SEARCH · Engineering Papers

Results for “transparency”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,621 records · Page 90

All sources NASA NTRS DOE OSTI

DOE OSTI2022

Brief Overview of the DOE/NNSA Nuclear Criticality Safety Program [Slides]

The mission of the DOE/NNSA Nuclear Criticality Safety Program is to provide sustainable expert leadership, direction and the technical infrastructure necessary to develop, maintain, and disseminate the essential technical tools, training, and data required to support safe, efficient fissionable material operations within DOE. The vision of the program is to create a continually improving, adaptable, and transparent program that communicates and collaborates globally to incorporate technology, practices, and programs to be responsive to the essential technical needs of those responsible for developing, implementing, and maintaining nuclear criticality safety.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

DOE OSTI2022

Modeling Value Flows in Utility Rate Structures

As the increased adoption of distributed energy resources continues to challenge flat utility rate structures, time-varying rates and more dynamic mechanisms like transactive energy systems can better leverage customer-sited distributed energy resources to provide grid services. However, adopting new utility policies can be a timely process and requires a high level of transparency into the energy system. A wide range of stakeholders must understand who may be affected by policy changes and how. This work employs the valuation methodology developed under Pacific Northwest National Laboratory’s Transactive Systems Program to outline the functional differences in value flow under a series of conventional rate structures and a transactive energy system. The resulting value model illustrates the nuances that arise and highlights future avenues of work that will be necessary as utilities across the country continue to develop new rate structures and market mechanisms.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2023

Quantifying Uncertainty in PV Energy Estimates Final Report

Uncertainty in PV energy estimates is "one of the most critical areas of lack of understanding" according to independent engineers, financiers, PV model developers, and other industry stakeholders. The primary problem is a lack of rigorous, transparent, widely accepted methods for quantifying uncertainty in energy production estimates. Uncertainty in energy production estimates arises from variability of the solar resource, inexact PV performance models and their parameters, and system reliability considerations. Uncertainty in annual energy production is frequently calculated for larger projects in order to quantify financial risk. Key statistics for energy, such as the P-values "P50" and "P90" (the annual energy values that are exceeded in future years with 50\% and 90\% probability, respectively) are used by financing institutions to calculate the repayment risk for the project. The current methods to estimate these statistics are typically proprietary, specialized, and involve significant post-processing of commercial performance model results. This black-box approach leads to inconsistent P-value estimates from different parties, which reduces investors' confidence in the results. Since the financial community bases its risk assessment on these estimates, reduced confidence increases perceived project risk, and consequently financing costs. The goal of this project was to establish a set of best practices for quantifying uncertainty in energy production estimates, including identifying what sources of uncertainty must be considered with clear definitions and metrics, determining which sources are the biggest drivers of uncertainty, and providing a computationally efficient framework for combining different sources of uncertainty that is flexible enough to accommodate substitutions of data or methods when better information is available. We engaged a wide set of stakeholders to ensure industry endorsement and adoption, and leveraged complementary projects investigating individual sources of uncertainty in great detail, as well as others' work that started down this path.

