Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “software vulnerabilities”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14
All sourcesNASA NTRSDOE OSTI
DOE OSTI2012

Investigating the dosimetric and tumor control consequences of prostate seed loss and migration

Purpose: Low dose-rate brachytherapy is commonly used to treat prostate cancer. However, once implanted, the seeds are vulnerable to loss and movement. The goal of this work is to investigate the dosimetric and radiobiological effects of the types of seed loss and migration commonly seen in prostate brachytherapy. Methods: Five patients were used in this study. For each patient three treatment plans were created using Iodine-125, Palladium-103, and Cesium-131 seeds. The three seeds that were closest to the urethra were identified and modeled as the seeds lost through the urethra. The three seeds closest to the exterior of prostatic capsule were identified and modeled as those lost from the prostate periphery. The seed locations and organ contours were exported from Prowess and used by in-house software to perform the dosimetric and radiobiological evaluation. Seed loss was simulated by simultaneously removing 1, 2, or 3 seeds near the urethra 0, 2, or 4 days after the implant or removing seeds near the exterior of the prostate 14, 21, or 28 days after the implant. Results: Loss of one, two or three seeds through the urethra results in a D{sub 90} reduction of 2%, 5%, and 7% loss, respectively. Due to delayed loss of peripheral seeds, the dosimetric effects are less severe than for loss through the urethra. However, while the dose reduction is modest for multiple lost seeds, the reduction in tumor control probability was minimal. Conclusions: The goal of this work was to investigate the dosimetric and radiobiological effects of the types of seed loss and migration commonly seen in prostate brachytherapy. The results presented show that loss of multiple seeds can cause a substantial reduction of D{sub 90} coverage. However, for the patients in this study the dose reduction was not seen to reduce tumor control probability.

62 RADIOLOGY AND NUCLEAR MEDICINE↗
NASA NTRS2018

GPM Mission's Best Practices: PERP

Similar to other missions, the Global Precipitation Measurement (GPM) Core Observatory's Command and Data Handling (C&DH) subsystem is critical for operations of the spacecraft. The onboard C&DH system comprises of two fully redundant boxes - a primary and a cold backup. Within each box, amongst other components, is a Single Board Computer (SBC) that hosts the flight software (FSW) system. In the event of an SBC reset, the Flight Operations Team (FOT) is poised with a lengthy task of restoring the SBC to nominal configuration. Due to the complexity of the C&DH system, this may take many days at a time to complete. The spacecraft's FSW applications are located in Electronically Erasable Programmable Read-Only Memory (EEPROM) and are copied into Random Access Memory (RAM) upon SBC initialization/reset. Each SBC has two banks of EEPROM, with each bank containing a copy of the FSW. Since launch, there have been many configuration changes to tables and applications that have been loaded into just RAM. Unfortunately, these changes are vulnerable to being wiped during a SBC initialization/reset, when the RAM is overwritten by the EEPROM. Although the EEPROM loads the default FSW configurations, the process to command non-default individual table and application changes is very cumbersome and time consuming. This consequentially increases the time until the spacecraft is back into nominal Mission Science Mode (MSM) drastically. The GPM Power-On Reset (POR) Expedited Recovery Process (PERP) Design introduces a method of consolidating commands into a single file load which the SBC can process independently of the ground - decreasing recovery time, the level of TDRS support reliance, and human error. This tested design can be implemented across many other missions that utilize a similar core Flight Executive (cFE) platform; hence providing an easy-to-follow, safe, and efficient process that can be applied across the board.

recovery↗
DOE OSTI2022

Supply Chain Risk Management: Data Structuring

Supply chain risk management (SCRM) is an area of research that addresses both logistics concepts to maximize efficiency, reliability, and revenue as well as risk features, such as potential weak points, break points, and vulnerabilities within the supply chain. SCRM is used to find risks introduced at each node in a supply chain and how these risks can impact a company’s products, individuals, customers, and reputation. SCRM is a relatively new field, so standardized processes including data structuring are not fully documented. This paper explains the importance of a standard data structuring methodology and how it can enhance current SCRM efforts. Data ingest, structuring, and analysis are predominantly managed by humans. Automating some of the less complex steps can positively impact SCRM by allowing human analysts to focus on more strategic analyses. Types of data to be collected and structured are collected via publicly available information related to hardware, software, and corporate entities. After the data has been collected, the information is formatted in a specific manner, conforming to a schema, to allow for more effective and efficient ingest for further analysis. This paper outlines data structures used by Pacific Northwest National Laboratory for SCRM research and analysis purposes. These structures have been used for hundreds of analyses and have been successful in developing a common baseline. Data structuring is one of the first steps in data standardization, which will further mature and enhance the SCRM research area.

