Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Secure by Design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

Nuclear Thermal Rocket (NTR) Development Risk Communication

There are clear advantages of development of a Nuclear Thermal Rocket (NTR) for a crewed mission to Mars. NTR for in-space propulsion enables more ambitious space missions by providing high thrust at high specific impulse (approximately 900 sec) that is 2 times the best theoretical performance possible for chemical rockets. Missions can be optimized for maximum payload capability to take more payload with reduced total mass to orbit; saving cost on reduction of the number of launch vehicles needed. Or missions can be optimized to minimize trip time significantly to reduce the deep space radiation exposure to the crew. NTR propulsion technology is a game changer for space exploration. However, "NUCLEAR" is a word that is feared and vilified by some groups and the hostility towards development of any nuclear systems can meet great opposition by the public as well as from national leaders and people in authority. Communication of nuclear safety will be critical to the success of the development of the NTR. Why is there a fear of nuclear? A bomb that can level a city is a scary weapon. The first and only times the Nuclear Bomb was used in a war was on Hiroshima and Nagasaki during World War 2. The "Little Boy" atomic bomb was dropped on Hiroshima on August 6, 1945 and the "Fat Man" on Nagasaki 3 days later on August 9th. Within the first 4 months of bombings, 90- 166 thousand people died in Hiroshima and 60-80 thousand died in Nagasaki. It is important to note for comparison that over 500 thousand people died and 5 million made homeless due to strategic bombing (approximately 150 thousand tons) of Japanese cities and war assets with conventional non-nuclear weapons between 1942- 1945. A major bombing campaign of "firebombing" of Tokyo called "Operation Meetinghouse" on March 9 and 10 consisting of 334 B-29's dropped approximately1,700 tons of bombs around 16 square mile area and over 100 thousand people have been estimated to have died. The declaration of death is very clear for conventional weapons and then the declaration of death due to radiation becomes vague and unclear. This may have been due to people mis-understanding the dangers and effects of radiation when assessing the damage and harm to people initially, but it is also become insidious when expressing opposition to nuclear energy. A nuclear radiation accident can be scary due to the power involved and the fear of radiation release. The International Atomic Energy Agency defines a nuclear and radiation accident a "an event that has led to significant consequences to people, the environment or the facility." There have been 3 commercial nuclear reactor accidents (Chernobyl, Three Mile Island, and Fukushima) that stand out to the public and much of the information about the result and impact to workers, environment, and public can be misleading. Often information is presented without clear correlation with radiation and other pertinent information is left out presenting a very scary situation to affect the emotions of the reader. A very boring but "critically acclaimed" movie was made in 1979 called "The China Syndrome" starring Jane Fonda and Jack Lemmon. The film was released on March 16, 1979, 12 days before the 3-Mile Island nuclear accident in Pennsylvania. The basis from the movie was from a few nuclear plant incidents and in particular, the Brown's Ferry Alabama Power Plant fire. In one scene from the movie, a physicist Dr. Elliott Lowell played by Donald Hotton states that a China Syndrome event would make "an area the size of Pennsylvania" permanently uninhabitable. Real serious nuclear incidents like Chernobyl and Fukushima are often sited to make people fear the consequences of using nuclear power. However, the consequences are at best poorly communicated and at worst fictitiously inflated to instigate social unrest against nuclear power. There is an article being circulated on Facebook with a title "28 Signs that the (US) West Coast is being absolutely fried with nuclear radiation from Fukushima" which focus on mis-information and fear mongering. Nuclear power and NTR are powerful resources that can open many doors for future prosperity and capability. With great power comes great responsibility. Radiation and its effects need to be better understood, quantified, and communicated. A human mission to mars has its own risks of deep space radiation and is considered a considerable risk at 400 milli-Sieverts per year in deep space and 245 milli-Sieverts per year on the surface of Mars as measured by the Mars Curiosity mission. Although these quantities of ionizing radiation are within the astronaut career limit, it exceeds the yearly average amounts of ionizing radiation. Astronaut crews have experienced these levels of radiation before, but for durations shorter than a year, and a mission to Mars could possibly be 3 years in length. There is also evidence that people can comfortably handle higher levels of ionizing radiation where the radiation occurs naturally like Ramsar, Iran when people can experience 270 milli-Sieverts per year. A risk posture that the development, test, and flight of an NTR will meet opposition from groups who oppose nuclear energy must be likely and the impact can be sever to the effort. Active risk mitigation must be taken for an NTR full-scale development project. The NTR design must take into account safety for transport and off nominal conditions. Nuclear fuel element must consider containment of fission products and Low Enriched Uranium (LEU) that may meet less opposition should be considered for safety and security reasons. Even though testing was conducted on Rover/NERVA safely and successfully in the 60's with exhaust sent heavenward in to open air, modern testing of NTR must consider full containment and no release of ionizing radiation to the public and must meet the current requirement of no more than 0.1 milli-Sieverts per year to the public. 0.1 milli-Sieverts is equivalent to eating one banana or a 20 hour plane flight. Good communication with the public and regulatory agencies will be essential to show that all effort is applied toward protection to the public and astronauts. The inspiring endeavor to put humans on Mars to study the planet, search for life, and learn more about this Solar System will be full of risks but it will be worth it. NTR will be worth the development effort if it allows humans to explore our Solar System.

