Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “risk informed design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14

Risk-informed Graded Approach for Reliability and Performance Assessment of Machine Learning and Artificial Intelligence for Advanced Condition Monitoring Techniques

With the shift away from time-based maintenance and toward condition-based maintenance, and to reduce overall maintenance costs, there has been an upsurge in the usage and development of advanced condition monitoring (ACM) techniques for real-time monitoring of nuclear power plant (NPP) components. ACM is particularly useful in the development of digital twins, which are designed to predict the failure or degradation of plant components. Successful implementation of ACM requires an assessment to inform the development of a risk-informed approach to evaluate the use of ACM to meet Nuclear Regulatory Committee (NRC) regulations for in-service testing (IST) programs. This includes the monitoring and diagnostics of reactor components and systems in current, new, and advanced reactors. A key component in ACM is the usage of machine learning (ML) and artificial intelligence (AI) algorithms that can employ real-time data from instrumentation and sensors to detect and predict reactor component degradations. Such predictive capabilities enable early detection of component degradation so as to help plant personnel plan and execute necessary maintenance. For successful implementation of ML/AI in ACM such that regulatory requirements are met, a risk-informed graded approach is needed to assess the reliability and performance of ML/AI for ACM. The American Society for Mechanical Engineers (ASME) developed their Operations and Maintenance (O&M) Code to provide guidance on safe, reliable O&M of NPPs. The IST section of the O&M Code specifically establishes requirements for IST and examination to gauge operational readiness of components in water-cooled NPPs. This paper presents a state-of-the-art review of how reliability and risk assessment can be integrated with ACM to assess component performance by non-nuclear industries. This is followed by different methodologies and approaches for conducting performance and reliability assessments so as to meet IST requirements for NPP components.

97 - MATHEMATICS AND COMPUTING↗

Modular Open System Architecture for Reducing Contamination Risk in the Space and Missile Defense Supply Chain

To combat contamination of physical assets and provide reliable data to decision makers in the space and missile defense community, a modular open system architecture for creation of contamination models and standards is proposed. Predictive tools for quantifying the effects of contamination can be calibrated from NASA data of long-term orbiting assets. This data can then be extrapolated to missile defense predictive models. By utilizing a modular open system architecture, sensitive data can be de-coupled and protected while benefitting from open source data of calibrated models. This system architecture will include modules that will allow the designer to trade the effects of baseline performance against the lifecycle degradation due to contamination while modeling the lifecycle costs of alternative designs. In this way, each member of the supply chain becomes an informed and active participant in managing contamination risk early in the system lifecycle.

Seasly, Elaine↗

Overview of NASA's Solar Electric Propulsion Project

NASA is continuing to develop and qualify a state of the art 13 kW-class Advanced Electric Propulsion System (AEPS) for NASA exploration missions through a contract with Aerojet Rocketdyne (AR). An objective of the AEPS project is accelerate the adoption of high power electric propulsion technologies by reducing the risk and uncertainty of integrating Solar Electric Propulsion (SEP) technologies into space flight systems. NASA and AR have recently initiated testing of engineering hardware including the Hall Current Thruster (HCT), Power Processing Unit (PPU), and Xenon Flow Controller (XFC) at both the component and system levels. The successful completion of these tests will provide the required information to advance the AEPS system towards Critical Design Review. In support of the AEPS contract, NASA and JPL have been performing risk reduction activities to address specific concerns of this higher power Hall thruster propulsion system. These risk reduction activities have included long duration wear testing of the Technology Demonstration Unit (TDU) Hall thruster and cathode hardware, thermal cycling of TDU cathode heaters and coils, plasma plume measurements, and performed early circuit testing of the AEPS PPU design. In addition to the propulsion system development, the SEP project is developing the Plasma Diagnostic Package (PDP) and the SEP Testbed. The PDP is designed for use in conjunction with a high-powered electric propulsion (EP) system to characterize in-space operation. The SEP Testbed system is being developed to demonstrate integrated SEP system performance. The paper presents an overview of the NASA and the AEPS contract activities and a summary of the associated NASA in-house activities.