ENERGY PLANNING, POLICY, AND ECONOMY,SOLAR ENERGY↗

DOE OSTI2023

Hybrid Tandem Photovoltaics

Tandem solar cell structures are the only strategy demonstrated to surpass the detailed balance efficiency limit of high-quality single-junction solar cells. To continue to improve the efficiencies of cost-effective terrestrial solar power, hybrid tandems of dissimilar subcells are being considered by many around the world, especially designs that incorporate silicon solar cells as a bottom subcell. In this project, we studied a wide variety of tandem design possibilities including those with three-terminal (3T) and four-terminal (4T) configurations. The use of 3T and 4T designs could be useful for efficient and economical hybrid tandem designs that utilize the best available subcell materials such as emerging perovskite materials. Three-terminal configurations, in particular, have not been sufficiently studied previously. We have laid the foundational groundwork in this project for understanding the operation of 3T tandems: developing a taxonomy for naming, a methodology for measuring and interconnecting, and models for simply characterizing 3T tandems. Electrical and optical subcell coupling between the subcells was also measured and modeled. An important part of this work was the fabrication of novel example tandem structures, including 4T GaAs/Si, 3T GaInP/Si, 3T GaAs/Si, and 3T GaInP/GaAs devices. Using these high-quality tandem cells, we have been able to clearly demonstrate the achievability of high-efficiencies, and subtle physical effects such as photon recycling and luminescent coupling. We have developed and demonstrated essential building-block tools such as transparent conductive adhesives (TCA) and 3T silicon bottom cells with interdigitated back contacts (IBC) that can also be used in many other tandem designs. We have tested the reliability of these tools and devices under standardized testing and outdoor measurements. We have found 4T GaAs/Si tandems to be relatively straightforward to fabricate and robust in real-world outdoor conditions. While we have demonstrated working hybrid 3T III-V/TCA/Si IBC tandems, we experienced low yields even with our best process flows yet. Further work is still needed to improve the processing yield of these devices. We therefore also created tandem cells using an all-III-V 3T tandem process which was very robust with high yields, allowing for the creation of voltage-matched strings in many different configurations using 8 nearly identical 3T tandems. Using these robust 3T tandem examples, we were able measure and precisely characterize 3T tandem behaviors to predict their operation under changing spectrum and temperature. The optoelectronic equivalent-circuit model was shown to be very general and applicable to hybrid tandems, and encompassed the operation 3T Si IBC cells. This general model has been distributed to the public in as open-source Python-based software called PVcircuit. We have calculated the implications of these new tandem device designs on the real-world energy production and shown how the relative performance of different tandem configurations is situational and can be engineered using the tools developed here.

14 SOLAR ENERGY↗

DOE OSTI2023

Cost and Performance Baseline for Fossil Energy Plants Volume 3: Low Rank Coal and Natural Gas to Electricity

This report presents an independent assessment of the cost and performance of select fossil energy power systems—pulverized coal (PC), circulating fluidized bed (CFB), and natural gas combined cycle (NGCC) plants—using a systematic, transparent technical and economic approach. This is Volume 3 of a five-volume series, which comprise the following reports: Volume 1: Bituminous Coal and Natural Gas to Electricity; Volume 2: Coal to Synthetic Natural Gas and Ammonia (Various Coal Ranks); Volume 3: Low Rank Coal and Natural Gas to Electricity; Volume 4: Bituminous Coal to Liquid Fuels; and Volume 5: Natural Gas Electricity Generating Units for Flexible Operation. The cost and performance of fossil fuel-based generation technologies represented in this report (and the series at large) are important inputs to assessments and determinations of technology combinations to be utilized to meet the projected demands of future power markets. In addition to informing technology comparisons, the reference plant configurations found in this report provide perspective for regulators and policy makers. From a research and development perspective, this report is used to assess goals and metrics and to provide a consistent basis for comparing developing technologies.

20 FOSSIL-FUELED POWER PLANTS↗

DOE OSTI2024

Synthesis of motif and symmetry for accelerated learning, discovery, and design of electronic structures for energy conversion applications (Final Technical Report)

The overall goal of the projects is to develop a framework to incorporate structure motifs and crystal/orbital symmetries into the data-driven materials discovery infrastructure. The PI proposed to develop structure-motif- and symmetry-based graph convolutional networks for effective learning and efficient predictions of electronic structures and related properties. Fundamental understanding of the roles of structure motif and symmetry will establish new hypothesis and design rules, which will be combined with high-throughput computations based on density functional theory to discover novel light absorbers, transparent conductors, as well as 2D light emitting materials and heterojunctions for optoelectronics.

36 MATERIALS SCIENCE↗

DOE OSTI2023

First-Principles Understanding of Optical Excitations within Low-Dimensional Materials

The objective of this project is to utilize first-principles computational approaches to understand optical excitations within two-dimensional monolayers and heterostructures, with the ultimate goal of designing new materials by modifying the chemical and physical structure on the nanoscale. In 2D heterostructures, the nature and movement of the exciton is determined to a large extent by the electron-electron and electron-phonon strengths within individual monolayers, as well as the coupling between layers, all of which in turn depend on chemistry, solid-state screening properties, and quantum confinement. Controlling the nature and migration properties of excitons requires an understanding of the complex relationship between electrons, phonons, defects, disorder, and dynamics. The aim of this project is to determine, by analysis of highly accurate density functional theory (DFT) and many-body perturbation theory (MBPT) calculations, how these complexities can be decomposed into simple, tunable parameters. The specific goals of this project are to 1) understand electron conductivity, absorption and transparency of monolayer semiconductors and metals; 2) develop a theory of excitons near defects in low dimensions; and 3) understand the influence of inter-layer interactions in heterostructures.

