Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “SAFETY ANALYSIS”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12

SAM Theory Manual

The System Analysis Module (SAM) is an advanced and modern system analysis tool under development at Argonne National Laboratory for advanced non-LWR reactor safety analysis. It aims to provide fast-running, modest-fidelity, whole-plant transient analyses capabilities, which are essential for fast turnaround design scoping and engineering analyses of advanced reactor concepts. While SAM is being developed as a system-level modeling and simulation tool, advanced modeling techniques being implemented include a reduced-order three-dimensional module, pseudo 3-D conjugate heat transfer modeling in reactor core, flexible and multi-scale modeling of heat transfer between fluid and structures, in addition to the advances in software environments and design, and numerical methods. SAM aims to be a generic system-level safety analysis tool for advanced non-LWRs, including Liquid-Metal-cooled fast Reactors (LMR), Molten Salt Reactors (MSR), Fluoride-salt-cooled High-temperature Reactors (FHR), and High-Temperature Gas-cooled Reactors (HTGR). SAM takes advantage of advances in physical modeling, numerical methods, and software engineering to enhance its user experience and usability. It utilizes an object-oriented computational framework (MOOSE), and its underlying meshing and finite-element library and linear and non-linear solvers, to leverage the modern advanced software environments and numerical methods. This document provides the theoretical and technical basis of the code to help users understand the underlying physical models (such as governing equations, closure models, and component models), system modeling approaches, numerical discretization and solution methods, and the overall capabilities in SAM. As new code capabilities and features are added, the SAM Theory Manual will be updated periodically to keep it consistent with the state of the development.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Development and Application of a Data-Driven Methodology for Validation of Risk-Informed Safety Margin Characterization Models

The document is the Final Technical Progress Report for the Nuclear Energy University Program’s Integrated Research Project (IRP) on “Development and Application of a Data-Driven Methodology for Validation of Risk-Informed Safety Margin Characterization Models” that supports the LWR Sustainability Program’s RISMC R&D Pathway. The project goal is to develop and demonstrate a data-driven methodology for validation of advanced computer models used in nuclear power plant safety analysis. Specifically, the advanced computer models are those in the toolkit developed to support risk-informed safety margin characterization (RISMC), an integrated deterministic/probabilistic safety analysis methodology developed in the Department of Energy’s Light Water Reactor Sustainability (LWR-S) program. The report reflects the progress made towards the project’s stated goal by contributions by researchers and graduate students from universities, with support from researchers from national laboratories and industry companies. The project organization, effort coordination and technical implementation are summarized, followed by discussion of main findings, issues, and path forward. Selected chapters provide a more detailed description of tasks, approaches and respective findings and recommendations. Noteworthy are contributions that serve as guidelines for methodology development. It is also noted that this report is complemented by other milestone reports (as stand-alone deliverables) that provide detailed discussion of the technical developments. The project results have been documented in a number (12) dissertations and these, 50+ peer-reviewed publications in technical journals and conference proceedings.

42 ENGINEERING↗

Code Coverage Status of the ARC Code PERSENT

The Argonne Reactor Code (ARC) software system supports users in their fast reactor design goals by providing neutronic, thermal-hydraulic, and structural analysis capabilities. PERSENT fulfills the role of generating reactivity coefficients for a given time point of a REBUS calculation usable in a point kinetics based safety analysis capability. PERSENT also provides a sensitivity coefficient capability on eigenvalue, reactivity worth, and several other key coefficients that are used in the follow-on safety analysis. Given a co-variance matrix, PERSENT can carry out the uncertainty quantification to indicate the amount of error in the reactivity coefficients derived from the errors in the cross section measurements. With continued improvement of computational resources, many of the geometry modeling capabilities in DIF3D that were primarily used in low order schemes are not really needed anymore. Today, the diffusion and transport capabilities of DIF3D-VARIANT are primarily used in the reactor design process with some scattered usage of DIF3D-FD and DIF3D-Nodal. PERSENT is part of the ARC code system and is built around DIF3D-VARIANT and the flux solution it provides. The purpose of the present work is to identify a set of test problems for PERSENT and assess the code coverage of PERSENT for those test problems. PERSENT treats the DIF3D executable as an external executable and thus the code coverage considerations only need to focus on the PERSENT source code and only a fraction of the connected modules in the existing ARC software library. The goal is to document what parts of the existing PERSENT code are touched by the set of test problems and which are not. Because the verification work done on PERSENT was focused on the most common uses of PERSENT for fast reactor analysis, the code coverage assessment of those capabilities is the highest priority. This will ensure that nothing is being missed by the existing verification test problems that users of PERSENT rely upon. The code coverage analysis of PERSENT was performed with the Code Coverage Tool of the Intel Fortran compiler which requires modifications to the compilation of PERSENT. The detailed coverage tables are given for each submodule of PERSENT. Most of the uncovered parts/files could be easily ignored because they are either for error message and debugging output or not needed by PERSENT today. Only a few uncovered parts of PERSENT deserve extending the verification test suite.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Involute Working Group – FSI Analysis of Fuel Plates Using Finite Volume and Finite Element Methods

