Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “design for safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16
All sourcesNASA NTRSDOE OSTI
NASA NTRS2005

System Safety in Early Manned Space Program: A Case Study of NASA and Project Mercury

This case study provides a review of National Aeronautics and Space Administration s (NASA's) involvement in system safety during research and evolution from air breathing to exo-atmospheric capable flight systems culminating in the successful Project Mercury. Although NASA has been philosophically committed to the principals of system safety, this case study points out that budget and manpower constraints-as well as a variety of internal and external pressures can jeopardize even a well-designed system safety program. This study begins with a review of the evolution and early years of NASA's rise as a project lead agency and ends with the lessons learned from Project Mercury.

Hansen, Frederick D.↗
DOE OSTI2022

Accelerated Materials Deployment in Advanced Nuclear Power Plants

The purpose of this report is to begin the development of a maximally efficient process for licensing and deploying new materials in Advanced Non-Light-Water Reactors (ANLWRs). Some new materials that are to be used in some new plants are seen as possibly introducing risks, because our understanding of those new materials’ behavior in the conditions generated by some novel plant designs is less complete than our understanding of the behavior of materials with long use histories in existing designs. In these cases, an approved code/standard or a code case to support the use of these materials in the novel design’s safety case may not exist for the regulator to utilize as part of the licensing determination. This circumstance creates the potential for an extremely long licensing process for new designs using new materials. The present strategy is to show how to manage these risks proactively, in such a way as to permit licensing decisions to be made in a timely manner, based on this risk management process. The present report outlines the gaps in the current codes to support deployment and use of novel materials and begins the development of the necessary risk management framework that is focused on the subject materials issues; it is based on risk-informed in-service surveillance practices, carried out in such a way as to compensate for current limitations in our state of knowledge. This development will enable licensing and deployment of the subject materials, conditional on the proactive surveillance process to be established. While this report is occasioned by limitations in our knowledge of certain materials issues that may arise in advanced designs, in-service surveillance is always done in order to compensate for a lack of knowledge: if we knew that components were not already failed and not trending toward failure, we would not perform surveillance, even in current-generation plants (except that prescriptive requirements would force us to do so). What is different about the surveillance program discussed here is that the issues are newer and the relevant experience base is less complete, so the surveillance presently contemplated may need to measure new things and/or measure them more often than has been traditional for surveillance coupons. The present report is devoted to the risk management framework and applies American Society of Mechanical Engineers Boiler and Pressure Vessel Code Section XI, Division [1] to establish the structure of a protocol for carrying out the necessary surveillance. These documents are generic: they do not tell us how often to surveille, or what to surveille, or what to measure, but rather how to determine those things, given certain technical inputs. The Regulatory Development R&D Program [2] is currently developing the companion supporting technical basis for the materials surveillance technology that, when completed and validated, can be used by owner/operator and NRC to implement a materials degradation management program for ANLWRs. This report also outlines salient points of discussion, positive potential outcomes, and potential concerns from industry and the USNRC. These aspects of the report intend to inform future work to develop a proposed technical process for adoption by the industry and endorsement by the USNRC to allow developers to propose a risk informed and conservative approach for the use of materials where operating experience/data and codes and standards may not exist for use of a novel material in an operating reactor environment. Additionally, such a technology could be leveraged to potentially reduce part of the upfront materials data requirements from ongoing long-term materials testing so that early action on license application could be undertaken by NRC, in parallel with the continuation of long-term data collection. This could accelerate the schedule for a first-of-a-kind ANLWR deployment or a nth-of-a-kind new materials insertion for established ANLWR designs.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI1989

