Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Resiliency”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13
All sourcesNASA NTRSDOE OSTI
NASA NTRS2022

Quantifying Mangrove Canopy Regrowth and Recovery After Hurricane Irma With Large-Scale Repeat Airborne Lidar in the Florida Everglades

Hurricane Irma caused significant damages to mangrove forested wetlands in south Florida, including defoliation, tree snapping, and uprooting. Previous studies have used optical satellite imagery to estimate large-scale forest disturbance and resilience patterns. However, satellite images alone cannot provide measurements of vertical mangrove structure. In this study, we used dense point cloud data collected by NASA Goddard’s LiDAR, Hyperspectral, and Thermal (G-LiHT) airborne imager before (March 2017) and after (December 2017 and March 2020) Hurricane Irma to quantify the recovery, or lack thereof, of the three-dimensional (3D) mangrove forest structure. Recent resilience and vulnerability models developed from Landsat time series following the storm were used to group the lidar data into distinct disturbance-recovery classes. We then analyzed lidar-based forest canopy within each of the recovery classes to test a suite of forest structural characteristics. Our results indicate that 77.0 % of the survey area experienced canopy height loss three months after Hurricane Irma, whereby the majority of canopy height loss occurred in areas with the tallest mangrove forests (i.e., 15–25 m tall). Our analysis shows that the mangrove canopy height in South Florida increased by an average 0.26 m from December 2017 to March 2020, with most of the forest (84.7 % of the survey area) experiencing canopy height regrowth. However, only 38.1 % of the survey area has recovered to pre-storm canopy height. The distribution of canopy height was significantly altered by Hurricane Irma in the low and intermediate resilience classes, but were not significantly different 2.5 years later. Indeed, in areas of low resilience, little to no vertical change has occurred suggesting the absence of canopy regrowth and natural regeneration. Conversely, mangroves in high resilience class, which are dominated by shorter canopies (<5 m), were not heavily damaged by the storm and have maintained the same structural attributes as those before Hurricane Irma. Our findings highlight that hurricane disturbances significantly alter mangrove forest canopy structure, but recovery of vertical structure varies by resilience classes, species composition, and canopy height.

Lidar↗
NASA NTRS2002

Alternative Metrics for Evaluating the Resilence of Advanced Life Support Systems

Ensuring the safety of the crew is a key performance requirement of a life support system. However, a number of conceptual and practical difficulties arise when devising metrics to concretely measure the ability of a life support system to maintain critical functions in the presence of anticipated and unanticipated faults. Resilience is a dynamic property of a life support system that depends on the complex interactions between faults, controls and system hardware. We review some of the approaches to understanding the robustness or resilience of complex systems being developed in diverse fields such as ecology, software engineering and cell biology and discuss their applicability to regenerative life support systems. We also consider how approaches to measuring resilience vary depending on system design choices such as the definition and choice of the nominal operating regime. Finally, we explore data collection and implementation issues such as the key differences between the instantaneous or conditional and average or overall measures of resilience. Extensive simulation of a hybrid computational model of a water revitalization subsystem (WRS) with probabilistic, component-level faults provides data about off-nominal behavior of the system. The data are used to consider alternative measures of resilience as predictors of the system's ability to recover from component-level faults.

Bell, Ann Maria↗
NASA NTRS2006

Further Investigations of High Temperature Knitted Spring Tubes for Advanced Control Surface Seal Applications

Knitted metallic spring tubes are the structural backbones that provide resiliency in control surface seals for use on current and future reusable space launch vehicles. Control surface seals fill the space between movable control surfaces such as body flaps, rudders and elevons, and the static body structures to which they are attached. These seals must remain in continuous contact with opposing surfaces to prevent the ingestion of damaging hot gases encountered during atmospheric re-entry. The Inconel X-750 (Special Metals Corporation) spring tube utilized in the baseline control surface seal shows significant resiliency loss when compressed at temperatures as low as 1200 F. High temperature compression testing and microstructural analysis show that creep is the dominant deformation mechanism leading to permanent set and resiliency loss in tested spring tube samples. Additional evaluation using a structured design of experiments approach shows that spring tube performance, primarily high temperature resiliency, can be enhanced through material substitution of Rene 41 (Allvac) alloy (for the baseline Inconel X-750 material) when coupled with specialized thermal processing.