The three involute plate research reactors RHF, HFIR, and FRM II have expressed an interest in using computational software to carry their steady-state safety analysis. Since these tools represent a significant departure from the methods used currently (one-dimensional), the acceptability of the new approach by regulators requires thorough verification and validation of these tools. Therefore, Argonne National Laboratory and the three involute-plate reactors formed an informal group called the Involute Working Group aiming at qualifying computational tools to perform steady-state safety analysis. The present report focuses on a comparison of finite volume and finite element methods to model solids in fluid-structure interaction problems with the goal to estimate the coolant flow-induced fuel plate deflections obtained with the two methods. The finite volume method will be obsoleted in STARCCM+ by the end of 2021, nevertheless, this evaluation is important because the method was used by ANL researchers to model the response of the fuel plates, despite its drawbacks, which are discussed in the report. It was essential to check how those estimates compare to the results obtained with the finite element method that is considered superior for structural analysis. Various geometries, i.e., flat, cylindrical and circle-involute fuel plates, as well as coolant flow speed, were considered. The comparison shows that, independently of the plate geometry, the finite volume method significantly underestimates the deflection as compared to finite element method for coarser meshes. When the discretization is developed as a result of a mesh sensitivity study using finite element method, the result obtained using finite volume method can be a few times smaller than the corresponding finite element method solution. A code-to-code comparison , between STAR-CCM+ and LS-DYNA was included in the analysis. Within the LS-DYNA models, two types of finite element formulations were used: solid and shell finite elements. Mesh sensitivity study showed that both approaches converge to a similar value that was obtained with STAR-CCM+ finite element solver. The evaluation of the computational solvers was extended by adding two benchmark cases from the STAR-CCM+ Verification Suite and presented in the Appendix A. The selected cases are: (1) bending of a cantilever beam under external load, and (2) cylindrical shell deformation analysis, known in the literature as ‘Scordelis-Lo roof’. The problems were solved with finite volume, and finite element methods, and the results confirmed the previously discussed findings. The analysis shows that the finite element solver is superior to the finite volume solver in terms of representation of model geometry and estimating the structural behavior of fuel plates. Depending on the ratio of the load to the flexibility of the plate, the finite volume solver can greatly under- or overestimate the structural response if a very carefully selected mesh is not used.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Safe and Optimal Techniques Enabling Recovery, Integrity, and Assurance

There is a trend in the aviation industry to go from federated to integrated computing systems. Combining a number of traditional stand-alone federated systems into an integrated common platform (called Integrated Modular Avionics, IMA) has the benefit of increased power efficiency, reduced support hardware, and reduced cabling. However, changing from federated to integrated has a significant impact on the system architecture and hence the process of how avionic systems are to be analyzed. Traditional approaches to safety analysis become inefficient when functional boundaries can no longer be assumed for failure independence and fault isolation. In this report, we describe a tool that we developed to accelerate the safety engineer's ability to perform safety analysis of IMA systems through modeling, as well as optimize the system engineer's ability to develop a system through architecture synthesis. This work was the result of a three-year research effort called SOTERIA (Safe and Optimal Techniques Enabling Recovery, Integrity, and Assurance). We developed a compositional modeling language that supports rapid development, modification, and evaluation of architectures. The modeling language is structured such that the end-user defines a library of components with information on component reliability, connectivity, and fault propagation logic. The system model is built by instantiating the components from the library, connecting the components, and identifying the top-level faults of interest. Our tool is compositional in that the end-user only needs to define safety aspects at the component level. The tool takes the model and automatically synthesizes both the qualitative and quantitative safety analyses. We go further by allowing users to describe system information such as components to use in an architecture and their connection compatibility and automatically synthesize an architecture that meets the top-level probability target adhering to end-user specified constraints. This capability allows users to rapidly explore a design space..

