Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Climate Change Impacts and Responses: Societal Indicators for the National Climate Assessment

The Climate Change Impacts and Responses: Societal Indicators for the National Climate Assessment workshop, sponsored by the National Aeronautics and Space Administration (NASA) for the National Climate Assessment (NCA), was held on April 28-29, 2011 at The Madison Hotel in Washington, DC. A group of 56 experts (see list in Appendix B) convened to share their experiences. Participants brought to bear a wide range of disciplinary expertise in the social and natural sciences, sector experience, and knowledge about developing and implementing indicators for a range of purposes. Participants included representatives from federal and state government, non-governmental organizations, tribes, universities, and communities. The purpose of the workshop was to assist the NCA in developing a strategic framework for climate-related physical, ecological, and socioeconomic indicators that can be easily communicated with the U.S. population and that will support monitoring, assessment, prediction, evaluation, and decision-making. The NCA indicators are envisioned as a relatively small number of policy-relevant integrated indicators designed to provide a consistent, objective, and transparent overview of major variations in climate impacts, vulnerabilities, adaptation, and mitigation activities across sectors, regions, and timeframes. The workshop participants were asked to provide input on a number of topics, including: (1) categories of societal indicators for the NCA; (2) alternative approaches to constructing indicators and the better approaches for NCA to consider; (3) specific requirements and criteria for implementing the indicators; and (4) sources of data for and creators of such indicators. Socioeconomic indicators could include demographic, cultural, behavioral, economic, public health, and policy components relevant to impacts, vulnerabilities, and adaptation to climate change as well as both proactive and reactive responses to climate change. Participants provided inputs through in-depth discussion in breakout sessions, plenary sessions on break-out results, and several panels that provided key insights about indicators, lessons learned through experience with developing and implementing indicators, and thoughts on how the NCA could proceed to develop indicators for the NCA.

Kenney, Melissa A.↗

Physical, Ecological, and Societal Indicators for the National Climate Assessment

The National Climate Assessment (NCA) is being conducted under the auspices of the U.S. Global Change Research Program (USGCRP), pursuant to the Global Change Research Act of 1990, Section 106, which requires a report to Congress every 4 years. The current NCA (http://globalchange.gov/what-we-do/assessment/) differs in multiple ways from previous U.S. climate assessment efforts, being: (1) more focused on supporting the Nation s activities in adaptation and mitigation and on evaluating the current state of scientific knowledge relative to climate impacts and trends; (2) a long-term, consistent process for evaluation of climate risks and opportunities and providing information to support decision-making processes within regions and sectors; and (3) establishing a permanent assessment capacity both inside and outside of the federal government. As a part of ongoing, long-term assessment activities, the NCA intends to develop an integrated strategic framework and deploy climate-relevant physical, ecological, and societal indicators. The NCA indicators framework is underdevelopment by the NCA Development and Advisory Committee Indicators Working Group and are envisioned as a relatively small number of policy-relevant integrated indicators designed to provide a consistent, objective, and transparent overview of major variations in climate impacts, vulnerabilities, adaptation, and mitigation activities across sectors, regions, and timeframes. The potential questions that could be addressed by these indicators include: How do we know that there is a changing climate and how is it expected to change in the future? Are important climate impacts and opportunities occurring or predicted to occur in the future? Are we adapting successfully? What are the vulnerabilities and resiliencies given a changing climate? Are we preparing adequately for extreme events? It is not expected that the NCA societal indicators would be linked directly to a single decision or portfolio of decisions, but subsets of indicators, or the data supporting the indicator, might be used to inform decision-making processes such as the development and implementation of climate adaptation strategies in a particular sector or region.

Kenney, Melissa A.↗

Automated Test Case Generation for an Autopilot Requirement Prototype

Designing safety-critical automation with robust human interaction is a difficult task that is susceptible to a number of known Human-Automation Interaction (HAI) vulnerabilities. It is therefore essential to develop automated tools that provide support both in the design and rapid evaluation of such automation. The Automation Design and Evaluation Prototyping Toolset (ADEPT) enables the rapid development of an executable specification for automation behavior and user interaction. ADEPT supports a number of analysis capabilities, thus enabling the detection of HAI vulnerabilities early in the design process, when modifications are less costly. In this paper, we advocate the introduction of a new capability to model-based prototyping tools such as ADEPT. The new capability is based on symbolic execution that allows us to automatically generate quality test suites based on the system design. Symbolic execution is used to generate both user input and test oracles user input drives the testing of the system implementation, and test oracles ensure that the system behaves as designed. We present early results in the context of a component in the Autopilot system modeled in ADEPT, and discuss the challenges of test case generation in the HAI domain.

