Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Program Evaluation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

An Evaluation of The Dynamic Physical Security Risk Assessment Methodology for Fleet-Wide Applications

The requirements for U.S. nuclear power plants to maintain a large onsite physical security force contribute to their high operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability (LWRS) program’s physical security pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. The conservatisms built into current security postures may be analyzed and minimized to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within LWRS program’s physical security pathway has successfully developed a dynamic force-on-force modeling framework using various computer simulation tools and integrating them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This integrated process for physical security analysis is named Modeling and Analysis for Safety Security using Dynamic EMRALD Framework (MASS-DEF). This document provides an update on the progress in applying the MASS-DEF process to an operating commercial nuclear power plant as well as additional industry feedback regarding use of the tool for other physical security risk-informed topics. This report is only a summary of the progress and does not contain specific modeling results as those contain sensitive security information. Previous reports described how a user could integrate their plant-specific force-on-force models with the dynamic simulation tool EMRALD, model operator actions, and integrate with probabilistic risk assessment tools, such as CAFTA (Computer Aided Fault Tree Analysis System) or SAPHIRE (Systems Analysis Programs for Hands-on Integrated Reliability Evaluations), and with thermal-hydraulic tools, such as RELAP-5 or MAAP. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report is an update the progress of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. This report also provides an update to the procedural guidance for the MASS-DEF process and an overview of the generic models available for use by utilities. This report does not contain any plant’s sensitive information and/or safeguards information. This study’s purpose was to verify that the results achieved using generic models are similar to actual plant results and refine our guidance on the use of the framework. This assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

The Relationship of Hydrology in the Green River to Colorado Pikeminnow Populations

The Federally listed Colorado Pikeminnow (CP) (Ptychocheilus Lucius) has been declining in the Green River Basin over the last 20 years. Muth et al. (2000) recommended flows and temperatures to benefit endangered fish species downstream of Flaming Gorge Dam on the Green River. The recommendations identified a range of flows during the base flow period (flows that occur after the annual snowmelt runoff period, usually from early summer to the following spring) that were intended to benefit CP. The recommendations indicated that the mean flow for the summer–winter period should be established each year on the basis of anticipated hydrologic conditions, but adjustments could be made if hydrologic conditions change. Flow should gradually decline from peak flow to base flow, with the base flow reached by early to middle summer (depending on hydrologic conditions) and maintained through February. The rate of decline should depend on rates of decline in Yampa River flows and the recommended rates of decline for dam releases. No specific recommendations were made for base flow variation in Reach 1, but variation around the annual mean base flow should be restricted to achieve recommended levels of variation in Reach 2 (middle Green River) (Table 5.5 in Muth et al. 2000). Implementation of the flow and temperature recommendations served as the proposed action for an EIS on Flaming Gorge Dam operations. A Biological Assessment of the impacts on endangered species of implementing the recommendations was prepared and a Biological Opinion that called for development of a study plan to examine the effects of implementation. Projects to address this evaluation were identified in the Green River Study Plan and have been conducted since then. The purpose of the Study Plan was to identify and recommend to the Recovery Program those monitoring or research projects necessary for implementation and evaluation of the flow and temperature recommendations. Those projects included studies to evaluate the anticipated effects of implementing the recommendations (including potential adverse effects identified in the 2006 Biological Opinion) and studies to examine recognized uncertainties of the recommendations. A new recovery program summer base flow study plan was approved in September of 2020 to evaluate stable and elevated summer base flows below Flaming Gorge Dam intended to benefit CP spawning and rearing success. Anecdotal observations suggest CP production may have been higher in years prior to flow restrictions for endangered fish. Based on long-term CP monitoring data in the Green River, Bestgen and Hill (2016) concluded that CP would benefit from higher summer baseflows (1,700-3,000 ft 3 /sec) with flows above or below associated with lower abundance of age-0 CP. Therefore, flexibility in the ROD is currently being utilized to establish higher stable summer base flows in an attempt create more advantageous conditions for spawning and rearing CP. These fish recovery flows are restrictive to WAPA in the summer months, therefore it is necessary to conduct an analysis of historic river data relationships to CP abundance to better understand if the recommended fish flows (elevated and stable base flows) are necessary for fish recovery.

