Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “risk informed design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Regulatory Treatment of Low Frequency External Events under a Risk-Informed Performance-Based Licensing Pathway

Significant efforts are underway to develop and implement a risk-informed performance-based licensing framework for advanced reactors built on the establishment of an affirmative safety case. Such approaches offer the benefits of increased flexibility regarding key design and licensing decisions based on a detailed assessment and understanding of plant risk. These methods include the comprehensive analysis of scenarios that have historically been addressed through conservative and deterministic licensing analysis approaches, such as the evaluation of event sequences at frequencies of occurrence beyond the design basis. While the detailed analysis of low frequency events provides insights that can help justify alternative treatments to past conservatism, the findings are dependent on the quality and confidence associated with the analyses. The assessment of external hazards presents a unique challenge, as their potential frequency of occurrence, especially of large magnitude events, is inherently uncertain given the long return periods in question. The current project seeks to further explore the regulatory treatment of low frequency external events as part of a risk-informed performance-based framework. The goals are to identify the benefits and challenges of such approaches for advanced reactor vendors and to aid in the development of consistent and appropriate methodologies. As part of this effort, the current report summarizes initial project findings, with a focus on the evaluation of the seismic hazard. This includes an exploration of the implementation of a risk-informed performance-based approach through an example analysis. Based on the identified challenges associated with the probabilistic treatment of low frequency event sequences, additional performance-based methods were explored as complementary tools for demonstrating regulatory compliance. The report highlights key challenges and opportunities associated with the methods and outlines recommendations and future activities to assist with their implementation.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Structures, Systems, and Components Classification Criteria for the Versatile Test Reactor

The Versatile Test Reactor (VTR) is a fast spectrum test reactor currently being developed in the United States under the direction of the US Department of Energy (DOE), Office of Nuclear Energy. The VTR mission is to enable accelerated testing of advanced reactor fuels and materials required for advanced reactor technologies. The conceptual design of the 300 MWth sodium-cooled metallic-fueled pool-type fast reactor has been led by the U.S. National Laboratories in collaboration with General Electric-Hitachi and Bechtel National Inc. As part of the VTR authorization process by the DOE, it is necessary to identify the safety classification of structures, systems, and components (SSCs) to determine the proper design, surveillance, operation, and incident-reporting requirements. Since VTR is utilizing a risk-informed, performance-based authorization process based on the Licensing Modernization Project (LMP) described in NEI 18-04 [1], the criteria for SSC classification, which are reviewed here, includes both risk information from the probabilistic risk assessment (PRA) and prescriptive requirements.

Grabaskas, David↗

Review and Assessment of Available Data Regarding the Behavior of Sodium Aerosols

Recently, there has been a resurgence of interest in advanced (non-light water) reactor designs, including sodium fast reactors (SFRs). In parallel, multiple efforts are underway to develop risk informed, performance-based licensing pathways for advanced reactors. However, such licensing approaches depend on the accuracy of the associated safety assessments, including mechanistic source term (MST) analyses. Unlike historical source term assessments, which utilizes bounding estimates of radionuclide release, MSTs attempt to realistically estimate the transport and retention of radionuclides for specific transient scenarios. For SFR MST analyses, the behavior of radionuclide aerosols is a key factor, as noted in recent studies. Due to the use of sodium as the primary coolant, many potential transient scenarios involve the release of radionuclide aerosols in conjunction with sodium aerosols. For such scenarios, sodium may be the dominant aerosol species, compared to that of released radionuclides. Therefore, understanding the behavior of sodium aerosols is particularly important to an accurate assessment of aerosol transport. Although many approaches to aerosol modeling exist, it is vital to establish their capabilities in evaluating sodium aerosol behavior for SFR analyses.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASA Overview

This viewgraph presentation provides information on computer programs for the application of probabilistics in aerospace design. The presentation defines risk, and lists probabilistic tools which can take risk into account. It then lists current and future examples of NASA aerospace technology program support which utilize probabilistic methods. Current examples include turbofan engines, combustor liners, life estimation, the analysis of rotors and blades, and shuttle ground operations. The 2nd Generation Reusable Launch Vehicle is one of the future areas of support. The presentation also suggests other future uses of probabilistic tools in aerospace design, and optimal methods for their implementation.