Nuclear Safety [Vol. 30, No. 3, July-September 1989]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 325 Safety of Framatome Advanced Nuclear Steam Supply Systems Designs by J. A. Charles and D. Lange, 333 Book Review of Nuclear Accidents: Intervention Levels for the Protection of the Public by H. B. Piper; ACCIDENT ANALYSIS: 335 Living PRA Computer Systems by S. C. Dinsmore and H.-P. Balfanz, 343 Summary of ICAP Assessments of RELAP5/MOD2 by W. E. Driskell and R. G. Hanson; CONTROL AND INSTRUMENTATION: 352 Thermal Performance Monitoring System at Maanshan Nuclear Power Plant by H.-J. Chao, Y.-P. Lin, G.-H. Jou, L.-Y. Liao, and Y.-B. Chen; DESIGN FEATURES: 358 Warning Systems for Nuclear Power Plant Emergencies by J. H. Sorensen and D. S. Mileti; WASTE AND SPENT FUEL MANAGEMENT: 371 Activities Related to Waste Management Compiled by E G. Silver; OPERATING EXPERIENCES: 382 Steam Generator Tube Performance: Experience with Water-Cooled Nuclear Power Reactors During 1985 by O. S. Tatone and R. L. Tapping, 400 Systems Interaction Analyses: Concepts and Techniques (Part II) by M. D. Muhlheim and G. A. Murphy, 413 Reactor Shutdown Experience Compiled by J. W. Cletcher, 416 Operating U.S. Power Reactors Compiled by E G. Silver; RECENT DEVELOPMENTS: 440 General Administrative Activities Compiled by E G. Silver, 460 Reports, Standards, and Safety Guides by D. S. Queener, 466 Status of Power-Reactor Licensing Activities Compiled by E G. Silver, 470 Proposed Rule Changes as of Mar. 31, 1989; ANNOUNCEMENTS: 334 Proceedings Published, 351 CEC Seminar on Methods and Codes for Assessing the Off-Site Consequences of Nuclear Accidents, 357 Short Course on Multiphase Flow and Heat Transfer: Bases and Applications in A: The Nuclear Power Industry B: The Process Industries, 357 International Conference on Probabilistic Safety Assessment and Management, 478 International Topical Meeting on the Safety, Status, and Future of Non-Commercial Reactors and Irradiation Facilities, 475 The Authors.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI1989

Nuclear Safety [Vol. 30, No. 3, July-September 1989]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 325 Safety of Framatome Advanced Nuclear Steam Supply Systems Designs by J. A. Charles and D. Lange, 333 Book Review of Nuclear Accidents: Intervention Levels for the Protection of the Public by H. B. Piper; ACCIDENT ANALYSIS: 335 Living PRA Computer Systems by S. C. Dinsmore and H.-P. Balfanz, 343 Summary of ICAP Assessments of RELAP5/MOD2 by W. E. Driskell and R. G. Hanson; CONTROL AND INSTRUMENTATION: 352 Thermal Performance Monitoring System at Maanshan Nuclear Power Plant by H.-J. Chao, Y.-P. Lin, G.-H. Jou, L.-Y. Liao, and Y.-B. Chen; DESIGN FEATURES: 358 Warning Systems for Nuclear Power Plant Emergencies by J. H. Sorensen and D. S. Mileti; WASTE AND SPENT FUEL MANAGEMENT: 371 Activities Related to Waste Management Compiled by E G. Silver; OPERATING EXPERIENCES: 382 Steam Generator Tube Performance: Experience with Water-Cooled Nuclear Power Reactors During 1985 by O. S. Tatone and R. L. Tapping, 400 Systems Interaction Analyses: Concepts and Techniques (Part II) by M. D. Muhlheim and G. A. Murphy, 413 Reactor Shutdown Experience Compiled by J. W. Cletcher, 416 Operating U.S. Power Reactors Compiled by E G. Silver; RECENT DEVELOPMENTS: 440 General Administrative Activities Compiled by E G. Silver, 460 Reports, Standards, and Safety Guides by D. S. Queener, 466 Status of Power-Reactor Licensing Activities Compiled by E G. Silver, 470 Proposed Rule Changes as of Mar. 31, 1989; ANNOUNCEMENTS: 334 Proceedings Published, 351 CEC Seminar on Methods and Codes for Assessing the Off-Site Consequences of Nuclear Accidents, 357 Short Course on Multiphase Flow and Heat Transfer: Bases and Applications in A: The Nuclear Power Industry B: The Process Industries, 357 International Conference on Probabilistic Safety Assessment and Management, 478 International Topical Meeting on the Safety, Status, and Future of Non-Commercial Reactors and Irradiation Facilities, 475 The Authors.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2022

Simulation of natural circulation cartridge loop experiments and application to molten salt reactors

This work uses the TRAC/RELAP Advanced Computational Engine (TRACE) thermal hydraulics (TH) code to model natural circulation cartridge loop experiments previously conducted at Oak Ridge National Laboratory (ORNL) using water and compares the simulated and experimental results. TRACE is also used to characterize natural circulation in the cartridge loop vehicle using FLiNaK as the working fluid. The experimental vehicle is a buoyancy-aided, annular cartridge loop, referred to as a thermosyphon, and is designed to aid in qualifying liquid–fueled and/or liquid–cooled irradiation experiments for the Versatile Test Reactor (VTR), which is currently being designed in the United States. Out-of-pile water experiments have been conducted using the cartridge and the Thermosyphon Test Loop facility at ORNL, and future experiments are anticipated that would use other molten salt surrogates as the working fluid, followed by eventual insertion of a similar cartridge into VTR. Additionally, this work aims to determine how well TRACE can replicate the natural convection conditions that were observed experimentally; this serves as an initial step for validating the modeling tool for design and safety calculations to support future irradiation experiments in VTR. Initial predictions of potential experiments were made using FLiNaK as the natural circulation fluid to demonstrate the relevance of the cartridge design to molten salt reactors (MSRs). Results from this study indicate that TRACE can accurately capture natural convection phenomena in the thermosyphon and that several design changes to the current cartridge vehicle are necessary to achieve hydraulic conditions similar to those expected in MSRs.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI1975