Siu, Kit Y.↗

TCR Input to NUREG-1537 Process for Advanced Nuclear Technologies Derived from Additive Manufacturing

There has been a renewed interest by several advanced reactor developers to use NUREG-1537 “Guidelines for Preparing and Reviewing Applications for the Licensing of Non-Power Reactors” as a basis for their safety analysis report content and organization. Recently, SHINE Medical Technologies, LLC (SHINE), which is a non-power, Aqueous Homogenous Reactor design radioisotope production facility, received a construction permit based around their NUREG-1537 safety evaluation report (ADAMS No. ML16229A140). Advanced reactor developers are interested in using NUREG-1537 as a basis for their safety analysis report content and organization because of its successful application towards research reactors, graded approach, and simplicity in structure and requirements. However, NUREG-1537 is still largely geared toward light water reactors (LWRs) and many improvements could be made or supported through guidance documents for advanced reactors. For nuclear power to play a role in the future zero-carbon energy portfolio, a supportive regulatory structure is needed to lower regulatory uncertainty and barriers to deployment. At the time of this report, no such document or pathway exists for advanced nuclear technologies, including those derived from nontraditional technology such as advanced manufacturing technology (AMT) and, specifically, additive manufacturing. This report will explore and provide recommendations as to how advanced nuclear technologies derived from additive manufacturing technologies could employ the use of an ISG, other guidance document, or revisions to NUREG-1537 to lower the regulatory uncertainty and barriers for adoption.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Safety Considerations for Advanced Material Irradiation at the Advanced Test Reactor

The Advanced Test Reactor (ATR) is a light water reactor with aluminum-clad driver fuel. A primary mission of the ATR is to support the next generation of nuclear reactors. This support necessarily requires irradiation of advanced materials such as sodium, fuel salts, and metal eutectics. Irradiation of advanced materials in the ATR environment presents a challenge when completing accident analyses and demonstrating compliance to the Safety Analysis Report (SAR). Many advanced materials have the possibility to react with the ATR protective barriers such as the cladding or primary coolant system (PCS) boundary during postulated accident scenarios. Further, molten fuel experiments fall outside of the standard regulatory framework for dose consequence analyses. ATR is currently developing new safety analysis methods to support irradiation of advanced materials. The primary considerations for this development are 1) experiment containment design requirements, 2) primary coolant system response to an experiment containment failure, and 3) dose analyses for molten fuels.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Safety Considerations for Advanced Material Irradiation at the ATR

The Advanced Test Reactor (ATR) is a light water reactor with aluminum-clad driver fuel. A primary mission of the ATR is to support the next generation of nuclear reactors. This support necessarily requires irradiation of advanced materials such as sodium, fuel salts, and metal eutectics. Irradiation of advanced materials in the ATR environment presents a challenge when completing accident analyses and demonstrating compliance to the Safety Analysis Report (SAR). Many advanced materials have the possibility to react with the ATR protective barriers such as the cladding or primary coolant system (PCS) boundary during postulated accident scenarios. Further, molten fuel experiments fall outside of the standard regulatory framework for dose consequence analyses. ATR is currently developing new safety analysis methods to support irradiation of advanced materials. The primary considerations for this development are 1) experiment containment design requirements, 2) primary coolant system response to an experiment containment failure, and 3) dose analyses for molten fuels.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Toward a high-fidelity tritium transport modeling for retention and permeation experiments