Plasma diagnostics package↗

Numerical Prediction of Heat Transfer Coefficients during Xenon Tank Fill in Microgravity

NASA’s Gateway will serve as an orbital outpost to enable sustained human lunar exploration and facilitate access to destinations beyond the Moon. To maintain sustainable deep space missions, on-orbit propellant transfer and refueling must be realized. One of Gateway’s critical components, the Power and Propulsion Element (PPE), will use solar electric propulsion to perform attitude control maneuvers and orbit transfers. Xenon will be used as the propellant for the PPE and stored in a composite overwrapped pressure vessel (COPV). During the propellant refueling process, xenon will compress causing the fluid and tank walls to warm. There is concern that the bond between the tank liner and composite may degrade at elevated temperatures, along with the possibility of the tank exceeding design pressure. While on-orbit testing is being proposed, numerical models are being used to predict the thermal response and reduce risk during a refueling operation in microgravity where natural convection is diminished. Accurate numerical models may be used to inform decisions for follow-on testing, or design and operation of refueling architectures. Challenges of modeling xenon tank fill in microgravity include non-ideal gas behavior, operating near the fluid’s critical point, and lack of experimental flight data. This study presents a computational fluid dynamics (CFD) model with conjugate heat transfer that is used to predict averaged heat transfer coefficients during tank filling. At the anticipated injection flow rates, the CFD results showed that forced convection dominates in microgravity. Initial results from a multi-node Thermal Desktop model that assumed a purely conducting fluid (Nu=1) over-predicted the CFD fluid temperature and pressure, while a similar model allowing for natural convection under-predicted. The heat transfer coefficients predicted by CFD were implemented into the multi-node model, and the COPV thermal response from the two computational approaches were compared with good agreement.

Heat Transfer↗

GEN3D Experimental and Numerical Development of GEN3 Durability Models

Understanding of the high temperature durability of particles and the materials that contain them is critical to next generation of concentrating solar power (CSP) technology. Here we studied the durability of particles and their containment materials under extreme UV cycling, thermal cycling, and in low-speed high temperature mechanical wear situations. The optical stability of seven candidate particles has been determined following exposure to the high temperature conditions present in a generation 3 particle-based CSP technology. Particle solar weighted absorptance and emittance measured periodically during 10,000 high solar irradiance exposure cycles and up to 400 hours of isothermal aging has been documented. The particle aging due to repeated exposure to concentrated solar flux represented the 30-year lifetime of a power plant. Models were fit to the absorptivity and emissivity data following the isothermal aging provides the projected optical degradation of the particles as a function of temperature. Mechanical wear was studied through the use of custom developed wear testing facilities for measuring high temperature impact wear, abrasion wear, and particle attrition. Additionally, a novel technique for measuring the high temperature mechanical properties of single particles was developed. Through these tests it was observed that high nickel alloys generally showed lower wear than comparable iron based steels, particularly at elevated temperatures of 800°C. Mechanical wear at these temperatures is a highly complex phenomenon combining both mechanical wear and oxidation. Additionally, the containment materials wear rates are influenced by the particles (both hardness and roundness), making the wear mechanisms complex. The initial wear test conducted in the abrasion test rig revealed a substantial amount of oxide materials in the particle bed after testing (in relative to later tests), and substantially more wear, likely indicating a need for concern in startup operation of particle facilities to not incur high wear from the presence of oxides. Particle attrition experiments have only been conducted for a single material but increase size distribution, reduction in circularity, and particle diameter is observed. Efforts to develop predictive models was limited due to a testing campaign that prioritized testing materials for particle pathway developers over building a comprehensive design of experiments. The results discussed in this report inform future CSP developers and researchers further de risking the technology and assisting in its future development. ParticleBased CSP development provides a path to dispatchable solar power generation with storage at a price competitive in the current energy market. Lowering the cost of CSP technology provides a carbon free power generation solution that can assist in the transition from fossil fuels to renewable sources of electricity.

14 SOLAR ENERGY↗

SOSAT: Geohazard Risk Assessment in Carbon Sequestration Operations

Like all operations in which fluids are injected into the subsurface, geologic carbon storage (GCS) presents inherit risks that must be assessed and mitigated to successfully deploy such technology in the field. For example, alterations to pore pressure and the stress state due to fluid injection may trigger certain geohazards, such as potential fault activation and induced seismicity or unintentional hydraulic fracturing. Here we present capabilities for assessing these potential risks using the State of Stress Analysis Tool (SOSAT): a Python library and web-based application capable of probabilistically estimating the subsurface state of stress informed by various field observations. Using posterior distributions of principal stress components, SOSAT can assess the risk of fault activation within the injection formation for either a critically oriented fault or a fault with a user-prescribed orientation. Additionally, SOSAT can estimate the probability of unintentional hydraulic fracturing of the intact reservoir rock. Here, we demonstrate these SOSAT capabilities using a hypothetical GCS site. This type of risk assessment can assist with the effective deployment of GCS technology in the field by informing safe design and management practices.