75 CONDENSED MATTER PHYSICS, SUPERCONDUCTIVITY AND↗

DOE OSTI2021

Commercial Building Energy Code Field Study: Data Collection Methodology and Protocol

In support of the U.S. Department of Energy’s Commercial Buildings Energy Code Field Study, this data collection methodology and protocol provides guidance on all aspects of undertaking a compliance study, from development of a sampling plan to recruitment to code requirements and compliance checks for each energy code measure specified to be collected. The protocol also includes a data collection form that captures all key information needed for analysis of commercial energy code compliance. This methodology was developed by the Institute for Market Transformation in coordination with Pacific Northwest National Laboratory (PNNL) and the U.S. Department of Energy Building Energy Codes Program with the objective of assisting states, jurisdictions, utilities and others as they seek to measure and demonstrate compliance rates with energy codes in commercial buildings, as well as to target areas for improvement through increased energy code compliance and broader energy-efficiency programs. It is also intended to facilitate a consistent and replicable approach to research studies of this type and establish a transparent data set representing baseline construction practices across the U.S.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2023

Commercial Building Energy Code Field Study: Data Collection Methodology and Protocol

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2023

Quality Assessment of Molten Salt Thermochemical Property Data

Recommendations are made to enhance user confidence in property values included in the Molten Salt Thermal Database-Thermochemical Properties (MSTDB-TC). Specifically, it is recommended that all available measured values be included with a transparent assessment of each to arrive at a preferred value for each salt composition in the database. The use of a quality assessment and ranking system is recommended for data and property values compiled in the MSTDB-TC that is analogous to the approach developed for data and property values included in the MSTDB-Thermophysical Properties (TP) database. The approach includes assessments of five features of data collection: the method used to measure the property value, calibration of devices used to make the measurements, the quantified uncertainty of the results, control of the environmental conditions, and determination of the salt composition. The quality of each facet is ranked as High, Moderate, or Incomplete based on objective metrics. The overall quality of the dataset is ranked based on rankings of the five data features and traceability of the reported property value, with rankings of A and B indicating the data and property value are deemed suitable for quantitative use, C indicating the value is computed and not validated and U indicating uncertainties restrict the recommended use to qualitative purposes. Sufficient information should be provided or cited within each data set included in the database to verify the reported property value. The recommended approach is suitable for assessing data already in the MSTDB-TC and screening new entries.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2023

An Overview of the Risk Assessment Information System

This technical memorandum (TM) presents an overview of the Risk Assessment Information System (RAIS), a collection of web-based tools designed to assist with the environmental risk assessment process. The objective of the RAIS is to be a single resource for the risk assessment process, providing guidance when planning and performing the steps: data assessment, exposure assessment, toxicity assessment, and risk characterization. The RAIS evolved as a result of the initial remediation efforts at various United States (U.S.) Department of Energy (DOE) facilities. The goal was to increase the efficiency and transparency of the human health and ecological assessments being performed by DOE’s Office of Environmental Management, Oak Ridge Operations (ORO) office by providing a repository for toxicity information, physicochemical data, risk assessment procedures, standardized risk calculation methods, and web-based tools. Since the initial launch in 1996, the RAIS has expanded its user base outside of the federal government and now has users from over 100 countries, universities, states, and local governments. What sets the RAIS apart from other risk assessment sites are the publicly available, searchable toxicity and physicochemical databases and the wide range of chemical and radionuclide risk calculation tools. The purpose of this TM is to present the RAIS tools in order of the website menus and explain how they fit in the risk assessment process. In addition, this TM describes differences between the chemical and radionuclide tools of the RAIS. Screening level equations, chronic daily intake equations, and default exposure factors used in the chemical and radionuclide calculators are included in the appendices of this TM. This TM is not intended to be a detailed guide to risk assessment or the RAIS tools. The tools on the RAIS can be used to comply with procedures from multiple agencies, including but not limited to DOE, U.S. Environmental Protection Agency (EPA), U.S. Department of Defense (DoD), and many state governments. Further information on the RAIS tools can be found in the user guides and tutorials available on the webpage.