Giannakopoulou, Dimitra↗

Nemesis Autonomous Test System

A generalized framework has been developed for systems validation that can be applied to both traditional and autonomous systems. The framework consists of an automated test case generation and execution system called Nemesis that rapidly and thoroughly identifies flaws or vulnerabilities within a system. By applying genetic optimization and goal-seeking algorithms on the test equipment side, a "war game" is conducted between a system and its complementary nemesis. The end result of the war games is a collection of scenarios that reveals any undesirable behaviors of the system under test. The software provides a reusable framework to evolve test scenarios using genetic algorithms using an operation model of the system under test. It can automatically generate and execute test cases that reveal flaws in behaviorally complex systems. Genetic algorithms focus the exploration of tests on the set of test cases that most effectively reveals the flaws and vulnerabilities of the system under test. It leverages advances in state- and model-based engineering, which are essential in defining the behavior of autonomous systems. It also uses goal networks to describe test scenarios.

Barltrop, Kevin J.↗

A Geometric Analysis to Protect Manned Assets from Newly Launched Objects - COLA Gap Analysis

A safety risk was identified for the International Space Station (ISS) by The Aerospace Corporation following the launch of GPS IIR-20 (March 24, 2009), when the spent upper stage of the launch vehicle unexpectedly crossed inside the ISS notification box shortly after launch. This event highlighted a 56-hour vulnerability period following the end of the launch Collision Avoidance (COLA) process where the ISS would be unable to react to a conjunction with a newly launched object. Current launch COLA processes screen each launched object across the launch window to determine if an object's nominal trajectory is predicted to pass within 200 km of the ISS (or any other manned/mannable object), resulting in a launch time closure. These launch COLA screens are performed from launch through separation plus I 00 minutes. Once the objects are in orbit, they are cataloged and evaluated as part of routine on-orbit conjunction assessment processes. However, as the GPS IIR-20 scenario illustrated, there is a vulnerability period in the time line between the end of launch COLA coverage and the beginning of standard on-orbit COLA assessment activities. The gap between existing launch and on-orbit COLA processes is driven by the time it takes to track and catalog a launched object, identify a conjunction, and plan and execute a collision avoidance maneuver. For the ISS, the total time required to accomplish an of these steps is 56 hours. To protect human lives, NASA/JSC has requested that an US launches take additional steps to protect the ISS during this "COLA gap" period. The uncertainty in the state of a spent upper stage can be quite large after all bums are complete and all remaining propellants are expelled to safe the stage. Simply extending the launch COLA process an additional 56 hours is not a viable option as the 3-sigma position uncertainty will far exceed the 200 km miss-distance criterion. Additionally, performing a probability of collision (Pc) analysis over this period is also not practical due to the limiting effects of these large orbit state uncertainties. An estimated upper bound for Pc for a typical spent upper stage if nominally aligned for a direct broadside collision with the ISS is only on the order of 10-6. For a smaller manned object such as a Soyuz capsule, the risk level decreases to an order of 10'8 . In comparison, the Air Force Range policy (AFI 91-217) for launch COLAs would only eliminate launch opportunities when conjunctions with objects exceed a Pc of 10'5 This paper demonstrates a conservative geometry-based methodology that may be used to determine if launch opportunities pose a threat to the ISS during the COLA gap period. The NASA Launch Services Program at Kennedy Space Center has developed this COLA gap analysis method and employed it fQr three NASA missions to identify potential ISS conjunctions and corresponding launch window closures during the 56-hour at-risk period. In the analysis, for each launch opportunity, the nominal trajectory of the spent upper stage and the orbit state of the ISS are propagated over the 56 hour period. Each time the upper stage crosses the orbit plane of the ISS, the relative radial and argument of latitude separations are calculated. A window cutout is identified if these separation differences fall within a mission-specific violation box, which is determined from the evaluation of a Monte Carlo dispersions analysis that quantifies the potential variation in the upper stage radial and argument of latitude differences. This paper details the results of these analyses and their impacts to each mission.