Taylor, Shawn C.↗
NASA NTRS2009

Fluoroester Co-Solvents for Low-Temperature Li+ Cells

Electrolytes comprising LiPF6 dissolved in alkyl carbonate/fluoroester mixtures have been found to afford improved low-temperature performance and greater high-temperature resilience in rechargeable lithium-ion electrochemical cells. These and other electrolytes comprising lithium salts dissolved mixtures of esters have been studied in continuing research directed toward extending the lower limit of operating temperatures of such cells. This research at earlier stages, and the underlying physical and chemical principles, were reported in numerous previous NASA Tech Briefs articles. The purpose of the present focus on high-temperature resilience in addition to low-temperature performance is to address issues posed by the flammability of the esters and, at temperatures near the upper end (about 55 C) of their intended operating temperature range, by their high chemical reactivity. As used here, high-temperature resilience signifies, loosely, a desired combination of low flammability of an electrolyte mixture and the ability of a cell that contains the mixture to sustain a relatively small loss of reversible charge/discharge capacity during storage in the fully charged condition at high temperature. The selection of fluoroesters for study as candidate electrolyte solvent components to increase high-temperature resilience was prompted in part by the observation that like other halogenated compounds, fluoroesters have low flammability. The fluoroesters investigated in this study include trifluoroethyl butyrate (TFEB), ethyl trifluoroacetate (ETFA), trifluoroethyl acetate (TFEA), and methyl pentafluoropropionate (MPFP). Solvent mixtures were prepared by mixing these fluoroesters with two other esters: ethylene carbonate (EC) and ethyl methyl carbonate (EMC).

Smart, Marshall↗
NASA NTRS2010

Handling Emergency Management in [an] Object Oriented Modeling Environment

It has been understood that protection of a nation from extreme disasters is a challenging task. Impacts of extreme disasters on a nation's critical infrastructures, economy and society could be devastating. A protection plan itself would not be sufficient when a disaster strikes. Hence, there is a need for a holistic approach to establish more resilient infrastructures to withstand extreme disasters. A resilient infrastructure can be defined as a system or facility that is able to withstand damage, but if affected, can be readily and cost-effectively restored. The key issue to establish resilient infrastructures is to incorporate existing protection plans with comprehensive preparedness actions to respond, recover and restore as quickly as possible, and to minimize extreme disaster impacts. Although national organizations will respond to a disaster, extreme disasters need to be handled mostly by local emergency management departments. Since emergency management departments have to deal with complex systems, they have to have a manageable plan and efficient organizational structures to coordinate all these systems. A strong organizational structure is the key in responding fast before and during disasters, and recovering quickly after disasters. In this study, the entire emergency management is viewed as an enterprise and modelled through enterprise management approach. Managing an enterprise or a large complex system is a very challenging task. It is critical for an enterprise to respond to challenges in a timely manner with quick decision making. This study addresses the problem of handling emergency management at regional level in an object oriented modelling environment developed by use of TopEase software. Emergency Operation Plan of the City of Hampton, Virginia, has been incorporated into TopEase for analysis. The methodology used in this study has been supported by a case study on critical infrastructure resiliency in Hampton Roads.