54 ENVIRONMENTAL SCIENCES↗

Energy I-Corps Annual Report 2025

Energy I-Corps is an initiative of the Department of Energy's Office of Technology Commercialization. The focus of this 2-month program is to train National Laboratory researchers in evaluating industry needs and potential market applications for their DOE technologies. This year's annual report details the accomplishments, activities, and finances of Energy I-Corps' 2025 fiscal year programming.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Assessment of Technical Information Needs and Considerations for Front-End Activities for Molten Salt Fuel Types

This report details an assessment of the hazards and safety impacts related to front-end operations of molten salt reactors (MSR) as well as an assessment of existing safety guidance. Publicly available information was evaluated to make recommendations to the U.S. Nuclear Regulatory Commission (NRC) for guidance development and information gathering needs. Five different MSR technologies were evaluated along with information from 1960’s about the Atomic Energy Commission programs for the Aircraft Reactor Experiment and Molten Salt Reactor Experiment. Primary areas of evaluation include fuel cycle facilities, transportation and at reactor fuel mixing operations up to reactor startup. In general, there was difficulty synthesizing publicly available information due to the early stage of the MSR development and proprietary information associated with the reactor technology companies analyzed. There are a few specific recommendations from this report. One overarching paradigm shift that the NRC needs to evaluate is the possibility of collocating fuel cycle facilities with operating MSRs. Although there is no specific prohibition to this in the NRC regulations, the collocation of the fuel cycle facilities with the operating MSR presents a novel approach compared to the light water reactor baseline. More guidance and research into thorium operations and regulation is needed. The hazards associated with the stability of stored fuel constituents need to be evaluated. Some reactor fuel cycles use beryllium, and its use and the associated hazards need further analysis. NRC-approved designs for transportation packages for shipping molten salt fuels and factory-built and fueled reactors are not available.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Evaluating cosmological biases using photometric redshifts for Type Ia Supernova cosmology with the Dark Energy Survey Supernova Program

Cosmological analyses with Type Ia Supernovae (SNe Ia) have traditionally been reliant on spectroscopy for both classifying the type of supernova and obtaining reliable redshifts to measure the distance–redshift relation. While obtaining a host-galaxy spectroscopic redshift for most SNe is feasible for small-area transient surveys, it will be too resource intensive for upcoming large-area surveys such as the Vera Rubin Observatory Legacy Survey of Space and Time, which will observe on the order of millions of SNe. Here, we use data from the Dark Energy Survey (DES) to address this problem with photometric redshifts (photo-z) inferred directly from the SN light curve in combination with Gaussian and full p(z) priors from host-galaxy photo-z estimates. Using the DES 5-yr photometrically classified SN sample, we consider several photo-z algorithms as host-galaxy photo-z priors, including the Self-Organizing Map redshifts (SOMPZ), Bayesian Photometric Redshifts (BPZ), and Directional-Neighbourhood Fitting (DNF) redshift estimates employed in the DES 3 × 2 point analyses. With detailed catalogue-level simulations of the DES 5-yr sample, we find that the simulated w can be recovered within ±0.02 when using SN+SOMPZ or DNF prior photo-z, smaller than the average statistical uncertainty for these samples of 0.03. With data, we obtain biases in w consistent with simulations within ~1σ for three of the five photo-z variants. We further evaluate how photo-z systematics interplay with photometric classification and find classification introduces a subdominant systematic component. This work lays the foundation for next-generation fully photometric SNe Ia cosmological analyses.

(cosmology:) dark energy↗

ORNL Package Testing Program Overview

Radioactive materials are widespread in our everyday activities which are used in many different types of industries: Consumer products, Medicine, Industry, Energy, and Defense. In the United States there is about 3 million shipments of radioactive materials per year. With radioactive material being very widespread the number of new applications to ship these quantities increases daily. As such, ensuring the safe and secure transport of these materials is paramount, necessitating stringent packaging, transportation, and certification requirements. Shipments of radioactive materials have been made from Oak Ridge National Laboratory (ORNL) for the past 65 years. Since the 1940s ORNL has been at the forefront of the early development of regulations pertaining to the transport of radioactive shipments and associated regulatory testing. The early involvement resulted in ORNL being one of the leaders in the development of regulations and testing standards pertaining to the testing and design of packages. Today all package testing activities are conducted under the Package Testing Program (PTP) at ORNL at the Package Evaluation Facility (PEF). The PTP develops and evaluates testing solutions – ensuring that they are safe, efficient, and meet regulatory requirements ORNL PTP has extensive experience in the regulatory testing of radioactive material packages, supporting certification of Type A, Type, B, Type AF, and special form packages. The PEF serves as a one-stop-shop for design, testing, and certification of a wide variety of packages needed for shipment of radioactive materials. The facility provides the space, expertise, and equipment necessary to conduct rigorous performance testing under both normal and accident conditions or transport environments including free drop, dynamic crush, puncture, penetration, compression, vibration, water spray, water immersion, and thermal test. The PTP remains a key contributor to the safety and compliance of radioactive material transportation. This presentation will provide an overview of the program’s history, capabilities, and its ongoing role in advancing regulatory standards and transportation safety.

