Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Technical Risk Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Improving Efficacy and Safety of Pharmacological Treatment Through Precision Health and Pharmacogenomics

INTRODUCTION: Future spaceflight will require increased crew medical autonomy as exploration class missions expand in duration and distance from Earth, especially for Mars missions. As mission duration increases, it will be essential to have appropriate amounts of effective medication to ensure the maintenance of crew health and performance. Conversely, mass and volume constraints will become more severe as future spaceflight expands beyond low Earth orbit, where resupply is difficult or becomes impossible. These constraints thus convey an urgency to tailor medications for individual crewmembers and further examine appropriate dosing regimens. BACKGROUND: Precision Health is an exciting area of medicine focused on maintaining an individual’s health and performance through in-depth understanding of an individual’s unique clinical and environmental history, genetic makeup, and molecular profiles. This approach can be adapted to better predict, monitor, and address physiological responses to the spaceflight environment. A subset of this field is pharmacogenomics (PGX), the study of how the expressed genome impacts drug responses with the goal of prescribing the right dose of the right drug at the right time. Specifically, PGX testing provides valuable information on an individual’s precise allelic variations to guide physicians in making informed decisions on drug choice and dosing to avoid adverse events and maximize efficacy. The study goal was to identify which current space pharmacy drugs could be evaluated using PGX testing and to understand the potential impact on the health and wellness of the astronaut population. Additionally, we sought to evaluate clinically available FDA-approved PGX testing solutions to better understand its applicability. METHODS: A complete list of drugs on the ISS was analyzed for risk and likelihood of drug failure and PGX actionability. This analysis encompassed both astronauts’ personal medications, including supplements and over the counter drugs (n=151) contained in the ISS medical accessory kit (IMAK), and ISS MedKit formulary medications (n=95). Duplicate medications and different formulations were removed, which resulted in a total of 157 drugs used in the subsequent analysis. A 5x5 risk assessment table was produced by examining the likelihood of drug failure compared to the consequence of drug failure (LxC). Likelihood of individual drug failure was defined by whether existing processes are sufficient to prevent ineffective treatment or impactful side effect events, as ranked from 1 (very low, can easily be prevented) to 5 (very high, cannot be prevented) during a Mars mission. In contrast, the consequence of drug failure was defined by impact to safety, schedule, cost, or technical criteria and ranked from 1 (very low) to 5 (very high). An assessment of PGX reference laboratories is currently underway to evaluate sample requirements, benefit analysis (cost vs. utility of allele variant analysis), relevance to inflight medication usage, quality of reporting in enabling clinical application, and ease of integration into electronic medical records. RESULTS: Risk assessments (LxC 5x5 table) indicated 128 medications were in the green zone where risk is acceptable, with the remaining 29 of the medications in the yellow or red zone driven predominantly due to drug failure or safety concerns. We found that current PGX testing results could impact 21% of the total medications in the ISS MedKit and IMAK; of these, 9 medications currently have direct clinically actionable guidance available. Results of the clinical PGX solution evaluations as related to these medications will be presented. CONCLUSION: PGX testing has demonstrated clear benefits in terrestrial medicine and clinical environments for the selection of proper medications, avoiding adverse drug reactions, and maximizing drug efficacy. We propose that similar benefits would be bestowed on the astronaut and commercial spaceflight passenger population by performing preemptive preflight PGX testing to reduce risk of mission failure due to ineffective or toxic medications, improve drug efficacy, and further open the door to countermeasure research. For example, PGX results could allow tailoring of specific medications at optimal doses more precisely to each individual astronaut, particularly in areas of space motion sickness, sleep aids, and analgesics. An additional benefit is that PGX results could provide information for better planning of the components of a space pharmacy for deep space missions to be more effective and efficient in the utilization of limited pharmaceutical resources. Finally, while PGX testing of the astronaut corps is not currently conducted, this approach could provide immediate impact in support of mission success by reducing risks, optimizing astronaut performance, and providing valuable insights into long-term astronaut health. Such advancements in clinical decision making are important next steps in building dynamic individual risk profiles for astronauts, increasing selection of the best treatment choice, and providing tailored countermeasures for individual crewmembers.

