SEARCH · Engineering Papers

Results for “Risk Management Framework”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 307 records · Page 17

All sources NASA NTRS DOE OSTI

DOE OSTI1991

Nuclear Safety [Vol. 32, No. 4, October-December 1991]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 477 Report on the International Symposium on the Use of Probabilistic Safety Assessment for Operational Safety—PSA '91, S. Chakraborty and M. Khatib-Rahbar; 488 Good Relationships Are Pivotal in Nuclear Data Bases, A. S. Heger and B. V. Koen; 494 Technical Note: The Interagency Nuclear Safety Review Panel's Evaluation of the Ulysses Space Mission, J. A. Sholtis, Jr., D. A. Huff, L. B. Gray, N. P. Klug, and R. O. Winchester; ACCIDENT ANALYSIS: 502 The Severe Accident Analysis Program for the Savannah River Nuclear Production Reactors, M. L. Hyder; CONTROL AND INSTRUMENTATION: 511 A Framework for Selecting Suitable Control Technologies for Nuclear Power Plant Systems, R. A. Kisner; DESIGN FEATURES: 521 Containments for Gas-Cooled Power Reactors History and Status, P.W. Williams; ENVIRONMENTAL EFFECTS: 537 Indoor Radon: A Natural Risk, N. H. Harley and J.H. Harley; On the Importance of the Atmospheric Parameters in the Fission Products Distribution of a Severe Reactor Accident, M. C. Barla and A. R. Bayulken; Book Review: Health Effects of Exposure to Low Levels of Ionizing Radiation BEIR V, C. R. Richmond; WASTE AND SPENT FUEL MANAGEMENT: 555 Activities Related to Waste and Spent Fuel Management, M. D. Muhlheim and E. G. Silver OPERATING EXPERIENCES: 567 Effects of Component Aging on the Westhinghouse Control Rod Drive System, K. Sullivan and W. Gunther; 577 Reactor Shutdown Experience, Compiled by J. W. Cletcher, 580 Selected Safety-Related Events, Compiled by G. A. Murphy; 582 Operating U 8 Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver, RECENT DEVELOPMENTS: 596 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 610 Reports, Standards, and Safety Guides, D. S. Queener; 614 Proposed Rule Changes as of June 30, 1991; ANNOUNCEMENTS: 520 Workshop on PC PRAISE: A Probabilistic Fracture Mechanics Personal Computer Code for Nuclear Power Plant Piping Reliability Assessment; 536 Fifth Workshop on Nuclear Power Plant Containment Integrity; 624 New OECD "International Information System on Occupational Exposure (ISOE)"; 625 Harvard School of Public Health Announces Short Courses; 625 Eighth Power Plant Dynamics, Control and Testing Symposium; 626 Second Training Course on Off-Site Emergency Planning and Response for Nuclear Accidents; 618 The Authors; 622 Reviewers of Nuclear Safety, Vol 32.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2025

Enhancing Security and Resiliency in Operational Technology Environments Through Network Slicing and Federated Learning

The growing convergence of Information Technology (IT) and Operational Technology (OT) within Industry 4.0 environments has introduced new demands on industrial network infrastructure. As cyber-physical systems become increasingly interconnected, ensuring the secure, timely, and efficient exchange of critical data is essential. This thesis explores how network slicing, a method of creating isolated virtual network segments, can be applied within OT environments to address challenges such as latency, security, and resource allocation. The first research question addressed in this thesis is: How can OT networks take advantage of NFV and SDN technology to become cyber resilient? This study examines the operational, security, and architectural implications of introducing network slicing into traditionally static OT infrastructures such as Industrial Control Systems (ICS) and SCADA. Through simulated deployments and case studies, the research demonstrates how slicing enables better isolation between critical and non-critical services, thereby improving response time, throughput, and security in sensitive environments. The second question considers: How to dynamically implement network slicing and take advantage of network resources towards integrating decentralized machine learning? In response, this thesis proposes a framework that combines Software-Defined Networking (SDN), Network Function Virtualization (NFV), and Federated Learning (FL) to enable real-time analytics while maintaining data locality. The proposed approach reduces the burden on centralized infrastructure and minimizes privacy risks by supporting on-site training of models across distributed OT nodes, coordinated through dynamically allocated network slices. The third focus explores: How slicing helps to increase the resiliency of OT networks through the orchestration of a dynamic DMZ? To answer this, the thesis presents a method for creating and managing Dynamic Demilitarized Zones (DMZs) using network slicing. This enables flexible and automated isolation of sensitive subsystems during threat scenarios or high-risk operations. Coupled with intelligent orchestration and containerized security services, the dynamic DMZ significantly enhances the system's ability to respond to cyber incidents without halting production. Ultimately, this thesis contributes a comprehensive architecture that blends network slicing with machine learning, secure segmentation, and automation, paving the way for resilient, adaptive, and intelligent OT environments. Performance evaluations across multiple scenarios show improvements in system reliability, threat response time, model accuracy, and resource utilization, providing a strong foundation for future industrial automation systems.