We report Tritium Migration Analysis Program version 8 (TMAP8), the latest version of TMAP, was developed within the framework of the Multiphysics Object-Oriented Simulation Environment (MOOSE). Created at Idaho National Laboratory (INL), MOOSE is an open-source, dimension-agnostic, fully coupled, and fully implicit multiphysics platform featuring massively parallel computation capabilities. Using TMAP8, tritium transport in a divertor monoblock was analyzed to elucidate the effects of pulsed operation (up to fifty 1,600 s plasma discharge and cool-down cycles) on the tritium in-vessel inventory source term and ex-vessel release term (i.e., tritium retention and permeation) for safety analysis. With its built-in Message Passing Interface capability, TMAP8 can, in under 2 h, simulate tritium transport in three different layered materials (i.e., tungsten, copper, and copper-chromium-zirconium alloy) in 2D geometry, using a single device/computer with 10 cores. The MOOSE-based TMAP8 code can leverage other MOOSE tools developed under the Nuclear Energy Advanced Modeling and Simulation program to perform tritium and thermal transport in complex geometries and multiphysics environments. And via its massively parallel computation, MOOSE will enable the fusion pilot plant designers to conduct high-fidelity multiphysics modeling for the design of the divertor and blanket systems as well as for the safety analysis.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

MURR LEU structural and thermal hydraulics analyses: Part I – Preliminary irradiation thermo-mechanical behavior

The University of Missouri Research Reactor (MURR) is expected to be converted from highly enriched uranium (HEU, ≥ 20 wt% U-235) U-Al x dispersion fuel to low-enriched uranium (LEU, < 20 wt% U-235) with U-10Mo monolithic fuel. This work introduces high-fidelity irradiation thermo–mechanical (T-M) analysis of the MURR LEU focusing on changes in coolant channel gap thickness. Three-dimensional (3D) finite element (FE) models were developed to simulate the irradiation T-M behavior of the MURR LEU element with all 23 curved fuel plates, the two side plates, and the combs. It was shown that channel gap thickness changes were influenced not only by plate thickness variations due to fuel swelling and creep but also by the radial displacement of consecutive MURR LEU plates. Modeling the fuel element assembly captured side plate displacements, which were shown to reduce radial fuel plate displacements towards the convex side. The maximum local radial displacement in the element was predicted at the end of life (EOL) as 23.7 mil (602.0 µm) on the lateral centerline of plate 23 towards the convex side. The maximum stripe-averaged reduction in channel gap thickness, particularly relevant for thermal hydraulics (TH) safety analysis, was calculated as 15.9 mil (403.9 µm) in single-side heated channel 24 (the outermost channel). These results account for the thermal resistance from the oxide build-up on cladding surfaces which was shown to be up to 0.82 mil (20.8 µm) thick. It was demonstrated that accounting for oxide layer thermal resistance led to a 10 °C higher peak fuel temperature and a 4.4 mil (111.8 µm) greater maximum local radial displacement. The impact of the calculated channel gap thickness changes on the MURR LEU TH safety analysis is evaluated in Part II.

Irradiation thermo-mechanical analysis↗

Probabilistic Multi-Hazard Performance Assessment of Concrete Structures in Nuclear Installations

Concrete structures in nuclear installations are subject to time-dependent degradation mechanisms that can deteriorate their physical and mechanical properties, potentially exacerbating the risk of structural failure under external forces such as a seismic event. Previous research has extensively investigated the seismic response of nuclear concrete structures and the associated risk, as well as their effect on structural components safety margins. However, substantial work is still necessary to incorporate concrete aging effects into such evaluations. In fact, most models in the literature assume pristine concrete conditions and do not account for the impact of aging on the structural components’ fragility curves. This work identifies relevant time-dependent degradation mechanisms and provides simplified models to predict the the evolution of key material properties based on data from the literature. Namely, this work focuses on the aging effects of corrosion, alkali–silica reaction (ASR), and irradiation on reinforced concrete within US Department of Energy (DOE) nuclear facilities and nuclear power plants (NPP) structures. Furthermore, degradation models based on literature data are presented that define the relationship between probabilistic material properties and the concrete’s age. In this work, sampled material properties served as input for a simplified finite element model (FEM) of a critical nuclear structural system, with the output of the FEM being the seismic response for a given ground motion. The results of the FEM were then used within a probabilistic performance assessment with a statistically significant number of samples. The research presented herein addresses the detrimental effects of hazards caused by natural phenomena on deteriorated concrete elements of nuclear installations. This work directly benefits the safety analysis performed on US DOE/ National Nuclear Security Administration (NNSA) nuclear facilities located in areas prone to seismic activity. The results presented herein could aid in the improvement of DOE-STD-1020, the DOE Standard that addresses seismic risk analysis and capacity evaluation in DOE facilities. DOE-STD-1020 refers to the requirements in American Society of Civil Engineers (ASCE) 4-98, now superseded by ASCE 4-16, that shall be met in performing dynamic response analyses and generating in-structure response spectra, provided that such requirements are consistent with the requirements of ASCE/Structural Engineering Institute (SEI) 43-05. Moreover, the results presented herein could also aid in the updating of section C3.1.1. of ASCE 4-16 to account for the effects of aging on the stiffness of reinforced elements and American Concrete Institute (ACI) 349.3R-18, “Report on Evaluation and Repair of Existing Nuclear Safety-Related Concrete Structures.” Ultimately, this work can assist the risk assessment of potential lifetime extension of the existing US commercial nuclear fleet (light water reactors) and the safety analysis of the emerging advanced nuclear reactors. The proposed proof-of-concept methodology employs open-source DOE computational tools and is transferable to commercial software commonly used by engineering firms.