supply chain risk management, data structuring, re↗
DOE OSTI2015

Traffic signal design and simulation for vulnerable road users safety and bus preemption

Mostly, pedestrian car accidents occurred at a signalized interaction is because pedestrians cannot across the intersection safely within the green light. From the viewpoint of pedestrian, there might have two reasons. The first one is pedestrians cannot speed up to across the intersection, such as the elders. The other reason is pedestrians do not sense that the signal phase is going to change and their right-of-way is going to be lost. Developing signal logic to protect pedestrian, who is crossing an intersection is the first purpose of this study. In addition, to improve the reliability and reduce delay of public transportation service is the second purpose. Therefore, bus preemption is also considered in the designed signal logic. In this study, the traffic data of the intersection of Chong-Qing North Road and Min-Zu West Road, Taipei, Taiwan, is employed to calibrate and validate the signal logic by simulation. VISSIM 5.20, which is a microscopic traffic simulation software, is employed to simulate the signal logic. From the simulated results, the signal logic presented in this study can protect pedestrians crossing the intersection successfully. The design of bus preemption can reduce the average delay. However, the pedestrian safety and bus preemption signal will influence the average delay of cars largely. Thus, whether applying the pedestrian safety and bus preemption signal logic to an intersection or not should be evaluated carefully.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2019

Evaluation of Impact of Potential Extreme Rainfall Events on Mining in Peru

The impact that climate change may play in the future sustainability of mining projects has become increasingly important for the mining industry and its stakeholders. The most significant areas of concern are mine infrastructure, supply chains, health and safety conditions, environmental management, community relations and exploration. This is particularly relevant to mining in a country as climatically vulnerable as Peru. This study focuses on the identification of mining regions and main commodities in Peru that are potentially vulnerable to future extreme rainfall events associated with climate change. From a mine design and planning perspective, this study is a first step to illustrate the importance of considering the impacts of different climatic scenarios on mining in Peru. Based on HadGEM2-ES global climate model projections, mining regions across Peru were clustered into “super-regions” with differing potentials of extreme rainfall events during the next three decades. Five indices for precipitation extremes were used, and their variations between 1971–2000 and 2015–2034 were computed. Current and future metallic mining projects expected to take place across Peru in the next 30 years were retrieved from a mining database and subsequently exported into a geographical information systems software to represent their location and interpolate the variation for each precipitation extreme index. The results of this study point out at a decreasing trend in rainfall extremes intensity and frequency in regions of southern Peru. For copper projects located in these regions, a decrease in rainfall events could also imply an eventual decrease in total precipitation and consequently a deficit in water availability during the next three decades. Mining regions in central Peru, with significant number of zinc projects, are likely to experience a marked increase in overall annual precipitation, average daily precipitation intensity, consecutive days of precipitation and number of heavy precipitation days. At a lesser extent than in central Peru, gold projects in northern Peru are also likely to experience an overall increase in precipitation extremes. The approach used for this research could be extended to other mining regions around the world with extreme weather events.