Rusick, Jeff↗

Assessment of Mars Phoenix EDL Performance

Entry, Descent, and Landing (EDL) is an especially risky phase of a planetary mission, and detailed information on the performance of a lander's EDL design is critical to mitigating the risks of future missions. 12However, the study of actual EDL performance and comparison with the pre-entry predictions has not typically been given a high priority following spacecraft landings, mainly for budgetary reasons. Because Mars Phoenix inherited hardware and design elements from a similar mission that appears to have failed during Mars EDL, NASA was particularly interested in identifying the reasons for the Phoenix mission success. Therefore, NASA sponsored a reconstruction and analysis of the downlinked Phoenix telemetry that would tell the story of this critical event sequence--focusing on the 14 minutes from cruise stage separation to landing--and identify lessons learned.

Mars Phoenix↗

Strata-1: An International Space Station Experiment into Fundamental Regolith Processes in Microgravity

The Strata-1 experiment will study the evolution of asteroidal regolith through long-duration exposure of simulant materials to the microgravity environment on the International Space Station (ISS). Many asteroids feature low bulk densities, which implies high values of porosity and a mechanical structure composed of loosely bound particles, (i.e. the "rubble pile" model), a prime example of a granular medium. Even the higher-density, mechanically coherent asteroids feature a significant surface layer of loose regolith. These bodies are subjected to a variety of forces and will evolve in response to very small perturbations such as micrometeoroid impacts, planetary flybys, and the YORP effect. Our understanding of this dynamical evolution and the inter-particle forces involved would benefit from long-term observations of granular materials exposed to small vibrations in microgravity. A detailed understanding of asteroid mechanical evolution is needed in order to predict the surface characteristics of as-of-yet unvisited bodies, to understand the larger context of samples collected by missions such as OSIRIS-REx and Hayabusa 1 and 2, and to mitigate risks for both manned and unmanned missions to asteroidal bodies. Understanding regolith dynamics will inform designs of how to land and set anchors, safely sample/move material on asteroidal surfaces, process large volumes of material for in situ resource utilization (ISRU) purposes, and, in general, predict behavior of large and small particles on disturbed asteroid surfaces.

Fries, M.↗

Cyber-Informed Engineering for Design and Operations

Pursuant to the National Cyber-Informed Engineering (CIE) Strategy published in 2022, INL is leading the development of philosophy and practices to identify and mitigate the inherent risks of digital technology by including cybersecurity as a core element of engineering risk management. This presentation will provide an overview of why we need CIE and what it is, a discussion of the major implications of CIE for electric power systems design and operations, and an update on significant milestones and resources from the CIE program.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Evaluation of Joint Cyber/Safety Risk in Nuclear Power Systems