Tokgoz, Berna Eren↗
NASA NTRS2015

New York City Panel on Climate Change 2015 Report Introduction

The climate of the New York City metropolitan region is changing annual temperatures are hotter, heavy downpours are increasingly frequent, and the sea is rising. These trends, which are also occurring in many parts of the world, are projected to continue and even worsen in the coming decades because of higher concentrations of greenhouse gases in the atmosphere caused by burning of fossil fuels and clearing of forests for agriculture. These changing climate hazards increase the risks for the people, economy, and infrastructure of New York City. As was demonstrated by Hurricane Sandy, coastal and low-lying areas, the elderly and very young, and lower-income neighborhoods are highly vulnerable. In response to these climate challenges, New York City is developing a broad range of climate resiliency policies and programs, as well as the knowledge base to support them. The knowledge base includes up-to-date climate, sea level rise, and coastal flooding projections; a Climate Resiliency Indicators and Monitoring System; and resiliency studies. A special attribute of the New York City response to these challenges is the recognition that both the knowledge base and the programs and policies it supports need to evolve through time as climate risks unfold in the coming decades. In early September 2012, just weeks before Hurricane Sandy hit, the New York City Council passed Local Law 42 that established the New York City Panel on Climate Change (NPCC) as an ongoing body serving the City of New York. The NPCC is required to meet at least twice each calendar year to review recent scientific data on climate change and its potential impacts, and to make recommendations on climate projections for the coming decades to the end of the century. These projections are due within one year of the publication of the Intergovernmental Panel on Climate Change Assessment Reports (http:www.ipcc.ch), or at least every three years. The NPCC also advises the Mayor's Office of Sustainability and the Mayor's Office of Recovery and Resiliency (ORR) on the development of a community- or borough-level communications strategy intended to ensure that the public is informed about the findings of the panel, including the creation of a summary of the climate change projections for dissemination to city residents.

hurricanes↗
NASA NTRS2017

Preliminary Investigation of Impact of Technological Impairment on Trajectory-Based Operations

The Next Generation Air Transportation System (NextGen) incorporates collaborative air traffic management and Trajectory-Based Operations (TBO) in order to significantly increase the capacity, efficiency, and predictability of operations in the National Airspace System (NAS), without decreasing safety. This is enabled by airspace users and service providers sharing knowledge about operations that allows prediction of the complete 4D flight trajectory with as little uncertainty as possible. Additionally, new software and hardware technology is critical to reaching NextGen goals, especially with regard to TBO. What if the technologies that are critical for TBO were to be impaired or fail completely? Should there be a malfunction of a piece of the technology, it must be ensured that the whole system does not break down completely or suffer severe impairment. Instead, operations need to be maintained proportionally to the problem and safety needs to be ensured (graceful degradation). This paper proposes a systematic framework to investigate the vulnerability of TBO to technology disruption, and determine the impact of technological impairment on TBO. Two representative technologies are chosen for detailed investigation and the impact of their impairment on the degradation of TBO is illustrated using a weather-related scenario. XXXX There are several possible directions of future work. We believe it is desirable to develop methods to quantitatively assess the impact of technological disruption on TBO and to have the simulation tools to validate the impact. The availability of prognostics and health management methods could be leveraged to predict technological failure/disruption, thus predicting how TBO will be a ected, and possibly pro-actively mitigating the impact. It is important to develop large-scale scenarios where the e ect of technological impairment is prominent, and identify methods to quantitatively assess the extent of TBO degradation. An important goal of such an investigation is the development of failure-resistant resilient trajectory-based oper- ations. Resilience14, 15 is the property of a system to \bounce back" and resume at least a signi cant portion of its functionalities after degradation due to technological impairment(s). A systems resilience includes properties such as \bu ering capacity" (quantifying disruptions the system can absorb or adapt to without a fundamental breakdown in performance or in the systems structure), \ exibility" (ability to restructure itself in response to external changes or pressures), "margin" (how closely the system is currently operating rela- tive to one or another kind of performance boundary), \tolerance" (whether the system gracefully degrades as stress/pressure increase, or collapses quickly when pressure exceeds adaptive capacity), etc. Future work needs to focus on quantifying and improving the resilience of TBO, and identifying resilient design solutions for aviation.