Kim, Tony↗

Digital Model-Based Engineering: Expectations, Prerequisites, and Challenges of Infusion

Digital model-based engineering (DMbE) is the use of digital artifacts, digital environments, and digital tools in the performance of engineering functions. DMbE is intended to allow an organization to progress from documentation-based engineering methods to digital methods that may provide greater flexibility, agility, and efficiency. The term 'DMbE' was developed as part of an effort by the Model-Based Systems Engineering (MBSE) Infusion Task team to identify what government organizations might expect in the course of moving to or infusing MBSE into their organizations. The Task team was established by the Interagency Working Group on Engineering Complex Systems, an informal collaboration among government systems engineering organizations. This Technical Memorandum (TM) discusses the work of the MBSE Infusion Task team to date. The Task team identified prerequisites, expectations, initial challenges, and recommendations for areas of study to pursue, as well as examples of efforts already in progress. The team identified the following five expectations associated with DMbE infusion, discussed further in this TM: (1) Informed decision making through increased transparency, and greater insight. (2) Enhanced communication. (3) Increased understanding for greater flexibility/adaptability in design. (4) Increased confidence that the capability will perform as expected. (5) Increased efficiency. The team identified the following seven challenges an organization might encounter when looking to infuse DMbE: (1) Assessing value added to the organization. Not all DMbE practices will be applicable to every situation in every organization, and not all implementations will have positive results. (2) Overcoming organizational and cultural hurdles. (3) Adopting contractual practices and technical data management. (4) Redefining configuration management. The DMbE environment changes the range of configuration information to be managed to include performance and design models, database objects, as well as more traditional book-form objects and formats. (5) Developing information technology (IT) infrastructure. Approaches to implementing critical, enabling IT infrastructure capabilities must be flexible, reconfigurable, and updatable. (6) Ensuring security of the single source of truth (7) Potential overreliance on quantitative data over qualitative data. Executable/ computational models and simulations generally incorporate and generate quantitative vice qualitative data. The Task team also developed several recommendations for government, academia, and industry, as discussed in this TM. The Task team recommends continuing beyond this initial work to further develop the means of implementing DMbE and to look for opportunities to collaborate and share best practices.

Hale, J. P.↗

Reasoning Service Exemplars for NASA’s Data and Reasoning Fabric

Future operations for Urban and Advanced Air Mobility are enabled by a distributed network of reliable and secured data and reasoning services referred to here as a fabric. In the aggregate, such a system must be all encompassing and mission agnostic, but specific use-cases are still needed to improve understanding and drive design paradigms. For this purpose, three reasoning service exemplars for Target Selection and Routing, Trajectory Generation, and Battery Health Management were developed and integrated into a specific NASA proposed data and reasoning fabric. These services were then used to build a mission reasoning application for lightning strike reconnaissance developed in collaboration with the Civil Air Patrol. Autonomous mission execution was then demonstrated using a multivehicle simulation platform with a full envelope 6 Degree-of-Freedom dynamics model for a concept electric Vertical Takeoff and Landing aircraft.