Nuclear Safety [Vol. 16, No. 2, March-April 1975]

Nuclear Safety covers significant developments in the field of nuclear safety. The scope is limited to topics relevant to the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, safety considerations in regard to the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 127 Quality Assurance in the Construction of Nuclear Power Plants by Sidney A. Bernsen, 141 1974 ANS Topical Meeting on Fast Reactor Safety by M. H. Fontana; CONTROL AND INSTRUMENTATION: 150 GBR-4 Protection Systems: Failures and Their Consequences by Peter Burgsmüller, J. J. Dekais, Albert Krähe, Raffaello Pignatelli, and Gottfried Vieider, 162 Standby Emergency Power Systems. Part 2—The Later Plants by E. W. Hagen; PLANT SAFETY FEATURES: 180 Radiotoxic Hazard Measure for Buried Solid Radioactive Waste by J. Hamstra, 190 The Thirteenth AEC Air-Cleaning Conference by D. W. Moeller, D. W. Underhill, and M. W. First, 203 Book Review: Nuclear Criticality Safety; CONSEQUENCES OF EFFLUENT RELEASE: 204 Environmental Radiation Effects of Nuclear Facilities in New York State by M. S. Terpilak and B. L. Jorgensen, 222 Book Review: Thermal Ecology; OPERATING EXPERIENCES: 223 Set-Point Drift in Nuclear Power-Plant Safety-Related Instrumentation Adapted by the Nuclear Safety Staff, 224 Diesel-Generator Operating Experience at Nuclear Power Plants, 227 Summary of Operating U. S. Power Reactors as of Jan. 1, 1975, 232 Selected Safety-Related Occurrences Reported in November and December 1974 Compiled by William R. Casto, 235 Recent Occurrences at Nuclear Reactors and Their Causes Compiled by William R. Casto; CURRENT EVENTS: 243 General Administrative Activities Compiled by Wm. B. Cottrell, 251 Action on Power-Reactor Projects Undergoing Regulatory Review or Consideration Compiled by Wm. B. Cottrell, 266 Action on Nonreactor Projects Undergoing Regulatory Review or Consideration Compiled by Wm. B Cottrell, 268 Proposed Rule Changes as of Jan. 1, 1975; MISCELLANY: 149 Course in Italy on High-Energy Radiation Dosimetry and Protection (Announcement), 250 Course at Northwestern on Safety of Light-Water-Cooled Nuclear Power Plants (Announcement), 266 Symposium of the Combined Effects on the Environment of Radioactive, Chemical, and Thermal Releases from the Nuclear Industry (Announcement), 271 Short Course on Engineering for Extreme Winds and Tornadoes (Announcement), 272 Three 1-Week Courses at MIT on Nuclear Power-Reactor Safety (Announcement), 272 Harvard University Short Courses (Announcement).

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI1975

Nuclear Safety [Vol. 16, No. 1, January-February 1975]

Nuclear Safety covers significant developments in the field of nuclear safety. The scope is limited to topics relevant to the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, safety considerations in regard to the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 1 AEC Working Paper on Population Density Around Nuclear Power-Plant Sites Adapted by J. Ft. Buchanan, 8 Water-Reactor Safety-Research Information Meeting by Wm. B. Cottrell, D. O. Hobson, and G. D. Whitman; ACCIDENT ANALYSIS: 29 Burnout in Boiling Heat Transfer. Part I: Pool-Boiling Systems by A. E. Bergles; PLANT SAFETY FEATURES: 43 Radionuclide Behavior During Normal Operation of Liquid-Metal-Cooled Fast Breeder Reactors. Part 1: Production by C. A. Erdman and A. B. Reynolds; CONSEQUENCES OF EFFLUENT RELEASE: 60 The Control, Monitoring, and Reporting of Radioactivity in Effluents. Part 1: AEC-Owned Facilities by M. B. Biles and F. E. Coffman, 71 The Control, Monitoring, and Reporting of Radioactivity in Effluents. Part 2: AEC-Licensed Facilities by L. B. Higginbotham and J. T. Collins; OPERATING EXPERIENCES: 76 Incident at the Lucens Reactor by J. M. Miller, 79 IAEA Symposium on Experience from Operating and Fueling of Nuclear Power Reactors by William A. Pryor, 87 Recent Occurrences at Nuclear Reactors and Their Causes Compiled by William R. Casto, 98 Summary of Operating U. S. Power Reactors as of Nov. 1. 1974, 101 Selected Safety-Related Occurrences Reported in September and October 1974 Compiled by William R. Casto; CURRENT EVENTS: 104 General Administrative Activities Compiled by Wm. B. Cottrell, 110 Action on Power-Reactor Projects Undergoing Regulatory Review or Consideration Compiled by Wm. B. Cottrell, 119 Action on Nonreactor Projects Undergoing Regulatory Review or Consideration Compiled by Wm. B. Cottrell, 121 Proposed Rule Changes as of Oct. 31, 1974; MISCELLANY: 97 ASTM—Euratom Symposium on Radiation Dosimetry: Developments and Standardization (Announcement), 118 Workshops on In-Pile Filter Testing (Announcement), 119 IAEA Symposium on Radiological Impacts from Releases from Nuclear Facilities into Aquatic Environments (Announcement).