Haagenson, Ryan J.↗

Expansion of Hazards and Probabilistic Risk Assessments of a Light-Water Reactor Coupled with Electrolysis Hydrogen Production Plants

This report builds upon the body of work sponsored by the Department of Energy (DOE) Light-Water Reactor Sustainability (LWRS) Flexible Power Operation and Generation (FPOG) program that presented generic probabilistic risk assessments (PRAs) for the addition of a heat extraction system (HES) to light-water reactors to support the co-location of a high temperature hydrogen electrolysis facility (HTEF). Probabilistic and deterministic hazards assessments and risk analyses are leveraged throughout this report. Several improvements and new analyses are included in this report. First, higher amounts of detail in the specifications of the generic HTEFs are used to produce scaled results for a 100, 500, and 1000 MW nominal hydrogen production facility. An additional hazard assessment of 1000 kg of hydrogen storage is performed. The facility hazards and footprint are assessed to determine the safe distance required for placement near the nuclear power plant (NPP). Second, specific designs for corresponding HESs for the different levels of support required by the HTEFs are analyzed in the PRA model. Third, a hazards analysis of the specified HTEFs leads not only to effects of the quantified risk assessment for the NPP, but also qualitative hazards assessment for the community. Finally, a seismic analysis and a high winds analysis have each been added to the PRA. The results investigate the applicability of the potential licensing approaches which do not require a full United States (U.S.) Nuclear Regulatory Commission (NRC) licensing review. The PRAs are generic and include listed assumptions. The HTEF design built for this project has further eliminated many conservative assumptions from the prior PRAs in this series. The PRA results indicate that the 10 CFR 50.59 licensing approach is justified due to the minimal increase in initiating event frequencies for all design basis accidents, with none exceeding 7.7%. The PRA results for core damage frequency and large early release frequency support the use of NRC Regulation Guide 1.174 as further risk information that supports a change without a full licensing amendment review. The hazard analyses and PRA confirm the need for engineered blast barriers of storage tanks and the common production header leaving the HTEF. The hazards analyses and PRA also confirm with high confidence that using the assumptions of design in this report that the safety case for licensing an HES addition and an HTEF sited with its unprotected high-pressure stage components 187 meters from the NPP’s transmission towers (the most fragile structure, system, and component) is strong.

08 HYDROGEN↗

Long-Term Health Metric Development Effort

INTRODUCTION Probabilistic Risk Assessment (PRA) is a methodology applied when high-stakes decisions need to be made about complex systems. PRA often uses risk minimization to aid decision making, such as when establishing vehicle requirements or resource allocations. The NASA Human System Risk Board (HSRB) maintains the human spaceflight risk postures, many of which have in-mission medical outcomes, but the full risk set also includes performance and Long-Term Health (LTH) outcomes. An effort is underway to determine the dependencies between LTH risk outcomes and mission characteristics and to identify metrics for quantifying LTH outcomes. The LTH metrics will be incorporated into future PRA tools currently under development to support crew health and performance decision making. LONG-TERM HEALTH (LTH) RISK LTH risk encompasses the timeframe from immediately post-flight, through the rest of an astronaut’s career, through retirement, and until death. LTH outcomes include the time and interventions needed for the astronaut to return to preflight physiological states after experiencing spaceflight hazards and recovery from any in-mission medical events that persist into the post-flight timeframe. It includes chronic complications that may arise due to experiencing in-flight medical conditions or injuries and medical conditions that occur later in life with a higher probability of occurrence or with more severity because of their spaceflight exposure. Finally, LTH outcomes can also include a reduction in life expectancy due to spaceflight exposures. Eighteen of the HSRB risks contain an LTH component, each with a unique incidence rate and consequence severity. ON-GOING LTH METRIC DEVELOPMENT EFFORTS Based on guidance from a stakeholder workshop held on June 1, 2023, only LTH outcomes with causes tied to spaceflight experience that are significantly different from normal healthy aging and which can be affected by changes in in-mission resources are targeted for inclusion within the PRA modeling efforts. Current on-going efforts include a sensitivity analysis of potential in-flight medical conditions to determine which conditions may persist into post-flight and how the consequences may be affected by in-mission medical resources. Also underway is determination of differences in the time for a return to preflight physiological baselines when in-flight countermeasures are available versus when they are not. Analyses performed with publicly available astronaut data and collaborations with the Lifetime Surveillance of Astronaut Health team are being designed to understand which LTH outcomes differ significantly from natural healthy aging. Information exchanges are also occurring with LTH risk custodians to understand how they quantify outcomes. FUTURE PLANS Risk characteristics will be determined for each LTH risk that meets our inclusion criteria and the dependencies of their outcomes to in-mission resources and mission characteristics will be established. The individual risks will be integrated together into one or more high level LTH metrics for inclusion in the PRA tool, so that LTH risks can be considered along with in-mission risks during crew health and performance system decision support trade studies.