58 GEOSCIENCES↗
DOE OSTI2012

Secure Control Systems for the Energy Sector

Schweitzer Engineering Laboratories (SEL) will conduct the Hallmark Project to address the need to reduce the risk of energy disruptions because of cyber incidents on control systems. The goals is to develop solutions that can be both applied to existing control systems and designed into new control systems to add the security measures needed to mitigate energy network vulnerabilities. The scope of the Hallmark Project contains four primary elements: 1. Technology transfer of the Secure Supervisory Control and Data Acquisition (SCADA) Communications Protocol (SSCP) from Pacific Northwest National Laboratories (PNNL) to Schweitzer Engineering Laboratories (SEL). The project shall use this technology to develop a Federal Information Processing Standard (FIPS) 140-2 compliant original equipment manufacturer (OEM) module to be called a Cryptographic Daughter Card (CDC) with the ability to directly connect to any PC enabling that computer to securely communicate across serial to field devices. Validate the OEM capabilities with another vendor. 2. Development of a Link Authenticator Module (LAM) using the FIPS 140-2 validated Secure SCADA Communications Protocol (SSCP) CDC module with a central management software kit. 3. Validation of the CDC and Link Authenticator modules via laboratory and field tests. 4. Creation of documents that record the impact of the Link Authenticator to the operators of control systems and on the control system itself. The information in the documents can assist others with technology deployment and maintenance.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2022

Mars 2020 Entry, Descent, and Landing System Software Implementation

On February 18th, 2021, the Mars 2020 project's Perseverance Rover successfully touched down on the Martian surface after nearly eight years of development. The Mars 2020 Entry, Descent, and Landing (EDL) System largely leveraged heritage from the Mars Science Laboratory (MSL) EDL System while employing targeted technological advancements. The landing process is autonomously directed by a software behavior implemented in the rover's primary flight computer called the EDL Timeline that assumes control of the vehicle six days before atmospheric entry. This paper first walks through the basics of the EDL Timeline mechanics and how the behavior is designed to account for internal system variations and environmental unknowns. It then summarizes the interactions between the EDL timeline and other high-level system behaviors like spacecraft mode transitions and system fault protection, focusing on the complications that arise when passing spacecraft control between executive functions. Although the MSL-inherited EDL System is reliable and capable, targeted updates and a thorough verification and validation program were required for Mars 2020. This paper discusses changes made to close vulnerabilities discovered during both MSL and Mars 2020 development cycles, landing system capability enhancements that were enabling for Mars 2020's mission, and how these updates were integrated with the heritage system. It then describes how both analysis and testing campaigns were utilized to verify and validate all aspects of EDL and system behaviors that run during the six days before landing, as well as the operational workarounds that were needed to address problems found during the development and commissioning process. Finally, this paper imparts lessons learned from Mars 2020 EDL development, implementation, and operations, emphasizing how systems designed to conduct time-critical mission events with low margin of error can be improved in the future.

Stehura, Aaron↗
DOE OSTI2024

Final Technical Report - Rapid Surface Microanalysis using a Low Temperature Plasma

This project focused on improving our current understanding and scientific knowledge in the area of plasma-surface interactions and plasma assisted material synthesis related to advanced microelectronics and nanotechnology. Current challenges include: controlling the interaction of Low Temperature Plasma (LTP) with a single layer of atoms to manufacture integrated circuits, continued miniaturization of integrated circuits, LTP processing of material surfaces and thin films to enable industrial scale fabrication of advanced microelectronics, synthesis of new materials, nanomaterials, nanotubes, and complex materials, Technology developed in this subtopic is of value to either (i) enable scans of surfaces (~1 sq. cm area) using various microscopies (electron, optical, other) at high resolution (micron or sub-micron resolution) rapidly (hours or days rather than years to complete a high-resolution scan of such a large surface area), or (ii) enable scans of surfaces (~1 sq. cm area) using various microscopies (electron, optical, other) at relatively low resolution rapidly, then apply algorithms to select spots for micron-scale imaging. Sputtering occurs when particles of a solid material are ejected from its surface by energetic particles from a plasma. While the degradation of the solid material and the subsequent deposition of the ejected material onto vulnerable surfaces are the usual subjects of sputtering studies, plasma science has yet to be combined with sputtering to create new diagnostics devices and systems. Small changes in the design of the plasma discharge device make it possible to create broad plasma beams for rapid scanning or small plasma beams to obtain the distribution of ejected elements with micron resolution. In the high-resolution use, the ion flux is extracted from the gas-discharge plasma and focused by a spherical emission surface to micron sizes onto the target specimen, providing very local sputtering and local elemental analysis. We call this “self-focusing”. The radiation from the excited and ionized sputtered atoms is recorded by a spectrometer through a window and fiberglass cable and analyzed with standard software packages used for optical glow discharge spectroscopy. Computer simulations of beam formation were used to verify and optimize the designs to be tested. A prototype was designed, constructed, and used to start experiments of beam formation.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
NASA NTRS2015