Pharmacogenomics↗

Nuclear Safety [Vol. 30, No. 3, July-September 1989]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 325 Safety of Framatome Advanced Nuclear Steam Supply Systems Designs by J. A. Charles and D. Lange, 333 Book Review of Nuclear Accidents: Intervention Levels for the Protection of the Public by H. B. Piper; ACCIDENT ANALYSIS: 335 Living PRA Computer Systems by S. C. Dinsmore and H.-P. Balfanz, 343 Summary of ICAP Assessments of RELAP5/MOD2 by W. E. Driskell and R. G. Hanson; CONTROL AND INSTRUMENTATION: 352 Thermal Performance Monitoring System at Maanshan Nuclear Power Plant by H.-J. Chao, Y.-P. Lin, G.-H. Jou, L.-Y. Liao, and Y.-B. Chen; DESIGN FEATURES: 358 Warning Systems for Nuclear Power Plant Emergencies by J. H. Sorensen and D. S. Mileti; WASTE AND SPENT FUEL MANAGEMENT: 371 Activities Related to Waste Management Compiled by E G. Silver; OPERATING EXPERIENCES: 382 Steam Generator Tube Performance: Experience with Water-Cooled Nuclear Power Reactors During 1985 by O. S. Tatone and R. L. Tapping, 400 Systems Interaction Analyses: Concepts and Techniques (Part II) by M. D. Muhlheim and G. A. Murphy, 413 Reactor Shutdown Experience Compiled by J. W. Cletcher, 416 Operating U.S. Power Reactors Compiled by E G. Silver; RECENT DEVELOPMENTS: 440 General Administrative Activities Compiled by E G. Silver, 460 Reports, Standards, and Safety Guides by D. S. Queener, 466 Status of Power-Reactor Licensing Activities Compiled by E G. Silver, 470 Proposed Rule Changes as of Mar. 31, 1989; ANNOUNCEMENTS: 334 Proceedings Published, 351 CEC Seminar on Methods and Codes for Assessing the Off-Site Consequences of Nuclear Accidents, 357 Short Course on Multiphase Flow and Heat Transfer: Bases and Applications in A: The Nuclear Power Industry B: The Process Industries, 357 International Conference on Probabilistic Safety Assessment and Management, 478 International Topical Meeting on the Safety, Status, and Future of Non-Commercial Reactors and Irradiation Facilities, 475 The Authors.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Criteria for Retention of 3013 S1 Containers Based on Relative Risk and Expert Judgment

An evaluation was performed to assess the suitability of thirty-three 3013 containers proposed for retention. These containers have moisture levels greater than 0.08 wt.% – the S1 population. The remainder of the S1 population stored at SRS will be down blended and disposed of by the end of 2028. Based on field surveillance and shelf-life data available to date as well as informed technical judgment, no container is currently expected to fail in its 50-year storage period. However, corrosion risk varies across the S1 population. Relative risks were evaluated using predicted Consensus Scores and their 95% Upper Prediction Limits (UPLs). The predicted values are based on a statistical model of Consensus Score as a function of moisture, chloride, and whether the packaged material was electrorefining scrap packaged at Hanford. Consensus Score has been shown to be a useful indicator of corrosion potential, and the UPL captures uncertainty in the model predictions, providing a conservative indicator of corrosion potential. Using UPLs to determine relative risks, together with expert review, three containers were identified as not suitable for retention, and the remainder were determined to be suitable.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Assessment of Modeling and Simulation Technical Gaps in Safety Analysis of High Burnup Accident-Tolerant Fuels

The United States nuclear industry is facing a strong challenge to maintain regulatory-required levels of safety while ensuring economic competitiveness to stay in business. Safety remains a key parameter for all aspects related to the operation of light water reactor (LWR) nuclear power plants (NPPs), and it can be achieved more economically by using a risk-informed ecosystem, such as that being developed by the Risk-Informed Systems Analysis (RISA) Pathway under the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program. The LWRS Program is promoting a wide range of research and development activities to maximize both the safety and economically efficient performance of NPPs through improved scientific understanding, especially given that many plants are considering second license renewal. The RISA Pathway has two main goals: The deployment of methodologies and technologies that enable better representation of safety margins and the factors that contribute to cost and safety, and; The development of advanced applications that enable cost-effective plant operation. As part of the RISA Pathway, the Enhanced Resilient Plant (ERP) project refers to an NPP where safety is improved by implementing various measures, such as accident-tolerant fuels (ATF), diverse and flexible coping strategy (FLEX), enhancements to plant components and systems, incorporation of augmented or new passive cooling systems, and utilization of advanced battery technologies. The objective of the ERP research is to use novel methods and computational tools to enhance existing reactors’ safety while reducing operational costs. Many U.S. utilities are targeting implementation of ATFs instead of traditional fuel in the near future since ATFs offer benefits in terms of improved performance and cost savings. The robust properties of ATF make it possible to extend the refueling cycle from 18 to 24 months in addition to the opportunity to use less of fuel. Extensive safety assessments are required to support regulatory requirements and obtain the approvals to use ATFs and the ERP project support the industry by developing novel effective methodologies for safety evaluations. In this project, the technical gaps in the modeling and simulation of the high burnup (HBU) ATF were assessed in terms of the fuel cladding behavior during the postulated accident events. The issues were identified in modeling the cladding deformation, the hydrodynamic change due to cladding deformation and the critical heat flux (CHF). The RELAP5-3D cladding deformation model was assessed by multiple verification tests and validation with the instrumented fuel assembly (IFA) experiment.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

