Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “consequences”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Consequence Analysis of Residual Water in a Storage Canister - 20484

Recent observations from projects sponsored under the DOE-Nuclear Energy Spent Fuel and Waste Disposition campaign show that residual free water, well above the 0.4 gm-moles that correspond to a 3 torr rebound pressure after a 30-minute hold following prototypic drying, may remain within SNF canisters used for long-term dry storage. Specifically, experimental observations in an Integrated Research Project showed subzero temperatures and a local pocket of frozen water in a mockup fuel assembly subjected to an industry practiced drying process. In gas sampling and analysis from the High Burnup (HBU) Demonstration project, using a fully loaded and dried SNF canister, indicated presence of 100 g of residual water had remained in the canister. The effects of residual water in terms of potential adverse impacts on the condition of the SNF and the canister internals during long-term dry storage has been rigorously evaluated to address inadvertent residual water contents. The impact of residual water on the fuel and canister internals, with a focus on the oxidation of the cladding and of postulated exposed (breached-clad) fuel, were evaluated using an integrated set of time-dependent environmental conditions with semi-empirical materials oxidation models. An 'integration model,' with coupled sub-models, developed and previously used by the Center for Nuclear Waste Regulatory Analysis (CNWRA), was applied and expanded with improved sub-models for water radiolysis, and for cladding and fuel oxidations. Cladding oxidation models for various alloys were developed using the rate constants for various cladding alloys in the dry storage temperature range. A burnup-dependent fuel oxidation model was developed; it accounted for inhibition effect of fission products on fuel oxidation rates. The potential for extension of the initial breach flaw (1 mm hole) was evaluated by two separate mechanics criteria. In the first case, a critical cladding strain criterion was used. In the second case, a critical stress intensity was used to evaluate stability of a planar axial flaw postulate. A failure condition exists when a sufficient amount of fuel oxidation (at the postulated breached-clad location) causes fuel pellet swelling to load the cladding to meet a mechanics criterion for flaw extension. The integration model's results provide the following insights. The radiolysis-generated oxygen is consumed with a partitioning between the cladding and the fuel. The extent of cladding oxidation is no more than 2 μm additional consumption of the cladding metal even with 10 moles of residual water, indicating that changes in cladding conditions due to water are expected to be negligible. The conditions for cladding failure (breach opening size extension) directly correlates with the extent of fuel oxidation. Fuel oxidation significant to extend the breach could occur even with 5.5 moles of residual water. The results indicate that fuel oxidation vis-a-vis cladding oxidation is more likely under a higher radiation field, i.e., when radiolytic decomposition of the residual water occurs in few years compared to several decades, and that the conditions to cause failure are increased with fuel and cladding temperatures approaching the peak storage temperature limit of 400 deg. C. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2024

Cosmological Consequences of Unconstrained Gravity and Electromagnetism

Motivated by the quantum description of gauge theories, we study the cosmological effects of relaxing the Hamiltonian and momentum constraints in general relativity and Gauss' law in electromagnetism. We show that the unconstrained theories have new source terms that mimic a pressureless dust and a charge density that only follows geodesics. The source terms may be the simplest explanation for dark matter and generically predict a charged component. We comment that discovery of such terms would rule out inflation and be a direct probe of the initial conditions of the universe.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗
DOE OSTI2022