38 RADIATION CHEMISTRY, RADIOCHEMISTRY, AND NUCLEA↗

DOE OSTI2023

Explainable Artificial Intelligence Technology for Predictive Maintenance

The domestic nuclear power plant fleet has relied on labor-intensive and time-consuming preventive maintenance programs, thus driving up operation and maintenance costs to achieve high-capacity factors. Artificial intelligence and machine learning can help simplify complex problems, such as diagnosing equipment degradation, to enable more effective decision-making. Benefits will be felt not only within existing analog and digital instrumentation and control, but also work processes, the integration of people with technology, and most importantly, the business case. Together, these hold promise to make nuclear power more efficient and reduce costs associated with operation and maintenance. While the artificial intelligence and machine learning technologies hold significant promise in the nuclear industry, there are challenges or barriers to their adoption. This report outlines the those different machine learning adoption barriers (categorized as historical, technical, economic, regulatory, and user) that the industry must overcome to realize the full benefits of artificial intelligence and machine learning capabilities for long-term economic sustainability. This report also provides solutions for some of these barriers by focusing on improving the explainability of machine learning to encourage trust from the end-user. Trust and explainability are essential to machine learning adoption. This report focuses on research-developed solutions to some of these barriers while analyzing a non-safety-related system, namely the circulating water system. This system frequently experiences waterbox fouling which our models preemptively diagnoses then explains to the operator how those conclusions were reached. This report presents and discusses the inherent trade-off between machine learning performance (in terms of accuracy) and explainability, where highly accurate machine learning methods (such as deep-learning) are the least explainable, and the most explainable methods (such as decision trees) are the least accurate. In addition, explainability of artificial intelligence techniques in terms of transparency and post-hoc metrics are discussed. This report outlines the importance of data novelty and value of new information in evaluating both the explainability and trustworthiness. Novelty detection helps to establish consistency or inconsistency of the new data with respect to the training data. On the other hand, value of information could be a part of the user-centric visualization recommendation system that request additional information to be collected, thereby strengthening the machine learning outcomes. During this project, a copyrighted user-centric visualization that aligns with a human-in-the-loop approach was developed. The user-centric visualization presents different levels of information and can be tailored as per user credentials to gain user confidence. One of the salient features of the user-centric visualization is it presents machine learning methods with explainability metrics. A simplified version of the user-centric visualization was presented to 32 users with varying levels of machine learning expertise. Feedback was solicited to test the hypothesis that the app contained sufficient explainability and that the users would trust the algorithm. Overall, the app was positively received, and the hypothesis was supported. This report discusses the trust-but-verify framework – a potential approach to build user trust artificial intelligence. The framework discusses trust from the human level to artificial intelligence level. The fundamental premise of the trust but verify framework is derived from an observation of nuclear safety culture (i.e., nuclear power plant personnel do not rely on a singular source of data to make a decision). This also ties back to the user-centric visualization that presents different levels of information to achieve both explainability and trustworthiness of artificial intelligence. Even so, the adoption of artificial intelligence and machine learning in the nuclear industry faces additional barriers, namely regulatory and stakeholder readiness. To overcome these challenges, new solutions must gain regulatory approval and cater to stakeholder needs. The Nuclear Regulatory Committee has a 5-year strategic plan which prepares them for reviewing artificial intelligence technologies in licensee submissions. Early and frequent engagement with the regulator is encouraged. Additionally, artificial intelligence solutions should incorporate human-in-the-loop considerations and offer explainability. Stakeholders must prepare by hiring or training staff to adapt to advancing technology in everyday plant tasks.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2023

Status Report on Regulatory Criteria Applicable to the Use of Artificial Intelligence (AI) and Machine Learning (ML)

