, the utility of APPFLx is demonstrated in two case studies: (1) predicting participant age from electrocardiogram (ECG) waveforms, and (2) detecting COVID-19 disease from chest radiographs. Here, ML models were securely trained across heterogeneous computing resources, including a combination of on-premise high-performance computing and cloud computing facilities. By securely unlocking data from multiple sources for training without directly sharing it, these FL models enhance generalizability and performance compared to centralized training models while ensuring data remains protected. In conclusion, APPFLx demonstrated itself as an easy-to-use framework for accelerating biomedical studies across organizations and healthcare systems on large datasets while maintaining the protection of private medical data.
Biomedical Research↗
Methodology and Tool for the Physical Security Analysis of Micro and Advanced Reactors
This work proposes a dynamic evaluation methodology to relax the conservatism in physical security evaluation, by leveraging an ongoing work in the Light Water Reactor Sustainability pathway. This methodology is implemented in a dynamic risk assessment tool named Event Modeling Risk Assessment using Linked Diagrams (EMRALD). The work extends EMRALD’s capability to support a sandbox feature where analysts can easily create attack scenarios and modify advanced/small modular reactor (A/SMR) security and safety features using templates. This approach saves time and cost since the analysis does not require creating detailed computer-aided design models, as is commonly required in commercial force-on-force software tools. EMRALD is completely free to use at https://emraldapp.inl.gov. We have developed basic templates including physical barriers, intrusion sensors, physical areas, and safety actions, that can be downloaded from EMRALD’s GitHub site: https://github.com/idaholab/EMRALD. These templates use generic data commonly used for training purposes, which do not reflect any actual operating nuclear reactor. Users may adjust the data in the templates with their own dataset and/or create new templates in EMRALD. The proposed methodology combines security and safety by assessing sabotage effects up to the radiological consequence to the public instead of merely the core damage state. This practice follows the industry standard for advanced non-light-water reactors currently proposed for endorsement by the Nuclear Regulatory Commission. The combination of security and safety is expressed in an achievability-consequence chart. EMRALD can be used to generate data for this chart. A hypothetical case study using a representative sodium-cooled fast reactor (SFR) facility is presented in this report to demonstrate this methodology. This case study does not contain any actual nuclear plant information. This work will benefit A/SMR vendors and utilities to implement security by design during the reactor design iteration phase, such that they do not have to perform upgrades and retrofits to the reactor after it is installed to improve its physical protection system. The tool may also be used to analyze domestic or foreign reactor designs to support the International Nuclear Security Techniques for Advanced Reactors (INSTAR) bilateral missions. Future works are planned to implement the methodology on a reference SFR reactor and a reference high-temperature gas-cooled reactor to obtain insights and lessons-learned for the A/SMR community.
97 MATHEMATICS AND COMPUTING↗
Radiological source tracking in oil/gas, medical and other industries: requirements and specifications for passive RFID technology
Subsurface sensors that employ radioisotopes, such 241Am-Be and 137Cs, for reservoir characterization must be tracked for safety and security reasons. Other radiological sources are also widely used in medicine. The radiological source containers, in both applications, are small, mobile and used widely worldwide. The nuclear sources pose radiological dispersal device (RDD) security risks. Security concerns with the industrial use of radionuclide sources is in fact quite high as it is estimated that each year hundreds of sealed sources go missing, either lost or stolen. Risk mitigation efforts include enhanced regulations, source-use guidelines, research and development on electronic tracking of sources. This report summarizes the major elements of the requirements and operational concepts of nuclear sources with the goal of developing automated electronic tagging and locating systems.