B. E. Lewandowski↗

New Approaches in Reusable Booster System Life Cycle Cost Modeling

This paper presents the results of a 2012 life cycle cost (LCC) study of hybrid Reusable Booster Systems (RBS) conducted by NASA Kennedy Space Center (KSC) and the Air Force Research Laboratory (AFRL). The work included the creation of a new cost estimating model and an LCC analysis, building on past work where applicable, but emphasizing the integration of new approaches in life cycle cost estimation. Specifically, the inclusion of industry processes/practices and indirect costs were a new and significant part of the analysis. The focus of LCC estimation has traditionally been from the perspective of technology, design characteristics, and related factors such as reliability. Technology has informed the cost related support to decision makers interested in risk and budget insight. This traditional emphasis on technology occurs even though it is well established that complex aerospace systems costs are mostly about indirect costs, with likely only partial influence in these indirect costs being due to the more visible technology products. Organizational considerations, processes/practices, and indirect costs are traditionally derived ("wrapped") only by relationship to tangible product characteristics. This traditional approach works well as long as it is understood that no significant changes, and by relation no significant improvements, are being pursued in the area of either the government acquisition or industry?s indirect costs. In this sense then, most launch systems cost models ignore most costs. The alternative was implemented in this LCC study, whereby the approach considered technology and process/practices in balance, with as much detail for one as the other. This RBS LCC study has avoided point-designs, for now, instead emphasizing exploring the trade-space of potential technology advances joined with potential process/practice advances. Given the range of decisions, and all their combinations, it was necessary to create a model of the original model and use genetic algorithms to explore results. A strong business case occurs when viable paths are identified for an affordable up-front investment, and these paths can credibly achieve affordable, responsive operations, characterized by smaller direct touch labor efforts at the wing level from flight to flight. The results supporting this approach, its potential, and its conclusions are presented here.

Zapata, Edgar↗

New Approaches in Reuseable Booster System Life Cycle Cost Modeling

This paper presents the results of a 2012 life cycle cost (LCC) study of hybrid Reusable Booster Systems (RBS) conducted by NASA Kennedy Space Center (KSC) and the Air Force Research Laboratory (AFRL). The work included the creation of a new cost estimating model and an LCC analysis, building on past work where applicable, but emphasizing the integration of new approaches in life cycle cost estimation. Specifically, the inclusion of industry processes/practices and indirect costs were a new and significant part of the analysis. The focus of LCC estimation has traditionally been from the perspective of technology, design characteristics, and related factors such as reliability. Technology has informed the cost related support to decision makers interested in risk and budget insight. This traditional emphasis on technology occurs even though it is well established that complex aerospace systems costs are mostly about indirect costs, with likely only partial influence in these indirect costs being due to the more visible technology products. Organizational considerations, processes/practices, and indirect costs are traditionally derived ("wrapped") only by relationship to tangible product characteristics. This traditional approach works well as long as it is understood that no significant changes, and by relation no significant improvements, are being pursued in the area of either the government acquisition or industry?s indirect costs. In this sense then, most launch systems cost models ignore most costs. The alternative was implemented in this LCC study, whereby the approach considered technology and process/practices in balance, with as much detail for one as the other. This RBS LCC study has avoided point-designs, for now, instead emphasizing exploring the trade-space of potential technology advances joined with potential process/practice advances. Given the range of decisions, and all their combinations, it was necessary to create a model of the original model and use genetic algorithms to explore results. A strong business case occurs when viable paths are identified for an affordable up-front investment, and these paths can credibly achieve affordable, responsive operations, characterized by smaller direct touch labor efforts at the wing level from flight to flight. The results supporting this approach, its potential, and its conclusions are presented here.

