Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “hazard models”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14

The Range Safety Debris Catalog Analysis in Preparation for the Pad Abort One Flight Test

The Pad Abort One flight test of the Orion Abort Flight Test Program is currently under development with the goal of demonstrating the capability of the Launch Abort System. In the event of a launch failure, this system will propel the Crew Exploration Vehicle to safety. An essential component of this flight test is range safety, which ensures the security of range assets and personnel. A debris catalog analysis was done as part of a range safety data package delivered to the White Sands Missile Range in New Mexico where the test will be conducted. The analysis discusses the consequences of an overpressurization of the Abort Motor. The resulting structural failure was assumed to create a debris field of vehicle fragments that could potentially pose a hazard to the range. A statistical model was used to assemble the debris catalog of potential propellant fragments. Then, a thermodynamic, energy balance model was applied to the system in order to determine the imparted velocity to these propellant fragments. This analysis was conducted at four points along the flight trajectory to better understand the failure consequences over the entire flight. The methods used to perform this analysis are outlined in detail and the corresponding results are presented and discussed.

Kutty, Prasad M.↗

Large Solar-Rejection Filter

NASA utilized Image Intensified Video Cameras for ATV data acquisition from a jet flying at 12.8 km. Afterwards the video was digitized and then analyzed with a modified commercial software package, Image Systems Trackeye. Astrometric results were limited by saturation, plate scale, and imposed linear plate solution based on field reference stars. Time-dependent fragment angular trajectories, velocities, accelerations, and luminosities were derived in each video segment. It was evident that individual fragments behave differently. Photometric accuracy was insufficient to confidently assess correlations between luminosity and fragment spatial behavior (velocity, deceleration). Use of high resolution digital video cameras in future should remedy this shortcoming. A scenically accurate description of matter interpreted as a substance made up of corpuscular constituents was established during the course of the 19th century. In this description, atoms--the building blocks of the matter--form molecules. The properties of the molecules were described by chemistry or thermodynamics depending on what characteristics of the matter were investigated. In both theories, the molecules can dissociate to atoms when the kinetic energies of the atoms exceed the strength of the chemical bonds. The number of atoms is always preserved in a closed system. This is not true, however, when the matter takes up much higher energies at relativistic scales. New particles can be produced at the expense of the kinetic energy. The number of particles is no longer preserved. There are other conserved quantities, however, these quantities, the charge, baryon number, lepton number, are associated with particles that are considered elementary today. The properties and behavior of these elementary particles is the subject of Particle Physics or High Energy Physics. Practice Page: A crewmember touching a positively charged surface was thought to be galvanically isolated from the vehicle ground analogous to a bird on a high voltage power wire. Recent analysis confirms that positive floating potentials, ionospheric currents to the EVA suit, can be hazardous. The analysis is wrong in that the ionospheric plasma itself can close the circuit. Parametric analysis of very low voltage exposures (2 to 15 volts) could cause pain and/or involuntary muscle tetani or spinal cord shock. NASA worked with the Naval Health Research Center Detachment Directed Energy Bioeffects Laboratory to examine the affects electrical hazards could have on extravehicular activity using two models. The results of the two computational models were combined to predict areas of the body in which neurons of different diameters would be excited. They predicted that physiologically active current could be conducted across the crew member causing catastrophic hazards. Future work to analyze additional current paths was proposed. The FUSE spectrum of BB Dor, observed in a high state, is modeled with an accretion disk with a very low inclination (possibly lower than 10 degrees). Assuming an average WD mass of 0.8 solar mass leads to a distance of the order of approximately 650pc, consistent with the extremely low galactic reddening in its direction, and a mass accretion rate of 