Rodiles Delgado, Brian G↗

DOE OSTI2026

Examples of State and Utility Actions on Proactive Planning and Investments

As states across the U.S. confront rising electricity demand, clean energy deployment, grid modernization imperatives, and the integration of large new loads, some regulators and utilities are shifting away from reactive, “just-in-time” investment approaches toward more proactive planning and investment frameworks. This report compiles examples of jurisdictional and utility actions that reshape planning processes, cost recovery mechanisms, and performance oversight to anticipate—rather than simply respond to—future grid needs. Several themes emerge from state actions examined in this report. First, legislatures and commissions are increasingly directing utilities to proactively upgrade their distribution and transmission systems, reflecting a shift toward a forward-looking system that aligns planning with state policy goals. Second, states are establishing long-term, iterative planning frameworks that often feature multi-year horizons, biannual or annual compliance reporting, structured opportunities for stakeholder engagement, and emphasis on collaboration among utilities, regulators, and stakeholders. Third, states are actively investigating innovative cost recovery mechanisms designed to support accelerated electrification and grid modernization, while balancing consumer advocates’ concerns regarding the ratepayer financial risks of premature investments. Fourth, performance metrics and reporting requirements are being developed to ensure transparency and accountability for proactive investments. Fifth, methodological improvements in planning—such as aligning load forecasting assumptions, incorporating sensitivities, and considering load management potential across building, vehicles, storage, and demand response—are recurring areas of stakeholder focus across jurisdictions. Overall, these developments signify a growing recognition among state regulators, utilities, and stakeholders that proactive planning—supported by clear definitions, consistent and transparent methodologies, robust performance metrics, and innovative cost recovery mechanisms—is a tool that can be used to address the scale and urgency of contemporary grid needs.

electricity market↗

NASA NTRS2026

Integrated Computational Materials Engineering (ICME) Capability Maturity Levels for Ecosystems Enabling Digital Transformation

Digital engineering (DE) and integrated computational materials engineering (ICME) are widely recognized as critical enablers of faster, more affordable, and more reliable aerospace systems. However, many organizations have struggled to realize the promised return on investment (ROI) from digital initiatives. A primary reason is the absence of a shared, decision-focused framework that distinguishes simple digitization of existing workflows from true digital transformation that fundamentally changes how engineering decisions are made. This paper introduces an ICME capability maturity framework that fills this gap. The framework defines six cumulative ICME capability maturity levels (CMLs), explicitly tied to decision authority, engineering integration, optimization, and uncertainty management across material, process, structure, and performance scales. It is designed to complement established readiness metrics such as technology readiness levels (TRLs), manufacturing readiness levels (MRLs), and integration readiness levels (IRLs), by addressing a missing dimension: the conditions required for model-informed decision authority across scales. A unifying figure and capability table illustrate the six-level ICME Capability Maturity Framework, showing how organizations progress from digitization—with limited or negative ROI—to true digital transformation, where ICME-enabled workflows deliver measurable improvements in decision quality, cycle time, risk reduction, and reuse. The framework is intended for both technical practitioners and executive leadership, providing a common language to assess current state, guide roadmaps, align software ecosystem investments, and set realistic expectations for digital transformation outcomes. A regulatory-relevant statement clarifying the relationship between ICME capability and existing certification frameworks is provided.