Hametz, Mark E.↗

Security Risk Assessment Process for UAS in the NAS CNPC Architecture

This informational paper discusses the risk assessment process conducted to analyze Control and Non-Payload Communications (CNPC) architectures for integrating civil Unmanned Aircraft Systems (UAS) into the National Airspace System (NAS). The assessment employs the National Institute of Standards and Technology (NIST) Risk Management framework to identify threats, vulnerabilities, and risks to these architectures and recommends corresponding mitigating security controls. This process builds upon earlier work performed by RTCA Special Committee (SC) 203 and the Federal Aviation Administration (FAA) to roadmap the risk assessment methodology and to identify categories of information security risks that pose a significant impact to aeronautical communications systems. A description of the deviations from the typical process is described in regards to this aeronautical communications system. Due to the sensitive nature of the information, data resulting from the risk assessment pertaining to threats, vulnerabilities, and risks is beyond the scope of this paper

data links↗

Security Risk Assessment Process for UAS in the NAS CNPC Architecture

This informational paper discusses the risk assessment process conducted to analyze Control and Non-Payload Communications (CNPC) architectures for integrating civil Unmanned Aircraft Systems (UAS) into the National Airspace System (NAS). The assessment employs the National Institute of Standards and Technology (NIST) Risk Management framework to identify threats, vulnerabilities, and risks to these architectures and recommends corresponding mitigating security controls. This process builds upon earlier work performed by RTCA Special Committee (SC) 203 and the Federal Aviation Administration (FAA) to roadmap the risk assessment methodology and to identify categories of information security risks that pose a significant impact to aeronautical communications systems. A description of the deviations from the typical process is described in regards to this aeronautical communications system. Due to the sensitive nature of the information, data resulting from the risk assessment pertaining to threats, vulnerabilities, and risks is beyond the scope of this paper.

Iannicca, Dennis C.↗

Multi-Factor Impact Analysis of Agricultural Production in Bangladesh with Climate Change

Diverse vulnerabilities of Bangladesh's agricultural sector in 16 sub-regions are assessed using experiments designed to investigate climate impact factors in isolation and in combination. Climate information from a suite of global climate models (GCMs) is used to drive models assessing the agricultural impact of changes in temperature, precipitation, carbon dioxide concentrations, river floods, and sea level rise for the 2040-2069 period in comparison to a historical baseline. Using the multi-factor impacts analysis framework developed in Yu et al. (2010), this study provides new sub-regional vulnerability analyses and quantifies key uncertainties in climate and production. Rice (aman, boro, and aus seasons) and wheat production are simulated in each sub-region using the biophysical Crop Environment REsource Synthesis (CERES) models. These simulations are then combined with the MIKE BASIN hydrologic model for river floods in the Ganges-Brahmaputra-Meghna (GBM) Basins, and the MIKE21Two-Dimensional Estuary Model to determine coastal inundation under conditions of higher mean sea level. The impacts of each factor depend on GCM configurations, emissions pathways, sub-regions, and particular seasons and crops. Temperature increases generally reduce production across all scenarios. Precipitation changes can have either a positive or a negative impact, with a high degree of uncertainty across GCMs. Carbon dioxide impacts on crop production are positive and depend on the emissions pathway. Increasing river flood areas reduce production in affected sub-regions. Precipitation uncertainties from different GCMs and emissions scenarios are reduced when integrated across the large GBM Basins' hydrology. Agriculture in Southern Bangladesh is severely affected by sea level rise even when cyclonic surges are not fully considered, with impacts increasing under the higher emissions scenario.

Ruane, Alex C.↗

New York City Panel on Climate Change 2015 Report: Climate Observations and Projections - Chapter 1