This report presents an analysis of the Emergency Core Cooling System (ECCS) for a generic Boiling Water Reactor (BWR)-4 NPP. The Electric Power Research Institute (EPRI) developed Hazards and Consequences Analysis for Digital Systems (HAZCADS) process is applied to the ECCS and its subsystems to identify unsafe control actions (UCAs) which act as possible cyber events of concern. The analysis is performed for two design basis events: Small-break Loss of Coolant Accident (SLOCA) and general transients (TRANS), such as unintended reactor trip. In previous work, HAZCADS UCAs were combined with other cyber-attack analysis to develop a risk-informed approach; however, this was for a single system. This report explores advanced systems engineering modeling approaches to model the interactions between digital assets across multiple systems which may be targeted by cyber adversaries. The complex and interdependent design of digital systems has the potential to introduce emergent cyber properties that are generally not covered by hazard analyses nor formal nuclear Probabilistic Risk Assessment (PRA). The R&D and supporting analysis presented here explores approaches to predict and manage how interdependent system properties effect risk. To show the potential impact of a successful cyber-attack to formal PRA event tree probabilities, HAZCADS analysis was also used. HAZCADS was also used to model the automatic depressurization system (ADS) automatic actuation. This analysis extended to an integrated system analysis for common-cause failure (CCF). In this aspect, the HAZCADS analysis continued by analyzing plant design details for system connectivity in support of critical plant functions. A dependency matrix was developed to depict the integrated functionality of the interconnected systems. Areas of potential CCF are indicated. Future work could include adversary attack development to show how CCF could be caused, resulting in PRA events. Across the multiple systems that comprise the ECCS, the analysis shows that the change in such probabilities was very different between systems. This indicates that some systems have a larger potential risk impact from successful cyber-attack or digital failure, which indicates a need for these systems to have a higher priority for design and defensive measures. Furthermore, we were able to establish that a risk analysis using any arbitrary threat model establishes an ordering of components with regard to cyber-risk. This ordering can be used to influence the overall system design with an eye to lowering risk, or as a way to understand real-time risk to operational systems based on a current threat landscape. Expert knowledge of both the analysis process and the system being analyzed is required to perform a HAZCADS analysis. The need for a tiered risk analysis is demonstrated by the results of this report.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Geometry and gravity influences on strength capability

Strength, defined as the capability of an individual to produce an external force, is one of the most important determining characteristics of human performance. Knowledge of strength capabilities of a group of individuals can be applied to designing equipment and workplaces, planning procedures and tasks, and training individuals. In the manned space program, with the high risk and cost associated with spaceflight, information pertaining to human performance is important to ensuring mission success and safety. Knowledge of individual's strength capabilities in weightlessness is of interest within many areas of NASA, including workplace design, tool development, and mission planning. The weightless environment of space places the human body in a completely different context. Astronauts perform a variety of manual tasks while in orbit. Their ability to perform these tasks is partly determined by their strength capability as demanded by that particular task. Thus, an important step in task planning, development, and evaluation is to determine the ability of the humans performing it. This can be accomplished by utilizing quantitative techniques to develop a database of human strength capabilities in weightlessness. Furthermore, if strength characteristics are known, equipment and tools can be built to optimize the operators' performance. This study examined strength in performing a simple task, specifically, using a tool to apply a torque to a fixture.

Poliner, Jeffrey↗

Derivation of the Most Influential Medical Conditions for An Extended Duration Artemis Mission

BACKGROUND: The risk of loss of mission due to medical conditions may be influenced by loss of crew life (LOCL), need for evacuation (RTDC; return to definitive care), and crew task time lost. Predicting what medical conditions are most likely to lead to crew morbidity and mortality may influence medical system design, clinical capability prioritization, and research strategies. NASA’s Informing Mission Planning via Analysis of Complex Tradespaces tool (IMPACT) applies Probabilistic Risk Assessment (PRA) methodology to assess these risks. OVERVIEW: A team of subject matter experts (SME) from a variety of medical disciplines developed a consensus-based process to determine 120 of the most clinically relevant medical conditions for long-duration exploration missions (LDEMs) . This IMPACT Condition List (ICL) expanded upon previous work done for Integrated Medical Model (IMM). For each condition a best-case and worst-case definition were derived. These definitions were used to identify probability of occurrence, proportion of cases that are best case vs. worst case, clinical phase duration, and risk of outcomes (task time loss [TTL], RTDC, and LOCL) for both treated and untreated states. These data were sources from existing spaceflight databases (e.g. Longitudinal Survey of Astronaut Health), relevant models (e.g. the ISS fire model), and/or terrestrial literature. Each condition was then tied to diagnostic and therapeutic resources and capabilities. IMPACT was then run for the LDLOLS DRM (see Abstract #2 for this panel). DISCUSSION: This abstract will present the process for generating the IMPACT condition list, the relevant data for each clinical condition, and present results for the ten most influential conditions impacting LOCL, RTDC, and TTL for a representative extended duration Artemis mission.