10 (exp -9) solar mass a year. The spectrum presents some broad and deep silicon and sulfur absorption lines, indicating that these elements are over-abundant: silicon is 3 times solar, and sulfur is 20 times solar. The FUSE spectrum of BB Dor, observed in a high state, is modeled with an accretion disk with a very low inclination (possibly lower than 10 degrees). Assuming an average WD mass of 0.8 solar mass leads to a distance of the order of approximately 650pc, consistent with the extremely low galactic reddening in its direction, and a mass accretion rate of 10 (exp -9) solar mass a year. The spectrum presents some broad and deep silicon and sulfur absorption lines, indicating that these elements are over-abundant: silicon is times solar, and sulfur is 20 times solar. From its previously observed optical emission lines, P831-57 (WD 0334 6400 or Ret 1 in A Catalog and Atlas of Cataclysmic Variables: Living Edition) has been suspected to contain an accretion disk associated with a companion star in orbit around a subdwarf star with a temperature T is greater than 21,000K. P831-57 has therefore been classified as a nova-like. However, our present observations show it to be a DA + dMe binary. The analysis of its Far Ultraviolet Spectroscopic Explorer (FUSE) spectrum (continuum and lines) reveal an average mass white dwarf (Log(g) approximately equals 7.8 plus or minus 0.1)with a temperature T approximately equals 37,000 plus or minus 500K, an extremely low projected rotational velocity, and a distance of about 115 plus or minus 5pc. The photosphere contains C, N, Si, and S (at about 1% of solar abundances). The dMe star is seen as a flux excess in near-infrared photometry and appears to show occasional flaring of about one magnitude as seen in the Harvard plates. There is no evidence of periodic variability in the spectroscopic or photometric data. We find no evidence of a an accretion disk, instead we find evidence of wind accretion as the stellar carbon abundance (N(C)/N(H) = 2.5 x 10 (exp -6) is about ten times larger than predicted by radiative levitation for such a gravity and temperature. The power needs and solutions for the space exploration and lunar mobility program are discussed. Long term missions in space and on the lunar surface require high energy batteries. Rechargeable batteries for mobility systems and portable utility pallet are needed for successful exploration missions. Nanomaterial usage increases the energy density of the cells apart from increasing the power density. The symptoms and threats from acute mountain sickness (AMS) are discussed. The underlying assumptions concerning spacecraft atmosphere mean there is a potential risk to astronauts. The baseline worst case scenario is about 25% based on direct ascent to 8.0 psia with 32% O2. The practical mitigation approach is a staged depressurization scheme. Due to the uncertainty about potential AMS risk the flight surgeon should prepare, focused research should proceed, and current analytical efforts should continue. This slide presentation reviews the threat astronauts face from acute mountain sickness (AMS). The incidence of AMS is highly variable and the risk to astronauts is unclear. However, the potential risk is higher than current EAAs suggest and precautions should be implemented. Due to the uncertain nature of the risk flight surgeons should prepare, and focused research should proceed. Quasiparticle tunneling can be understood at low temperatures using a non-equilibrium kinetic theory. Low-temperature tunneling can be suppressed using existing techniques: island-lead gap engineering, lead cooling with SIN junctions, and quasiparticle traps. The slide presentation reviews the science goals and mission planning for the proposed Jupiter System Observer (JSO). The spacecraft would accommodate 9 instruments making the instrument payload more capable than any previously flown to Jupiter. The would-be mission includes study programs for Jupiter's satellites, interior, magnetosphere and atmosphere. The power needs and solutions for the space exploration and lunar mobility program are discussed. Long term missions in space and on the lunar surface require high energy batteries. Rechargeable batteries for mobility systems and portable utility pallet are needed for successful exploration missions. Nanomaterial usage increases the energy density of the cells apart from increasing the power density. This slide presentation reviews the power requirements for the space exploration and the lunar surface mobility programs. It includes information about the specifications for high energy batteries and the power requirements for lunar rovers,

Roberts, William↗

Assessing the Effect of Spaceflight on the Propensity for Astronauts to Develop Disk Herniation