42 ENGINEERING↗
SPSP Phase III Recruiting, Selecting, and Developing Secure Power Systems Professionals: Behavioral Interview Guidelines by Job Roles
The Secure Power Systems Professional Phase III final report was released last year which an appendix of Behavioral Interview Guidelines by Job Roles. This new report is that appendix broken out as a standalone document to assist utilities in recruiting and developing Secure Power Systems Professionals at their site. The complete list of knowledge, skills, and abilities required in each of the studied job roles was assembled into the Behavioral Interview Guidelines. The guidelines were developed to apply the results of Phases I and II in a format that can be used in part or in whole to align workforce capabilities with the strategic goals and tactical focus of a power grid organization. These guidelines may 1) be applied to develop performance reviews or to produce individual professional development programs for existing staff; 2) assist in specifying learning objectives for a training or education program; and 3) be easily incorporated into most human capital software to facilitate development of job descriptions that comply with guidelines established by the Society of Human Resource Management. The guidelines can be immediately applied by human resources professionals, recruiters, and hiring managers to assist in recruiting and interviewing candidates for new SPSP position openings.
24 POWER TRANSMISSION AND DISTRIBUTION↗
PAA, WSH, and CIS Overview Self-Study #47656
This course presents an overview of the Department of Energy’s (DOE’s) regulatory requirements relevant to the Price-Anderson Amendments Act (PAAA, also referred to as nuclear safety), worker safety and health (WSH), and classified information security (CIS) that are enforceable under the DOE enforcement program; describes the DOE enforcement process; and provides an overview of Los Alamos National Laboratory’s (LANL’s) internal compliance program relative to these DOE regulatory requirements. The LANL PAAA Program is responsible for maintaining LANL’s internal compliance program, which ensures the prompt identification, screening, and reporting of noncompliances to DOE regulatory requirements pertaining to nuclear safety, WSH, and CIS to build the strongest mitigation position for the Laboratory with respect to civil or other penalties.
61 RADIATION PROTECTION AND DOSIMETRY↗
(U)Vendor Sanitization Requirements – SIEMENS Control
This document defines the software requirements for the sanitization of the IPC and or the controller. The system is intended to manage part programs and associated data (e.g. simulations, probing data) by capturing metadata, securely sanitizing files, logging operations, backing up data to a defined path, deploying a user defined program to a controller, and restoring part programs and associated data when required.
42 ENGINEERING↗
Evaluation of Technologies to Mitigate the Presence of Gaseous Elemental Mercury in Waste Disposal Containers
A study was conducted to evaluate sorbent technologies that can mitigate the presence of elemental mercury (Hg⁰) in waste containers for mercury-contaminated debris (MCD). Decontamination and demolition (D&D) activities at the Y-12 National Security Complex (Y-12) and other U.S. Department of Energy (DOE) Oak Ridge Reservation (ORR) facilities generate MCD requiring offsite disposal. The debris is packaged in appropriate waste containers and may be temporarily stored onsite prior to transport for treatment and/or disposal. During transportation of loads that had no visible liquid Hg at the point of origin, temperature changes can cause Hg⁰ to evaporate, condense, and form droplets on container walls. Furthermore, vibration during transportation could cause beads of Hg to be released from the debris, container walls, and ceiling, resulting in pools of liquid Hg⁰ on the container floor. Waste acceptance criteria (WAC) limitations for commercial disposal facilities, the Nevada National Security Site (NNSS), and ORR mixed low-level waste landfills prohibit the presence of any free liquids in containers identified as a solid waste form. Potential solutions to mitigate the presence of residual liquids that could be formed through vapor condensation include the use of sorbents or similar materials to capture and stabilize volatile Hg⁰ vapors and thus ensure compliance with landfill WAC requirements. This report summarizes data from small-scale laboratory experiments conducted to evaluate sorbent materials for Hg⁰ vapor suppression and sorption of liquid Hg⁰ that could form under relevant transportation and disposal conditions. A series of experiments was conducted to evaluate commercial sorbent materials and their effectiveness for Hg⁰ sorption across a temperature range from 19.4°C to 60°C. The impact of residual moisture on sorption was investigated under relevant conditions, and leaching tests were performed to assess the stability of Hg⁰ captured sorbent materials. The results provide estimates for sorbent quantities needed for a given Hg⁰ mass loading based on experimental results exposing sorbents to gaseous and liquid Hg⁰ at various mass ratios. Overall, sorbents that were most effective for Hg⁰ vapor suppression were brominated activated carbons, mackinawite-based sorbents coated on vermiculite, and sulfur-modified granular activated carbon. Elevated temperatures and moisture conditions did not result in significant increases of Hg⁰ headspace concentrations, and the materials also demonstrated high sorption capacities for the sorption of liquid Hg⁰.
