Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “quantitative risk assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

Autonomous Tools for Attack Surface Reduction (Final Report)

The electric power grid is a complex critical infrastructure that forms the lifeline of modern society, and its secure and reliable operation is of paramount importance to national security and economic wellbeing. However, recent findings documented in authoritative sources indicate the threat of cyber-based attacks growing in numbers and sophistication. However, securing the grid against stealthy cyberattacks is a challenging task due to legacy nature of the infrastructure coupled with dynamic nature of threat landscape and ever-growing sophistication of the adversaries. Additionally, the grid’s attack surface continues to grow with the increased dependence on digital communications and control that now extends to each consumer through smart meters and distributed energy resources. Unfortunately, this expansive surface increases the grid’s vulnerability and further exposes critical control systems in both substations and control centers. To respond to this emerging need, we had successfully assembled an interdisciplinary team with academic- industry partnership to successfully conduct research, development, evaluation, demonstration, and commercialization of attack surface reduction tools, whose goal was to significantly reduce the cyber attack surface in the North American power grid. Our proposed project was a synergistic collaborative effort leveraging the synergistic expertise of the team members across power systems, cyber security and CPS security, testbeds, field deployments and demonstration, and successful commercialization. The following are the specific tasks that have been successfully completed two phases (2016-2020). Phase I: Task 1: Developed and implemented a robust Project Management and Data Management Plan, coupled with a well thought out Risk Mitigation Plan. Task 2.1: Developed a comprehensive framework that continually assesses and autonomously reduces the attack surface for the power grid control environment spanning across substations, control center and the SCADA network to significantly reduce the risks of cyber attacks. Task 2.2: Developed attack surface analysis techniques, metrics, and tools that assess the attack surface at multiple levels including the control center, substations, and the SCADA network. Task 2.3: Developed attack surface reduction techniques and tools that dynamically reduce attack surface and hence increase attacker’s cost without interfering in the critical functions of the system. Task 2.4: Prototyped, implemented, and quantitatively evaluated/validated the techniques and tools on a realistic industrial CPS security testbed environment by leveraging the unique resources of the team. Task 3: Developed Commercialization plan to transition the developed tools into power system industry stakeholders for a broader adoption by leveraging the expertise of our industrial members. Phase II: Task 4: Successfully completed field demonstration, verification, and evaluation of the effectiveness of the attack surface analysis and reduction techniques on a realistic utility testbed environment. This also involved the development of realistic scenarios, sound metrics, data sets, evaluation criteria, and documentation. Technology integration & Field demonstration: The project had significantly advanced the state-of-the-art research and practice in improving the cybersecurity of our nation’s power grid infrastructure against cyber threats. In particular, the proposed, designed, and deployed attack surface analysis and reduction algorithms and tools have contributed to significantly reducing the exposure and risk of the devices, substations, and the integrated SCADA/EMS/ DMS grid environment to cyber threat. Strong demonstration and evaluation techniques have verified the feasibility of the developed techniques on realistic cyber-physical testbeds and utility partner's real grid environment, and collaborative research and evaluation of attack surface reduction techniques (for wide-are monitoring and control) within a vendor (GE) EMS platform. The Attack Host Analyzer (AHA) tool that was developed through this project was made available through GitHub.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Financial Exposure After a Sealed-Source Release: Insurance Limits, Federal Cost Pathways, and Implications for Gamma Irradiator Substitution

This report assesses whether private insurance and existing federal authorities would likely provide meaningful financial protection to private operators of self-shielded gamma irradiators after a major sealed-source release. It does not answer this question quantitatively because publicly observable data on premiums, limits, uptake, and claims outcomes for this risk class appear sparse. Instead, it uses a qualitative structural analysis based on prior literature, review of relevant federal authorities, limited observable insurance-market evidence, expert outreach, and historical analogs. The analysis finds that available public and private mechanisms do not combine into a clear, dependable, or readily verifiable compensation structure for ordinary private sealed-source operators. Institutions therefore should not assume that either insurance or government response will make them financially whole after a severe incident. Source reduction and replacement remain more dependable than post-event financial mechanisms for reducing institutional exposure and broader radiological risk.