BayoTech Risk and Modeling Support of NM Gas Site

The BayoTech hydrogen generation system has been evaluated in terms of safety considerations at the NM Gas site. The consequence of a leak in different components in the system was evaluated in terms of plume dispersion and overpressure. Additionally, the likelihood of a leak scenario for different hydrogen components was identified. The worst-case plume dispersion cases, full-bore leaks, resulted in relatively large plumes. However, these cases were noted to be far less likely than the partial break cases that were evaluated. The partial break cases resulted in nearly negligible plume lengths. Similarly, the overpressure analysis of the full-bore break scenarios resulted in much larger overpressures than the partial break cases (which resulted in negligible overpressure at the lot line). There were several cases evaluated in the analysis that represented leak scenarios from both hydrogen and natural gas sources. Generally, the natural gas leak scenarios resulted in a smaller horizontal impact than that of hydrogen leaks. The worst-case consequence from a hydrogen leak resulted from the compressors, storage pods, or dispensing system. To consider the safety features that may isolate the leak, the consequence was evaluated at different times after the leak event to show the reduction of pressure. After 2 seconds, the plume dispersion from this event is contained within the perimeter of the site. The worst-case consequences show that the plume may disperse to adjacent facilities and to the street. When considering both likelihood and consequence, the risk may be considered low because the maximum frequency of a full-bore leak from any component within the hydrogen compound is 8.2 E-5/yr. This means that a full-bore leak is expected to occur less than once every 10,000 years. The risk can be further reduced by implementing mitigative countermeasures, such as CMU walls along the sides of the equipment compound. This would reduce the overall consequence of the worst-case dispersion scenarios (horizontal impact of plume). In terms of siting and safety analysis, the NFPA 2 code was used to provide a high-level evaluation of the current site plan. The most limiting equipment in terms of set-back distance are the compressors/storage units because of the high-pressure hydrogen. The site layout was evaluated for an acceptable location for the compression/storage unit based on NFPA 2 set-back distances. It is important to note that the NFPA 2 set-back distances consider both likelihood and consequence. This is important because the worst-case results evaluated herein also represent the least likely leak scenario. Other site-specific considerations were evaluated, including the parking shade structure with photovoltaic cells and refueling vehicles. These issues were dispositioned and determined to not present a safety risk.

08 HYDROGEN↗
DOE OSTI2021

Modeling and Evaluation of Cyber-Attacks on Grid-Interactive Efficient Buildings

Grid-interactive efficient buildings (GEBs) are not only exposed to passive threats (e.g., physical faults) but also active threats such as cyber-attacks launched on the network-based control systems. The impact of cyber-attacks on GEB operation are not yet fully understood, especially as regards the performance of grid services. To quantify the consequences of cyber-attacks on GEBs, this paper proposes a modeling and simulation framework that includes different cyber-attack models and key performance indexes to quantify the performance of GEB operation under cyber-attacks. The framework is numerically demonstrated to model and evaluate cyber-attacks such as data intrusion attacks and Denial-of-Service attacks on a typical medium-sized office building that uses the BACnet/IP protocol for communication networks. Simulation results show that, while different types of attacks could compromise the building systems to different extents, attacks via the remote control of a chiller yield the most significant consequences on a building system’s operation, including both the building service and the grid service. It is also noted that a cyber-attack impacts the building systems during the attack period as well as the post-attack period, which suggests that both periods should be considered to fully evaluate the consequences of a cyber-attack.

Fu, Yanyang↗
DOE OSTI2024

Engineering in Cyber Resilience with Cyber-Informed Engineering

Engineers have super powers to provide cybersecurity resilience with deterministic engineering solutions and to protect systems from the most catastrophic consequences that a cyber saboteur could cause. Come to this session to learn how to use engineering risk management skills to harden your engineered systems from cyberattacks. Objective 1 Identify what system functions could be digitally induced to cause undesired high-impact consequences. Objective 2 Analyze how loss or instability of digital controls in a subsystem could lead to high-impact consequences. Objective 3 Analyze how loss or instability in the digital connectivity between systems could lead to high-impact consequences. Objective 4 Identify engineering controls which could build resilience by eliminating digital loss or instability pathways or reduce the impact of digital loss or instability. This presentation will introduce Cyber-Informed Engineering, described below, and walk participants through specific engineering use cases to show how engineers can consider the potential for cyber sabotage in their existing system designs and enact deterministic engineering-based controls which eliminate pathways for attack or mitigate specific consequences. A wide variety of application use cases will be considered so that audience members can align the material with familiar engineering applications. CIE is an engineering approach that integrates cyber resilience into the conception, design, build, and operation of any physical system that has digital connectivity, sensors, monitoring, or control. CIE offers the opportunity to use engineering to eliminate or mitigate avenues for cyber attack—starting from the earliest stage of design and continuing throughout the system’s lifecycle. Today, engineers and industrial control system (ICS) technicians build engineered systems with specific goals for safety, reliability, and functionality. While systems engineering includes considerable safety and failure mode analysis, cybersecurity risks are often not specifically addressed—particularly the risks of intentional cyber compromise, exploitation, and misuse. Cyber-Informed Engineering pairs well with traditional cyber defenses and offers an extra designed-in protection to eliminate the most catastrophic consequences which can be realized by an adversary should traditional cyber defenses fail.