Zapata, Edgar↗

The Regulatory Treatment of Low Frequency External Events as Part of a Risk-Informed, Performance-Based Approach

To assist the developing advanced reactor industry in future licensing efforts, the U.S. Department of Energy Advanced Reactor Demonstration Program Regulatory Development area initiated a project at Argonne National Laboratory to examine the regulatory treatment of external hazards as part of a risk-informed performance-based (RIPB) licensing framework. A RIPB licensing framework for advanced reactors built on establishing an affirmative safety case offers the benefits of increased flexibility regarding key design and licensing decisions based on a detailed assessment and understanding of plant risk. Historically, reactor licensing addressed events of very low frequency primarily through the application of design margin and defense-in-depth philosophy. In contrast, RIPB approaches attempt to evaluate these scenarios at a level of detail commensurate with their risk, which often necessitates an explicit treatment of their frequency and associated consequence. While the detailed analysis of low frequency events provides insights that can help justify alternative treatments to past conservatism, the findings are dependent on the quality and confidence associated with the analyses. The assessment of external hazards presents a unique challenge, as their potential frequency of occurrence, especially of large magnitude events, is inherently uncertain given the long return periods in question. This project aims to identify the benefits and challenges of such approaches for advanced reactor vendors and aid in the development of consistent and appropriate analysis methodologies. The paper summarizes project findings and explores the application of various approaches for different external hazards. In addition, the current work also evaluates the application of the quantitative health objectives as a limit on external event risk, as they are a potential regulatory requirement under the current draft 10 CFR Part 53, which is a new technology-neutral reactor licensing pathway in the U.S.

Grabaskas, David↗

Validating the autonomous EO-1 science agent

This paper describes the validation process for the Autonomous Science Agent, a software agent that is currently flying onboard NASA EO-1 spacecraft. The agent autonomously collects, analyzes, and reacts to onboard science data. The Autonomous Science Agent has been designed using a layered architectural approach with specific redundant safeguards to reduce the risk of an agent malfunction to the EO-1 spacecraft. This safe design has been thoroughly validated by informal validation methods supplemented by sub-system and system-level testing. This paper describes the analysis used to define agent safety, elements of the design that increase the safety of the agent, and the process used to validate agent safety.

software↗

RNAV STAR Procedural Adherence

In this exploratory archival study we mined the performance of 24 major US airports area navigation standard terminal arrival routes (RNAV STARs) over the preceding three years. Overlaying radar track data on top of RNAV STAR routes provided a comparison between aircraft flight paths and the waypoint positions and altitude restrictions. NASA Ames Supercomputing resources were utilized to perform the data mining and processing. We investigated STARs by lateral transition path (full-lateral), vertical restrictions (full-lateral/full-vertical), and skipped waypoints (skips). In addition, we graphed altitudes and their frequencies of occurrence for altitude restrictions. Full-lateral compliance was generally greater than Full-lateral/full-vertical, but the delta between the rates was not always consistent. Full-lateral/full-vertical usage medians of the 2016 procedures ranged from 0 in KDEN (Denver) to 21 in KMEM (Memphis). Waypoint skips ranged from 0 to nearly 100 for specific waypoints. Altitudes restrictions were sometimes missed by systemic amounts in 1000 ft. increments from the restriction, creating multi-modal distributions. Other times, altitude misses looked to be more normally distributed around the restriction. This work is a preliminary investigation into the objective performance of instrument procedures and provides a framework to track how procedural concepts and design intervention function. In addition, this tool may aid in providing acceptability metrics as well as risk assessment information.