ARCADE Technical Pathway and Industry Impact

The Advanced Reactor Cyber Analysis and Development Environment (ARCADE) simplifies the evaluation and assessment of robustness factor and cyber resilience that support secure-by-design for advanced reactor nuclear power plants. In this manner, ARCADE supports risk-informed performance based (RIPB) evaluations of cybersecurity through its integration of plant physics with high-fidelity emulations of control systems. This cross domain approach enables comprehensive analysis of control system sensitivities, cyber-attack scenarios, and their consequences. ARCADE has been custom developed to meet the demands identified in Tier 1 of the Tiered Cyber Analysis (TCA) as outlined in NRC Draft Regulation Guide (RG) 5.96, which provides a RIPB cybersecurity approach for new reactors.

97 MATHEMATICS AND COMPUTING↗

Assessment of lnternational Space Station (ISS) Lithium-ion Battery Thermal Runaway (TR)

This task was developed in the wake of the Boeing 787 Dreamliner lithium-ion battery TR incidents of January 2013 and January 2014. The Electrical Power Technical Discipline Team supported the Dreamliner investigations and has followed up by applying lessons learned to conduct an introspective evaluation of NASA's risk of similar incidents in its own lithium-ion battery deployments. This activity has demonstrated that historically NASA, like Boeing and others in the aerospace industry, has emphasized the prevention of TR in a single cell within the battery (e.g., cell screening) but has not considered TR severity-reducing measures in the event of a single-cell TR event. center dotIn the recent update of the battery safety standard (JSC 20793) to address this paradigm shift, the NASA community included requirements for assessing TR severity and identifying simple, low-cost severity reduction measures. This task will serve as a pathfinder for meeting those requirements and will specifically look at a number of different lithium-ion batteries currently in the design pipeline within the ISS Program batteries that, should they fail in a Dreamliner-like incident, could result in catastrophic consequences. This test is an abuse test to understand the heat transfer properties of the cell and ORU in thermal runaway, with radiant barriers in place in a flight like test in on orbit conditions. This includes studying the heat flow and distribution in the ORU. This data will be used to validate the thermal runaway analysis. This test does not cover the ambient pressure case. center dotThere is no pass/ fail criteria for this test.

Graika, Jason↗

Advanced Air Mobility and Safety Management Systems

Our current air transportation system has underserved markets, including local, regional, intraregional, and urban transportation of both people and cargo. Recent advances in aviation technology such as small highly-automated vehicles, electric aircraft, and automated air traffic are enabling business opportunities in these markets. Advanced Air Mobility, or AAM, refers to a community effort to overcome the gaps in operational rules, safety analysis, and overall acceptance, so that these new operations will be possible. For full details, please see: https://www.nasa.gov/aam As we think about how we can safely introduce these new operations, fundamental questions about how the structure of Safety Management Systems can be applied to AAM, and how that structure can be used to help us overcome the necessary technical and societal obstacles arise. Two of these questions are: • How do we tailor the requirements and desired level of monitoring and assessment to achieve safety given the breadth of possible operations and the associated risk of those operations? • How do we aid innovation by rapidly evaluating the safety of novel operations without losing associated rigor? We assume that a Safety Management System that enables these future systems will incorporate knowledge of the acceptable level of risk, and will utilize data science to automate the core monitor, assess and mitigate functions that will allow us to respond to risks and hazards in time to prevent safety incidents. In 2018, the National Academies proposed an In-Time Aviation Safety Management System (IASMS) that would advance these goals. (https://www.nap.edu/catalog/24962/in-time-aviation-safety-management-challenges-and-research-for-an) The National Academies made a clear distinction between in-time systems, in which hazards could be identified and risks mitigated in time to prevent incidents, and real-time systems, since many hazards and risks do not need real-time data and analysis to detect and mitigate.