TBO↗
NASA NTRS2019

Human Performance Contributions to Safety in Commercial Aviation

Every day in aviation, pilots, air traffic controllers, and other front-line personnel perform countless correct judgments and actions in a variety of operational environments. These judgments and actions are often the difference between an accident and a non-event. Ironically, data on these behaviors are rarely collected or analyzed. Data-driven decisions about safety management and design of safety-critical systems are limited by the available data, which influence how decision makers characterize problems and identify solutions. Large volumes of data are collected on the failures and errors that result in infrequent incidents and accidents, but in the absence of data on behaviors that result in routine successful outcomes, safety management and system design decisions are based on a small sample of nonrepresentative safety data. This assessment aimed to find and document “safety successes” made possible by human operators. With many Aeronautics Research Mission Directorate (ARMD) Programs and Projects focusing on increased automation and autonomy and decreased human involvement, failure to fully consider the human contributions to successful system performance in civil aviation represents a significant risk — a risk that has not been recognized to date. Without understanding how humans contribute to safety, any estimate of predicted safety of autonomous capabilities is incomplete and inherently suspect. Furthermore, understanding the ways in which humans contribute to safety can promote strategic interactions among safety technologies, functions, procedures and the people using them. Without this understanding, the full benefits of an integrated, optimized human/technology or autonomous system will not be realized. Historically, safety has been consistently defined in terms of the occurrence of accidents or recognized risks (i.e., in terms of things that go wrong). These adverse outcomes are explained by identifying their causes, and safety is restored by eliminating or mitigating these causes. An alternative to this approach is to focus on what goes right and identify how to replicate that process. Focusing on the rare cases of failures attributed to “human error” provides little information about why human performance routinely prevents adverse events. Hollnagel has proposed that things go right because people continuously adjust their work to match their operating conditions. These adjustments become increasingly important as systems continue to grow in complexity. Thus, the definition of safety should reflect not only “avoiding things that go wrong” but “ensuring that things go right.” The basis for safety management requires developing an understanding of everyday activities. However, few mechanisms to monitor everyday work exist in the aviation domain, which limits opportunities to learn how designs function in reality. This concept of safety thinking and safety management is reflected in the emerging field of resilience engineering. According to Hollnagel, a system is resilient if it can sustain required operations under expected and unexpected conditions by adjusting its functioning prior to, during, or following changes, disturbances, and opportunities. To explore “positive” behaviors that contribute to resilient performance in commercial aviation, the assessment team examined a range of existing sources of data about pilot and air traffic control (ATC) tower controller performance, including subjective interviews with domain experts and objective aircraft flight data records. These data were used to identify strategies that support resilient performance, methods for exploring and refining those strategies in existing data, and proposed methods for capturing and analyzing new data.

Null, Cynthia H.↗
NASA NTRS2019

Coral Reef Annihilation, Persistence and Recovery at Earth’s Youngest Volcanic Island

The structure and function of coral reef ecosystems is increasingly compromised by multiple stressors, even in the most remote locations. Severe, acute disturbances such as volcanic eruptions represent extreme events that can annihilate entire reef ecosystems, but also provide unique opportunities to examine ecosystem resilience and recovery. Here, we examine the destruction, persistence and initial recovery of reefs associated with the hydromagmatic eruption that created Earth’s newest landmass, the Hunga Tonga–Hunga Ha’apai volcanic island. Despite extreme conditions associated with the eruption, impacts on nearby reefs were spatially variable. Importantly, even heavily affected reefs showed signs of rapid recovery driven by high recruitment, likely from local refuges. The remote location and corresponding lack of additional stressors likely contribute to the resilience of Hunga’s reefs, suggesting that in the absence of chronic anthropogenic stressors, coral reefs can be resilient to one of the largest physical disturbances on Earth.

Refuge population↗
NASA NTRSDate not supplied

Designing for Advanced Aerial Mobility: Human-Autonomy Teaming and In-Time System-Wide Safety Assurance