ICME↗

DOE OSTI2023

Electrical Fault Detection, Power Quality, Distributed Energy Resource Use Cases, and Cyber Event Applications with the Cyber Grid Guard System Using Distributed Ledger Technology

Electrical utilities continue to deploy more intelligent electronic devices (IEDs) inside and outside electrical substation and are associated with distributed energy resources (DERs). The integrity and confidentiality of data from IEDs is crucial, and distributed ledger technology (DLT) could improve the resilience of microgrids by helping to make these data more secure. The most popular applications using blockchain technology for electrical utilities is in the field is based on energy trading. However, the dynamism of the penetration of customer owned DERs and the deployment of sensors with IEDs have led to the identification of new applications using DLT that are focused on other areas, such as monitoring, operation and management of the grid and its assets. In addition, the majority of studies on electrical grid applications with blockchain were validated with software simulations. Although general monitoring of power systems for using DLT could be evaluated in operational electric grids, other DLT research applications such as defense against cyber-attacks and/or electrical fault detection are not likely to be performed in a real infrastructure because of possible risks to the network/equipment security. This report summarizes the application of power system applications using distributed ledger technology (DLT), providing a secure DLT framework for collecting data from IEDs like power meters and protective relays inside and outside of an electrical substation and/or between two different electrical utilities. In this study, the use case scenarios were created and assessed for different power system application by using DLT. The electrical fault detection for faulted phases (1), power quality monitoring of phase voltage magnitudes, frequency levels and load power factor (2), DERs use case monitoring (3), and cyber-event applications (4) were performed in a test bed with a Cyber-Grid Guard (CGG) system using DLT. It had a real-time simulator with power meters and protective relays in-the-loop. The first section of this report presents a literature review of power system applications using blockchain at research level. The second section shows the theory and equations used on this report. The third section shows the description of the test bed, equipment, architecture, and electrical grid diagrams. The fourth section shows the experimental models and use case scenarios that were performed for the electrical fault detection, power quality, DERs use case, and cyber event applications with the CGG system using DLT. The fifth section shows the results collected from the tests based on comparing the time stamped events of the analog signals from the IEDs, DLT computer and real time simulator. The sixth section performed the discussion of the results for the use case scenarios. Finally, section seven presents the conclusions for this report were presented.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2025

Carbon Utilization and Storage Partnership of the Western United States

This technical report documents research conducted under DOE Award No. DE-FE0031837 focused on evaluating the feasibility of carbon capture, utilization, and storage (CCUS) systems in the central and western United States. The project integrated geologic characterization, reservoir simulation, infrastructure modeling, and economic analysis to assess CO₂ storage potential near industrial sources and develop strategies for transport and sequestration. The work included subsurface modeling, risk assessment, monitoring and verification (MRV) planning, and evaluation of regulatory pathways such as EPA Underground Injection Control (UIC) Class VI permitting and IRS 45Q tax credit eligibility. Results demonstrate the viability of multiple storage approaches, including saline formations, enhanced coalbed methane recovery, and basalt mineralization, supported by data-driven workflows and regional analyses. The project also produced permitting templates, technology transfer activities, and stakeholder engagement efforts to support deployment readiness. These findings contribute to the development of scalable, economically viable CCUS systems and provide a repeatable framework for future carbon management projects.

20 FOSSIL-FUELED POWER PLANTS↗

NASA NTRS2005

Bioastronautics Roadmap: A Risk Reduction Strategy for Human Space Exploration

The Bioastronautics Critical Path Roadmap is the framework used to identify and assess the risks to crews exposed to the hazardous environments of space. It guides the implementation of research strategies to prevent or reduce those risks. Although the BCPR identifies steps that must be taken to reduce the risks to health and performance that are associated with human space flight, the BCPR is not a "critical path" analysis in the strict engineering sense. The BCPR will evolve to accommodate new information and technology development and will enable NASA to conduct a formal critical path analysis in the future. As a management tool, the BCPR provides information for making informed decisions about research priorities and resource allocation. The outcome-driven nature of the BCPR makes it amenable for assessing the focus, progress and success of the Bioastronautics research and technology program. The BCPR is also a tool for communicating program priorities and progress to the research community and NASA management.