A Nelson↗

Risk Informed, Performance-Based, Technology-Inclusive Regulatory Infrastructure: Technology-Inclusive Determination of Mechanistic Source Terms for Offsite Dose-Related Assessments for Advanced Nuclear Reactor Facilities

This report summarizes a risk informed, performance-based and technology-inclusive approach to determine source terms for dose related assessments at advanced nuclear facilities. This approach uses a graded process which allows both the non-mechanistic source terms calculation methods, which adopt conservative approaches and assumptions based on known physical and chemical principles, and more importantly the mechanistic source term calculation methods, which consider design-specific scenarios and use best estimate models with uncertainty quantification for a range of licensing basis events (LBEs), to be used for the design and licensing of advanced nuclear technologies. The source terms developed with this graded approach, and radionuclide inventories elsewhere in the facility that are determined during source term analysis, can be used to address licensing issues to support the application processes of 10 CFR Part 50 for a construction permit and operating license or 10 CFR Part 52 for a Combined Operating License (COL), Standard Design Certification, Early Site Permit, Standard Design Approval or Manufacturing License. They can also be used for other purposes including equipment environmental qualification, control room habitability analyses, and assessments of severe accident risks in environmental impact statements. There are many advanced reactor concepts being developed including high temperature gas-cooled reactor (HGTR), sodium-cooled fast reactor (SFR), lead-cooled fast reactor (LFR), molten salt reactor (MSR), micro-reactor, etc. The graded approach presented in this report for source terms determination is, to the extent possible, generic to any of these reactor designs and to future reactor designs. This report provides information on the review of the regulatory foundation for use of conservative bounding source terms as well as event-specific mechanistic source terms for advanced nuclear reactor designs.

07 ISOTOPE AND RADIATION SOURCES↗

Observing fish interactions with marine energy turbines using acoustic cameras

Abstract Marine current energy converters such as tidal and riverine turbines have the potential to provide reliable, clean power. The risk of collision of fishes with marine energy turbines is not yet well understood, in part due to the challenges associated with observing fish at turbine sites. Turbidity and light availability can limit the effectiveness of optical sensors like video cameras, motivating the use of acoustic cameras for this task. However, challenges persist in collecting and interpreting data acquired from acoustic cameras. Given the limited number of turbine deployments to date, it is prudent to draw on the application of acoustic cameras to monitor fish in other scenarios. This article synthesizes their use for other fisheries applications to inform best practices and set realistic expectations for the results of acoustic camera monitoring at turbine sites. We discuss six key tasks performed with acoustic cameras: detecting objects, identifying objects as fish, counting fish, measuring fish, classifying fish taxonomically and analysing fish behavior. Specific challenges to monitoring fish at turbine sites are discussed. This article is intended to serve as a reference for researchers, regulators and marine energy developers on effective use of acoustic cameras to monitor fish at turbine sites. The studies detailed in this article provide evidence that, in some scenarios, acoustic cameras can be used to inform the risk of fish collision with marine energy turbines but doing so requires careful study design and data processing.

Cotter, Emma↗

Digital Engineering and Cybersecurity Decision Analysis in Early Phases of SMR-Driven IES Projects

Considerable efforts are underway to ensure cybersecurity is integrated into the systems engineering lifecycle. Cyber-informed engineering and security-by-design frameworks are intended to identify and engineer out cybersecurity risks throughout the lifecycle. While these approaches are valuable for promoting the need to include cybersecurity considerations in early design phases to create more secure systems, they may not consider the entirety of digital risks. Digital risks in a digital instrumentation and control system include adversarial and unintentional risks from internal and external factors, such as human performance errors, design flaws, environmental conditions, and equipment degradation or failure. This report provides a detailed discussion on digital risk prior to describing the background and concept of operations for a small modular reactor-driven integrated energy system connected to industrial applications. The challenges of competing objectives and competing stakeholder requirements are discussed and the impacts on digital engineering, security considerations, and interdependencies are evaluated for mission-level, facility-level, and system-level decisions.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Exploration Medical Capability Medical Scenarios