99 GENERAL AND MISCELLANEOUS↗

Robotic lunar surface operations: Engineering analysis for the design, emplacement, checkout and performance of robotic lunar surface systems

The assembly, emplacement, checkout, operation, and maintenance of equipment on planetary surfaces are all part of expanding human presence out into the solar system. A single point design, a reference scenario, is presented for lunar base operations. An initial base, barely more than an output, which starts from nothing but then quickly grows to sustain people and produce rocket propellant. The study blended three efforts: conceptual design of all required surface systems; assessments of contemporary developments in robotics; and quantitative analyses of machine and human tasks, delivery and work schedules, and equipment reliability. What emerged was a new, integrated understanding of hot to make a lunar base happen. The overall goal of the concept developed was to maximize return, while minimizing cost and risk. The base concept uses solar power. Its primary industry is the production of liquid oxygen for propellant, which it extracts from native lunar regolith. Production supports four lander flights per year, and shuts down during the lunar nighttime while maintenance is performed.

Woodcock, Gordon R.↗

Orbital Debris Quarterly News: No. 1 - Volume 13

Topics discussed include: new debris from a decommissioned satellite with a nuclear power source; debris from the destruction of the Fengyun-1C meteorological satellite; quantitative analysis of the European Space Agency's Automated Transfer Vehicle 'Jules Verne' reentry event; microsatellite impact tests; solar cycle 24 predictions and other long-term projections and geosynchronus (GEO) environment for the Orbital Debris Engineering Model (ORDEM2008). Abstracts from the NASA Orbital Debris Program Office, examining satellite reentry risk assessments and statistical issues for uncontrolled reentry hazards, are also included.

Liou, J.-C.↗

A Biomechanical Approach to Assessing Hip Fracture Risk

Bone loss in microgravity is well documented, but it is difficult to quantify how declines in bone mineral density (BMD) contribute to an astronaut's overall risk of fracture upon return. This study uses a biomechanical approach to assessing hip fracture risk, or Factor of Risk (Phi), which is defined as the ratio of applied load to bone strength. All long-duration NASA astronauts from Expeditions 1-18 were included in this study (n=25), while crewmembers who flew twice (n=2) were treated as separate subjects. Bone strength was estimated based on an empirical relationship between areal BMD at the hip, as measured by DXA, and failure load, as determined by mechanical testing of cadaver femora. Fall load during a sideways fall was calculated from a previously developed biomechanical model, which takes into account body weight, height, gender, and soft tissue thickness overlying the lateral aspect of the hip that serves to attenuate the impact force. While no statistical analyses have been performed yet, preliminary results show that males in this population have a higher FOR than females, with a post- flight Phi of 0.87 and 0.36, respectively. FOR increases 5.1% from preflight to postflight, while only one subject crossed the fracture "threshold" of Phi = 1, for a total of 2 subjects with a postflight Phi > 1. These results suggest that men may be at greater risk for hip fracture due largely in part to their relatively thin soft tissue padding as compared to women, since soft tissue thickness has the highest correlation (R(exp 2)= .53) with FOR of all subject-specific parameters. Future work will investigate changes in FOR during recovery to see if baseline risk levels are restored upon return to 1-g activity. While dual x-ray absorptiometry (DXA) is the most commonly used clinical measure of bone health, it fails to provide compartment-specific information that is useful in assessing changes to bone quality as a result of microgravity exposure. Peripheral quantitative computed tomography (pQCT) accomplishes this by imaging transverse "slices" of the long bones. This project was a re-analysis of a 90 day bed rest study to determine if changes to cortical and trabecular compartments could be detected in the distal tibia with statistical significance using a new pQCT image analysis method. Nearly all changes in bone mineral density (BMD) and cross sectional area (CSA) measures were seen with statistical significance, with the exception of a change in cortical BMD. Total bone CSA increased by 1.1 % (p =0.01), cortical CSA decreased by - 5.6% (p<0.001) and trabecular CSA increased by 1.76% (p=0.007); the combination of which suggests bone resorption occurred at the endocortical surface in response to mechanical unloading by bed rest. Furthermore, total BMD and trabecular BMD decreased (-3.8%, p=0.001 and -2.8%, p =0.007, respectively), while decreases in cortical BMD failed to reach significance (-1.2%, p=0.07). Given that compartment-specific changes are seen with significance and are likely to influence bone strength, it is recommended that pQCT remain a standard measure used in bed rest because it provides a unique measure by which to better evaluate the efficacy of countermeasures to microgravity-induced bone loss.