During 2013 and 2014, numerous international (IPCC, 2013) and national (Melillo et al., 2014; Gordon, 2014) reports have concluded that human activities are changing the climate, leading to increased vulnerability and risk. Since the industrial revolution, fossil fuel burning, industrial activity, and land use changes have led to a 40% increase in heat-trapping carbon dioxide (CO2), and an approximately 150% increase in methane (CH4), another powerful greenhouse gas (GHG), has been observed. Global temperatures have increased by close to 1 C since 1880 as the upper oceans have warmed and polar ice has retreated. These and other climate changes are projected to accelerate as greenhouse gas concentrations continue to rise. In the coming decades, climate change is extremely likely to bring warmer temperatures in the New York metropolitan region (see Box. 1.1 and Fig.1.1 for key definitions and terms). Heat waves are very likely to increase; total annual precipitation will likely increase and brief, intense rainstorms are very likely to increase. Because of incomplete knowledge about exactly how much climate change will occur, choosing among policies for reducing future damages requires prudent risk management (Yohe and Leichenko, 2010; Kunreuther et al., 2013). Given differing risk tolerances among stakeholders, a risk management approach allows for a range of possible climate change outcomes to be examined with associated uncertainties surrounding their likelihoods. The New York City Panel on Climate Change 2 (NPCC2) projections can be used to inform planning across multiple governmental scales (e.g., city, county, state) in the New York metropolitan region. Such coordinated efforts can serve as test cases for successful local, state, and federal coordination for integrated climate adaptation initiatives. This chapter describes the global climate system, and presents observed temperature and precipitation trends and projections for the region. Chapter 2 (NPCC, 2015) focuses on sea level rise and possible changes in coastal storms. Chapter 3 and Chapter 4 (NPCC, 2015) describe efforts to better understand the region's vulnerability to coastal flooding during coastal storms. The treatment of likelihood related to the NPCC projections is similar to that developed by the Intergovernmental Panel on Climate Change Fourth and Fifth Assessment Reports (IPCC, 2007; 2013), with six likelihood categories (Box 1.1 and Fig. 1.1). The assignment of climate hazards to these categories is based on observed data, global climate model simulations, published literature, and expert judgment.

climate change↗

Sea Level Rise in Santa Clara County

Presentation by Cristina Milesi, First Author, NASA Ames Research Center, Moffett Field, CA at the "Meeting the Challenge of Sea Level Rise in Santa Clara County" on June 19, 2005 Santa Clara County, bordering with the southern portion of the San Francisco Bay, is highly vulnerable to flooding and to sea level rise (SLR). In this presentation, the latest sea level rise projections for the San Francisco Bay will be discussed in the context of extreme water height frequency and extent of flooding vulnerability. I will also present preliminary estimations of levee requirements and possible mitigation through tidal restoration of existing salt ponds. The examples will draw mainly from the work done by the NASA Climate Adaptation Science Investigators at NASA Ames.

Sea Level↗

Risk of Performance Decrements and Adverse Health Outcomes Resulting from Sleep Loss, Circadian Desynchronization, and Work Overload