Source record↗

DOE OSTI2020

A Systematic Evidence Based Performance Approach to Regulation of Nuclear Sites in England and Wales - 20058

The Environment Agency for England has developed a systematic evidence-based approach to pursue our strategic environmental objectives for the regulation of nuclear sites. We use an annual evidence review process to ensure effective and efficient targeting of limited resources to achieve those objectives. Over the last 8 years, we have been developing and refining this approach to ensure risk-based and value driven regulation. The approach comprises nuclear site and nuclear sector review processes known as Site Environment Review (SER) and Nuclear Environment Review (NER). This approach complements our regulation of nuclear site permit holders under the Environmental Permitting Regulations (EPR). We deliver our regulation of nuclear sites in England and Wales alongside the Office for Nuclear Regulation. The SER process involves the lead regulator for each nuclear site assessing the permit holder's environmental performance across 14 themes, set within the context of the site's main activities and associated waste disposals. Our themes include environmental leadership, resources and climate change, radioactive waste management, facility management and decommissioning, groundwater, and environmental radiological protection. We use evidence from site inspections and working within our subject matter groups to grade current and predicted future environmental performance. We are particularly interested in sustainability and the application of Best Available Techniques (BAT) to prevent the creation, and minimise the disposal, of radioactive wastes. We use risk analysis (strengths, weaknesses, threats and opportunities) to examine performance against our strategic environmental objectives, which are set out, in our 5-year Nuclear Delivery Plan (NDP). The output supports the targeting of our resources at each nuclear site. We consult the relevant permit holders on the SER priorities and use their feedback to refine our plans. We expect all permit holders to take account of our priorities when considering their own programmes of work, objectives and plans. The NER process brings together what we learn and achieve through regulation across the sector. It provides input to planning priorities, supported by qualitative and semi-quantitative evidence. It covers the 28 nuclear sites in England and Wales and spans the same 14 environmental themes. During the process we collate, compile and summarise evidence from the SERs and other sources such as inspection reports and evidence from our other nuclear work programmes. The output is the NER annual report. This provides a snapshot of the status of the nuclear sector and gives insights to enable us to regulate more efficiently and effectively. It also takes account of cross-cutting issues and risks such as changes in international standards, domestic policy, regulatory framework, domestic standards and guidance, learning from experience such as incidents, events and good practice, and innovation, research and development. It provides graphics that illustrate the grading of environmental performance for the nuclear sector across the fourteen environmental themes. This analysis allows benchmarking of nuclear site's environmental performance and the visualisation provides a convenient comparison of performance across themes, sites, and over time. We use this intelligence to inform our investment in training and development of our staff, and our cross-cutting engagement on strategic issues with government, the Nuclear Decommissioning Authority (NDA) and other corporate organisations. Adopting this approach can provide benefits with organisational reputation, stakeholder participation and ensuring value from the public investment. This paper describes the history of the SER/NER process, a selection of outputs from the process and ideas for improvement. The paper will be of interest to other regulators and organisations across the world that are interested in supporting continuous improvement. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2020

Distribution Development for Residual Inventory at the New York West Valley Site - 20400