Medical systems supporting exploration class missions to cislunar space, the lunar surface, and the vicinity of Mars require an evolution in medical capability beyond that available for today’s low Earth orbit centric paradigm. Progress in developing more capable medical systems will be driven by the requirements of prolonged mission duration, increasing distance from Earth, and the realities of orbital mechanics, all necessitating a concomitant need for progressively Earth independent medical decision-making capabilities. These medical systems (which include the crewmembers) are expected to be capable of evaluating, diagnosing, treating and managing a defined list of medical conditions as well as addressing unanticipated medical conditions that may arise. The prioritized medical capabilities and associated resources needed to treat these medical conditions and support anticipated inflight medical events provide robust content that informs system designers and allows for a more complete evaluation of both medical and overall mission risk. Communication of these medical capabilities to system, vehicle, and mission designers can be enhanced using scenarios that characterize the system’s operations. Carefully considered scenarios provide the context needed to explore expected human and system interfaces, roles of ground and inflight crew (including periods of interrupted or delayed communications), identify training needs, assess data needs, etc. Mission-based scenario content varies dependent upon the needs, medical capabilities, conditions and context they are intended to illustrate. This document explicitly seeks to capture and codify those scenarios that have been useful to the Exploration Medical Capability Element of the Human Research Program in defining the enhanced medical systems required for future space exploration. It is expected that this document will continue to evolve through the refinement and characterization of current and future scenarios, respectively, as our knowledge grows, and requirements increasingly focus on Earth independent spaceflight operations.

Derek M Nusbaum↗

Advanced Transmission Technologies –GETs and HPCs Session 3: HPCs and Building Actions Plans to Digital Assurance Risks

The third session of the Idaho National Laboratory’s (INL) Technical Assistance for Digital Assurance (TADA) program, held on November 11, 2025, centered on High Performance Conductors (HPCs) and the formulation of action plans to address digital assurance risks associated with Grid-Enhancing Technologies (GETs). This session convened experts from utilities, vendors, and government agencies to examine the technical, operational, and cybersecurity aspects of HPC deployment. Discussions highlighted the benefits of HPCs, such as their ability to rapidly increase transmission capacity using existing corridors, improve grid resilience, reduce system losses, and align with FERC Orders 2023 and 1920. Participants evaluated supply chain and digital assurance risks, including reliance on imported materials, limited domestic manufacturing capacity, workforce shortages, and traceability issues. The session also emphasized the importance of digital trust, integration-layer cybersecurity, and unified risk frameworks, introducing tools like intrusion detection systems, encryption, zero trust networking, and firmware integrity. Recaps of earlier workshops on Dynamic Line Ratings (DLRs), Advanced Power Flow Control (APFC), and Transmission Topology Optimization (TTO) underscored institutional barriers and integration challenges. Action plans were proposed to mitigate issues such as inconsistent cybersecurity practices, SBOM usage, supply chain visibility, operator trust, and misaligned incentives. Additionally, INL presented its supply chain risk management tools and Cyber-Informed Engineering (CIE) principles to support secure procurement and system design. The session concluded with a commitment to share key takeaways, incorporate cohort feedback into future policy development, and continue collaborative engagement through upcoming pilot activities. Session 3 of 3.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

Risk-informed Graded Approach for Reliability and Performance Assessment for Advanced Condition Monitoring Techniques