12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
Automated Theorem Proving in High-Quality Software Design
The amount and complexity of software developed during the last few years has increased tremendously. In particular, programs are being used more and more in embedded systems (from car-brakes to plant-control). Many of these applications are safety-relevant, i.e. a malfunction of hardware or software can cause severe damage or loss. Tremendous risks are typically present in the area of aviation, (nuclear) power plants or (chemical) plant control. Here, even small problems can lead to thousands of casualties and huge financial losses. Large financial risks also exist when computer systems are used in the area of telecommunication (telephone, electronic commerce) or space exploration. Computer applications in this area are not only subject to safety considerations, but also security issues are important. All these systems must be designed and developed to guarantee high quality with respect to safety and security. Even in an industrial setting which is (or at least should be) aware of the high requirements in Software Engineering, many incidents occur. For example, the Warshaw Airbus crash, was caused by an incomplete requirements specification. Uncontrolled reuse of an Ariane 4 software module was the reason for the Ariane 5 disaster. Some recent incidents in the telecommunication area, like illegal "cloning" of smart-cards of D2GSM handies, or the extraction of (secret) passwords from German T-online users show that also in this area serious flaws can happen. Due to the inherent complexity of computer systems, most authors claim that only a rigorous application of formal methods in all stages of the software life cycle can ensure high quality of the software and lead to real safe and secure systems. In this paper, we will have a look, in how far automated theorem proving can contribute to a more widespread application of formal methods and their tools, and what automated theorem provers (ATPs) must provide in order to be useful.
Schumann, Johann↗
Baylor University Campus-Wide Deep Dive
In January 2020, staff members from the Engagement and Performance Operations Center (EPOC) and the Lonestar Education And Research Network (LEARN) met with researchers and staff at Baylor University for the purpose of a Campus-Wide Deep Dive into research drivers. The goal of this meeting was to help characterize the requirements for five campus research use cases and to enable cyberinfrastructure support staff to better understand the needs of the researchers they support. Profiled scientific use cases included: - Experimental High Energy Physics (HEP) - Proton Computed Tomography (pCT) - Nutrition and Relation to Digestive Microbiome - Baylor University Core Research Facilities - Molecular Quantum-dot Cellular Automata (QCA), and Material Science of Quantum Computing - Modeling and Simulation of Low-Dimensional and Nano-Structured Materials - Computational Fluid Dynamics Material for this event included the written documentation from each of the research areas at Baylor University, documentation about the current state of technology support, and a write-up of the discussion that took place in person. The Case Studies highlighted the ongoing challenges that Baylor University has in supporting a cross-section of established and emerging research use cases. Each Case Study mentioned unique challenges which were summarized into common needs. These included: - Tradeoffs for network/software security, and usability of the resulting infrastructure. Better communication to set expectations and understand realities is required. - Computation use on campus is widespread and healthy. While no major problems were uncovered, upgrades to maintain current usage patterns and encourage growth will be required. - Storage is a critical need for enterprise use cases and research. In particular, a campus wide ‘storage architecture’ to support research use cases (e.g. instruments, data sharing) is required in the 2-5 year time window. - Instrumentation on campus is healthy and expanding. Technology must scale with this in the form of computation and storage. - Working with LEARN to upgrade network capacity (in multiples of 10G, or upgrades to 100G) will be required in the 1-3 year time frame. - Network monitoring and visibility will help to establish external science use cases. - Data sharing via portal systems is not currently a critical need, but growing in scope. EPOC can assist Baylor with options.