Stewart, Michael J.↗

Progress Towards a Predictive Eagle Behavior and Risk Modeling Framework: Overview and Recent Validation Efforts

This presentation summarizes progress to date of the U.S. Department of Energy project, "Development of a computational framework for modeling golden eagles (Aquila chrysaetos) near wind farms," which focuses on stochastic behavioral modeling of soaring raptors across landscape, facility, and turbine spatiotemporal scales. This publicly available, open-source modeling framework includes behavioral models based on three different underlying principles: energy minimization at landscape scale, behavioral heuristics at landscape-facility scale, and data-driven behaviors at the facility-micro-scale. We will briefly overview the key advancements in the behavioral modeling state of the art, which leverages multiple high-resolution telemetry data sources combined with high-fidelity atmospheric flow modeling insights. We then present preliminary results from a validation study in Altamont, California. This new study involves a novel application of the Stochastic Soaring Raptor Simulator (SSRS), in a new geographic locale, to understand facility scale eagle movement patterns over time scales representative of a wind project's lifetime. For this desktop analysis (that does not depend on any high-performance computing resources), SSRS simultaneously considers a variety of wind conditions and eagle approach vectors toward a project site of interest. This work demonstrates the integration of publicly available landscape-scale atmospheric datasets, our recently improved engineering updraft models (see presentation from Thedin et al.), and our energy minimization behavioral models within the SSRS framework. While we only present results from a single behavioral model, the integration of these three modeling components forms the foundation for our more sophisticated behavioral models (see presentations from Brandes et al., Sandhu et al.) that are under active development. Results are presented in the form of presence maps, which may be applied to estimate risk to wildlife, augment ground survey data, inform wind-plant operations, or incorporated into wind-plant designs.

agent-based modeling↗

The Relevance of the VIPER Mission to NASA’s Artemis Human Exploration of the Moon

NASA has ambitious plans to send astronaut crews to the south polar region of the Moon and explore this lunar terrain with humans for the first time through a series of Artemis missions. Artemis will provide economic benefits, drive technological advancement, and inspire the next generation of explorers. Simultaneously, Artemis presents a unique opportunity for humans to conduct high-priority planetary science in situ in the south polar region of the Moon. Prior to human exploration, landed robotic precursor investigations can provide valuable information to reduce risk and maximize discovery and productivity of subsequent crewed missions. NASA’s Volatiles Investigating Polar Exploration Rover (VIPER) is a robotic mission designed to explore and characterize the lunar south polar region prior to crewed Artemis landed missions. VIPER is designed to explore multiple thermal regimes to characterize the lunar polar environment and regolith properties, and to explore for surface and subsurface ices. Each of these objectives are key for both scientific investigation and to detect and assess volatile deposits to support in situ resource utilization (ISRU) and a sustained human presence on the Moon. VIPER would also operate with a real-time mission operations architecture with relevance and feed-forward to Artemis crewed operations on the lunar surface. VIPER would provide key information regarding the lunar environment, scientific exploration, technologies, and real-time operations to optimize the valuable surface exploration time of Artemis crew members while simultaneously reducing risk to crew and increasing health and human safety on the lunar surface.

Jennifer L Heldmann↗

Achieving a Risk-Informed Decision-Making Environment at NASA: The Emphasis of NASA's Risk Management Policy

This slide presentation reviews the evolution of risk management (RM) at NASA. The aim of the RM approach at NASA is to promote an approach that is heuristic, proactive, and coherent across all of NASA. Risk Informed Decision Making (RIDM) is a decision making process that uses a diverse set of performance measures along with other considerations within a deliberative process to inform decision making. RIDM is invoked for key decisions such as architecture and design decisions, make-buy decisions, and budget reallocation. The RIDM process and how it relates to the continuous Risk Management (CRM) process is reviewed.

Dezfuli, Homayoon↗

National-Tribal Critical Infrastructure Protection: Collaboration for Extraordinary National Security Benefit