42 ENGINEERING↗
DOE OSTI2020

Performing a multi-unit level-3 PSA with MACCS

MACCS (MELCOR Accident Consequence Code System), WinMACCS, and MelMACCS now facilitate a multi-unit consequence analysis. MACCS evaluates the consequences of an atmospheric release of radioactive gases and aerosols into the atmosphere and is most commonly used to perform probabilistic safety assessments (PSAs) and related consequence analyses for nuclear power plants (NPPs). WinMACCS is a user-friendly preprocessor for MACCS. MelMACCS extracts source-term information from a MELCOR plot file. The current development can combine an arbitrary number of source terms, representing simultaneous releases from a multi-unit facility, into a single consequence analysis. The development supports different release signatures, fission product inventories, and accident initiation times for each unit. The treatment is completely general except that the model is currently limited to collocated units. A major practical consideration for performing a multi-unit PSA is that a comprehensive treatment for more than two units may involve an intractable number of combinations of source terms. This paper proposes and evaluates an approach for reducing the number of calculations to be tractable, even for sites with eight or ten units. The approximation error introduced by the approach is acceptable and is considerably less than other errors and uncertainties inherent in a Level 3 PSA.

42 ENGINEERING↗
DOE OSTI2021

Development of Integrated Safety and Security Models for Comprehensive Reliability and Resiliency Evaluation

The security of the electric grid and supporting energy systems is crucial to national security. One of the complexities in analyzing the security of energy systems is the safety consequences that may result from accidents. For energy systems, the goal is to ensure that they operate as intended and that any consequences are mitigated or prevented. The integration of safety and security is paramount to protecting these systems from attacks and ensuring that large consequences are prevented. This report describes an integrated safety and security methodology to evaluate cybersecurity events that can lead to large consequences. This novel approach first describes how Systems-Theoretic Process Analysis (STPA) provides a digital causal analysis for Bayesian Networks (BNs). The use of STPA causal analysis provides a systematic approach to constructing BNs that adequately model cyber scenarios that result in consequences. When combined with the technical principles described in Risk-Informed Management of Enterprise Systems (RIMES), a comprehensive risk-informed cybersecurity analysis results that allows decision-makers to prioritize systems that most impact risk.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Threat Landscape for BESS and IBR

The cyber risk landscape for BESS and IBR can be broken up by threats, vulnerabilities, and consequences for these systems. This presentation walks through the cyber risk landscape for BESS through the lens of consequence-informed awareness and mitigation for each risk factor. Threats with varying capabilities have been demonstrated in real-world events. Though threat actors can rarely be directly influenced by organizations, exposure of systems to adversaries can be limited (a known issue with IBR systems) to reduce likelihood of adversaries accessing systems with disruptive consequences. Common trends in disclosed IBR vulnerabilities include weak password generation or managements for various devices or services and web portal vulnerabilities that provide unauthorized access to data or capabilities or elevated user privileges. Understanding these common vulnerabilities and considering the consequences if these types of vulnerabilities were to occur can help mitigate risk. Consequences range from loss-of-view events that have no reliability impact to asset damage or grid stability impacts. Five case studies are briefly shared to highlight trends in real-world events affecting IBR.

14 - SOLAR ENERGY↗