Ellman, Rachel↗

An Example of Risk Informed Design

NASA Engineering requested a Probabilistic Risk Assessment (PRA) to compare the difference in the risk of Loss of Crew (LOC) and Loss of Mission (LOM) between different designs of a fluid assembly. They were concerned that the configuration favored by the design team was more susceptible to leakage than a second proposed design, but realized that a quantitative analysis to compare the risks between the two designs might strengthen their argument. The analysis showed that while the second design did help improve the probability of LOC, it did not help from a probability of LOM perspective. This drove the analysis team to propose a minor design change that would drive the probability of LOM down considerably. The analysis also demonstrated that there was another major risk driver that was not immediately obvious from a typical engineering study of the design and was therefore unexpected. None of the proposed alternatives were addressing this risk. This type of trade study demonstrates the importance of performing a PRA in order to completely understand a system's design. It allows managers to use risk as another one of the commodities (e.g., mass, cost, schedule, fault tolerance) that can be traded early in the design of a new system.

Banke, Rick↗

Assessing Hurricane Katrina Vegetation Damage at Stennis Space Center using IKONOS Image Classification Techniques

Hurricane Katrina inflicted widespread damage to vegetation in southwestern coastal Mississippi upon landfall on August 29, 2005. Storm damage to surface vegetation types at the NASA John C. Stennis Space Center (SSC) was mapped and quantified using IKONOS data originally acquired on September 2, 2005, and later obtained via a Department of Defense ClearView contract. NASA SSC management required an assessment of the hurricane s impact to the 125,000-acre buffer zone used to mitigate rocket engine testing noise and vibration impacts and to manage forestry and fire risk. This study employed ERDAS IMAGINE software to apply traditional classification techniques to the IKONOS data. Spectral signatures were collected from multiple ISODATA classifications of subset areas across the entire region and then appended to a master file representative of major targeted cover type conditions. The master file was subsequently used with the IKONOS data and with a maximum likelihood algorithm to produce a supervised classification later refined using GIS-based editing. The final results enabled mapped, quantitative areal estimates of hurricane-induced damage according to general surface cover type. The IKONOS classification accuracy was assessed using higher resolution aerial imagery and field survey data. In-situ data and GIS analysis indicate that the results compare well to FEMA maps of flooding extent. The IKONOS classification also mapped open areas with woody storm debris. The detection of such storm damage categories is potentially useful for government officials responsible for hurricane disaster mitigation.

Spruce, Joseph P.↗

Assessment of Methane Generation from the Thermolysis of Organics in Caustic Waste

Methane generation has been detected during thermolytic Hydrogen Generation Rate (HGR) testing of SRS tank waste and in simulant samples. Simulant testing has shown methane generation in the presence of trimethylsilanol (TMS) and radioactive sample testing has shown methane generation in presence of methylmercury, both of which are found within SRS waste tanks. The 2019 report Evaluation of the Current State of Knowledge for Thermolysis of Organics within SRS Waste Forming Volatile Organic Compounds (VOCs) reviewed historical data and assessed literature pertaining to thermolytic methane generation. That review recommended undertaking thermolysis studies on simulated waste to detect and quantify VOCs. The purpose of this assessment is to review chemistry and current knowledge of organics in SRS waste to recommend which organics in SRS waste tanks, if any, should be tested for thermolytic methane generation. An evaluation of observed methane generation rates has been performed to assess the implication for current CSTF controls. Based on the inputs used in this report, it was concluded that no methane generation data observed to date has challenged the existing 5% organic contribution to the Composite Lower Flammability Limit (CLFL) assumption in the CSTF tank farm at temperatures below 100 °C. Evidence shows that thermolytic pathways to methane generation become significant at temperatures >100 °C in caustic waste. Currently, the influences of thermolytic methane production on the flammability of vessels at >100 °C (e.g., evaporators) is unclear. It is recommended that testing should be undertaken using the HGR experimental approach for methane generation. The initial simulant testing should obtain quantitative methane generation rates at elevated temperatures for methylated siloxanes/silanes and methylmercury with the goal of determining the current mechanism for thermolytic methane generation seen in SRS tank waste. The results of this testing should then be compiled and analyzed to ascertain the risk of challenging the current projected organic contribution of 5% to the CLFL at elevated temperatures. Following this testing, an evaluation of possible flammable gas generation in the 2H and 3H Evaporators should be performed to assess the risk of methane generation at the high temperatures employed by the evaporators.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Pitfalls and Precautions When Using Predicted Failure Data for Quantitative Analysis of Safety Risk for Human Rated Launch Vehicles