The continued growth of aviation shall require new innovative technologies and operational concepts to meet the ever-increasing demands on air transportation. The NASA Advanced Air Mobility (AAM) project focuses on emerging aviation markets, such as Urban Air Mobility (UAM). UAM is defined as “...a safe and efficient system for air passenger and cargo transportation within an urban area. It is inclusive of small package delivery and other urban unmanned aerial system services and supports a mix of onboard/ground-piloted and increasingly autonomous operations” ([1]). The AAM project emphasizes technology development and validating system-level concepts and solutions in coordination with other NASA Aeronautics Research Mission Directorate (ARMD) projects to enable UAM metro- and micro-plex vertiport and airspace concepts of operations. The NASA AAM research portfolio includes the concepts of Remote Supervisor-in-Command (RSC) and Fleet and Airspace Manager (FAM) as possible human roles for consumer fleet providers. NASA research in RSC is focused on development of guidelines and standards for remote pilots/operators passively and actively controlling a large fleet of autonomous aircraft. For FAM, flight and ground system concepts and technologies to enable high density homogeneous operations at increased scale from vertiport(s), and coordination with other humans in the systems (e.g., UAM urban airspace manager, Air Traffic Control) are key research areas. The envisioned UAM operations are posited to require autonomous systems to enable functions ranging from fleet and resource management to vehicle control. Although automation has become increasingly sophisticated and ubiquitous in civil aviation, autonomy represents a significant evolution in automation, which has generally been limited in functional scope and capability. As autonomy takes on increasing responsibilities, humans and machines will be required to work together in new and different ways [2], rather than traditional design approaches focused on how machines (i.e., autonomy) can do the work of people. The emerging field of human-autonomy teaming (HAT) represents a comprehensive and prioritized research-driven approach to enable the success of future emerging aviation market applications through capabilities and principles that facilitate humans and machine working and thinking better together. The NASA Transformational Tools and Technologies (TTT) Autonomous System (AS) Sub-project was created to assist with the transition into higher levels of autonomy to enable new modes of air transportation, such as UAM. TTT-AS has identified HAT as a key research need to enable UAM while maintaining today’s ultra-safe aviation system safety levels. The latter challenge has been taken up by the NASA System-Wide Safety (SWS) Project, which recognizes that aviation safety, as it evolves, shall require new ways of thinking about safety to include integration of a wide-range of existing and new safety systems and practices, enhanced tools and technologies, increased access to data and data fusion, improved data analysis capabilities, enhanced in-time risk monitoring and detection, hazard prioritization and mitigation, safety assurance decision-support, and in-time integrated system analytics [3].The operational concept of UAM represents a variety of work that has been termed, “work-as-imagined” to characterize the idea that how people think that work is done and how work is actually done are often not the same [4]. To ensure design success and system safety, looking at “work-as-done” provides a comparative approach toward UAM concept and technology design through examination of corresponding analogs found today in aviation (e.g., on-demand operations) and other transportation domains (e.g., port operations). The paper shall discuss various alternative applications with specific focus on airline operation center (AOC) operations, and unmanned aerial system (UAS) command-and-control to inform scaled-versions of FAM and RSC, respectively, and with consideration of the national airspace system contextual environment. The tenets and principles of the HAT field and current NASA research efforts under the TTT-AS sub-project shall also be described. Finally, the SWS sub-project efforts to develop In-Time System-Wide Safety Assurance (ISSA) and In-Time Safety Management Systems (IASMS) are discussed in terms of how “in-time” safety assurance may be conceptualized for the on-demand mobility air taxi “work-as-imagined” operational concept [5]. As part of this effort, concepts from the emerging field of resilience engineering, are being studied. Traditional approaches to aviation safety have focused on what can go wrong and how to prevent it. Another approach to thinking about system safety should reflect not only “avoiding things that go wrong” (protective safety) but also “ensuring that things go right” (productive safety), that enables a system to exhibit the resilient performance [6] necessary for the success of the future aviation system emerging concepts of operations. The paper shall describe efforts focused on how productive safety and resilience may enable a more complete approach to system safety thinking and design of ISSA and IASMS for UAM. Future directions and research needs shall also be discussed.

resilience↗
NASA NTRSDate not supplied

Thinking outside the box: The human role in increasingly automated aviation systems

Rapid advances in artificial intelligence are enabling automated systems to operate in an increasingly autonomous manner in domains that previously required the involvement of human operators. Examples are rail transport systems, self-driving cars, and warehouse delivery systems. From time to time, such automation encounters operational conditions that fall outside a “competency box” within which the system has been designed to operate. Human operators add resilience because they can see and act outside the competency box of scenarios and environments for which the system was designed. The system’s competencies can be expanded over time with modifications to software, sensors, etc.; however, it is unclear at what point the competency box becomes large enough to safely eliminate the role of the human operator. One area where advanced automation may be applied is Urban Air Mobility (UAM). Current UAM concepts envision fleets of highly automated air vehicles providing on-demand transport for people and goods. A phased development of UAM has been proposed, beginning with on-board pilots and transitioning to a future state where automated vehicles operate with minimal human involvement. Proponents of UAM note that this final state reduces cost as well as eliminating pilot error, identified as a contributing factor in many aircraft accidents. However, eliminating human involvement also risks eliminating their positive contributions to system resilience. Here we examine Concepts of Operation proposed for future UAM systems and explore how humans can best be incorporated to maintain resilience while minimizing cost and risk. A human-autonomy teaming approach is suggested.