Sleep loss, circadian desynchronization, and work overload occur to some extent for ground and flight crews, prior to and during spaceflight missions. Ground evidence indicates that such risk factors may lead to performance decrements and adverse health outcomes, which could potentially compromise mission objectives. Efforts are needed to identify the environmental and mission conditions that interfere with sleep and circadian alignment, as well as individual differences in vulnerability and resiliency to sleep loss and circadian desynchronization. Specifically, this report highlights a collection of new evidence to better characterize the risk and reveals new gaps in this risk as follows: Sleep loss is apparent during spaceflight. Astronauts consistently average less sleep during spaceflight relative to on the ground. The causes of this sleep loss remain unknown, however ground-based evidence suggests that the sleep duration of astronauts is likely to lead to performance impairment and short and long-term health consequences. Further research is needed in this area in order to develop screening tools to assess individual astronaut sleep need in order to quantify the magnitude of sleep loss during spaceflight; current and planned efforts in BHP's research portfolio address this need. In addition, it is still unclear whether the conditions of spaceflight environment lead to sleep loss or whether other factors, such as work overload lead to the reduced sleep duration. Future data mining efforts and continued data collection on the ISS will help to further characterize factors contributing to sleep loss. Sleep inertia has not been evaluated during spaceflight. Ground-based studies confirm that it takes two to four hours to achieve optimal performance after waking from a sleep episode. Sleep inertia has been associated with increased accidents and reduced performance in operational environments. Sleep inertia poses considerable risk during spaceflight when emergency situations necessitate that crewmembers wake from sleep and make quick decisions. A recently completed BHP investigation assesses the effects of sleep inertia upon abrupt awakening, with and without hypnotics currently used in spaceflight; results from this investigation will help to inform strategies relative to sleep inertia effects on performance. Circadian desynchrony has been observed during spaceflight. Circadian desynchrony during spaceflight develops due to schedule constraints requiring non-24 operations or 'slam-shifts' and due to insufficient or mis-timed light exposure. In addition, circadian misalignment has been associated with reduced sleep duration and increased medication use. In ground-based studies, circadian desynchrony has been associated with significant performance impairment and increased risk of accidents when operations coincide with the circadian nadir. There is a great deal of information available on how to manage circadian misalignment, however, there are currently no easily collected biomarkers that can be used during spaceflight to determine circadian phase. Current research efforts are addressing this gap. Work overload has been documented during current spaceflight operations. NASA has established work hour guidelines that limit shift duration, however, schedule creep, where duty requirements necessitate working beyond scheduled work hours, has been reported. This observation warrants the documentation of actual work hours in order to improve planning and in order to ensure that astronauts receive adequate down time. In addition to concerns about work overload, ground based evidence suggests that work underload may be a concern during deep space missions, where torpor may develop and physically demanding workload will be exchanged for monitoring of autonomous systems. Given that increased automation is anticipated for exploration vehicles, fatigue effects in the context of such systems needs to be further understood. Performance metrics are needed to evaluate fitness-for-duty during spaceflight. Although ground-based evidence supports the notion that sleep loss, circadian desynchronization and work overload lead to performance impairment, inconsistency in the measures used to evaluate performance during spaceflight make it difficult to evaluate the magnitude of performance impairment during spaceflight. Work is underway to standardize measures of performance evaluation during spaceflight. Once established, such performance indicators need to be correlated with operational performance. Individual differences in sleep need and circadian preference, phase shifting ability and period have been documented in ground-based studies. Individual differences in response to sleep loss and circadian misalignment have also been documented and are presumed to be associated with genetic polymorphisms. No studies have systematically reported individual differences in sleep or circadian-related outcomes during spaceflight. More work is needed in this area in order to identify genetic or phenotypic biomarkers that predict resilience or vulnerability to sleep loss in order to personalize countermeasure strategies and mitigate performance impairment during spaceflight. Two laboratory and field investigations specific to this topic are currently ongoing; additional efforts, including an effort to mine existing biological data from spaceflight relative to sleep and circadian outcomes, are planned. Sex differences in sleep need and circadian period and phase have been reported in ground-based studies. The impact of these sex differences on performance is unclear. Sex differences in sleep need and circadian rhythms have not been systematically studied during spaceflight, presumably due to the small number of women that have flown in space. More research is needed in this area to evaluate whether any of the observed sex differences in physiology lead to altered performance in spaceflight and on the ground.

Flynn-Evans, Erin↗

Ice Melt, Sea Level Rise and Superstorms: Evidence from Paleoclimate Data, Climate Modeling, and Modern Observations that 2C Global Warming Could Be Dangerous

We use numerical climate simulations, paleoclimate data, and modern observations to study the effect of growing ice melt from Antarctica and Greenland. Meltwater tends to stabilize the ocean column, inducing amplifying feedbacks that increase subsurface ocean warming and ice shelf melting. Cold meltwater and induced dynamical effects cause ocean surface cooling in the Southern Ocean and North Atlantic, thus increasing Earth's energy imbalance and heat flux into most of the global ocean's surface. Southern Ocean surface cooling, while lower latitudes are warming, increases precipitation on the Southern Ocean, increasing ocean stratification, slowing deepwater formation, and increasing ice sheet mass loss. These feedbacks make ice sheets in contact with the ocean vulnerable to accelerating disintegration. We hypothesize that ice mass loss from the most vulnerable ice, sufficient to raise sea level several meters, is better approximated as exponential than by a more linear response. Doubling times of 10, 20 or 40 years yield multi-meter sea level rise in about 50, 100 or 200 years. Recent ice melt doubling times are near the lower end of the 10-40-year range, but the record is too short to confirm the nature of the response. The feedbacks, including subsurface ocean warming, help explain paleoclimate data and point to a dominant Southern Ocean role in controlling atmospheric CO2, which in turn exercised tight control on global temperature and sea level. The millennial (500-2000-year) timescale of deep-ocean ventilation affects the timescale for natural CO2 change and thus the timescale for paleo-global climate, ice sheet, and sea level changes, but this paleo-millennial timescale should not be misinterpreted as the timescale for ice sheet response to a rapid, large, human-made climate forcing. These climate feedbacks aid interpretation of events late in the prior interglacial, when sea level rose to C6-9m with evidence of extreme storms while Earth was less than 1 C warmer than today. Ice melt cooling of the North Atlantic and Southern oceans increases atmospheric temperature gradients, eddy kinetic energy and baroclinicity, thus driving more powerful storms. The modeling, paleoclimate evidence, and ongoing observations together imply that 2 C global warming above the preindustrial level could be dangerous. Continued high fossil fuel emissions this century are predicted to yield (1) cooling of the Southern Ocean, especially in the Western Hemisphere; (2) slowing of the Southern Ocean overturning circulation, warming of the ice shelves, and growing ice sheet mass loss; (3) slowdown and eventual shutdown of the Atlantic overturning circulation with cooling of the North Atlantic region; (4) increasingly powerful storms; and (5) nonlinearly growing sea level rise, reaching several meters over a timescale of 50-150 years. These predictions, especially the cooling in the Southern Ocean and North Atlantic with markedly reduced warming or even cooling in Europe, differ fundamentally from existing climate change assessments. We discuss observations and modeling studies needed to refute or clarify these assertions.