The New York State Energy Research and Development Authority (NYSERDA) is the owner of the Western New York Nuclear Service Center (WNYNSC), a 1,351 ha site located approximately 48 km south of Buffalo, New York. In 1962, Nuclear Fuel Services, Inc. (NFS) entered into Agreements with the Atomic Energy Commission and New York State to construct the first commercial reprocessing plant of nuclear fuel in the United States. NFS, a private company, built and operated the spent fuel reprocessing plant and waste disposal facilities, processing 640 Mg of spent nuclear fuel from 1966 to 1972 under an Atomic Energy Commission license. Nuclear fuel reprocessing operations ended in 1972 and never reopened, leaving behind radioactive and chemical wastes. Operations led to contamination in a number of facilities and locations. Some of that contamination has migrated from waste disposal zones to other layers, formations, and features on and off the WNYNSC. Phase I decommissioning activities are ongoing and involve the removal of a number of areas and structures that have been associated with contamination. The purpose of this work is to outline the approach for characterizing contamination not associated with disposed wastes, contaminated structures, or specific releases. In this work, the term, residual radiological activity, is used to describe environmental contamination that exists subsequent to the completion of Phase I decommissioning activities, that is not associated with disposed wastes, contaminated structures, or specific releases. Contamination from the Site was quantified relative to data that characterize the concentrations of radionuclides that exist in background. Background concentrations are those present in the area but having no influence from Site related activities. The existence of residual radiological activity that is elevated relative to background has the potential to contribute to future risks to human health and the environment. As a consequence, the residual inventory information is used to inform the West Valley Probabilistic Performance Assessment (PPA) model to characterize potential future risks to human health and the environment. The centralized West Valley Data Management System (DMS) was the source of information for the data assembled in this analysis. The DMS is a fairly large compilation consisting of thousands of records from investigation studies, with sample dates ranging from 1990 to present. Samples from monitoring wells, boreholes, geoprobe studies, surface water, surface soils, storm water outfalls, ventilation stack filters, plant and animal tissues, and more are included in the DMS. Results are typically reported in units of activity per unit volume. For the purpose of the analyses presented here, all results were converted into consistent units of pCi per unit volume. Since 1990, data have been collected from various locations across the WNYNSC at different times with varying frequency over the course of several decades. As a consequence, a number of potential issues can arise with respect to the assembly of a dataset that is deemed adequate for the characterization of residual radiological activity. These issues were assessed and resolved to the extent possible through careful consideration of the properties of the distributions. The intent was to use data which characterize the current state of the Site. Radionuclides can be designated to one of several groups depending on their origin. In this work the groups considered were 1) Naturally Occurring Radioactive Material (NORM), 2) fallout, and 3) Other (including power plant, medical research, etc). This grouping is a useful construct with respect to the interpretation of fixed laboratory results. For example, NORM radionuclides that exist within a decay chain should have approximately equivalent distributions of concentrations if they are representative of background conditions. Insights such as these can be used as a check to identify sample results that need to be further investigated or omitted due to issues associated with reported results from fixed laboratory analyses. This type of analysis provided a foundation for the assessment of the adequacy of sample results for use in subsequent components of an assessment. The general process for the assessment of residual radiological contamination at the Site consists of a sequence of several steps. First, for each analyte, several statistical tests were performed to assess the weight of evidence against the null hypothesis that the mean of the distribution of concentrations was equal to zero. If the mean of the distribution of concentrations for a given radionuclide was not found to be greater than zero, then it was removed from consideration as a component of the residual radiological contamination. If there was significant evidence to reject the hypothesis of the mean being equal to zero, the second step was to compare the distribution of the data from the Site to that of the corresponding background. A suite of tests was used to compare the distributions of the site and background data. The results of these tests were collectively used to determine if site data are elevated relative to background. The third step was to develop distributions using a Bayesian framework to characterize the distribution of mean of the increment present above background for each of the radionuclides. The Bayesian model implemented allowed for the comparison of site-specific records to background concentrations to better approximate contamination attributed to the Site. A final screening step was employed for radionuclides that exceed background. This screening step compared 95% upper confidence limits (UCLs) from the increment distribution developed in the previous step to the risk screening levels. This approach yields a list of analytes that were determined to be elevated relative to background.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2021

Towards Resolving the Risk of Turbine Collision on Fish: FY21-22 Seedling Report Phase I