BACKGROUND: A previous study [1] reported that the instantaneous risk of developing a Herniated Nucleus Pulposus (HNP) was higher in astronauts who had flown at least one mission, as compared with those in the corps who had not yet flown. However, the study only analyzed time to HNP after the first mission (if any) and did not account for the possible effects of multiple missions. While many HNP's occurred well into astronauts' careers or in some cases years after retirement, the higher incidence of HNPs relatively soon after completion of space missions appears to indicate that spaceflight may lead to an increased risk of HNP. The purpose of this study was to support the Human System Risk Board assessment of back pain, evaluate the risk of injury due to dynamic loads, and update the previous dataset which contained events up to December 31, 2006. METHODS: Data was queried from the electronic medical record and provided by the Lifetime Surveillance of Astronaut Health. The data included all 330 United States astronauts from 1959 through February 2014. Cases were confirmed by Magnetic Resonance Imaging, Computerized Tomography, Myelography, operative findings, or through clinical confirmation with a neurologist or neurosurgeon. In this analysis, astronauts who had an HNP at selection into the corps or had an HNP diagnosis prior to their first flight were excluded. The statistical challenges in using the available data to separate effects of spaceflight from those associated with general astronaut training and lifestyle on propensity to develop HNPs are many. The primary outcome is reported date of first HNP (if any), which at best is only an approximation to the actual time of occurrence. To properly analyze this data with a survival analysis model, one must also know the "exposure" time - i.e. how long each astronaut has been at risk for developing an HNP. If an HNP is reported soon after a mission, is it mission caused or general? If the former, exposure time should be counted from the time of landing (assuming the risk of HNP occurring during a mission is zero). If the latter, exposure time should be counted from the time of selection; however we can't directly know which one to use. In our analysis we take both of these possibilities into account with a competing risks model, wherein two distinct stochastic processes are going on: TG = time to HNP (general) and TS = time to HNP (spaceflight). Under this type of model, whichever of these occurs first is what we observe; in other words we don't observe TG or TS, only min(TG, TS). Here, we parameterized the model in terms of separate Weibull hazard functions for each process and estimated all parameters using maximum likelihood. In addition, we allowed for a "cured fraction" - i.e. the possibility that some astronauts may never develop an HNP. RESULTS: Results will include a depiction of the competing hazard functions as well as a probability curve for the relative likelihood that an HNP reported at a given time after a mission is actually mission caused. Other factors, such as dwell time in microgravity and vehicle landing environment will be explored. An overall assessment as to whether spaceflight truly exacerbates HNP risk will be made.

Feiveson, A. H.↗

Maturation of the Asteroid Threat Assessment Project

As described at IPPW 12 [1], NASA initiated a new research activity focused on Planetary Defense (PD) on October 1, 2014. The overarching function of the Asteroid Threat Assessment Project (ATAP) is to provide capabilities to assess impact damage of any Near-Earth Object (NEO) that could inflict on the Earth. The activity includes four interrelated efforts: Initial Conditions (at the atmospheric entry interface); Entry Modeling (energy deposition in the atmosphere); Hazards (on the surface including winds, over pressures, thermal exposures, craters, tsunami and earthquakes) and Risk (physics-based). This paper outlines progress by ATAP and highlights achievements that are complimentary to activities of interest to the International Planetary Probe community. The ATAPs work is sponsored by NASAs Planetary Defense Coordination Office (PDCO), a part of the agency's Science Mission Directorate [1] Arnold, J. O., et. al., Overview of a New NASA Activity Focused on Planetary Defense, IPPW 12 Cologne Germany, June 15-19. 2015.

Entry and Breakup↗

New Global Characterization of Landslide Exposure

Landslides triggered by intense rainfall are hazards that impact people and infrastructure across the world, but comprehensively quantifying exposure to these hazards remains challenging. Unlike earthquakes or flooding which cover large areas, landslides occur only in highly susceptible parts of a landscape affected by intense rainfall, which may not intersect human settlement or infrastructure. Existing datasets of landslides around the world generally include only those reported to have caused impacts, leading to significant biases toward areas with higher reporting capacity, limiting how our understanding of exposure to landslides in developing countries. In this study, we use an alternative approach to estimate exposure to landslides in a homogenous fashion. We have combined a global landslide hazard proxy derived from satellite data with open-source datasets on population, roads and infrastructure to consistently estimate exposure to rapid landslide hazards around the globe. These exposure models compare favorably with existing datasets of rainfall-triggered landslide fatalities, while filling in major gaps in inventory-based estimates in parts of the world with lower reporting capacity. Our findings provide a global estimate of exposure to landslides from 2001-2019 that we suggest may be useful to disaster mitigation professionals.