Launch vehicle reliability analysis is largely dependent upon using predicted failure rates from data sources such as MIL-HDBK-217F. Reliability prediction methodologies based on component data do not take into account risks attributable to manufacturing, assembly, and process controls. These sources often dominate component level reliability or risk of failure probability. While consequences of failure is often understood in assessing risk, using predicted values in a risk model to estimate the probability of occurrence will likely underestimate the risk. Managers and decision makers often use the probability of occurrence in determining whether to accept the risk or require a design modification. Due to the absence of system level test and operational data inherent in aerospace applications, the actual risk threshold for acceptance may not be appropriately characterized for decision making purposes. This paper will establish a method and approach to identify the pitfalls and precautions of accepting risk based solely upon predicted failure data. This approach will provide a set of guidelines that may be useful to arrive at a more realistic quantification of risk prior to acceptance by a program.

Hatfield, Glen S.↗

Space Radiation Cancer Risks

Space radiation presents major challenges to astronauts on the International Space Station and for future missions to the Earth s moon or Mars. Methods used to project risks on Earth need to be modified because of the large uncertainties in projecting cancer risks from space radiation, and thus impact safety factors. We describe NASA s unique approach to radiation safety that applies uncertainty based criteria within the occupational health program for astronauts: The two terrestrial criteria of a point estimate of maximum acceptable level of risk and application of the principle of As Low As Reasonably Achievable (ALARA) are supplemented by a third requirement that protects against risk projection uncertainties using the upper 95% confidence level (CL) in the radiation cancer projection model. NASA s acceptable level of risk for ISS and their new lunar program have been set at the point-estimate of a 3-percent risk of exposure induced death (REID). Tissue-averaged organ dose-equivalents are combined with age at exposure and gender-dependent risk coefficients to project the cumulative occupational radiation risks incurred by astronauts. The 95% CL criteria in practice is a stronger criterion than ALARA, but not an absolute cut-off as is applied to a point projection of a 3% REID. We describe the most recent astronaut dose limits, and present a historical review of astronaut organ doses estimates from the Mercury through the current ISS program, and future projections for lunar and Mars missions. NASA s 95% CL criteria is linked to a vibrant ground based radiobiology program investigating the radiobiology of high-energy protons and heavy ions. The near-term goal of research is new knowledge leading to the reduction of uncertainties in projection models. Risk projections involve a product of many biological and physical factors, each of which has a differential range of uncertainty due to lack of data and knowledge. The current model for projecting space radiation cancer risk relies on the three assumptions of linearity, additivity, and scaling along with the use of population averages. We describe uncertainty estimates for this model, and new experimental data that sheds light on the accuracy of the underlying assumptions. These methods make it possible to express risk management objectives in terms of quantitative metrics, i.e., the number of days in space without exceeding a given risk level within well defined confidence limits. The resulting methodology is applied to several human space exploration mission scenarios including lunar station, deep space outpost, and a Mars mission. Factors that dominate risk projection uncertainties and application of this approach to assess candidate mitigation approaches are described.

Cucinotta, Francis A.↗

The Regulatory Treatment of Low Frequency External Events as Part of a Risk-Informed, Performance-Based Approach