Although the interest in the use of artificial intelligence (AI) and machine learning (ML) in nuclear energy is increasing rapidly, at present their implementation is limited. This rapid increase in interest is not surprising considering that implementing AI and ML technology would allow for continuous monitoring, facilitate the implementation of predictive maintenance with optimized staffing plans, enable automation and autonomy opportunities that could drastically reduce fixed operation and maintenance costs, and provide training for operations and maintenance. Other industries are using AI for construction, and in the nuclear arena AI could provide great benefit in decommissioning activities. The ability of AI and ML to operate in real time vastly increases their potential impact. Before AI can be used in design, operations, or as a regulatory tool, the specifics on the regulations applicable to the use of AI for nuclear power applications need to be established. The difficulty is that the specific use cases will dictate the applicability of regulations. For example, even within the application domain associated with operations, the regulations might vary if the AI is used to create a virtual reference for plant operations or is used for training, optimization of maintenance intervals, prioritization of maintenance activities, etc. Different still is if the AI is to be used for design or setting technical specifications, which will introduce additional requirements. US Nuclear Regulatory Commission (NRC) licensing reviews are based on an applicant’s design meeting its performance assessment based on (1) safety goals and objectives, (2) deterministic and/or probabilistic analysis of accident scenarios, and (3) quantitative assessment of design alternatives against the safety goals and objectives using accepted engineering tools, methodologies, and performance criteria. The current regulatory framework does not explicitly address AI or autonomous control. However, as implementing AI technology will require the use of a digital platform, it must meet the requirements of an instrumentation and control (I&C) system. The regulatory requirements for AI, which will be incorporated into the I&C system, will be very dependent on how it is used (i.e., its functionality, safety classification, etc.). The licensing process is primarily risk-based with the identification of components and systems as nonsafety, important to safety, or safety related. A risk-informed approach allows further gradation of components and systems based on risk metrics such as core damage frequency or large early release fractions. Thus, the use cases and the risk categorization of impacted systems and components will determine the regulatory requirements. Regardless of how AI is used it presents new opportunities for risk-informing operating, maintenance, and regulatory decisions. Trustworthiness, transparency, and the ability to validate and verify the results will be paramount in showing that the systems and plant still meet their performance requirements. This report describes the results of research to identify regulatory implications of AI technologies and their uses. Specifically, this report reviews current regulatory guidance relevant to the application of AI for design (including design changes or new designs including advanced reactors), construction, operations, training, maintenance, research, testing, and as a regulatory tool. AI can be automated at different levels from purely informative purposes to autonomous controls. The focus of this review included determination of constraints on the application of AI technology, identification of any regulatory gaps or uncertainties, and clarification of anticipated technical basis information likely to be important for regulatory acceptance of these technologies. Currently, any use of AI at nuclear power plants is focused on nonsafety-related applications. The NRC and other regulatory bodies are evaluating providing guidance to address gaps rather than create new regulations to address the use of AI and ML. This approach seems to be the best to encourage AI development without adding regulatory uncertainty.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2023

International Radiation Monitoring Information System (IRMIS) – a versatile EPR tool for all member states [Slides]

IRMIS provides Competent Authorities, IEC, and other relevant International Organizations with a data sharing tool that helps to report and share information, evaluate radiation monitoring data to assess if the public is safe, identify protective actions, keep the public informed by Member State Competent Authority, and maintain transparency of data handling and processing.

61 RADIATION PROTECTION AND DOSIMETRY↗

DOE OSTI2023

Project: Corbomite - Product: ConsoleWorks REACT

TDi Technologies presents ConsoleWorks REACT, an advanced platform designed to tackle the complexities of cyber and operational risk assessment. This comprehensive solution goes beyond asset-focused approaches by considering the impact of both assets and people have on the security and operation of critical infrastructure, specifically targeting preventing gird mis-operation by evaluating real-time human interaction or commands with critical assets. The hypothesis suggests that by integrating the assessment of user commands into the overall risk assessment process, organizations can make more informed decisions, prioritize resources effectively, and respond promptly to potential threats. This hypothesis forms the basis for the development of a proactive and holistic risk management approach that is more comprehensive and context aware than traditional models which only look at assets, patch levels, configuration and threat intel by collecting that information off the network vs directly from the asset, human, and human interaction all in real-time. ConsoleWorks' unique man-in-the-middle architecture is a key feature that sets it apart in the cybersecurity landscape. This architecture enables the real-time observation, enforcement, and commands or interaction risk transparency of user interaction with critical infrastructure to be risk mitigated and audited as they are aggregated with device and human risk factors for a more comprehensive risk threat score across a device or group of devices. This architecture allows ConsoleWorks to act as a secure intermediary between users and critical assets, monitoring all interactions and ensuring that only authorized commands are sent to the asset to be executed. This not only enhances security but also provides a comprehensive audit trail of all user activities, contributing to compliance efforts and facilitating incident investigation and risk management. By integrating this unique architecture with our comprehensive risk assessment methodology, ConsoleWorks REACT provides a powerful solution for managing cyber and operational risks, enabling organizations to maintain a robust security posture and effectively mitigate potential threats. To that end, the primary objective of this project was to research and develop a robust solution that enables the energy industry to mitigate the risks associated with human actions that can compromise the security or operations of assets critical to energy delivery, generation, transmission and operation. ConsoleWorks REACT plays a pivotal role in achieving this goal by leveraging its unique capabilities to monitor and track all user activity. Through its Zero Trust approach, which emphasizes continuous verification, the platform ensures secure access to assets and serves as the centralized human response and notification platform for addressing cyber and operational issues.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2023