Martinez, Oscar [ORNL] (ORCID:0000000181814046)↗

TEX-Chlorine Assemblies: Highly Enriched Uranium Plates with Sodium Chloride Absorbers Using Polyethylene Moderator and Polyethylene Reflector

This evaluation documents highly enriched uranium (HEU) experimental critical configurations with polyethylene moderators and sodium chloride absorbers conducted as part of the United States Nuclear Criticality Safety Program’s Thermal/Epithermal eXperiments (TEX) program. HEU-MET-MIXED-021 provides the benchmark evaluation of five TEX experiments designed to establish baseline configurations with HEU Jemima plates moderated by high density polyethylene (HDPE). The TEX-HEU experiments were designed to cover five different fission energy regimes by varying the thickness of the interstitial HDPE moderator, with varying fractions of thermal, intermediate, and fast fissions, and to be easily modified to accommodate test materials of interest. HEU-MET-INTER-013 documents the first TEX-HEU variation, incorporating hafnium in seven different experimental configurations. This evaluation covers an additional variant that incorporates absorber plates of compacted high-purity sodium chloride salt. These experiments were motivated by a criticality safety need for validation data for uranium purification by means of electrorefining with chloride salts, especially thermal and intermediate energy configurations resulting from moderator upset conditions, and their design was optimized by matching sensitivity profiles from application cases. All three experimental configurations are judged to be acceptable as benchmark cases. The main parameter varied between the configurations is the thickness of the polyethylene moderators and the sodium chloride absorbers between the HEU plates. Varying the thickness of the polyethylene tunes the neutron energy spectrum between majority thermal (Case 1 and 2) and intermediate (Case 3). The fission fractions, presented in Table 1, are determined calculationally. Case 3 is cross listed as HEU-MET-INTER-014.

42 ENGINEERING↗

Intra- and inter-subtype HIV diversity between 1994 and 2018 in southern Uganda: a longitudinal population-based study

There is limited data on human immunodeficiency virus (HIV) evolutionary trends in African populations. We evaluated changes in HIV viral diversity and genetic divergence in southern Uganda over a 24-year period spanning the introduction and scale-up of HIV prevention and treatment programs using HIV sequence and survey data from the Rakai Community Cohort Study, an open longitudinal population-based HIV surveillance cohort. Gag (p24) and env (gp41) HIV data were generated from people living with HIV (PLHIV) in 31 inland semi-urban trading and agrarian communities (1994–2018) and four hyperendemic Lake Victoria fishing communities (2011–2018) under continuous surveillance. HIV subtype was assigned using the Recombination Identification Program with phylogenetic confirmation. Inter-subtype diversity was evaluated using the Shannon diversity index, and intra-subtype diversity with the nucleotide diversity and pairwise TN93 genetic distance. Genetic divergence was measured using root-to-tip distance and pairwise TN93 genetic distance analyses. Demographic history of HIV was inferred using a coalescent-based Bayesian Skygrid model. Evolutionary dynamics were assessed among demographic and behavioral population subgroups, including by migration status. 9931 HIV sequences were available from 4999 PLHIV, including 3060 and 1939 persons residing in inland and fishing communities, respectively. In inland communities, subtype A1 viruses proportionately increased from 14.3% in 1995 to 25.9% in 2017 (P < .001), while those of subtype D declined from 73.2% in 1995 to 28.2% in 2017 (P < .001). The proportion of viruses classified as recombinants significantly increased by nearly four-fold from 12.2% in 1995 to 44.8% in 2017. Inter-subtype HIV diversity has generally increased. While intra-subtype p24 genetic diversity and divergence leveled off after 2014, intra-subtype gp41 diversity, effective population size, and divergence increased through 2017. Intra- and inter-subtype viral diversity increased across all demographic and behavioral population subgroups, including among individuals with no recent migration history or extra-community sexual partners. This study provides insights into population-level HIV evolutionary dynamics following the scale-up of HIV prevention and treatment programs. Continued molecular surveillance may provide a better understanding of the dynamics driving population HIV evolution and yield important insights for epidemic control and vaccine development.