Analyzing Cyber Security Threats on Cyber-Physical Systems Using Model-Based Systems Engineering

The spectre of cyber attacks on aerospace systems can no longer be ignored given that many of the components and vulnerabilities that have been successfully exploited by the adversary on other infrastructures are the same as those deployed and used within the aerospace environment. An important consideration with respect to the mission/safety critical infrastructure supporting space operations is that an appropriate defensive response to an attack invariably involves the need for high precision and accuracy, because an incorrect response can trigger unacceptable losses involving lives and/or significant financial damage. A highly precise defensive response, considering the typical complexity of aerospace environments, requires a detailed and well-founded understanding of the underlying system where the goal of the defensive response is to preserve critical mission objectives in the presence of adversarial activity. In this paper, a structured approach for modeling aerospace systems is described. The approach includes physical elements, network topology, software applications, system functions, and usage scenarios. We leverage Model-Based Systems Engineering methodology by utilizing the Object Management Group's Systems Modeling Language to represent the system being analyzed and also utilize model transformations to change relevant aspects of the model into specialized analyses. A novel visualization approach is utilized to visualize the entire model as a three-dimensional graph, allowing easier interaction with subject matter experts. The model provides a unifying structure for analyzing the impact of a particular attack or a particular type of attack. Two different example analysis types are demonstrated in this paper: a graph-based propagation analysis based on edge labels, and a graph-based propagation analysis based on node labels.

MBSE↗
NASA NTRS2012

Assessing Tsunami Vulnerabilities of Geographies with Shallow Water Equations

Tsunami preparedness is crucial for saving human lives in case of disasters that involve massive water movement. In this work, we develop a framework for visual assessment of tsunami preparedness of geographies. Shallow water equations (also called Saint Venant equations) are a set of hyperbolic partial differential equations that are derived by depth-integrating the Navier-Stokes equations and provide a great abstraction of water masses that have lower depths compared to their free surface area. Our specific contribution in this study is to use Microsoft's XNA Game Studio to import underwater and shore line geographies, create different tsunami scenarios, and visualize the propagation of the waves and their impact on the shore line geography. Most importantly, we utilized the computational power of graphical processing units (GPUs) as HLSL based shader files and delegated all of the heavy computations to the GPU. Finally, we also conducted a validation study, in which we have tested our model against a controlled shallow water experiment. We believe that such a framework with an easy to use interface that is based on readily available software libraries, which are widely available and easily distributable, would encourage not only researchers, but also educators to showcase ideas.

Aras, Rifat↗
DOE OSTI2025

Simulating Alpha Particles Incident on MKID Chips for Quantum Sensitivity Analysis

Superconducting quantum devices, such as microwave kinetic inductance detectors (MKIDs), are highly sensitive instruments used in quantum computing and advanced sensing technologies. However, their extreme sensitivity also makes them vulnerable to background noise from natural sources like radiation. One significant contributor to this noise is alpha particles emitted by 210Po, a radon decay daughter that accumulates on surfaces near the detector. This project investigates how alpha particles emitted from 210Po interact with MKID chips. These particles can deposit energy on the detector surface, disrupting its operation and generating false signals. Understanding the energy and behavior of these particles is crucial for improving the design and reliability of quantum devices. To explore this, we first modeled the decay chain starting from 210Pb to 210Po using differential equations. This allowed us to predict how the activity of alpha-emitting isotopes changes over time, reaching a steady state after about two years. Next, we simulated alpha particle interactions with the MKID chip using the Geant4 software toolkit. We built a detailed computer model of the detector housing, including the copper lid where alpha particles originate, the silicon chip, and a thin aluminum sensor layer. Alpha particles were emitted isotropically from just beneath the copper lid’s surface, mimicking natural decay conditions. The simulation tracked how these particles deposit energy on the chip, generating electron-hole pairs and phonons. The results provide insight into the behavior of the resultant electron-hole pairs and phonons, giving us a clear understanding of the energy deposition distribution on the chip. This work supports efforts to mitigate background noise in superconducting sensors, advancing their use in quantum computing and sensitive physics experiments.