Advanced Air Mobility↗
NASA NTRSDate not supplied

Experiments for Securing Air Traffic Against Cyber-Physical System Attacks

This presentation describes experiments conducted with single board computers to investigate methods for creating trust for enabling the development of cyber-resilient air transportation systems. Methods included secure communication to prevent unauthorized access to data, consistency of data obtained via sensors and by processing, and built-in safeguards to prevent mission failure. The motivation for this work are the following. The future air transportation system needs to ensure availability, integrity, confidentiality and safety of operations. Safety of vehicles and operations is paramount for successful integration of Urban Air Mobility (UAM), Unmanned Aerial Systems (UAS), supersonic aircraft and launch vehicles with conventional aviation operations in the National Airspace System. Security is becoming critical because the sensors, networks and computers are far more vulnerable to bad actors than their mechanical or human predecessors. The goal therefore is to design and develop cyber-resilient systems that continue to function even in degraded states. The main findings are (1) off-the-shelf hardware can support development of cyber-resilient onboard flight computers and (2) trust in system design and implementation can be accomplished by integrating layers in depth (detail) and in breadth (scope).

cyber-resilient autonomy, trust, secure communicat↗
NASA NTRSDate not supplied

Uncovering Hazards Using a Multi-Objective Optimization to Explore the Faulty State-Space

Considering resilience when designing complex engineered systems is crucial to ensure the system is safe under unexpected hazardous scenarios. Traditional risk-based approaches, such as Failure Modes and Effects Analysis (FMEA) are useful for designing the system to mitigate hazardous scenarios that can be identified by the designer, but often require experience or prior knowledge of system failures to generate. More recently, researchers have developed simulation tools that enable the designer to model large sets of hazardous scenarios (driven by both internal faults and external factors) through simulation. While these tools enable a wider scope of fault modes to be evaluated (e.g., by injecting combined set of fault modes or injecting modes at different times), the resulting assessments (like FMEA) still require knowledge of the specific modes to be evaluated. However, failure to analyze a wide variety of fault scenarios can lead to an incomplete picture of the system resilience, especially to "surprise events'' which may be difficult for the designer to identify and predict beforehand. To overcome this challenge, previous work developed a fault sampling approach for resilience simulations which would procedurally-generate a wide variety of potential faults by systematically perturbing the health states of the system. While the resulting fault modes generated covered a much larger space hazards than would be otherwise considered (and identified many unique failure trajectories which would not have otherwise been identified), it also significantly increased the computational cost of the analysis and resulted in the simulation and analysis of a large set of essentially duplicate scenarios. Additionally, as the number of dimensions in the faulty state-space increases, the full elaboration of possible modes becomes computationally infeasible, justifying the use of a more targeted search. To resolve this limitation, this work proposes the use of a multiobjective optimization algorithm to search the health state space for potential fault modes that are both (1) hazardous and (2) unique. To solve this type of problem, this work proposes the use of a cooperative co-evolutionary algorithm. To demonstrate this approach, it will be applied to a model of an autonomous rover which uses line markings to navigate, focusing on potential hazards in the drive system which could cause the rover to crash. To determine the merit of the approach, it will further be compared with the previously-presented range elaboration approach and a random mode generation approach on the basis of computational efficiency and found modes.