60 APPLIED LIFE SCIENCES↗

Optimal Mitigation Planning For Adversarial Scenarios

We propose a generalized framework which performs an optimal partitioning of a limited budget into various organizational sectors in order to improve the cybersecurity of a smart device or component in the Cyber Physical Energy System (CPS). The framework identifies the adversarial threats and possible attack sequences which can be performed to exploit cyber vulnerabilities of the component. Thereafter, we formulate an Mixed Integer Linear Programming (MILP) optimization problem which aims to evaluate the optimal budget partitions in order to minimize the number of highly likely attack sequences. Though we provide results for using the framework in CPES, the proposed methodology can be extended for multiple domains with a set of known adversarial and mitigation actions.

Purohit, Sumit [Pacific Northwest National Laborat↗

Development and Validation of a Probabilistic Risk Assessment Model for a Generic Modular High Temperature Gas-Cooled Reactor

This study looks to develop and validate a probabilistic risk assessment (PRA) model for the modular high temperature gas-cooled reactor (MHTGR) using INL’s Systems Analysis Programs for Hands-on Integrated Reliability Evaluations (SAPHIRE) software. Validation against a General Atomics design involves matching event and fault trees to historical frequencies, with a goal of under 15% difference. The research aims to deliver a reliable PRA model to assess the safety of MHTGRs for use within high-temperature industrial applications.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Enabling Dynamic Probabilistic Risk Assessment of Physical Security Using EMRALD and MAAP

The optimization of physical security in nuclear power plants requires sophisticated methodologies that integrate operator actions and plant behavior through advanced simulation tools. To address this, Idaho National Laboratory [JL2.1]has developed the Modeling and Analysis for Safety and Security using the Dynamic EMRALD Framework (MASS-DEF) methodology, an approach that integrates force-on-force simulations, dynamic probabilistic risk assessment, and thermal-hydraulics modeling [JL3.1]to enhance security planning while reducing costs. We developed a tool that produces reduced order models using thermal hydraulic simulations from the Modular Accident Analysis Program (MAAP) [1]. These models can quickly evaluate reactor core behavior during attack simulations, and in so doing, address two barriers of traditional methods: (1) MAAP simulations are computationally intensive, and (2) attack scenarios must be run in a secure environment, which complicates analysis and validation. By precomputing scenario outcomes for a small number of modified parameters, the reduced order model significantly decreases the computational cost and enables offsite review of the results.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

Design, characterization and shape recovery behavior of 3D/4D printed shape memory polymers (SMPs)

Shape memory polymers (SMPs) represent a paradigm shift in material science, uniquely capable of undergoing reversible shape transformations triggered by external stimuli, positioning them as pivotal in developing next-generation biomedical devices, aerospace components, and adaptive structures. Extensive research has been done on SMPs with a major focus on high-temperature programming methods, which can limit energy efficiency and applicability with temperature-sensitive materials. Additionally, while various SMP blends have demonstrated great potential, limited work has been done on the suitability for 3D printing these materials, particularly under high-strain and ambient temperature programming conditions. In this study, a three-component optimized SMP composition was evaluated by 3D printing via the Material Extrusion (MEX) technique and investigating its ambient temperature-programming behavior at high strains. The SMP formulation studied was a tailored blend of thermoplastic polyurethane (TPU), polycaprolactone (PCL), and an octadecane diol-based copolymer (OBC) that exhibits robust shape memory behavior, high strain tolerance, and efficient force generation. Rigorous thermal, mechanical, and shape recovery analyses, along with optimized printing parameters and consistent shape recovery rates of up to 90%, were achieved under dynamic mechanical analysis (DMA), even under ambient programming conditions. This work demonstrates the SMP composition’s potential for adaptive, self-deployable systems with 4D printing characteristics ideal for bio-inspired structures and artificial muscle fibers.