Autonomy↗

Water for Two Worlds: Designing Terrestrial Applications for Exploration-class Sanitation Systems

At the United Nations Millennium Summit in September of 2000, the world leaders agreed on an ambitious agenda for reducing poverty and improving lives: the Millennium Development Goals (MDGs) , a list of issues they consider highly pernicious, threatening to human welfare and, thereby, to global security and prosperity. Among the eight goals are included fundamental human needs such as the eradication of extreme poverty and hunger, the promotion of gender equality, the reduction of child mortality and improvement of maternal health, and ensuring the sustainability of our shared environment. In order to help focus the efforts to meet these goals, the United Nations (UN) has established a set of eighteen concrete targets, each with an associated schedule. Among these is Target 10: "By 2015, reduce by half the proportion of people without access to safe drinking water." A closely related target of equal dignity was agreed at the World Summit on Sustainable Development (Johannesburg, September 2002): "By 2015, reduce by half the proportion of people without access to basic sanitation".

Adams, Constance↗

Water for Two Worlds: Designing Terrestrial Applications for Exploration-class Sanitation Systems

At the United Nations Millennium Summit in September of 2000, the world leaders agreed on an ambitious agenda for reducing poverty and improving lives: the Millennium Development Goals (MDGs), a list of issues they consider highly pernicious, threatening to human welfare and, thereby, to global security and prosperity. Among the eight goals are included fundamental human needs such as the eradication of extreme poverty and hunger, the promotion of gender equality, the reduction of child mortality and improvement of maternal health, and ensuring the sustainability of our shared environment. In order to help focus the efforts to meet these goals, the United Nations (UN) has established a set of eighteen concrete targets, each with an associated schedule. Among these is Target 10: "By 2015, reduce by half the proportion of people without access to safe drinking water." A closely related target of equal dignity was agreed at the World Summit on Sustainable Development (Johannesburg, September 2002): "By 2015, reduce by half the proportion of people without access to basic sanitation." One of the greatest successes in the development of Exploration-class technologies for closed-loop, sustainable support of long-duration human space missions has been the work both ESA and NASA have done in bioregenerative water reclamation (WRS), and secondarily, in solid-waste management. Solid-waste and WRS systems tend to be combined in the commercial world into the field of sanitation, although as we will see, the most essential principles of sustainable terrestrial sanitation actually insist upon the separation of solid and liquid excreta. Seeing the potential synergy between the space program ALS technologies developed for Mars and the urgent needs of hundreds of millions of people for secure access to clean water here on Earth, we set out to organize the adaptation of these technologies to help the United Nations Development Programme (UNDP) meet Target 10. In this paper, we will summarize the issues and results of the first "Water for Two Worlds" summit held in January of this year, describe,the status of the sustainable sanitation systems that are on the table for adaptation to widespread terrestrial use, and present fundamental strategies for forward work.

Adams, Constance↗

Mid-Atlantic Technology Applications Center

Mid-atlantic Technology Application Center (MTAC) pursued a number of initiatives designed to enhance the strategic position of the Langley Research Center (LaRC) and NASA in industry. Among these was a closer association with the ISA, International Society for Measurement and Control. During 1997, MTAC placed articles regarding NASA-developed technologies in each In Tech magazine. The monthly magazine is sent to 46,000 sensors and instrumentation professionals. In addition, MTAC coordinated NASXs participation in the ISA Tech 97 Conference, securing $112,000 of free exhibit space, 1500 NASA sensors posters at no cost to NASA, and thousands of dollars of free publicity. MTAC was awarded a contract by ISA to operate its Technical Resource Center (TRC). The goal of this project is to determine what user needs are in order to identify opportunities for collaboration between NASA centers and companies. In addition, the TRC work will lay the groundwork for the Technology Development Consortium (TDC) proposed by MTAC. The purpose of the TDC is to: match current industry needs with NASA technologies available now, and to identify future needs of NASA and industry which may lead to dual use projects. The goal of these activities is twofold: to infuse NASA technologies into the sensors and instrumentation industry and to secure industry funds to support NASA technology development projects. The instrumentation and sensors industry is valued at $30 billion worldwide, with $12 billion in sales in the United States. The growth rate averages 13.5%, so that by the year 2000, the industry will produce products worth $49 billion. More than 80% of instruments, sensors and control systems are currently manufactured in the United States. NASA and the industry do not have a history of collaborative projects; MTAC's initiatives in this area are designed to foster working relationships between the two parties that will help maintain U.S. leadership in this field. Mid-atlantic Technology Applications Center (MTAC) continued to work on LaRC-SI and Thin Layer Unimorph Driver and Sensor activities. MTAC helped develop the "master license" concept and identified additional applications and potential clients. The goal of these activities was to increase the financial return to Langley Research Center, to ensure the diffusion of the technologies throughout the economy, and to attract partners for future NASA technology development efforts. In an attempt to market LaRC-SI and the Thin Layer Unimorph Driver and Sensor, MTAC developed and pioneered the use of the USRTTC Technology Commercialization Team. As a result, MTAC's sister RTTCs identified both applications and potential users for the two technologies. MTAC also benefitted from its affiliate network to locate companies throughout the region that were interested in the two technologies. MTAC is working with Allegheny Ludlum to monitor the progress of the installation and testing of ultrasonic equipment purchased as a result of Langley Research Center's assistance.