With the shift away from time-based maintenance and toward condition-based maintenance, and to reduce overall maintenance costs, there has been an upsurge in the usage and development of advanced condition monitoring (ACM) techniques for real-time monitoring of nuclear power plant (NPP) components. ACM is particularly useful in the development of digital twins, which are designed to predict the failure or degradation of plant components. Successful implementation of ACM requires an assessment to inform the development of a risk-informed approach to evaluate the use of ACM to meet Nuclear Regulatory Committee (NRC) regulations for in-service testing (IST) programs. This includes the monitoring and diagnostics of reactor components and systems in current, new, and advanced reactors. A key component in ACM is the usage of machine learning (ML) and artificial intelligence (AI) algorithms that can employ real-time data from instrumentation and sensors to detect and predict reactor component degradations. Such predictive capabilities enable early detection of component degradation so as to help plant personnel plan and execute necessary maintenance. For successful implementation of ML/AI in ACM such that regulatory requirements are met, a risk-informed graded approach is needed to assess the reliability and performance of ML/AI for ACM. The American Society for Mechanical Engineers (ASME) developed their Operations and Maintenance (O&M) Code to provide guidance on safe, reliable O&M of NPPs. The IST section of the O&M Code specifically establishes requirements for IST and examination to gauge operational readiness of components in water-cooled NPPs. This paper presents a state-of-the-art review of how reliability and risk assessment can be integrated with ACM to assess component performance by non-nuclear industries. This is followed by different methodologies and approaches for conducting performance and reliability assessments so as to meet IST requirements for NPP components.

99 - GENERAL AND MISCELLANEOUS↗

Obtaining Valid Safety Data for Software Safety Measurement and Process Improvement

We report on a preliminary case study to examine software safety risk in the early design phase of the NASA Constellation spaceflight program. Our goal is to provide NASA quality assurance managers with information regarding the ongoing state of software safety across the program. We examined 154 hazard reports created during the preliminary design phase of three major flight hardware systems within the Constellation program. Our purpose was two-fold: 1) to quantify the relative importance of software with respect to system safety; and 2) to identify potential risks due to incorrect application of the safety process, deficiencies in the safety process, or the lack of a defined process. One early outcome of this work was to show that there are structural deficiencies in collecting valid safety data that make software safety different from hardware safety. In our conclusions we present some of these deficiencies.

Basili, Victor r.↗

Risk-informed Graded Approach for Reliability and Performance Assessment of Machine Learning and Artificial Intelligence for Advanced Condition Monitoring Techniques

With the shift away from time-based maintenance and toward condition-based maintenance, and to reduce overall maintenance costs, there has been an upsurge in the usage and development of advanced condition monitoring (ACM) techniques for real-time monitoring of nuclear power plant (NPP) components. ACM is particularly useful in the development of digital twins, which are designed to predict the failure or degradation of plant components. Successful implementation of ACM requires an assessment to inform the development of a risk-informed approach to evaluate the use of ACM to meet Nuclear Regulatory Committee (NRC) regulations for in-service testing (IST) programs. This includes the monitoring and diagnostics of reactor components and systems in current, new, and advanced reactors. A key component in ACM is the usage of machine learning (ML) and artificial intelligence (AI) algorithms that can employ real-time data from instrumentation and sensors to detect and predict reactor component degradations. Such predictive capabilities enable early detection of component degradation so as to help plant personnel plan and execute necessary maintenance. For successful implementation of ML/AI in ACM such that regulatory requirements are met, a risk-informed graded approach is needed to assess the reliability and performance of ML/AI for ACM. The American Society for Mechanical Engineers (ASME) developed their Operations and Maintenance (O&M) Code to provide guidance on safe, reliable O&M of NPPs. The IST section of the O&M Code specifically establishes requirements for IST and examination to gauge operational readiness of components in water-cooled NPPs. This paper presents a state-of-the-art review of how reliability and risk assessment can be integrated with ACM to assess component performance by non-nuclear industries. This is followed by different methodologies and approaches for conducting performance and reliability assessments so as to meet IST requirements for NPP components.

97 - MATHEMATICS AND COMPUTING↗