In-Time Aviation Safety Management System↗

Assessment of alternate thermal protection systems for the Space Shuttle Orbiter

Technical aspects of the alternate thermal protection system (TPS) study for the Shuttle Orbiter are reviewed, and a status report on alternate TPS technology developments is presented. Mission impact, life cycle costs and risks, and selected candidate concepts are identified. The best system would consist of mechanically attached metallic and carbon-carbon TPS concepts employing a titanium multiwall prepackaged concept at temperatures below 1000 F, a superalloy honeycomb prepackaged concept at temperatures between 1000-1800 F, and an advanced carbon-carbon multipost standoff concept above 1800 F. Alternative concepts offer significant improvements in durability and are mass competitive with current ceramic tile reusable surface insulation.

Kelly, H. N.↗

Designing a Composable Geometric Toolkit for Versatility in Applications to Simulation Development

Conceived and implemented through the development of probabilistic risk assessment simulations for Project Constellation, the Geometric Toolkit allows users to create, analyze, and visualize relationships between geometric shapes in three-space using the MATLAB computing environment. The key output of the toolkit is an analysis of how emanations from one "source" geometry (e.g., a leak in a pipe) will affect another "target" geometry (e.g., another heat-sensitive component). It can import computer-aided design (CAD) depictions of a system to be analyzed, allowing the user to reliably and easily represent components within the design and determine the relationships between them, ultimately supporting more technical or physics-based simulations that use the toolkit. We opted to develop a variety of modular, interconnecting software tools to extend the scope of the toolkit, providing the capability to support a range of applications. This concept of simulation composability allows specially-developed tools to be reused by assembling them in various combinations. As a result, the concepts described here and implemented in this toolkit have a wide range of applications outside the domain of risk assessment. To that end, the Geometric Toolkit has been evaluated for use in other unrelated applications due to the advantages provided by its underlying design.

Reed, Gregory S.↗

Technical Excellence and Communication: The Cornerstones for Successful Safety and Mission Assurance Programs

The paper describes the role of technical excellence and communication in the development and maintenance of safety and mission assurance programs. The Marshall Space Flight Center (MSFC) Safety and Mission Assurance (S&MA) organization is used to illustrate philosophies and techniques that strengthen safety and mission assurance efforts and that contribute to healthy and effective organizational cultures. The events and conditions leading to the development of the MSFC S&MA organization are reviewed. Historic issues and concerns are identified. The adverse effects of resource limitations and risk assessment roles are discussed. The structure and functions of the core safety, reliability, and quality assurance functions are presented. The current organization s mission and vision commitments serve as the starting points for the description of the current organization. The goals and objectives are presented that address the criticisms of the predecessor organizations. Additional improvements are presented that address the development of technical excellence and the steps taken to improve communication within the Center, with program customers, and with other Agency S&MA organizations.

Malone, Roy W.↗

DOE-NE LWRS Integrated Program Plan - Physical Security Pathway

Domestic nuclear power is facing increased financial pressures from a variety of areas and there is pressure on these utilities to reduce their cost of operation. Currently, about 20%-30% of all on-site personnel are related to physical security. The LWRS Program recognized that R&D related to physical security could play a role in providing nuclear utilities technical and staffing efficiency options to meet their physical security commitments, but utilities often lack the technical basis or the ability to create the technical basis to realize or implement these efficiencies; towards this end, the LWRS Program created the Physical Security Pathway in September 2019. The pathway performs R&D to develop methods, tools, and technologies to optimize and modernize a nuclear power facility’s security posture. The pathway will: (1) conduct research on risk-informed techniques for physical security that account for a dynamic adversary; (2) apply advanced modeling and simulation tools to better inform physical-security scenarios and reduce uncertainties in force-on-force modeling; (3) assess benefits from proposed enhancements and novel mitigation strategies and explore changes to best practices, guides, or regulation to enable modernization; and (4) enhance and provide the technical basis for stakeholders to employ new security methods, tools, and technologies.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Assurance of Fault Management: Risk-Significant Adverse Condition Awareness