To assist the developing advanced reactor industry in future licensing efforts, the U.S. Department of Energy Advanced Reactor Demonstration Program Regulatory Development area initiated a project at Argonne National Laboratory to examine the regulatory treatment of external hazards as part of a risk-informed performance-based (RIPB) licensing framework. A RIPB licensing framework for advanced reactors built on establishing an affirmative safety case offers the benefits of increased flexibility regarding key design and licensing decisions based on a detailed assessment and understanding of plant risk. Historically, reactor licensing addressed events of very low frequency primarily through the application of design margin and defense-in-depth philosophy. In contrast, RIPB approaches attempt to evaluate these scenarios at a level of detail commensurate with their risk, which often necessitates an explicit treatment of their frequency and associated consequence. While the detailed analysis of low frequency events provides insights that can help justify alternative treatments to past conservatism, the findings are dependent on the quality and confidence associated with the analyses. The assessment of external hazards presents a unique challenge, as their potential frequency of occurrence, especially of large magnitude events, is inherently uncertain given the long return periods in question. This project aims to identify the benefits and challenges of such approaches for advanced reactor vendors and aid in the development of consistent and appropriate analysis methodologies. The paper summarizes project findings and explores the application of various approaches for different external hazards. In addition, the current work also evaluates the application of the quantitative health objectives as a limit on external event risk, as they are a potential regulatory requirement under the current draft 10 CFR Part 53, which is a new technology-neutral reactor licensing pathway in the U.S.

Grabaskas, David↗

Reliability and Probabilistic Risk Assessment - How They Play Together

Since the Space Shuttle Challenger accident in 1986, NASA has extensively used probabilistic analysis methods to assess, understand, and communicate the risk of space launch vehicles. Probabilistic Risk Assessment (PRA), used in the nuclear industry, is one of the probabilistic analysis methods NASA utilizes to assess Loss of Mission (LOM) and Loss of Crew (LOC) risk for launch vehicles. PRA is a system scenario based risk assessment that uses a combination of fault trees, event trees, event sequence diagrams, and probability distributions to analyze the risk of a system, a process, or an activity. It is a process designed to answer three basic questions: 1) what can go wrong that would lead to loss or degraded performance (i.e., scenarios involving undesired consequences of interest), 2) how likely is it (probabilities), and 3) what is the severity of the degradation (consequences). Since the Challenger accident, PRA has been used in supporting decisions regarding safety upgrades for launch vehicles. Another area that was given a lot of emphasis at NASA after the Challenger accident is reliability engineering. Reliability engineering has been a critical design function at NASA since the early Apollo days. However, after the Challenger accident, quantitative reliability analysis and reliability predictions were given more scrutiny because of their importance in understanding failure mechanism and quantifying the probability of failure, which are key elements in resolving technical issues, performing design trades, and implementing design improvements. Although PRA and reliability are both probabilistic in nature and, in some cases, use the same tools, they are two different activities. Specifically, reliability engineering is a broad design discipline that deals with loss of function and helps understand failure mechanism and improve component and system design. PRA is a system scenario based risk assessment process intended to assess the risk scenarios that could lead to a major/top undesirable system event, and to identify those scenarios that are high-risk drivers. PRA output is critical to support risk informed decisions concerning system design. This paper describes the PRA process and the reliability engineering discipline in detail. It discusses their differences and similarities and how they work together as complementary analyses to support the design and risk assessment processes. Lessons learned, applications, and case studies in both areas are also discussed in the paper to demonstrate and explain these differences and similarities.

Safie, Fayssal↗

Risk Importance Ranking of Fire Data Parameters to Enhance Fire PRA Model Realism