42 ENGINEERING↗

An integrated coupling model for solving multiscale fluid-fluid coupling problems in SAM code

In this study, an integrated coupling method has been developed for solving multiscale fluid-fluid coupling problems in plant-scale safety analysis models in SAM (System Analysis Module) code. In this method, a higher-fidelity multi-dimensional (3D) flow module is used for reactor components of complex flow features (e.g., reactor core) and a lumped parameter one-dimensional (1D) flow module for plant-scale flow loops (e.g., primary loop pipe network), respectively. In this method, the 3D fluid equation/domain and 1D fluid equation/domain are tightly coupled at the residual level and solved simultaneously using the Newton’s method to overcome the convergence issues typically seen in existing approaches like separate domain approach, where the 3D fluid equation and 1D fluid equation are solved separately. Extensive and successful code verifications and demonstrations have been performed for this newly developed method. This new modeling approach significantly simplify the work flow in developing high-fidelity plant-scale safety analysis model, e.g. for pool-type reactors and pebble-bed reactors.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Proposed guidance for preparing and reviewing a molten salt non-power production or utilization facility application

Development of non-power molten salt reactors (MSRs) are under consideration to further establish an MSR experience base, support the requirements of Title 10 of the Code of Federal Regulations (10 CFR) Section 50.43(e), and provide any additional analyses needed for development of a full-scale MSR. Guidance provided in this report is based on MSRs operating with liquid fuel (i.e., fuel dissolved within a molten salt). These reactors, unless owned by the DOE or DOD, will require licensing by the US Nuclear Regulatory Commission (NRC) staff. Standard review plan (SRP) guidance for large light water reactors (LWRs) is available in NUREG-0800, Standard Review Plan for the Review of Safety Analysis Reports for Nuclear Power Plants; Light Water Reactor (LWR) Edition. However, NRC staff observed that NUREG-0800 is very cumbersome to apply to non-power reactors “because of the great differences in complexity and hazards between non-power reactors and nuclear power plants.” Therefore, a program to develop performance-based guidance applicable to non-power reactors was initiated. In 1996, NUREG-1537, Parts 1 and 2, Guidelines for Preparing and Reviewing Applications for the Licensing of Non-Power Reactors, was published. Part 1, the format and content guide, suggests a uniform format for presenting information in non-power reactor applications that is acceptable to the NRC staff, but conformance with the format and content is not required. Part 2, the SRP, ensures the quality and uniformity of the staff review of an application. Unfortunately, the application guidelines and SRP do not provide adequate guidance for all advanced non-LWR technologies and applications. This discrepancy eventually led to the 2012 development of interim staff guidance (ISG) for NUREG-1537, which includes criteria for describing and reviewing aqueous homogeneous reactors (AHRs). Specifically, NUREG-1537 ISG, 2012 expanded the original document to address three areas: 1. updated criteria for heterogeneous non-power reactors, 2. criteria for licensing AHRs, and 3. criteria for licensing a Part 50-licensed isotope production facility. In 2015, the US Department of Energy (DOE) opted to build on the AHR NUREG-1537 ISG experience by performing a gap analysis of the guidance that would be used to license a non-power MSR. MSRs represent one of the advanced non-LWR technologies selected by DOE for development through a multiyear cost share award with Southern Company Services. Under this Advanced Reactor Concepts 2015 (DOE Advanced Reactor Concepts [ARC] 15) award program, the DOE tasked Oak Ridge National Laboratory (ORNL) to evaluate the guidance changes that the NRC may need to consider when licensing an MSR non-power reactor. ORNL staff, with support from Boston Government Services, LLC, focused on five system-related chapters in NUREG-1537 that were considered most relevant to inform the effort that would be required for a non-power MSR applicant. ORNL documented this review in a technical report, ORNL/TM-2018/834, Proposed Guidance for Preparing and Reviewing Molten Salt Non-Power Reactor License Applications (NUREG-1537). The report was subsequently