Computer simulation↗

Climate Science for Decision-Making in the New York Metropolitan Region

New York City is one of the world's most vulnerable cities to coastal flooding, due to a high concentration of population and assets near a coastline exposed to warm-season tropical storms and cold -season Nor'easter storms. Among U.S. cities, New York City is second only to New Orleans in population living less than 4 ft above the local high tide. By the 2050s, average annual losses due to coastal flooding alone could exceed $2 billion for the combined New York City-Newark region. Perhaps the most iconic example of a vulnerable New York City asset is the financial district located at the southern tip of Manhattan, however low-lying coastal assets include the full complement of major highways, subways and tunnels, hospitals, schools, wastewater treatment plants, food distribution centers, and people's homes. Given the magnitude of the assets at risk, a compelling case can be made that long-term adaptation makes economic sense for New York City. Given New York's access to economic, human, and technological resources for resilience measures, the City may be able to achieve this resilience. The city's political environment-New York City is a place where climate science is generally not a partisan issue-and the city's experience with uncertainty and overall risk framing (e.g., financing of bond issues for multi-billion dollar infrastructure with multidecade expected lifetimes), encourage climate risk framing.

Horton, Radley↗

Terrestrial Sources of X-Ray Radiation and Their Effects on NASA Flight Hardware

X-rays are an energetic and penetrating form of ionizing electromagnetic radiation, which can degrade NASA flight hardware. The main concern posed by such radiation is degradation of active electronic devices and, in some cases, diodes. Non-electronic components are only damaged at doses that far exceed the point where any electronic device would be destroyed. For the purposes of this document, flight hardware can be taken to mean an entire instrument, the flight electronics within the instrument or the individual microelectronic devices in the flight electronics. This document will discuss and describe the ways in which NASA flight hardware might be exposed to x-rays, what is and isn't a concern, and how to tell the difference. First, we must understand what components in flight hardware may be vulnerable to degradation or failure as a result of being exposed to ionizing radiation, such as x-rays. As stated above, bulk materials (structural metals, plastics, etc.) are generally only affected by ionizing radiation at very high dose levels. Likewise, passive electronic components (e.g. resistors, capacitors, most diodes) are strongly resistant to exposure to x-rays, except at very high doses. The main concerns arise when active components, that is, components like discrete transistors and microelectronic devices, are exposed to ionizing radiation. Active components are designed to respond to minute changes in currents and voltages in the circuit. As such, it is not surprising that exposure to ionizing radiation, which creates ionized and therefore electrically active particles, may degrade the way the hardware performs. For the most part, the mechanism for this degradation is trapping of the charges generated by ionizing radiation by defects in dielectric materials in the hardware. As such, the degree of damage is a function of both the quantity of ionizing radiation exposure and the physical characteristics of the hardware itself. The metric that describes the level of exposure to ionizing radiation is total ionizing dose (TID). The unit of TID is the rad, which is defined as 100 ergs absorbed per gram of material. Dose can be expressed in other units, for example grays (gy), where 1 gy = 100 rads. The actual fluence of radiation needed to deliver a rad depends on the absorbing material, so units of dose are usually stated in reference to the material of interest. That is, for microelectronic devices, the unit of dose is generally rad (Si) or rad (SiO2). However, the definition of absorbed dose in this fashion has the advantage that the type of radiation causing the ionization can be normalized so that a realistic and adequate comparison can be made. The sensitivity of microelectronic parts to TID varies over many orders of magnitude. (Note: Doses to humans are typically expressed in rems-or roentgen-equivalent-man-which measures tissue damage, and depends on the type of radiation, as well as the dose in rads.) Thus far, the "softest" parts tested at NASA showed damage at 500 rads (Si), while parts that are radiation-hardened by design can remain functional to doses on the order of 107 rads (Si). This broad range of sensitivity highlights one of the most important considerations when considering the effects of radiation on electronic parts: In order to determine whether a radiation exposure is a concern for a particular part, one must understand the technologies used in the part and their vulnerabilities to TID damage. A NASA radiation expert should be consulted to obtain such information.