Fire is historically and analytically a significant contributor to nuclear power plant risk. The level of fire risk and the methods, tools and data for modeling this risk is highly debated by experts. One area of debate is the input data used in fire modeling and how to deal with this data’s high uncertainty. This report outlines initial work performed for determining the key parameters causing this uncertainty and how it propagates into nuclear power plant models. This research paves the way for the development of methods to reduce fire data uncertainty used in modeling. The Nuclear Regulatory Commission has mandated that nuclear power plants perform fire risk modeling. However, there are several issues with the current risk modeling implementation that affect the results. Approved modeling methods can be overly conservative and often do not match plant experience. Also, the data used in the modeling can have high uncertainties and is influenced by expert judgement. To evaluate input data uncertainty, researchers performed an initial review of several fire experiments done at Sandia National Laboratories. Uncertainties for fire data can come from many sources, such as experiment design constraints, environmental conditions, or other plant-specific aspects. There are many different significant and insignificant parameters driving the uncertainty. Additionally, the uncertainty of the different input data used in the fire modeling could have a significant or insignificant effect on the entire plant risk. A four-step methodology was developed to perform Integrated Probabilistic Risk Assessment Importance Ranking. A demonstration case using these steps was set up and three of the four steps were completed in fiscal year (FY) 2019 and the fourth step done FY 2020. These steps are: 1. The qualitative analysis of potential sources was conducted with the following items identified for the demonstration. • Maximum heat release rate • Time to maximum heat release rate • Duration of max heat release rate • Time to decay • Thermal conductivity of concrete • Specific heat of concrete • Density of concrete • Cable jacket thickness 2. A quantitative characterization of dominant sources of uncertainty was performed. A list of distributions and determined values of the dominant sources is shown in Appendix A. 3. A quantitative screening of the potential sources of uncertainty using Morris Elementary Effects Analysis was completed. An experimental model using the physics-based fire modeling tool Fire Dynamics Simulator was developed and coupled with the Risk Analysis Virtual Environment. The Morris analysis identified at least two parameters that can be eliminated as significant contributors (specific heat of concrete and cable jacket thickness). 4. Global importance measure (Global IM) analysis to generate a comprehensive ranking based on their influence on the plant risk. In this research, a moment-independent Global IM is used since it can address (a) uncertainty in the input parameters of the fire model, (b) uncertainty in the risk outputs, and (c) non-linearity and interactions among input parameters in the fire model, more accurately than the correlation-based and variance-based global methods. The observations from the research showed that, depending on the initial and boundary conditions of the fire scenarios, fire-induced damage could have a very small probability and could be dominated by the tail of the uncertainty distribution; hence, the accuracy of the correlation-based and variance-based methods is questionable. The moment-independent Global IM analysis in this research provides a better understanding of how experimental uncertainty data affects industry’s plant models and where improvements in that data will have the largest benefit for improving fire modeling accuracy in causing core damage. Among the five unscreened parameters obtained from the Morris EE analysis, the Global IM analysis results for the case study indicated that max heat release rate and fire location are the most important parameters. The report also outlines benefits of using a unified computational platform that integrates the underlying simulations (e.g., a fire progression model), quantitative screening (using the Morris EE method), and the Global IM analysis. A unified platform can (i) facilitate the ranking of input parameters considering multiple key fire scenarios simultaneously, rather than considering one scenario at a time, (ii) contribute to more explicit and accurate treatment of dependencies at multiple levels of Fire PRA, (iii) facilitate the sampling-based uncertainty quantification for Fire PRA, and (iv) help generating both “industry-wide” and "plant-specific" ranking of uncertainty sources in Fire PRA. Future research should be done to include additional parameters such as detection/suppression or cable fire spread. Adding a PRA software such as SAPHIRE to the RAVEN platform would help with plant model integration and improve treatment of fire-induced dependency. The I-PRA risk importance ranking methodology offered in this report can provide valuable information for efficiently (a) enhancing the realism of Fire PRA for existing plants and (b) supporting the development of Dynamic Fire PRA for advanced reactors and new plants.

97 MATHEMATICS AND COMPUTING↗

Helium-ion-induced human cataractogenesis

Retrospective and ongoing analyses of clinical records from 347 primary intraocular melanoman patients treated with helium ions at Lawrence Berkeley Laboratory (LBL) will allow examination of the exposure-response data for human cataract; which is a complication of the therapy from incidental exposure of the lens. Direct particle beam traversal of at least a portion of the lens usually is unavoidable in treatment of posterior intraocular tumors. The precise treatment planned for each patient permits quantitative assessment of the lenticular dose and its radiation quality. We are reporting our preliminary results on the development of helium-ion-induced lens opacifications and cataracts in 54 of these patients who had 10% or less of their lens in the treatment field. We believe these studies will be relevant to estimating the human risk for cataract in space flight.

Blakely, E. A.↗

An Overview of PRA with Applications to Aerospace Systems

Probabilistic Risk Assessment (PRA) is a systematic process for evaluating the probabilities and consequences of undesirable events that can occur in a process or system along with providing a measure of the uncertainty associated with these probability estimates. In the past it was looked at with suspicion by many at NASA, perhaps because of bad experiences with unsuccessful quantitative methods during the Apollo era, but since the Challenger accident NASA has mandated that it be used, and it has been very successful. With NASA's new "faster, better, cheaper" philosophy, it is vital that a tool be in place that can help to achieve these goals in the reliability area. This paper describes the history of PRA, gives examples of its aerospace applications to date, and gives suggestions for how it can be used in the future, both for space shuttle upgrades and for totally new technologies such as the Second Generation Reusable Launch Vehicle.