earthquakes↗

Defining and Reasoning about Model-based Safety Analysis: A Review

Model-based safety analysis (MBSA) has been around for over two decades. The benefits of MBSA have been well-documented in the literature, such as tackling complexity, introducing Formal Methods to eliminate the ambiguity in the traditional safety analysis, using automation to replace the error-prone manual safety modeling process, and ensuring consistency between the design model and the safety model. However, there is still a lack of consensus on what MBSA even is. This paper provides an approach towards developing such a consensus

model-based↗

Rainfall-induced Landslide Inventories for Lower Mekong Based on Planet Imagery and a Semi-Automatic Mapping Method

Fatal landslides occur every year during the rainy season (June–November) in the Lower Mekong Region (LMR). There is an urgent need to develop a landslide early warning system in the LMR. In collaboration with the Asian Disasters Preparedness Center and NASA’s SERVIR Programme, we are regionalizing the global Landslide Hazard Assessment System for Situational Awareness model for the LMR (LHASA-Mekong). A robust set of landslide inventories are needed to effectively train the machine learning-based LHASA-Mekong model. In this study, the Semi-Automatic Landslide Detection (SALaD) system was modified by incorporating a change detection module (SALaD-CD) to produce rainfall event-based landslide inventories using pre- and post-imagery from RapidEye and PlanetScope for various locations in the LMR that were identified based on media and government reports. These rainfall-induced landslides are published as initiation points for ease of use. In total, we created 22 inventories: 2 in Laos, 4 in Myanmar, 1 in Thailand and 15 in Vietnam. These inventories are being used to train the LHASA-Mekong model and quantify the effects of Land use/Land cover change on landslide susceptibility. These open data will be a valuable resource for advancing landslide studies in this region.

Pukar Amatya↗

Human System Risk Communication: Directed Acyclic Graphs

- The Human System Risk Board (HSRB) is responsible for the management of a portfolio of 30 human system risks that NASA tracks and configuration manages to mitigate for future crewed exploration missions. - The HSRB has been exploring the concept of causal diagrams (in the form of Directed Acyclic Graphs or DAGs) as an approach to creating knowledge graphs for each risk to enable shared mental models of causal flow from spaceflight hazards to mission outcomes among HSRB Stakeholders. - These diagrams are intended to improve insight and communication of risk across the myriad subject matter experts and management interested in human system risk reduction. This includes program managers, systems engineers, and operators in addition to the Human Health and Performance Directorate. - The DAG project was intended to create the foundation for composition of the 30 baselined DAGs into a single risk network and software is being developed in parallel to enable this forward work.

directed acrylic graph↗

Toward The Development of Hailstorm Climatologies Derived From Reanalyses and Infared/Passive Microwave Satellite Imagers

Geostationary satellite imagers, such as those of the Geostationary Operational Environmental Satellite (GOES) and Meteosat series, provide both historical and near-real-time observations of cloud top patterns that are commonly associated with severe convection. Environmental conditions favorable for severe weather are thought to be represented well by reanalyses. Predicting exactly where convection and costly storm hazards like hail will occur using models or satellite imagery alone, however, is extremely challenging. The multivariate combination of satellite-observed cloud patterns with reanalysis environmental parameters, linked to United States Next Generation Weather Radar- (NEXRAD-) estimated Maximum Expected Size of Hail (MESH) using a deep neural network (DNN), enables estimation of potentially severe hail likelihood for any observed storm cell. These estimates are specifically designed to make hail likelihood distinctions based on satellite-indicated points of deep convection within environments favorable for storm development. We seek an approach that can be used to estimate climatological hailstorm frequency and risk throughout the historical satellite data record. This presentation demonstrates that statistical distributions of convective parameters from satellite and reanalysis show separation between non-severe/severe hailstorm classes for predictors including overshooting cloud top temperature and area characteristics, convective available potential energy, vertical wind shear, 500 hPa temperature, mid-level lapse rate, precipitable water, and convective inhibition. These complex, multivariate predictor relationships are exploited within a DNN to produce a hail likelihood metric with a critical success index of 0.504 and Heidke skill score of 0.403, which is exceptional among recent analogous hail studies. Furthermore, applications of the DNN to select case studies demonstrate good qualitative agreement between hail likelihood and MESH. These hail classifications are aggregated across an 11-year GOES-12/13 image database to derive a hail frequency and severity climatology, which denotes the Central Plains, the Midwest, and northwestern Mexico as being the most hail-prone regions within the domain studied. Opportunities for training and applying DNN-based hailstorm predictions to recently developed GOES-8/10/12/13/16 and Meteosat Second Generation convective storm detection and characterization climatologies over South America and South Africa, respectively, will also be presented.