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2025

Toward integrating high-fidelity CFD approaches in the thermal-hydraulic analysis of turbulent dry cask systems

Nuclear power plants have been supplying resilient and reliable electricity for decades, contributing to energy independence of the U.S.. However, nuclear waste management remains one of the most significant challenges in the industry. The safety of dry cask storage systems relies heavily on their thermal-hydraulic performance. Computational Fluid Dynamics (CFD) simulations are often used to demonstrate this performance and ensure that the system design meets safety standards. This study presents reduced numerical models for various types of dry cask systems. These numerical models can produce efficient and fast results based on the employed modeling strategies. Additionally, the study uses a novel approach to high-fidelity simulations to evaluate modeling assumptions in dry cask modeling. Large Eddy Simulations (LES) are used for this purpose, particularly in regions where fluid velocity is relatively high and the turbulence characteristics become important. Furthermore, the results of these high-fidelity simulations will enhance the interpretation of outcomes produced from a lower-fidelity CFD model.

CFD↗
NASA NTRS2013

Structural Analysis Using Computer Based Methods

The stiffness of a flex hose that will be used in the umbilical arms of the Space Launch Systems mobile launcher needed to be determined in order to properly qualify ground umbilical plate behavior during vehicle separation post T-0. This data is also necessary to properly size and design the motors used to retract the umbilical arms. Therefore an experiment was created to determine the stiffness of the hose. Before the test apparatus for the experiment could be built, the structure had to be analyzed to ensure it would not fail under given loading conditions. The design model was imported into the analysis software and optimized to decrease runtime while still providing accurate rest~lts and allow for seamless meshing. Areas exceeding the allowable stresses in the structure were located and modified before submitting the design for fabrication. In addition, a mock up of a deep space habitat and the support frame was designed and needed to be analyzed for structural integrity under different loading conditions. The load cases were provided by the customer and were applied to the structure after optimizing the geometry. Once again, weak points in the structure were located and recommended design changes were made to the customer and the process was repeated until the load conditions were met without exceeding the allowable stresses. After the stresses met the required factors of safety the designs were released for fabrication.

Dietz, Matthew R.↗
DOE OSTI2025

Lessons Learned from MARVEL Initial Fabrication and Testing

The Microreactor Applications Research Validation and Evaluation (MARVEL) project is intended to be amongst the first U.S. advanced reactor demonstrations in four decades. By virtue of being sponsored directly by the U.S. Department of Energy, the reactor is intended to benefit the broader nuclear community by exercising design processes, safety reviews, and supply chains. This project is intent on publicly documenting key lessons learned along the way toward demonstration. Building on a 2024 report that focused on lessons learned from the design and project management phase, this 2025 edition focuses on findings from the MARVEL guard vessel fabrication and primary coolant apparatus test (PCAT) testing.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2020

Early Phase Molten Salt Reactor Safety Evaluation Considerations

This report documents rationale to develop analytical tools and data applicable to the safety and design of advanced molten salt power reactors. This report represents early steps in the implementation of the tasks defined by Oak Ridge National Laboratory (ORNL) in 2018 in the following sections of A Safety and Licensing Roadmap to identify the Research and Development Gaps of Commercial Molten Salt Reactors

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2021

Mechanistic Source Term Determination

Understand the function and performance of the different barriers to radionuclide release in HTGRs, how these are incorporated into reactor design and safety analyses, and approaches to estimate radionuclide release under specific reactor conditions.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS1975

Safety management of a complex R and D ground operating system

A perspective on safety program management was developed for a complex R&D operating system, such as the NASA-Lewis Research Center. Using a systems approach, hazardous operations are subjected to third-party reviews by designated-area safety committees and are maintained under safety permit controls. To insure personnel alertness, emergency containment forces and employees are trained in dry-run emergency simulation exercises. The keys to real safety effectiveness are top management support and visibility of residual risks.

