Abstract:In future nuclear arms control treaties, it will be necessary to authenticate the hardware and software components of verification measurement systems, i.e., to ensure these systems are functioning as intended and have not been tampered with by malicious actors. While methods such as source code hashing and static analysis can help verify the integrity of software components, they may not be capable of detecting tampering with environment variables, external libraries, or the firmware and hardware of radiation measurement systems. In this article, we introduce the concept of physical differential fuzz testing as a challenge-response-style tamper indicator that can holistically and simultaneously test all the above components in a cyber-physical system. In essence, we randomly sample (or "fuzz") the untampered system's parameter space, including both normal and off-normal parameter values, and consider the time series of outputs as the baseline signature of the system. Re-running the same input sequence on a untampered system will produce an output sequence consistent with this baseline, while running the same input sequence on a tampered system will produce a modified output sequence and raise an alarm. We then apply this concept to authenticating the radiation measurement equipment in nuclear weapon verification systems and conduct demonstration fuzz testing measurements with a sodium iodide (NaI) gamma ray spectrometer. Because there is Poisson noise in the measured output spectra, we also use a mechanism for comparing inherently noisy or stochastic fuzzing sequences. We show that physical differential fuzz testing can detect two types of tamper attempts, and conclude that it is a promising framework for authenticating future cyber-physical systems in nuclear arms control, safeguards, and beyond.

A physically cryptographic warhead verification system using neutron induced nuclear resonances

Experimental demonstration of an isotope-sensitive warhead verification technique using nuclear resonance fluorescence

Passive high explosive neutron inspection (PHENIX): a new method to confirm the presence or absence of high explosives for nuclear treaty verification

A Proposed Non-Intrusive System for the Verification of Sensitive Nuclear Material

Differential fuzz testing to detect tampering in sensor systems and its application to arms control authentication

Nondestructive and active interrogation system for special nuclear material: proof of principle and initial results

Uncovering Special Nuclear Materials by Low-energy Nuclear Reaction Imaging

Uncertainty Quantification for Discrimination of Nuclear Events As Violations of the Comprehensive Nuclear-Test-ban Treaty.

Evaluation of a neutron-based active interrogation system for detection of smuggled fissionable material in packages

Feasibility study of a compact Neutron Resonance Transmission Analysis instrument

Verification of spent nuclear fuel in sealed dry storage casks via measurements of cosmic ray muon scattering

Experimental demonstration of multiple monoenergetic gamma radiography for effective atomic number identification in cargo inspection

Classifying threats with a 14-MeV neutron interrogation system

Fissile material detection using neutron time-correlations from photofission

Fast neutron coincidence counter using scintillators for safeguards verification of the TRU/RE waste

Cerium Ruthenium Low-Energy Antineutrino Measurements for Safeguarding Military Naval Reactors

Verifying Spent Fuel Containers Before Deep Geological Storage with Cosmic Ray Muons

Stand-off nuclear reactor monitoring with neutron detectors for safeguards and non-proliferation applications

Verification of uranium composite materials using active interrogation techniques for safeguards purposes

Exclusion and Verification of Remote Nuclear Reactors with a 1-Kiloton Gd-Doped Water Detector

DICER: a new instrument for nuclear data for nuclear security