Sudan, Kavish [University of Louisville, KY]↗

Impact of Heaters on Molten Salt Reactors Dynamics

Recently, there has been renewed interest in the Molten Salt Reactor (MSR) concept. This interest is mainly due to its advantages over Light Water Reactors (LWRs). Among these advantages are the flexibility in the fuel choice and the possibility to burn actinides [1]. Currently, two molten research reactors are under development. A 2 MW molten salt experimental reactor has been constructed and is planned for operation in China. A 1 MW Molten Salt Research Reactor is under construction in the United States [2]. Thus, Research and Development (R&D) programs are needed for the MSR technology. Reactor dynamics studies are crucial safety evaluation studies. The development of reactor dynamics tools for MSRs started during the Molten Salt Reactor Program (MSRP) at ORNL, focusing on the Molten Salt Reactor Experiment (MSRE) [3]. Although various dynamic simulation tools are available, R&D efforts to develop specialized tools for MSRs are still ongoing [4]. The primary motivation for this interest is the goal of commercializing MSRs. Developing a dynamics tool for MSRs is crucial for analyzing their safety and supporting their demonstration efforts. A crucial safety issue in MSRs is ensuring that the fuel salt in the primary loop remains molten. This concern becomes particularly important when the reactor operates at lower power levels. Most chloride and fluoride salts used as fuel have a melting point of approximately 450 °C [5]. Therefore, maintaining fuel salt temperatures above this melting point is essential to prevent it from freezing. Freezing of the fuel salt can lead to volume expansion, potentially causing damage to reactor components [6]. Moreover, it can create local blockages within fuel salt channels, reducing cooling efficiency and resulting in hot spots [7]. Various methods can prevent fuel salt from freezing at low power levels. These include reducing the fuel mass flow rate in the primary loop, decreasing heat exchange between the primary and secondary loops in the reactor, and using electric fuel salt heaters. Reducing the mass flow rate of fuel salt in the primary loop can increase the fuel salt transit time in the core, enhancing heat production and increasing temperature. However, it can potentially lead to challenges. These include increasing the potential for fuel salt deposition on the reactor channel walls [8], affecting the overall heat transfer processes. Thus, alternative methods should be used [9]. This research investigates the effects of fuel salt heaters on the dynamics and stability during MSR operation. The investigation includes studying the reactor stability with the fuel salt heaters on and off. In addition, the reactor response to transients is compared with and without the operation of fuel salt heaters. These transients include reactivity insertion, primary and secondary pump failure, and heat sink temperature increase. The results of the reactivity insertion transient are presented in the summary.

73 - NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Evaluation of Sandia NCS Benchmark Suite Updates

The Sandia Nuclear Criticality Safety (NCS) program’s benchmark suite was recently updated. This suite is used to ensure that NCS calculations using computer-based neutron transportation codes have an established baseline comparison of calculated versus known experimental results. The Evaluated Nuclear Data File (ENDF) version used for the MCNP models in the suite was changed from ENDF/B-VII.1 to ENDF/B-VIII.0. Additionally, relevant thermal scattering law data libraries (TSLs) were updated. The sensitivity of the calculational bias of each benchmark model to these changes is discussed. Implementation of the ENDF/B-VIII.0 library and updated TSLs results in improvements to bias distribution in the intermediate enriched uranium, plutonium, and mixed uranium–plutonium (IEU, PU, and MIX) fissionable material benchmark categories, but a small bias increase in low- and high-enriched uranium categories (LEU and HEU, respectively). The results also highlight the sensitivity of the benchmarks, with average lethargy of neutrons causing fission energies (EALF) in the intermediate energy range to ENDF/B library changes. The most numerous bias changes were observed in the thermal energy region when transitioning from ENDF/B-VII.1 to ENDF/B-VIII.0. In conclusion, most of the unique bias changes observed in MCNP 6.3.0 between the two nuclear data libraries were in the LEU-COMP-THERM evaluation subset.

ICSBEP↗

Verification of EvaluateFLux Utility Program

The EvaluateFlux program is a post-processing utility program for DIF3D, specifically DIF3D-VARIANT which handles Cartesian and hexagonal geometries. The EvaluateFlux program was developed to allow users to obtain flux and power traverses through the geometry domain, and its initial purpose was to facilitate foil analysis by evaluating the flux solution from DIF3D-VARIANT and combining it with foil cross section data. The EvaluateFlux program can calculate the neutron flux, as well as the reaction rates, at any user provided evaluation point. It does this by identifying the spatial mesh associated with the evaluation point and then evaluates the polynomial based neutron flux moments stored in the NHFLUX file at that point. The output of EvaluateFlux varies depending on the input setup. The maximum output includes the neutron flux and microscopic and macroscopic reaction rates at each evaluation point. The purpose of this work is to verify the outputs of EvaluateFlux. Simple models that have hand calculatable results are first defined and used to verify the EvaluateFlux outputs. More complex cases are then added where a duplicate program of EvaluateFlux that uses PrintTables outputs of the binary files is used to verify the EvaluateFlux outputs. In those complex cases, hand calculations of selected evaluation points were also displayed to confirm the software verification. For all the tests done, the hand calculations agreed well with those calculated by EvaluateFlux. For the larger complex problems, the duplicate program that can process hundreds of evaluation points was able to identify that zero points within some meshes have large errors. This aspect was attributed to the truncation error on the input provided to the duplicate program and is not a concern for the accuracy of the EvaluateFlux software.