The most important concern for permitting tidal and river turbines is the collision risk of marine animals with the turbine blades. Our understanding of the risk to individual fish from colliding with turbine blades is poor; if these collisions were to occur, it is unknown whether fish will sustain recoverable injuries or be killed. Equally unknown is the impact these collisions might have on populations, particularly for threatened, endangered, or commercially managed fish species. In addition to observations of interactions of fish with turbines, numerical models need to be developed or expanded to predict impacts on fish populations. These models could replace expensive and technically challenging monitoring programs in high energy, often murky, tidal or river waters. In this project, a multi-pronged approach was taken to understand the state of knowledge for collision risk of fish with turbines and build a pathway forward. This approach included a workshop with experts, a literature review of modeling and empirical studies, the development of a research framework, and the identification of case studies to address through future work. This project is a first step towards the future development of effective and robust numerical models for assessing the collision risk of fish around turbines. This will achieve a balanced and improved estimate of the severity of collision risk to fish at the population scale.

Garavelli, Lysel↗

DOE OSTI2026

AI/ML-Enhanced Wind Forecasts for Reducing Uncertainty in Prescribed Fire Planning

Prescribed fire is a vital tool for ecosystem management and wildfire risk reduction but its escalation is constrained by overly conservative burn windows because of uncertainties, for instance, in wind forecasts. This review describes the state of the art in weather product use by fire/smoke models and identifies three priority research gaps that artificial intelligence/machine learning (AI/ML) is well positioned to address: (1) spatial and temporal downscaling to meter-scale, sub-hourly wind fields; (2) bias correction for systematic model errors in complex terrain; and (3) robust uncertainty quantification to inform ensemble-based simulations. Emerging AI/ML techniques offer promising frameworks to address all three challenges. By providing high-resolution, bias-corrected, and probabilistic wind fields, AI/ML-enhanced forecasts will allow for expanded burn windows, improved ignition strategy design and a reduced reliance on expert intuition, especially when a prescribed fire is introduced into new areas.

54 ENVIRONMENTAL SCIENCES↗

NASA NTRS2019

Air Traffic Management Blockchain Infrastructure for Security, Authentication, and Privacy

Current radar-based air traffic service providers may preserve privacy for military and corporate operations by procedurally preventing public release of selected flight plans, position, and state data. The FAA mandate for national adoption of Automatic Dependent Surveillance Broadcast (ADS-B) in 2020 does not include provisions for maintaining these same aircraft-privacy options, nor does it address the potential for spoofing, denial of service, and other well-documented risk factors. This paper presents an engineering prototype that embodies a design and method that may be applied to mitigate these ADS-B security issues. The design innovation is the use of an open source permissioned blockchain framework to enable aircraft privacy and anonymity while providing a secure and efficient method for communication with Air Traffic Services, Operations Support, or other authorized entities. This framework features certificate authority, smart contract support, and higher-bandwidth communication channels for private information that may be used for secure communication between any specific aircraft and any particular authorized member, sharing data in accordance with the terms specified in the form of smart contracts. The prototype demonstrates how this method can be economically and rapidly deployed in a scalable modular environment.

air traffic privacy & authentication↗

NASA NTRS2019

Air Traffic Management Blockchain Infrastructure for Security, Authentication, and Privacy

ADS-B cybersecurity↗

DOE OSTI2022

Towards Automatic Mapping of Vulnerabilities to Attack Patterns using Large Language Models

With the advent of new devices and applications, cyber attack surface is continuously evolving due to the emergence of new attack techniques and vulnerabilities. Hence, security management tool must assess the cyber risk of an enterprise at regular interval basis through comprehensively identifying associations among attack techniques, weakness, and vulnerabilities. However, existing repositories providing such associations are incomplete (i.e., missing associations), inducing the likelihood of undermining the risk of particular set of attack techniques. Moreover, such associations still rely on manual interpretation, which is slow compared to attack speed and ineffective for the increasing list of vulnerabilities and attack actions. Therefore, there is an urge to develop methodologies for automatically associating vulnerabilities to all relevant attack techniques. In this paper, we present a framework, named VWC-MAP, that can automatically identify all relevant attack techniques of a vulnerability via weakness based on their text descriptions, applying natural language process (NLP) techniques. To achieve that, we present a novel two-tiered classification approach, where the first tier classifies vulnerabilities to weakness, and the second tier classifies weakness to attack techniques. This research has improved the scalability of the current state-of-the-art tool to make vulnerability to weakness mapping significantly faster. Moreover, this paper presents two novel approaches for weakness to attack technique mapping applying Text-to-Text and link prediction techniques. Our experiment results cross-validated through cyber-security experts show that VWC-MAP can associate vulnerabilities to weakness types with 87% accuracy and to new attack patterns with 80% accuracy.