Connors, J. F.↗
NASA NTRS1975

Safety management of a complex R&D ground operating system

A perspective on safety program management has been developed for a complex R&D operating system, such as the NASA-Lewis Research Center. Using a systems approach, hazardous operations are subjected to third-party reviews by designated area safety committees and are maintained under safety permit controls. To insure personnel alertness, emergency containment forces and employees are trained in dry-run emergency simulation exercises. The keys to real safety effectiveness are top management support and visibility of residual risks.

Connors, J. F.↗
NASA NTRS1975

Design definition study of a lift/cruise fan technology V/STOL aircraft. Volume 2: Technology aircraft

Technology flight vehicles were defined for three different approaches which demonstrate the concept and characteristics of the multipurpose aircraft established for Navy missions. The propulsion system used for the various technology flight vehicles was representative of that established for the multipurpose aircraft. Existing J97-GE100 gas generators were selected based on cost, availability and exhaust characteristics. The LF459 fans were also selected and are compatible with both technology and operational vehicles. To comply with the design guideline safety criteria, it was determined that three gas generators were required to provide engine out safety in the hover flight mode. The final propulsion system established for the technology aircraft was three existing J97 gas generators powering three LF459 fans. Different aircraft candidates were evaluated for application to the three designated design approaches. Each configuration was evaluated on the basis of (1) propulsion system integration, (2) modification required, (3) pilot's visibility, (4) payload volume, and (5) adaptability to compatible location of center-of-gravity/aerodynamic center and thrust center.

Source record↗
DOE OSTI2022

An ontology-based fault generation and fault propagation analysis approach for safety-critical computer systems at the design stage

Abstract Fault propagation analysis is a process used to determine the consequences of faults residing in a computer system. A typical computer system consists of diverse components (e.g., electronic and software components), thus, the faults contained in these components tend to possess diverse characteristics. How to describe and model such diverse faults, and further determine fault propagation through different components are challenging problems to be addressed in the fault propagation analysis. This paper proposes an ontology-based approach, which is an integrated method allowing for the generation, injection, and propagation through inference of diverse faults at an early stage of the design of a computer system. The results generated by the proposed framework can verify system robustness and identify safety and reliability risks with limited design level information. In this paper, we propose an ontological framework and its application to analyze an example safety-critical computer system. The analysis result shows that the proposed framework is capable of inferring fault propagation paths through software and hardware components and is effective in predicting the impact of faults.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Contribution of IAEA coordinated research projects to light water reactors advanced technology fuel testing and simulation

The Fukushima-Daiichi accident in 2011 highlighted the pressing need for enhanced design and safety analysis of nuclear fuels, especially under accident conditions in nuclear power plants (NPPs). To address this need, the international nuclear fuel community has developed several concepts of Accident Tolerant and Advanced Technology Fuels (ATFs) for light water reactors. The International Atomic Energy Agency (IAEA), at the request of its Member States, has initiated a series of three Coordinated Research Projects (CRPs) to aid in the development and testing of these ATFs. Further, these projects, known as FUMAC, ACTOF, and ATF-TS, focus on the experimentation and simulation of ATFs under various accident conditions, including design basis accidents and design extension conditions. This paper provides a comprehensive overview of the main activities, as well as the achieved or anticipated results of these three CRPs. The insights and advancements gained from these projects will enable IAEA Member States to further refine nuclear fission technology, thereby contributing to efforts aimed at mitigating climate change.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2006

ADGS-2100 Adaptive Display and Guidance System Window Manager Analysis

Recent advances in modeling languages have made it feasible to formally specify and analyze the behavior of large system components. Synchronous data flow languages, such as Lustre, SCR, and RSML-e are particularly well suited to this task, and commercial versions of these tools such as SCADE and Simulink are growing in popularity among designers of safety critical systems, largely due to their ability to automatically generate code from the models. At the same time, advances in formal analysis tools have made it practical to formally verify important properties of these models to ensure that design defects are identified and corrected early in the lifecycle. This report describes how these tools have been applied to the ADGS-2100 Adaptive Display and Guidance Window Manager being developed by Rockwell Collins Inc. This work demonstrates how formal methods can be easily and cost-efficiently used to remove defects early in the design cycle.

Whalen, Mike W.↗