97 MATHEMATICS AND COMPUTING↗

Verification of the EvaluateFlux Utility Program

The EvaluateFlux program is a post-processing utility program for DIF3D, specifically DIF3D-VARIANT which handles Cartesian and hexagonal geometries. The EvaluateFlux program was developed to allow users to obtain flux and power traverses through the geometry domain, and its initial purpose was to facilitate foil analysis by evaluating the flux solution from DIF3D-VARIANT and combining it with foil cross section data. The EvaluateFlux program can calculate the neutron flux, as well as the reaction rates, at any user provided evaluation point. It does this by identifying the spatial mesh associated with the evaluation point and then evaluates the polynomial based neutron flux moments stored in the NHFLUX file at that point. The output of EvaluateFlux varies depending on the input setup. The maximum output includes the neutron flux and microscopic and macroscopic reaction rates at each evaluation point. The purpose of this work is to verify the outputs of EvaluateFlux. Simple models that have hand calculatable results are first defined and used to verify the EvaluateFlux outputs. More complex cases are then added where a duplicate program of EvaluateFlux that uses PrintTables outputs of the binary files is used to verify the EvaluateFlux outputs. In those complex cases, hand calculations of selected evaluation points were also displayed to confirm the software verification. For all the tests done, the hand calculations agreed well with those calculated by EvaluateFlux. For the larger complex problems, the duplicate program that can process hundreds of evaluation points was able to identify that zero points within some meshes have large errors. This aspect was attributed to the truncation error on the input provided to the duplicate program and is not a concern for the accuracy of the EvaluateFlux software.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Speeding-up fuzzing through directional seeds

Abstract Fuzzing is an automated process for discovering inputs in a program that may trigger unexpected behavior. Today, fuzzing has become a standard practice for the discovery of bugs and security vulnerabilities. However, the main issue with such practices is that the exploration of the input space of programs can often be prohibitively expensive. Therefore, several alternative fuzzing strategies have been introduced during the last few years. Some fuzzing techniques rely on human expertise to provide a plausible set of initial input examples, namely, seeds. However, the process of handcrafting seeds for fuzzing purposes often becomes strenuous for humans as it requires a deeper understanding of the Program-Under-Test (PUT). Also, the use of known inputs to programs often does not trigger vulnerable program behavior or may not reach potentially vulnerable code locations. To address those issues, we propose a seed generation framework that enables Human-In-The-Loop (HITL) directed fuzzing where the human assumes a more active role in the creation of seeds that can penetrate and assess desired locations of the PUT. Our proposed framework uses Symbolic Execution (SE) to generate seeds that exercise paths to target program locations. Moreover, our framework enables the visualization of the explored execution paths in the binary of the PUT for the generated seeds. We evaluated our approach on a set of 12 carefully designed C programs with diverse characteristics that mimic real-world programs. The experimental results show the effectiveness of the proposed approach in improving the performance of standard fuzzing tools such as the American Fuzzy Lop ("Image missing" <#comment/> ). Specifically, our solution can generate seeds that substantially enhance the performance of the fuzzer, achieving speedups ranging from $$1.46\times $$ 1.46 × to $$68.53\times $$ 68.53 × for branch conditions, $$1.39\times $$ 1.39 × to $$254.62\times $$ 254.62 × for branch depths, $$14,879.59\times $$ 14 , 879.59 × to $$30,295.88\times $$ 30 , 295.88 × for branch widths over traditional seeds. Additionally, the speedup increases with the number of target function ranging from $$12,260\times $$ 12 , 260 × to $$22,856.07\times $$ 22 , 856.07 × over traditional seeds while only requiring less than 15 seconds on average for the seed generation step.

97 MATHEMATICS AND COMPUTING↗