99 GENERAL AND MISCELLANEOUS↗
Lawrence Livermore National Security, LLCSite 300: Toxic Emissions Inventory Plan for ABA 2588 California Air Toxics "Hot Spots" Information and Assessment Act of 1987 (Revision 3.0)
The Air Toxics "Hot Spots" Information and Assessment Act (AB 2588 or the “Act”) was enacted in September 1987. Under the Act, stationary sources are required to report the types and quantities of certain toxic substances their facilities routinely release into the air. AB 2588 is designed to provide information to state and local agencies and to the general public on the extent of airborne emissions from stationary sources and the potential public health impacts of those emissions. The San Joaquin Valley Air Pollution Control District (the District) is mandated by the State to implement AB 2588. On March 6, 2015, The State Office of Environmental Health Hazard Assessment (OEHHA) adopted changes to the Air Toxics Hot Spots Program Guidance Manual for the Preparation of Health Risk Assessments. These revisions were designed to incorporate three technical support documents and to provide enhanced protection of children as required under state law (SB 25, Escutia, 1999). Due to these recent changes, and the corresponding potential increases in calculated health risk, the District notified LAWRENCE LIVERMORE NATIONAL SECURITY, LLC that we must be re-evaluated under AB 2588. Pursuant to the Air Toxics "Hot Spots" Information and Assessment Act of 1987, we have prepared a comprehensive, site-specific Toxics Emissions Inventory Plan. The plan specifies in detail how LAWRENCE LIVERMORE NATIONAL SECURITY, LLC will inventory our facility's emissions of all toxic substances on the list of substances subject to the Act. The plan provides a comprehensive and detailed description of the methods that will be used to quantify air releases or potential air releases of listed substances from all points of release. The plan also includes quantification methods which result in accurate and comprehensive characterization of releases and comply with all applicable requirements of the “Hot Spots” regulation.
54 ENVIRONMENTAL SCIENCES↗
DESIGN & DEVELOPMENT OF A SECURE SELF-LEVELING WIRELESS RECHARGING PLATFORM FOR AN AERIAL DRONE ON AN UNMANNED SURFACE VESSEL
The Design and Development of an automated recharging station for an aerial drone, onboard a small, unmanned surface vessel, is described. Drones require a landing surface that is level within five degrees of the surrounding terrain for repeated reliable landing and takeoff. System constraints and at-sea application necessitate a compact, lightweight, and secure solution. A passive self-leveling platform and an accompanying automated parallel-pusher drone restraint mechanism have been designed and fabricated to aid in achieving a level landing surface and holding the drone in place while it charges. The self-leveling mechanism has been analyzed and subjected to initial laboratory tests. The testing of the drone restraint mechanism to verify its weight capacity and closing time, and the integration of the platform with a custom conductive contact wireless charging pad are identified as future work. The resulting cohesive unit will be tested for performance optimization and implementation onboard the unmanned surface vehicle.
McKinney, Adriana↗
Special Analysis for the Disposal of the West Valley Demonstration Project Extraction Cell 2 Low Density Waste Stream at the Area 5 Radioactive Waste Management Site, Nevada National Security Site, Nye County, Nevada
This special analysis (SA) evaluates whether the West Valley Demonstration Project (WVDP) Extraction Cell 2 Low Density waste stream is suitable for disposal by shallow land burial (SLB) at the Area 5 Radioactive Waste Management Site (RWMS) on the Nevada National Security Site (NNSS). The WVDP Low Density waste stream consists of debris contaminated during the decontamination and decommissioning (D&D) of Extraction Cell 2 at the WVDP (WVDP 2015). The WVDP Low Density waste stream required an SA because the radium-226 (226Ra) activity concentration exceeds the NNSS Waste Acceptance Criteria (WAC) Action Level (U.S. Department of Energy, National Nuclear Security Administration Nevada Field Office [NNSA/NFO] 2013). The effect of adding the WVDP Low Density waste stream inventory to the inventory of waste disposed through the end of FY 2014 was evaluated with the A5 RWMS v 4.119 PA model. The results indicate that all performance objectives can be met with disposal of the WVDP Low Density in a SLB trench. Addition of the WVDP Low Density inventory slightly increases the 222Rn flux density, but the maximum mean and 95th percentile flux density remain less than the performance objective throughout the compliance period. The WVDP Low Density waste stream had no significant effect on the maximum mean and 95th percentile for all other PA results. The WVDP Low Density waste stream, therefore, is suitable for disposal by SLB at the Area 5 RWMS.
12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