shared with industry and the NRC. The 2018 review was limited in scope, focusing on key system chapters based on the expected significance of each chapter relative to expected differences in addressing advanced non-LWR technologies, specifically non-power MSRs, compared with heterogeneously fueled non-power reactors. In the ORNL report, proposed generic adaptations were suggested for the following NUREG-1537 chapters: Chapter 4, “Reactor Description”; Chapter 5, “Reactor Coolant Systems”; Chapter 6, “Engineered Safety Features”; Chapter 9, “Auxiliary Systems”; Chapter 11, “Radiation Protection Program and Waste Management” The inclusion of Chapter 11 in the previous review effort was intended to provide guidance for categorizing the waste-handling process for an MSR operating with homogenous fuel. The introductions from Parts 1 and 2 of the 2012 NUREG-1537 ISG provide guidance for the application and review of production facilities. After a period of operation, non-power MSRs with homogenous fuel will include gaseous and soluble fission products. The gaseous fission products will be collected and held for decay in an off-gas system. There might also be an initiative to polish or filter the soluble fission products in the fuel salt by some mechanical or chemical means. The treatment and handling of fission products in the non-power MSR fuel salt and the description of this process in the safety analysis report (SAR) must be very precise to avoid the waste treatment facility being construed as a co-located special nuclear material (SNM) fuel cycle facility (see Section 2.3 of this report). Subsequent to the release of ORNL/TM-2018/834, NRC staff expressed a desire to continue the regulatory gap analysis that was begun in that report. This would provide additional clarity and information addressed in certain sections of the original report, while also providing new guidance on certain topics not addressed in the original report. This revision would benefit the NRC staff reviewing applications involving non-power MSR designs and would help developers understand how the NRC staff might approach the review of such applications. The focus of this report is to provide infrastructure support to the NRC staff for the regulatory review of non-power MSRs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

MAPPER – A NOVEL CAPABILITY TO SUPPORT NUCLEAR MODEL VALIDATION AND MAPPING OF BIASES AND UNCERTAINTIES

This paper overviews the initial results of a new project at the Oak Ridge National Laboratory -- supported via an internal seed funding program -- focused on the development of a novel computational capability, called MAPPER, to support model validation. The MAPPER development aims to eliminate the need for empirical criteria, such as similarity indices, often employed to identify applicable experiments for given application conditions. To achieve that, MAPPER employs an information-theoretic-based approach, based on the Kullback-Leibler (KL) divergence principle, to combine responses of available or to-be-built experiments with application responses of interest using a training set of samples generated using randomized execution of the experiments and the application high fidelity analysis models. These samples are condensed using reduced order modeling techniques in the form of a joint probability distribution function (PDF) connecting each application response of interest with a new effective experimental response. The initial focus of the MAPPER capability will be to support the confirmatory analysis required for criticality safety analysis of storage facilities which require k-eff biases to be known for safe operation. This paper reports some of the initial results obtained with MAPPER as applied to a set of critical experiments for which existing similarity-based methods have been shown to provide inaccurate estimates of the biases.

Mertyurek, Ugur↗

Phase Two Feasibility Study for Software Safety Requirements Analysis Using Model Checking

A feasibility study was performed on a representative aerospace system to determine the following: (1) the benefits and limitations to using SCADE , a commercially available tool for model checking, in comparison to using a proprietary tool that was studied previously [1] and (2) metrics for performing the model checking and for assessing the findings. This study was performed independently of the development task by a group unfamiliar with the system, providing a fresh, external perspective free from development bias.

Turgeon, Gregory↗