Fault Management (FM) systems are ranked high in risk-based assessment of criticality within flight software, emphasizing the importance of establishing highly competent domain expertise to provide assurance for NASA projects, especially as spaceflight systems continue to increase in complexity. Insight into specific characteristics of FM architectures seen embedded within safety- and mission-critical software systems analyzed by the NASA Independent Verification Validation (IVV) Program has been enhanced with an FM Technical Reference (TR) suite. Benefits are aimed beyond the IVV community to those that seek ways to efficiently and effectively provide software assurance to reduce the FM risk posture of NASA and other space missions. The identification of particular FM architectures, visibility, and associated IVV techniques provides a TR suite that enables greater assurance that critical software systems will adequately protect against faults and respond to adverse conditions. The role FM has with regard to overall asset protection of flight software systems is being addressed with the development of an adverse condition (AC) database encompassing flight software vulnerabilities.Identification of potential off-nominal conditions and analysis to determine how a system responds to these conditions are important aspects of hazard analysis and fault management. Understanding what ACs the mission may face, and ensuring they are prevented or addressed is the responsibility of the assurance team, which necessarily should have insight into ACs beyond those defined by the project itself. Research efforts sponsored by NASAs Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs, and allowing queries based on project, mission type, domain component, causal fault, and other key characteristics. The repository has a firm structure, initial collection of data, and an interface established for informational queries, with plans for integration within the Enterprise Architecture at NASA IVV, enabling support and accessibility across the Agency. The development of an improved workflow process for adaptive, risk-informed FM assurance is currently underway.

Software Verification & Validation↗

An adaptable technique for comparative image assessment: Application to crosswell electromagnetic survey design for fluid monitoring

Reservoir integrity stewardship accompanying carbon capture and sequestration considers fluid extraction and reinjection as a risk-mitigating method against overpressuring that could lead to caprock damage and ensuing [Formula: see text] leakage. Crosswell electromagnetics offers a technically viable monitoring method with the spatial volume coverage necessary for reservoir-encompassing pressure management. However, a certain logistic dilemma for deep gas sequestration into saline and thus electrically conductive aquifers is that crosswell magnetic-field measurements underperform in the imaging of more resistive plume bodies, further exacerbated when vertical arrays intersect, as opposed to surround, plumes. Furthermore, comparative synthetic-data plume imaging of such scenarios rates the information content of magnetic-field versus electric-field 3D crosswell layouts for reservoir and infrastructure conditions of a representative pilot site in a coastal area in Florida. The image quality of the resulting plume replications can be ranked numerically through a newly proposed semblance qualifier, appraising the model goodness of fit to a given reference. In contrast to common least-squares measures for goodness of fit, the semblance formulation uses classifying logistic function types, thus enabling a better distinction of predefined anomaly features.

58 GEOSCIENCES↗

Session 3: Agrivoltaics Pathways [Slides]

This presentation was developed for a webinar series for the USAID's South Asia Group for Energy (SAGE) and South Asia Regional Energy Partnership (SAREP). The presentation includes insights into agrivoltaic site assessment planning, including what is needed for a farm assessment, solar panel system design from the agricultural perspective, variables that go into crop selection, and environmental impact, sustainability, and agritourism, technical parameters for developing an agrivoltaics project, including what makes up a PV feasibility study, understanding variables that go into technology and equipment selection, agrivoltaic installation and agricultural integration, and monitoring and maintenance throughout the life of the project, and agrivoltaic financial planning, risk mitigation, and debt equity issues.

14 SOLAR ENERGY↗

A novel assay to measure low-density lipoproteins binding to proteoglycans

Background: The binding of low-density lipoprotein (LDL) to proteoglycans (PGs) in the extracellular matrix (ECM) of the arterial intima is a key initial step in the development of atherosclerosis. Although many techniques have been developed to assess this binding, most of the methods are labor-intensive and technically challenging to standardize across research laboratories. Thus, sensitive, and reproducible assay to detect LDL binding to PGs is needed to screen clinical populations for atherosclerosis risk. Objectives: The aim of this study was to develop a quantitative, and reproducible assay to evaluate the affinity of LDL towards PGs and to replicate previously published results on LDL-PG binding. Methods: Immunofluorescence microscopy was performed to visualize the binding of LDL to PGs using mouse vascular smooth muscle (MOVAS) cells. An in-cell ELISA (ICE) was also developed and optimized to quantitatively measure LDL-PG binding using fixed MOVAS cells cultured in a 96-well format. Results: We used the ICE assay to show that, despite equal APOB concentrations, LDL isolated from adults with cardiovascular disease bound to PG to a greater extent than LDL isolated from adults without cardiovascular disease (p<0.05). Conclusion: We have developed an LDL-PG binding assay that is capable of detecting differences in PG binding affinities despite equal APOB concentrations. Future work will focus on candidate apolipoproteins that enhance or diminish this interaction.