Hall, Matthew [Fermilab; UCLA]↗
NASA NTRS2003

Three-Dimensional Venturi Sensor for Measuring Extreme Winds

A three-dimensional (3D) Venturi sensor is being developed as a compact, rugged means of measuring wind vectors having magnitudes of as much as 300 mph (134 m/s). This sensor also incorporates auxiliary sensors for measuring temperature from -40 to +120 F (-40 to +49 C), relative humidity from 0 to 100 percent, and atmospheric pressure from 846 to 1,084 millibar (85 to 108 kPa). Conventional cup-and-vane anemometers are highly susceptible to damage by both high wind forces and debris, due to their moving parts and large profiles. In addition, they exhibit slow recovery times contributing to an inaccurately high average-speed reading. Ultrasonic and hot-wire anemometers overcome some of the disadvantages of the cup and-vane anemometers, but they have other disadvantageous features, including limited dynamic range and susceptibility to errors caused by external acoustic noise and rain. In contrast, the novel 3D Venturi sensor is less vulnerable to wind damage because of its smaller profile and ruggedness. Since the sensor has no moving parts, it provides increased reliability and lower maintenance costs. It has faster response and recovery times to changing wind conditions than traditional systems. In addition, it offers wide dynamic range and is expected to be relatively insensitive to rain and acoustic energy. The Venturi effect in this sensor is achieved by the mirrored double-inflection curve, which is then rotated 360 to create the desired detection surfaces. The curve is optimized to provide a good balance of pressure difference between sensor ports and overall maximum fluid velocity while in the shape. Four posts are used to separate the two shapes, and their size and location were chosen to minimize effects on the pressure measurements. The 3D Venturi sensor has smart software algorithms to map the wind pressure exerted on the surfaces of the design. Using Bernoulli's equation, the speed of the wind is calculated from the differences among the pressure readings at the various ports. The direction of the wind is calculated from the spatial distribution and magnitude of the pressure readings. All of the pressure port sizes and locations have been optimized to minimize measurement errors and to reside in areas demonstrating a stable pressure reading proportional to the velocity range.

Zysko, Jan A.↗
NASA NTRS2008

Automated Generation and Assessment of Autonomous Systems Test Cases

This slide presentation reviews some of the issues concerning verification and validation testing of autonomous spacecraft routinely culminates in the exploration of anomalous or faulted mission-like scenarios using the work involved during the Dawn mission's tests as examples. Prioritizing which scenarios to develop usually comes down to focusing on the most vulnerable areas and ensuring the best return on investment of test time. Rules-of-thumb strategies often come into play, such as injecting applicable anomalies prior to, during, and after system state changes; or, creating cases that ensure good safety-net algorithm coverage. Although experience and judgment in test selection can lead to high levels of confidence about the majority of a system's autonomy, it's likely that important test cases are overlooked. One method to fill in potential test coverage gaps is to automatically generate and execute test cases using algorithms that ensure desirable properties about the coverage. For example, generate cases for all possible fault monitors, and across all state change boundaries. Of course, the scope of coverage is determined by the test environment capabilities, where a faster-than-real-time, high-fidelity, software-only simulation would allow the broadest coverage. Even real-time systems that can be replicated and run in parallel, and that have reliable set-up and operations features provide an excellent resource for automated testing. Making detailed predictions for the outcome of such tests can be difficult, and when algorithmic means are employed to produce hundreds or even thousands of cases, generating predicts individually is impractical, and generating predicts with tools requires executable models of the design and environment that themselves require a complete test program. Therefore, evaluating the results of large number of mission scenario tests poses special challenges. A good approach to address this problem is to automatically score the results based on a range of metrics. Although the specific means of scoring depends highly on the application, the use of formal scoring - metrics has high value in identifying and prioritizing anomalies, and in presenting an overall picture of the state of the test program. In this paper we present a case study based on automatic generation and assessment of faulted test runs for the Dawn mission, and discuss its role in optimizing the allocation of resources for completing the test program.