Das, Siddhartha Shankar↗

NASA NTRS2001

Risk analysis simulation of rover operations for Mars surface exploration

Risk management advocates have long sought to directly influence the early stages of the systems engineering process through a more effective role in system design trade studies. The principal obstacle to this has been the lack of credible ways to represent and quantify mission risk—that is, a combination of the probability of mission success (“system safety”) and science value—for the project manager and the rest of the design team. If it were possible to quantify mission risk, then the effects of proposed mission and system design changes could be calculated, and along with life-cycle costs, could be used to explore the design space more extensively and select better designs. JPL has been working to build the capability to quantify the probability of mission success using a federation of diverse simulations and models, each of which contributes some vital piece of the puzzle. The initial institutional focus has been on Mars surface operations. This ensemble computing framework enables the diverse models and simulations to work together seamlessly. Recent work at JPL has demonstrated the capability to exercise this ensemble from end-to-end using an Oracle-based database to automatically move results from one model/simulation to the next stage in the analysis.

Shishko, Robert↗

NASA NTRS2005

Application of Lightweight Formal Methods to Software Security

Formal specification and verification of security has proven a challenging task. There is no single method that has proven feasible. Instead, an integrated approach which combines several formal techniques can increase the confidence in the verification of software security properties. Such an approach which species security properties in a library that can be reused by 2 instruments and their methodologies developed for the National Aeronautics and Space Administration (NASA) at the Jet Propulsion Laboratory (JPL) are described herein The Flexible Modeling Framework (FMF) is a model based verijkation instrument that uses Promela and the SPIN model checker. The Property Based Tester (PBT) uses TASPEC and a Text Execution Monitor (TEM). They are used to reduce vulnerabilities and unwanted exposures in software during the development and maintenance life cycles.

security↗

NASA NTRS2023

Next Steps Following Quality Management System Implementation

While Quality Management Systems (QMS) have become increasingly common in industry over the past twenty-five to thirty years, government has been slow to adopt. There are several reasons, including the fact that government is not as tightly focused on specific groups of products as is private industry, and therefore must adapt from a product realization focus to a mission realization focus. This article will present an approach for translating the production-oriented Quality Management Systems Standards, such as those included in ISO 9001, Quality management systems-Requirements and translating them to a mission realization approach. Once a mission approach is developed and understood, it will provide the needed greater clarity and a framework for an agency to implement a QMS. When the QMS is established and implemented, agencies can then take the next steps toward continual improvement. The graphic in Table 1 illustrates the ISO 9001 provisions and the corresponding mission-related concepts and definitions are included in Table 2.

Quality Management System↗

DOE OSTI2022

A Framework for Characterizing the Risk of Ice Fall and Ice Throw from Small Wind Turbines

Small wind turbines rated up through 100 kW in size are typically deployed as distributed energy resources. Their proximity to populations, buildings, and other infrastructure can generate safety concerns regarding ice throw (ice detaching from operational turbines) and ice fall (ice detaching from a turbine during standstill or idling) even when the turbines are not installed in cold climates. This paper presents a data-driven approach to characterize and mitigate the potential risk from icing on small wind turbines. By identifying how likely it is that an icing event will occur each year, estimating the distances at which ice could throw or fall from the turbine, defining the risk context, and establishing risk management practices, small wind turbine developers and installers can help address communities’ safety concerns around ice throw and ice fall.

17 WIND ENERGY↗