Resilience↗
NASA NTRS2022

Supporting Hazard Analysis for Wildfire Response Using fmdtools and MIKA

The System Wide Safety (SWS) Safety Demonstrator (SD) Series drives development of an increasingly capable In-Time Aviation Safety Management System (IASMS) focusing on humanitarian applications, starting with wildfire response (SD-1). The goals of this report are to (1) provide an early hazard analysis and mitigation evaluation of wildfire response to support these efforts and (2) provide a demonstration of capabilities of the Fault Model Design Tools (fmdtools) and Manager for Intelligent Knowledge Access (MIKA) tools. fmdtools provides a modeling, simulation, and resiliency analysis framework in which a wildfire response model, the System Modeling and Analysis of Resiliency in Scalable Traffic Management for Emergency Response Operations (SMARt-STEReO), is built. MIKA is an intelligent knowledge manager with several capabilities, including assisting in hazard analysis by extracting and analyzing hazards from historical incident reports. The following topics are covered in the report: Understanding Wildfire Hazard Dynamics. We provide a description and simulated examples of how hazards occur in the SMARt-STEReO model of wildfire response and their effect on its outcome. This provides a common mental model and focuses the analysis presented in the remainder of the report. Wildfire Hazard Identification. MIKA identifies wildfire hazards from three relevant datasets: the ICS-209-PLUS, SAFECOM, and SAFENET. Hazards are manually organized into a taxonomy and MIKA analyzes each hazard’s effects, likelihood, severity, and risk. Evaluating Mitigation Strategies. The SMARt-STEReO wildfire response model built in fmdtools evaluates a subset of identified hazards. Specifically, we simulate the effect of communications faults and equipment faults on operator safety, the effect of changing winds and flammability, and a scenario with multiple ignition points and heavy smoke. Tool Limitations and Usage Considerations. We provide a discussion of appropriate tool use cases as well as limitations and considerations for usage. The tool findings are used to synthesize recommendations for wildfire response operations, which can be captured as part of an IASMS. Key recommendations are as follows: Hazards are identified from a broad spectrum of sources including aircraft subsystems, operational sources, and ground crew operations. Highest risk operational environment hazards identified are Evacuations. The highest risk manned aerial operations hazard categorized is Jumper Operations Mishap. Ground crew hazards that are highest risk are Burns, Cargo Operations Overhead, Dehydration, Entrapment, Falling Objects, Heart Attacks, Heat Exhaustion, Inadequate Training or Certification, Vehicle Breakdown, and Vehicle Collision. Modelled containment failures arise from a mismatch between the difficulty of the firefighting scenario and the capacity (e.g., speed, effectiveness, awareness) of the response. In firefighting scenarios where containment is possible (e.g., because the fire does not spread too quickly), these mismatches can occur because of a change in environmental conditions (e.g., wind, flammability, etc) or because of planning, equipment, or communications faults. Improvements to communications increase the capacity of the firefighting response by reducing the time needed to respond to the fire. While surveillance does not increase this capacity by itself, it increases operator safety by increasing state awareness, enabling firefighters to evade approaching fires. Increasing both has a synergistic effect. In general, these performance and resilience increases generalize over fault scenarios as well as unforeseen changes to circumstances (i.e., wind, aridity, etc.). However, these improvements need to be designed so as not to make the system prone to persistent large-scale communications outages, which can reduce performance.

Hazard analysis↗
NASA NTRS1995

A high performance totally ordered multicast protocol

This paper presents the Reliable Multicast Protocol (RMP). RMP provides a totally ordered, reliable, atomic multicast service on top of an unreliable multicast datagram service such as IP Multicasting. RMP is fully and symmetrically distributed so that no site bears un undue portion of the communication load. RMP provides a wide range of guarantees, from unreliable delivery to totally ordered delivery, to K-resilient, majority resilient, and totally resilient atomic delivery. These QoS guarantees are selectable on a per packet basis. RMP provides many communication options, including virtual synchrony, a publisher/subscriber model of message delivery, an implicit naming service, mutually exclusive handlers for messages, and mutually exclusive locks. It has commonly been held that a large performance penalty must be paid in order to implement total ordering -- RMP discounts this. On SparcStation 10's on a 1250 KB/sec Ethernet, RMP provides totally ordered packet delivery to one destination at 842 KB/sec throughput and with 3.1 ms packet latency. The performance stays roughly constant independent of the number of destinations. For two or more destinations on a LAN, RMP provides higher throughput than any protocol that does not use multicast or broadcast.