Testing challenges↗
NASA NTRSDate not supplied

Towards Real-time Global Assessment of Post-fire Debris Flow Hazard

As the risk of wildfires increases worldwide, burned steeplands are vulnerable to the secondary hazard of widespread sediment mobilization through debris flows. Following an initial burn, sediment and soil previously restrained by vegetation are no longer consolidated, allowing for easy mobilization into channels and along steep hillslopes through runoff. Sufficiently powerful rainfall incorporates entrained material into turbulent flows and serves as the primary trigger for debris flow initiation. There is thus an ongoing need to establish the relationship between rainfall and debris flow initiation based on a variety of spatiotemporal preconditions. Previous work establishes regional and local thresholds to constrain the effect of rainfall in recently burned areas, but no empirical or numerical solution has worldwide application. Building from regionally-based efforts in the U.S., this work considers how remote sensing data can be applied to better approximate the post-fire debris flow hazards worldwide using freely available global datasets and software. Our work assesses the utility of remote sensing resources for analyzing burn characteristics, topography, rainfall intensity/duration, and, thus, debris flow initiation. Early results show that global observations are sufficient to delineate background rainfall rates from storms likely to cause debris flows across a variety of burn severity and topographic conditions. However, the dearth of publicly-available post-fire debris flow inventories globally limit the ability to test how the model framework performs within different climatologic and morphologic areas. This work will present preliminary analysis over the Western United States and demonstrate the feasibility of a global, near-real time model to provide situational awareness of potential hazards within recently burned areas worldwide. Future work will also consider how global or regional precipitation forecasts may increase the lead time for improved early warning of these hazards.

Elijah Orland↗
DOE OSTI2022

Fast and fault-tolerant model predictive control of MMCs under selective harmonic elimination

Selective harmonic elimination (SHE) is a suitable pulse-width modulation (PWM) tech-nique for some applications of modular multilevel converters (MMC) with lower numberof semiconductor submodules (SM). However, SHE can make it difficult to control circu-lating currents in the MMC. Moreover, the MMC is vulnerable to SM switch failures thatreduce its output power magnitude and quality. This paper proposes a fault-tolerant modelpredictive control strategy for MMCs operating with SHE (FT SHE-MPC). The effects ofswitch failure on phase voltage waveforms are studied first. Then, a method is proposedto design the FT SHE waveform to preserve its harmonic performance. Next, the pro-posed FT SHE-MPC is designed to increase the capacitor voltages during an SM failure tomaintain the fundamental component of the faulty phase voltage and control the circulat-ing currents, maintaining balance among line voltages and the output power of the MMC.Additionally, the proposed method offers as much as 60% faster FT transition time and asmuch as 36% lower capacitor voltage ripple. The advantages of the proposed method areverified through offline and real-time simulation studies on a three-phase nine-level MMCin PSCAD/EMTDC software and RTDS.

42 ENGINEERING↗
DOE OSTI2012

GTRI Remote Monitoring System: Training and Operational Needs Assessment Analysis Report

The mission of the United States Department of Energy (DOE) National Nuclear Security Administrations (NNSA's) Global Threat Reduction Initiative (GTRI) is to identify, secure, recover and facilitate the disposition of vulnerable nuclear and high-risk radioactive materials around the world that pose a threat to the United States and the international community. The GTRI's unique mission to reduce and protect vulnerable nuclear and radiological materials located at civilian sites worldwide directly addresses recommendations of the 9/11 Commission1, and is a vital part of the President's National Security Strategy and the Global Initiative. The GTRI Remote Monitoring System (RMS) is a standalone security system that includes radiation and tamper alarms, and CCTV; which can be transmitted securely over the Internet to multiple on-site and off-site locations. Through our experiences during installation of the system at 162 sites, plus feedback received from Alarm Response Training course participants, site input to project teams and analysis of trouble calls; indications were that current system training was lacking and inconsistent. A survey was undertaken to gather information from RMS users across the nation, to evaluate the current level of training and determine what if any improvements needed to be made. Additional questions were focused on the operation of the RMS software. The training survey was initially sent electronically to 245 users at the RMS sites and achieved a 37.6% return rate. Analysis of the resulting data revealed that 34.6% of the respondents had not received training or were unsure if they had, despite the fact that vendor engineers provide training at installation of the system. Any training received was referred to as minimal, and brief, not documented, and nothing in writing. 63.7% of respondents said they were either not at all prepared or only somewhat prepared to use the RMS software required to effectively operate the system. As a result of this analysis, a formal training curriculum will be designed and implemented to include several blended learning delivery options. This training will be piloted at RMS sites; initial training will become a required element of RMS installation and refresher training will be considered for sustainability of operations.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
NASA NTRS2022