59 BASIC BIOLOGICAL SCIENCES↗

Africa Battery Energy Storage Systems (BESS) Capacity Building Utility-Scale Storage: BESS Valuation, Tariffs, and Remuneration [Slides]

Utility-scale Battery Energy Storage Systems (BESS) are key to enhancing grid reliability, integrating renewable energy, and providing operational flexibility. Designing effective valuation, remuneration, and tariff frameworks is essential to ensure both system benefits and financial viability for developers. This presentation outlines a structured methodology for evaluating BESS projects, covering policy and legal considerations, cost and revenue analysis, benchmarking, financial sensitivity, and risk assessment, while ensuring alignment with public interest. It also explores valuation of multiple storage services - bulk energy, ancillary services, and infrastructure support - and monetization strategies through capacity payments, energy tariffs, tolling, arbitrage, and non-wires alternative payments. Technical factors, including round-trip efficiency, degradation, and storage duration, are integrated into financial and operational modeling to quantify both system-wide and project-level benefits. Through case studies and simulation-based approaches, this framework provides regulators, utilities, and developers with practical guidance for tariff design, payment structures, and investment decisions, maximizing the economic and societal value of BESS deployment.

25 ENERGY STORAGE↗

Testing a Run-Time Assurance Framework Coupled with Integrated Risk Mitigation Capabilities for Autonomous Urban UAS Flights

The In-Time Aviation Safety Management System (IASMS) Concept of Operations (ConOps) envisions new capabilities to monitor, assess, and mitigate flight safety risks. Systems will be tailored to mission type, vehicle/equipage type, operational environment, and safety risk tolerance. Within an IASMS framework, several capabilities may be implemented spanning three operational phases (pre-flight, in-flight, and post-flight/off-line); and consisting of lower level functions and information services which may reside onboard the aircraft, on third-party server(s), and/or on ground/operator station(s). Each capability will be designed to produce and disseminate safety-relevant information; perform detection, diagnosis, and prediction of unsafe situations; and/or execute mitigation actions when hazardous events warrant such changes. This paper focuses on recent testing of airborne capabilities that demonstrate inflight aspects of the overarching concept for autonomous unmanned aircraft systems (UAS) operations in urban environments. A flight test architecture is described that applies run-time assurance principles (e.g., executes independent of the unassured autopilot), real-time risk assessment, and a technique to execute contingencies if necessary either automatically or via pilot intervention. Several tests using small UAS were conducted to verify the assured in-flight risk mitigation capability. The paper draws significantly from a larger NASA technical report and recent prior conference papers, providing additional details. Data is analyzed for two representative flights to illustrate the performance for various sequential and simultaneous hazards used during testing. During each automated flight, several hazards are encountered at various points along the flight path. At each point, the hazard is mitigated by the system, with the vehicle then continuing to subsequent points. The paper concludes with lessons-learned regarding relevant aspects of the overarching IASMS concept and how it may be updated and further advanced in the future.

population activity↗

DSS Security Assessment

The Discovery and Synchronization service (DSS) has implemented some reasonable technical controls that help improve security and there are very few technical findings. The use of Docker and Kubernetes helps simplify the deployment process, and the DSS uses mutual TLS (mTLS) to connect. Much of the security risk across the DSS is a factor of its nature, a distributed environment that relies on all members to secure their parts correctly. As such, the DSS team should attempt to emphasize security controls that reduce complexity for securing entities’ Cockroach DB (CRDB) instances properly and improve coordination among DSS members for things like security patching, incident response, detecting, and removing bad actors. The DSS team must recognize that operating a DSS instance securely will require a combination of technical and procedural controls. Each DSS entity must configure their instance properly and follow standard operating procedures to ensure that the DSS service is secure.

threat modeling↗