Montgomery, Todd↗
NASA NTRS1995

Design, Implementation, and Verification of the Reliable Multicast Protocol

This document describes the Reliable Multicast Protocol (RMP) design, first implementation, and formal verification. RMP provides a totally ordered, reliable, atomic multicast service on top of an unreliable multicast datagram service. RMP is fully and symmetrically distributed so that no site bears an undue portion of the communications load. RMP provides a wide range of guarantees, from unreliable delivery to totally ordered delivery, to K-resilient, majority resilient, and totally resilient atomic delivery. These guarantees are selectable on a per message basis. RMP provides many communication options, including virtual synchrony, a publisher/subscriber model of message delivery, a client/server model of delivery, mutually exclusive handlers for messages, and mutually exclusive locks. It has been commonly believed that total ordering of messages can only be achieved at great performance expense. RMP discounts this. The first implementation of RMP has been shown to provide high throughput performance on Local Area Networks (LAN). For two or more destinations a single LAN, RMP provides higher throughput than any other protocol that does not use multicast or broadcast technology. The design, implementation, and verification activities of RMP have occurred concurrently. This has allowed the verification to maintain a high fidelity between design model, implementation model, and the verification model. The restrictions of implementation have influenced the design earlier than in normal sequential approaches. The protocol as a whole has matured smoother by the inclusion of several different perspectives into the product development.

Montgomery, Todd L.↗
NASA NTRS2004

Advanced Control Surface Seal Development for Future Space Vehicles

NASA s Glenn Research Center (GRC) has been developing advanced high temperature structural seals since the late 1980's and is currently developing seals for future space vehicles as part of the Next Generation Launch Technology (NGLT) program. This includes control surface seals that seal the edges and hinge lines of movable flaps and elevons on future reentry vehicles. In these applications, the seals must operate at temperatures above 2000 F in an oxidizing environment, limit hot gas leakage to protect underlying structures, endure high temperature scrubbing against rough surfaces, and remain flexible and resilient enough to stay in contact with sealing surfaces for multiple heating and loading cycles. For this study, three seal designs were compared against the baseline spring tube seal through a series of compression tests at room temperature and 2000 F and flow tests at room temperature. In addition, canted coil springs were tested as preloaders behind the seals at room temperature to assess their potential for improving resiliency. Addition of these preloader elements resulted in significant increases in resiliency compared to the seals by themselves and surpassed the performance of the baseline seal at room temperature. Flow tests demonstrated that the seal candidates with engineered cores had lower leakage rates than the baseline spring tube design. However, when the seals were placed on the preloader elements, the flow rates were higher as the seals were not compressed as much and therefore were not able to fill the groove as well. High temperature tests were also conducted to asses the compatibility of seal fabrics against ceramic matrix composite (CMC) panels anticipated for use in next generation launch vehicles. These evaluations demonstrated potential bonding issues between the Nextel fabrics and CMC candidates.

DeMange, J. J.↗
NASA NTRS2003

Advanced Control Surface Seal Development for Future Space Vehicles

NASA's Glenn Research Center (GRC) has been developing advanced high temperature structural seals since the late 1980s and is currently developing seals for future space vehicles as part of the Next Generation Launch Technology (NGLT) program. This includes control surface seals that seal the edges and hinge lines of movable flaps and elevons on future reentry vehicles. In these applications, the seals must operate at temperatures above 2000 F in an oxidizing environment, limit hot gas leakage to protect underlying structures, endure high temperature scrubbing against rough surfaces, and remain flexible and resilient enough to stay in contact with sealing surfaces for multiple heating and loading cycles. For this study, three seal designs were compared against the baseline spring tube seal through a series of compression tests at room temperature and 2000 F and flow tests at room temperature. In addition, canted coil springs were tested as preloaders behind the seals at room temperature to assess their potential for improving resiliency. Addition of these preloader elements resulted in significant increases in resiliency compared to seals by themselves and surpassed the performance of the baseline seal at room temperature. Flow tests demonstrated that the seal candidates with engineered cores had lower leakage rates than the baseline spring tube design. However, then the seals were placed on the preloader elements, the flow rates were higher as the seals were not compressed as much and therefore were not able to fill the groove as well. High temperature tests were also conducted to assess the compatability of seal fabrics against cermaic matrix composite (CMC) panels anticipated for use in next generation launch vehicles. These evaluations demonstrated potential bonding issues between the Nextel fabrics and CMC candidates.

DeMange, Jeffrey J.↗