Kristopher Bedka↗

Do Better Satellite Precipitation Algorithms Improve Landslide Hazard Assessment?

Satellites make it possible to estimate precipitation in near real time. Given the challenges of achieving global coverage by other means, these data are used widely. However, few systems for landslide hazard assessment rely on satellite precipitation estimates. This could be due in part to perceptions of accuracy, although latency, spatial resolution, and other factors may also be important. We test whether recent changes to data streams from the Global Precipitation Measurement mission (GPM) have improved its potential for use in landslide prediction. Specifically, we examine data produced by the Integrated Multi-satellitERetrievals for the GPM (IMERG) algorithm, which was upgraded to version 7 this year. IMERG relies upon other algorithms, including the Goddard Profiling Algorithm (GPROF) and the GPM Combined Radar-Radiometer Algorithm (CORRA). Many changes have been made during the switch from IMERG version 6 to version 7. These include upgrading CORRA and GPROF to version 7, to improve the accuracy of precipitation in frozen, mountainous, and coastal areas. The measured intensity of some storms has been enhanced with a new algorithm, the Scheme for Histogram Adjustment with Ranked Precipitation Estimates in the Neighborhood. Combined with many others, these changes to IMERG should improve its utility for landslide hazard assessment in a variety of contexts. To test this idea, we retrain the global Landslide Hazard Assessment for Situational Awareness (LHASA) model twice—first with data from IMERG version 6B and second with 7B. Since current daily rainfall is the most important variable in determining outcomes predicted by LHASA, it should reflect changes made to that input. First, we grid the landslides at a daily, thirty-arcsecond resolution. This serves as the response variable. At each of these sites current and antecedent rainfall are extracted, along with antecedent snow mass and soil moisture, slope, and PGA. In addition, one million grid cells are selected at random points to represent conditions under which landslides (probably) do not occur. After merging these data, we hold back 20% of the dataset for validation purposes and train a machine-learning model with the rest. We assess both the model’s overall ability to identify landslides and its ability to predict specific large landslide disasters.

Thomas A Stanley↗

The Critical Role of the Routing Scheme in Simulating Peak River Discharge in Global Hydrological Models

Global hydrological models (GHMs) have been applied to assess global flood hazards, but their capacity to capture the timing and amplitude of peak river discharge which is crucial in flood simulations has traditionally not been the focus of examination. Here we evaluate to what degree the choice of river routing scheme affects simulations of peak discharge and may help to provide better agreement with observations. To this end we use runoff and discharge simulations of nine GHMs forced by observational climate data (1971-2010) within the ISIMIP2a (Inter-Sectoral Impact Model Intercomparison Project phase 2a) project. The runoff simulations were used as input for the global river routing model CaMa-Flood (Catchment-based Macro-scale Floodplain). The simulated daily discharge was compared to the discharge generated by each GHM using its native river routing scheme. For each GHM both versions of simulated discharge were compared to monthly and daily discharge observations from 1701 GRDC (Global Runoff Data Centre) stations as a benchmark. CaMa-Flood routing shows a general reduction of peak river discharge and a delay of about two to three weeks in its occurrence, likely induced by the buffering capacity of floodplain reservoirs. For a majority of river basins, discharge produced by CaMa-Flood resulted in a better agreement with observations. In particular, maximum daily discharge was adjusted, with a multi-model averaged reduction in bias over about two-thirds of the analysed basin area. The increase in agreement was obtained in both managed and near-natural basins. Overall, this study demonstrates the importance of routing scheme choice in peak discharge simulation, where CaMa-Flood routing accounts for floodplain storage and backwater effects that are not represented in most GHMs. Our study provides important hints that an explicit parameterisation of these processes may be essential in future impact studies.