Sharon E. Navard↗

Coupling of the Electricity and Transportation Sectors - Part II: Risk Assessment

This comprehensive report explores the intricate interplay through “sector coupling” between the Transportation Sector, Energy Sector, and the critical infrastructure challenges faced by the United States. Aligned with the ambitious federal goal of reducing greenhouse gas emissions, the report analyzes the present vulnerabilities in the fossil fuel supply chain, highlighting instances where the dependence on this industry has been susceptible to local and global disruptions. With a focus on risk assessment, this report establishes a framework to compare the fossil fuel-based transportation sector with the burgeoning electrified sector, considering the evolving technologies in electric vehicles (EVs) and the nascent charging infrastructure. This study delves into the historical reliability of fossil fuel-based transportation and identifies opportunities for strengthening sector coupling between transportation and the electric sector. Assessments of the gasoline-diesel supply chain provide insights into both opportunities and threats, offering a roadmap for creating a more reliable and resilient electrified transportation system. We modeled sectoral coupling scenarios for the current internal combustion engine (ICE)-based and future EV-dominant landscapes, leveraging qualitative sector attributes to identify relative strengths and weaknesses in Part 1 of the report. In this report (Part 2) we continue to understand the role of the electricity sector on transportation and develop a semi-quantitative methodology is employed to evaluate and compare the risks associated with the fossil fueled and electric transportation sector during emergency scenarios, drawing from real-world events like hurricanes and geopolitical disruptions. Different operational scenarios for the fossil fuel and electrified sectors have been developed to understand the risks associated with them. This report concludes with recommendations for the architectural designs of electric charging infrastructure, underlining the need for informed decisions in the transition towards a sustainable and resilient transportation future.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

SWP Summary Report for Individual Legacy Well Leakage Risk Analysis at Farnsworth Unit Site: Open Well Scenario

This report summarizes results of the individual legacy well leakage risk analysis of the Farnsworth Unit site (FWU) for Open Well scenario. NRAP tools Integrated Assessment Model for Carbon Storage (NRAP-IAM-CS) and Reservoir Reduced-Order Model Generator (RROMGen) were used (Dilmore et al., 2016; Pawar et al., 2016; King, 2016). This is part one of the additional analysis addressing SWP BP4 Subtask 7.4.1.2: Extend quantitative brine and CO2 leakage calculations (Chu et al., 2020).

58 GEOSCIENCES↗

Assessment and Control of Spacecraft Charging Risks on the International Space Station

The International Space Station (ISS) operates in the F2 region of Earth's ionosphere, orbiting at altitudes ranging from 350 to 450 km at an inclination of 51.6 degrees. The relatively dense, cool F2 ionospheric plasma suppresses surface charging processes much of the time, and the flux of relativistic electrons is low enough to preclude deep dielectric charging processes. The most important spacecraft charging processes in the ISS orbital environment are: 1) ISS electrical power system interactions with the F2 plasma, 2) magnetic induction processes resulting from flight through the geomagnetic field and, 3) charging processes that result from interaction with auroral electrons at high latitude. Recently, the continuing review and evaluation of putative ISS charging hazards required by the ISS Program Office revealed that ISS charging could produce an electrical shock hazard to the ISS crew during extravehicular activity (EVA). ISS charging risks are being evaluated in an ongoing measurement and analysis campaign. The results of ISS charging measurements are combined with a recently developed model of ISS charging (the Plasma Interaction Model) and an exhaustive analysis of historical ionospheric variability data (ISS Ionospheric Specification) to evaluate ISS charging risks using Probabilistic Risk Assessment (PRA) methods. The PRA combines estimates of the frequency of occurrence and severity of the charging hazards with estimates of the reliability of various hazard controls systems, as required by NASA s safety and risk management programs, to enable design and selection of a hazard control approach that minimizes overall programmatic and personnel risk. The PRA provides a quantitative methodology for incorporating the results of the ISS charging measurement and analysis campaigns into the necessary hazard reports, EVA procedures, and ISS flight rules required for operating ISS in a safe and productive manner.

Koontz, Steve↗