Mars 2020 Entry, Descent, and Landing Software Implementation

On February 18th, 2021, the Mars 2020 project's Perseverance Rover successfully touched down on the Martian surface after nearly eight years of development. The Mars 2020 Entry, Descent, and Landing (EDL) System largely leveraged heritage from the Mars Science Laboratory (MSL) EDL System while employing targeted technological advancements. The landing process is autonomously directed by a software behavior implemented in the rover's primary flight computer called the EDL Timeline that assumes control of the vehicle six days before atmospheric entry. In addition to performing the critical function of landing the rover on the Martian surface, the EDL timeline behavior must co-exist in a non-partitioned software and system environment with other high-level functions that accomplish the goals for the rest of the mission. Due to the criticality of EDL, the potential for loss of mission, and a need for complete system autonomy, the standard for how the EDL Timeline interacts with other functions in the system is highly constrained. This paper first walks through the basics of the EDL Timeline mechanics and how the behavior is designed to account for internal system variations and environmental unknowns. It then summarizes the interactions between the EDL timeline and other high-level system behaviors like spacecraft mode transitions and system fault protection, focusing on the complications that arise when passing spacecraft control between executive functions. Although the MSL-inherited EDL System is reliable and capable, targeted updates and a thorough verification and validation program were required for Mars 2020. This paper discusses changes made to close vulnerabilities discovered during both MSL and Mars 2020 development cycles, landing system capability enhancements that were enabling for Mars 2020's mission, and how these updates were integrated with the heritage system. It then describes how both analysis and testing campaigns were utilized to verify and validate all aspects of EDL and system behaviors that run during the six days before landing, as well as the operational workarounds that were needed to address problems found during the development and commissioning process. Finally, this paper imparts lessons learned from Mars 2020 EDL development, implementation, and operations, emphasizing how systems designed to conduct time-critical mission events with low margin of error can be improved in the future.

Stehura, Aaron↗
DOE OSTI2014

Safety assessment of historical masonry churches based on pre-assigned kinematic limit analysis, FE limit and pushover analyses

This study presents some results of a comprehensive numerical analysis on three masonry churches damaged by the recent Emilia-Romagna (Italy) seismic events occurred in May 2012. The numerical study comprises: (a) pushover analyses conducted with a commercial code, standard nonlinear material models and two different horizontal load distributions; (b) FE kinematic limit analyses performed using a non-commercial software based on a preliminary homogenization of the masonry materials and a subsequent limit analysis with triangular elements and interfaces; (c) kinematic limit analyses conducted in agreement with the Italian code and based on the a-priori assumption of preassigned failure mechanisms, where the masonry material is considered unable to withstand tensile stresses. All models are capable of giving information on the active failure mechanism and the base shear at failure, which, if properly made non-dimensional with the weight of the structure, gives also an indication of the horizontal peak ground acceleration causing the collapse of the church. The results obtained from all three models indicate that the collapse is usually due to the activation of partial mechanisms (apse, façade, lateral walls, etc.). Moreover the horizontal peak ground acceleration associated to the collapse is largely lower than that required in that seismic zone by the Italian code for ordinary buildings. These outcomes highlight that structural upgrading interventions would be extremely beneficial for the considerable reduction of the seismic vulnerability of such kind of historical structures.

42 ENGINEERING↗