peak river discharge↗

Processing LiDAR Data to Predict Natural Hazards

ELF-Base and ELF-Hazards (wherein 'ELF' signifies 'Extract LiDAR Features' and 'LiDAR' signifies 'light detection and ranging') are developmental software modules for processing remote-sensing LiDAR data to identify past natural hazards (principally, landslides) and predict future ones. ELF-Base processes raw LiDAR data, including LiDAR intensity data that are often ignored in other software, to create digital terrain models (DTMs) and digital feature models (DFMs) with sub-meter accuracy. ELF-Hazards fuses raw LiDAR data, data from multispectral and hyperspectral optical images, and DTMs and DFMs generated by ELF-Base to generate hazard risk maps. Advanced algorithms in these software modules include line-enhancement and edge-detection algorithms, surface-characterization algorithms, and algorithms that implement innovative data-fusion techniques. The line-extraction and edge-detection algorithms enable users to locate such features as faults and landslide headwall scarps. Also implemented in this software are improved methodologies for identification and mapping of past landslide events by use of (1) accurate, ELF-derived surface characterizations and (2) three LiDAR/optical-data-fusion techniques: post-classification data fusion, maximum-likelihood estimation modeling, and hierarchical within-class discrimination. This software is expected to enable faster, more accurate forecasting of natural hazards than has previously been possible.

Fairweather, Ian↗

Flight Guidance System Requirements Specification

This report describes a requirements specification written in the RSML-e language for the mode logic of a Flight Guidance System of a typical regional jet aircraft. This model was created as one of the first steps in a five-year project sponsored by the NASA Langley Research Center, Rockwell Collins Inc., and the Critical Systems Research Group of the University of Minnesota to develop new methods and tools to improve the safety of avionics designs. This model will be used to demonstrate the application of a variety of methods and techniques, including safety analysis of system and subsystem requirements, verification of key properties using theorem provers and model checkers, identification of potential sources mode confusion in system designs, partitioning of applications based on the criticality of system hazards, and autogeneration of avionics quality code. While this model is representative of the mode logic of a typical regional jet aircraft, it does not describe an actual or planned product. Several aspects of a full Flight Guidance System, such as recovery from failed sensors, have been omitted, and no claims are made regarding the accuracy or completeness of this specification.

Miller, Steven P.↗

System Safety Analysis of Complex NASA Systems with Model-Based Engineering (REV B)

The emergence of model-based engineering is transforming design and analysis methodologies. A recognized benefit of model-based engineering is the existence of a “single source of truth” about the system that becomes the authoritative source of data and information for designers, analysts, and developers. This promotes consistency and efficiency as the design emerges and can be used to further optimize the design. Integrating System Safety Engineers to the “single source of truth” will ensure that the outputs of their assessments and analyses are relevant to the design as it evolves. Use of an integrated system model enables near immediate evaluation of a design change as well as development of operational processes for risk assessment and communication. Such models can enable efficient and timely analysis of system hazards (e.g., hazard fault tree analysis and procedure simulations) and produce complete, accurate, and more consistent products (e.g., hazard reports and safety requirement evaluations). Therefore, an agency-sponsored team at Goddard Space Flight Center (GSFC) recently completed a System Safety Study of modeling and testing capabilities as part of a Model-Based Safety and Mission Assurance Initiative (MBSMAI). Using an existing model developed for reliability analyses, GSFC modeling and system safety experts performed system safety analysis/modeling and produced safety products. The team evaluated model-based feasibility to support System Safety Engineering, developed safety analysis modeling processes, and identified tool capability advancement/development needs. These study results indicate model-based engineering is valid and useable for System Safety Engineering for NASA if adequate modeling processes and environment are established.