This paper examines national and tribal collaborative opportunities to get ahead of the critical infrastructure insecurity problem. Recommendations are viewed through the lens of the Sandia Labs Tribal Cyber-Energy initiative and national security projects. Recommendations include 1) Collaboratively address national priority and shared challenges to gain faster and better solutions to national priority problems on a smaller yet comprehensive American Indian and Alaskan Native sovereign single-point of authority scale 2) Utilize newer standards-based technologies to provide scalable, capable, and manageable solutions for greatly expanded and connected national critical infrastructures 3) Employ Cyber-Physical-Resilient design preliminary analysis to define concept- to-disposition design requirements for preemptive critical infrastructure risk mitigation and baked-in security; 4) Develop data-centric protection to provide increased information asset protection as data shifts from data-owner operated on-premises infrastructure to virtual service provider data-steward owned and operated off-premises infrastructure; and 5) Balance shared solutions with the National Institute of Science and Technology (NIST) Cybersecurity and Risk Management frameworks, and the System Security Engineering Guidelines. As yet unallocated federal funding would support research, development, the timely application of National-Tribal critical infrastructure protection, and critical infrastructure Cyber disruption response and recovery with extraordinary mutual benefits for the foreseeable future. The Critical Infrastructure Insecurity Problem: Rapid modernization and expansive connectivity are due to advances in Information and Communications Technologies that have sweeping cyber impact across all critical infrastructure sectors. Supervisory Control and Data Acquisition and Industrial Control Systems are particularly impacted as systems long separated from the Internet are now being connected and computerized. Virtualization and mobility create a Data Everywhere-User Anywhere paradigm that has evaporated the enterprise network perimeter. There are multi-front technological challenges at play, where long depended on technologies simply don't scale to current needs resulting in a digital dichotomy of competing old and new standards. New standards-based technologies scale but are not as well-known or as widely deployed, which leaves decision makers, stakeholders, and the workforce in a quandary, caught mid-stream between the technological past and the virtual future. Rapid and expansive cyber threat accompanies disruptive change in connectivity and computational dependencies. A lack of action will exacerbate the problem if new technologies roll out without baked-in security design. The Risk: If National-Tribal CIP collaboration to design in security is not done, then an ongoing state of insufficient bolt-on security and elevated threat exposure will remain for years to come.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Tracking Historical NASA EVA Training: Lifetime Surveillance of Astronaut Health (LSAH) Development of the EVA Suit Exposure Tracker (EVA SET)

During a spacewalk, designated as extravehicular activity (EVA), an astronaut ventures from the protective environment of the spacecraft into the vacuum of space. EVAs are among the most challenging tasks during a mission, as they are complex and place the astronaut in a highly stressful environment dependent on the spacesuit for survival. Due to the complexity of EVA, NASA has conducted various training programs on Earth to mimic the environment of space and to practice maneuvers in a more controlled and forgiving environment. However, rewards offset the risks of EVA, as some of the greatest accomplishments in the space program were accomplished during EVA, such as the Apollo moonwalks and the Hubble Space Telescope repair missions. Water has become the environment of choice for EVA training on Earth, using neutral buoyancy as a substitute for microgravity. During EVA training, an astronaut wears a modified version of the spacesuit adapted for working in water. This high fidelity suit allows the astronaut to move in the water while performing tasks on full-sized mockups of space vehicles, telescopes, and satellites. During the early Gemini missions, several EVA objectives were much more difficult than planned and required additional time. Later missions demonstrated that "complex (EVA) tasks were feasible when restraints maintained body position and underwater simulation training ensured a high success probability".1,2 EVA training has evolved from controlling body positioning to perform basic tasks to complex maintenance of the Hubble Space Telescope and construction of the International Space Station (ISS). Today, preparation is centered at special facilities built specifically for EVA training, such as the Neutral Buoyancy Laboratory (NBL) at NASA's Johnson Space Center ([JSC], Houston) and the Hydrolab at the Gagarin Cosmonaut Training Centre ([GCTC], Star City, outside Moscow). Underwater training for an EVA is also considered hazardous duty for NASA astronauts. This activity places astronauts at risk for decompression sickness and barotrauma as well as various musculoskeletal disorders from working in the spacesuit. The medical, operational and research communities over the years have requested access to EVA training data to better understand the risks. As a result of these requests, epidemiologists within the Lifetime Surveillance of Astronaut Health (LSAH) team have compiled records from numerous EVA training venues to quantify the exposure to EVA training. The EVA Suit Exposure Tracker (EVA SET) dataset is a compilation of ground-based training activities using the extravehicular mobility unit (EMU) in neutrally buoyant pools to enhance EVA performance on orbit. These data can be used by the current ISS program and future exploration missions by informing physicians, researchers, and operational personnel on the risks of EVA training in order that future suit and mission designs incorporate greater safety. The purpose of this technical report is to document briefly the various facilities where NASA astronauts have performed EVA training while describing in detail the EVA training records used to generate the EVA SET dataset.

Laughlin, Mitzi S.↗