X-ray↗

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification & Validation (IV&V) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASAs Office of Safety and Mission Assurance (OSMA) defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domain/component, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IV&V enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

IV&V↗

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification Validation (IVV) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASA's Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domaincomponent, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IVV enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

Fault management↗

Coping with Higher Sea Levels and Increased Coastal Flooding in New York City

The 837 km New York City shoreline is lined by significant economic assets and dense population vulnerable to sea level rise and coastal flooding. After Hurricane Sandy in 2012, New York City developed a comprehensive plan to mitigate future climate risks, drawing upon the scientific expertise of the New York City Panel on Climate Change (NPCC), a special advisory group comprised of university and private-sector experts. This paper highlights current NPCC findings regarding sea level rise and coastal flooding, with some of the City's ongoing and planned responses. Twentieth century sea level rise in New York City (2.8 cm/decade) exceeded the global average (1.7 cm/decade), underscoring the enhanced regional risk to coastal hazards. NPCC (2015) projects future sea level rise at the Battery of 28 - 53 cm by the 2050s and 46 - 99 cm by the 2080s, relative to 2000 - 2004 (mid-range, 25th - 75th percentile). High-end SLR estimates (90th percentile) reach 76 cm by the 2050s, and 1.9 m by 2100. Combining these projections with updated FEMA flood return period curves, assuming static flood dynamics and storm behavior, flood heights for the 100-year storm (excluding waves) attain 3.9-4.5 m (mid-range), relative to the NAVD88 tidal datum, and 4.9 m (high end) by the 2080s, up from 3.4 m in the 2000s. Flood heights with a 1% annual chance of occurrence in the 2000s increase to 2.0 - 5.4% (mid-range) and 12.7% per year (high-end), by the 2080s. Guided by NPCC (2013, 2015) findings, New York City has embarked on a suite of initiatives to strengthen coastal defenses, employing various approaches tailored to specific neighborhood needs. NPCC continues its collaboration with the city to investigate vulnerability to extreme climate events, including heat waves, inland floods and coastal storms. Current research entails higher-resolution neighborhood-level coastal flood mapping, changes in storm characteristics, surge height interactions with sea level rise, and stronger engagement with stakeholders and community-based organizations.

Coastal flooding↗

NASA Earth Observations Informing Energy Management Decision Making

The Energy Sector is experiencing increasing impacts from severe weather and shifting climatic trends, as well as facing a changing political climate, adding uncertainty for stakeholders as they make short- and long-term planning investments. Climate changes such as prolonged extreme heat and drought (leading to wildfire spread, for example), sea level rise, and extreme storms are changing the ways that utilities operate. Energy infrastructure located in coastal or flood-prone areas faces inundation risks, such as damage to energy facilities. The use of renewable energy resources is increasing, requiring more information about their intermittency and spatial patterns. In light of these challenges, public and private stakeholders have collaborated to identify potential data sources, tools, and programmatic ideas. For example, utilities across the country are using cutting-edge technology and data to plan for and adapt to these changes. In the Federal Government, NASA has invested in preliminary work to identify needs and opportunities for satellite data in energy sector application, and the Department of Energy has similarly brought together stakeholders to understand the landscape of climate vulnerability and resilience for utilities and others. However, have these efforts improved community-scale resilience and adaptation efforts? Further, some communities are more vulnerable to climate change and infrastructure impacts than others. This session has two goals. First, panelists seek to share existing and ongoing efforts related to energy management. Second, the session seeks to engage with attendees via group knowledge exchange to connect national energy management efforts to local practice for increased community resilience.

Eckman, Richard↗