NASA↗

Supporting Hazard Analysis for Wildfire Response Using fmdtools and MIKA

The System Wide Safety (SWS) Safety Demonstrator (SD) Series drives development of an increasingly capable In-Time Aviation Safety Management System (IASMS) focusing on humanitarian applications, starting with wildfire response (SD-1). The goals of this report are to (1) provide an early hazard analysis and mitigation evaluation of wildfire response to support these efforts and (2) provide a demonstration of capabilities of the Fault Model Design Tools (fmdtools) and Manager for Intelligent Knowledge Access (MIKA) tools. fmdtools provides a modeling, simulation, and resiliency analysis framework in which a wildfire response model, the System Modeling and Analysis of Resiliency in Scalable Traffic Management for Emergency Response Operations (SMARt-STEReO), is built. MIKA is an intelligent knowledge manager with several capabilities, including assisting in hazard analysis by extracting and analyzing hazards from historical incident reports. The following topics are covered in the report: Understanding Wildfire Hazard Dynamics. We provide a description and simulated examples of how hazards occur in the SMARt-STEReO model of wildfire response and their effect on its outcome. This provides a common mental model and focuses the analysis presented in the remainder of the report. Wildfire Hazard Identification. MIKA identifies wildfire hazards from three relevant datasets: the ICS-209-PLUS, SAFECOM, and SAFENET. Hazards are manually organized into a taxonomy and MIKA analyzes each hazard’s effects, likelihood, severity, and risk. Evaluating Mitigation Strategies. The SMARt-STEReO wildfire response model built in fmdtools evaluates a subset of identified hazards. Specifically, we simulate the effect of communications faults and equipment faults on operator safety, the effect of changing winds and flammability, and a scenario with multiple ignition points and heavy smoke. Tool Limitations and Usage Considerations. We provide a discussion of appropriate tool use cases as well as limitations and considerations for usage. The tool findings are used to synthesize recommendations for wildfire response operations, which can be captured as part of an IASMS. Key recommendations are as follows: Hazards are identified from a broad spectrum of sources including aircraft subsystems, operational sources, and ground crew operations. Highest risk operational environment hazards identified are Evacuations. The highest risk manned aerial operations hazard categorized is Jumper Operations Mishap. Ground crew hazards that are highest risk are Burns, Cargo Operations Overhead, Dehydration, Entrapment, Falling Objects, Heart Attacks, Heat Exhaustion, Inadequate Training or Certification, Vehicle Breakdown, and Vehicle Collision. Modelled containment failures arise from a mismatch between the difficulty of the firefighting scenario and the capacity (e.g., speed, effectiveness, awareness) of the response. In firefighting scenarios where containment is possible (e.g., because the fire does not spread too quickly), these mismatches can occur because of a change in environmental conditions (e.g., wind, flammability, etc) or because of planning, equipment, or communications faults. Improvements to communications increase the capacity of the firefighting response by reducing the time needed to respond to the fire. While surveillance does not increase this capacity by itself, it increases operator safety by increasing state awareness, enabling firefighters to evade approaching fires. Increasing both has a synergistic effect. In general, these performance and resilience increases generalize over fault scenarios as well as unforeseen changes to circumstances (i.e., wind, aridity, etc.). However, these improvements need to be designed so as not to make the system prone to persistent large-scale communications outages, which can reduce performance.