DeepDataProfiler: A Platform and Methodology for the Analysis and Interpretation of Neural Networks

The DeepDataProfiler is a methodology and framework for providing interpretability to trained neural networks. Its approach is to decompose a network into a weighted graph of neurons and synapses and link the components of the graph to human identifiable concepts. By identifying concepts important to the network and tracking the decision process employed by the network, the network becomes more transparent and less like a black box. Spurious decisions and poor generalization strategies can be identified and a measure of trustworthiness can be established.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2022

Triton Initiative: FY22 Communications, Outreach, and Engagement End-of-Year Report

The Department of Energy (DOE) Water Power Technologies Office (WPTO) Triton Initiative supports the advancement of the marine energy (ME) industry through environmental monitoring research and technology development. This report presents the results and analysis of the Triton Initiative’s communications, outreach, and engagement (TCOE) efforts in fiscal year 2022. The primary TCOE goals were to: (1) educate and raise awareness of ME and the role of Triton's environmental monitoring research in supporting the industry; (2) build trust with audiences through transparent communications and outreach; and (3) evaluate and refine TCOE tactics based on feedback and metrics. To support these goals, the TCOE team used multiple platforms and approaches. Notable achievements include: (1) 12 newsletter issues sent to 185 subscribers with an average open rate of 56.4%. (2) 10 Triton Stories, resulting in 2,871 collective views contributing to 46% of all Triton website views. (3) 78 Triton-specific social media posts, which generated a total of 81,896 impressions, 1,037 post-clicks, and 7,814 video views. (4) 6,320 Triton website views with increased search engine optimization ranking in several categories. (5) 3 Triton researchers interviewed as guests on two different podcasts, Water Women and Big Deep: An Ocean Podcast. (6) A Triton special issue of the Journal of Marine Science and Engineering (JMSE) featuring 10 peer reviewed publications. All articles ranked in the top 25%, and two in the top 5%, for digital attention of all research outputs scored by Altmetric. (7) A seven-part webinar series called Triton Talks to share and discuss research and results from the research published in the JMSE special issue. Triton leveraged unique opportunities, particularly the JMSE special issue, to disseminate research results to end users, educate stakeholders, and gain valuable feedback. These concerted communication efforts increased exposure across platforms ultimately resulting in greater reach and access across audiences. Based on audience analyses of webinar attendees and newsletter subscribers, the TCOE team was able to successfully engage with general audiences, research partners, and ME stakeholders, including subject matter experts from government agencies, research organizations, and the regulatory community. The TCOE task established channels to gather input and create opportunities for two-way communication with people engaged with Triton’s outreach efforts. The feedback received will enable the TCOE team to support its goals for ongoing evaluation of outreach and engagement tools while continuing to build trust in the ME community and educate diverse audiences about the impactful research conducted by the Triton Initiative. This report is a Triton Initiative Fiscal Year 2022 Quarter 4 Milestone Deliverable due to the DOE WPTO Sponsor on 9/30/2022. An updated version to include data through 9/30/2022 will be delivered in October 2022.

16 TIDAL AND WAVE POWER↗

DOE OSTI2022

SoK: A Framework for and Analysis of Software Bill of Materials Tools

Modern software development has gradually become more complex, leveraging available open-source software and third party components. This practice has raised questions about the provenance, licensing, versioning and compliance of reused code and its dependencies. Furthermore, it is par ticularly important to review such code fragments and third party components for known-vulnerabilities before they are included in a software product. A Software Bill of Materials (SBoM) is a mechanism to achieve such an analysis, provid ing transparency and visibility into a software product to both the software developer and its respective consumer. An SBoM lists information and details about all the elements constituting a piece of software and can, therefore, be used to evaluate associated security risk. While the concept of SBoMs is growing in popularity, it is still fairly new to many organizations, causing them to potentially struggle with pro ducing and processing SBoMs and limiting their widespread adoption. In this work, we delve into the area of SBoMs and present the state-of-the-art SBoM tools, creating a framework for analysis and categorizing them based on a diverse set of features and functionalities. We are the first to provide a detailed analysis of 83 open-source SBoM tools along with a perspective on how a potential SBoM user can select a tool based on their specific requirements. Our work aims to help promote understanding of this domain, thereby encouraging and furthering its overall adoption. We additionally seek to pave a path for future work in this area by providing recommendations to tool developers and users, researchers, and standardizing organizations.

99 GENERAL AND MISCELLANEOUS↗