Hazard analysis↗

FUELEAP Model-Based System Safety Analysis

NASA researchers, in a partnership with Boeing, are investigating a fuel-cell powered variant of the X-57 “Maxwell” Mod-II electric propulsion aircraft, which is itself derived from a stock Tecnam P2006T. The “Fostering Ultra-Efficient Low-Emitting Aviation Power” (FUELEAP) project will replace the X-57 power subsystem with a hybrid Solid-Oxide Fuel Cell (SOFC) system to increase the potential range of the electric-propulsion aircraft while dramatically improving efficiency and emissions over stock internal-combustion engines. Our FUELEAP safety analysis faces two primary challenges. First, the Part 23 certificated Tecnam P2006T is undergoing significant modifications to host the hybrid electric-propulsion system, and the challenge is to assure that the safety inherent in the stock aircraft (and subsequently in X-57 Mod-II) is not compromised by changes in avionics, aircraft structural loading, weight and balance, or other considerations. Secondly, because the SOFC power system has little (if any) relevant in-service precedent, our challenge is to assure that we identify and mitigate all reasonably plausible hazards introduced by unique FUELEAP equipage. We are investigating and utilizing Model-Based Safety Analysis (MBSA) methods to help us address these FUELEAP safety challenges. We captured aircraft-level system hazard conditions using instances of a SysML hazard block via aircraft-level Functional Hazard Analysis (FHA). Then, using SysML models of the FUELEAP architecture, we related the hazard conditions to initiating system events and possible mitigations, such as design architecture modifications or operational constraints. We are continuing to define our approach to MBSA by developing a component-by-component inventory of local failure modes and tracing their possible contribution to hazard conditions. Finally, we are applying an argument-based approach to FUELEAP assurance. Through a FUELEAP “safety case,” we are providing an explicit argument for FUELEAP safety by associating assurance evidence with overarching safety claims through a structured argument.

Woodham, Kurt P.↗

Integration of Weather Avoidance and Traffic Separation

This paper describes a dynamic convective weather avoidance concept that compensates for weather motion uncertainties; the integration of this weather avoidance concept into a prototype 4-D trajectory-based Airborne Separation Assurance System (ASAS) application; and test results from a batch (non-piloted) simulation of the integrated application with high traffic densities and a dynamic convective weather model. The weather model can simulate a number of pseudo-random hazardous weather patterns, such as slow- or fast-moving cells and opening or closing weather gaps, and also allows for modeling of onboard weather radar limitations in range and azimuth. The weather avoidance concept employs nested "core" and "avoid" polygons around convective weather cells, and the simulations assess the effectiveness of various avoid polygon sizes in the presence of different weather patterns, using traffic scenarios representing approximately two times the current traffic density in en-route airspace. Results from the simulation experiment show that the weather avoidance concept is effective over a wide range of weather patterns and cell speeds. Avoid polygons that are only 2-3 miles larger than their core polygons are sufficient to account for weather uncertainties in almost all cases, and traffic separation performance does not appear to degrade with the addition of weather polygon avoidance. Additional "lessons learned" from the batch simulation study are discussed in the paper, along with insights for improving the weather avoidance concept. Introduction

Consiglio, Maria C.↗

Bundle Data Approach at GES DISC Targeting Natural Hazards

Severe natural phenomena such as hurricane, volcano, blizzard, flood and drought have the potential to cause immeasurable property damages, great socioeconomic impact, and tragic loss of human life. From searching to assessing the Big, i.e., massive and heterogeneous scientific data (particularly, satellite and model products) in order to investigate those natural hazards, it has, however, become a daunting task for Earth scientists and applications researchers, especially during recent decades. The NASA Goddard Earth Sciences Data and Information Service Center (GES DISC) has served Big Earth science data, and the pertinent valuable information and services to the aforementioned users of diverse communities for years. In order to help and guide our users to online readily (i.e., with a minimum effort) acquire their requested data from our enormous resource at GES DISC for studying their targeted hazard event, we have thus initiated a Bundle Data approach in 2014, first targeting the hurricane event topic. We have recently worked on new topics such as volcano and blizzard. The bundle data of a specific hazard event is basically a sophisticated integrated data package consisting of a series of proper datasets containing a group of relevant (knowledge--based) data variables readily accessible to users via a system-prearranged table linking those data variables to the proper datasets (URLs). This online approach has been developed by utilizing a few existing data services such as Mirador as search engine; Giovanni for visualization; and OPeNDAP for data access, etc. The online Data Cookbook site at GES DISC is the current host for the bundle data. We are now also planning on developing an Automated Virtual Collection Framework that shall eventually accommodate the bundle data, as well as further improve our management in Big Data.

GES DISC↗