Source record↗

A Real-Time Microwave Camera at 24 GHz (K-Band}

The objective is to design and build a real-time microwave imaging system (i.e., camera) Microwave imaging offers tremendous potential in many applications: a) Inspection of low-loss composites, radomes, etc.; b) Detection and evaluation of corrosion under paint; c) Security, contraband detection. Raster scanning is slow and requires bulky mechanical systems. A real-time and portable imaging system can be extremely useful for rapid nondestructive testing of large structures.

Ghasr, M. T.↗

Hyperspectral Systems Increase Imaging Capabilities

In 1983, NASA started developing hyperspectral systems to image in the ultraviolet and infrared wavelengths. In 2001, the first on-orbit hyperspectral imager, Hyperion, was launched aboard the Earth Observing-1 spacecraft. Based on the hyperspectral imaging sensors used in Earth observation satellites, Stennis Space Center engineers and Institute for Technology Development researchers collaborated on a new design that was smaller and used an improved scanner. Featured in Spinoff 2007, the technology is now exclusively licensed by Themis Vision Systems LLC, of Richmond, Virginia, and is widely used in medical and life sciences, defense and security, forensics, and microscopy.

Source record↗

Supplier Research & Analysis Approach

"The implementation of NASA GSFC's portfolio of mission projects relies upon inter-connected, multi-tiered supply chains of organizations operating under direct and indirect contracts and other agreements throughout the U.S. and around the world. These supply chains are subject to an inter-related array of technical/production, business, market and security risks that are amplified by the ongoing globalization of industry and technology and which can disrupt or threaten the production and delivery of products and services when needed and in conformance with requirements. In recognition of such risks and associated challenges, GSFC's SMA directorate launched an innovative Supplier Research and Analysis (SRA) capability three years ago to gain greater insight into the operating environment, performance, capabilities and viability of current and prospective suppliers for GSFC projects and proposals. The capability uses business intelligence techniques and primarily open source information resources as part of a cost-effective, non-intrusive methodology to produce several types of research and analysis reports. The reports are based on a holistic analytical framework encompassing key technical/production, business enterprise management, market and security factors, and feature in-depth information, summary information profiles, SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis, and candidate risk concerns in order to pro-actively support SMA and project management needs. The SRA capability, which is designed to complement and support ongoing SMA/project management activities and practices, has produced over 95 reports since its start-up in early 2015. This presentation addresses the approach, methodology and performance of the Supplier Research and Analysis (SRA) capability and its value in assuring the success of NASA mission projects. In doing so, the presentation provides lessons-learned, best practices, case examples and address how it fits into the development of an enterprise-level Supply Chain Risk Management capability."

supplier research and analysis↗

Supply Chain Research and Analysis for Space Systems

The implementation of NASA GSFC's portfolio of mission projects relies upon inter-connected, multi-tiered supply chains of organizations operating under direct and indirect contracts and other agreements throughout the U.S. and around the world. These supply chains are subject to an inter-related array of technical/production, business, market and security risks that are amplified by the ongoing globalization of industry and technology and which can disrupt or threaten the production and delivery of products and services when needed and in conformance with requirements. In recognition of such risks and associated challenges, GSFC's SMA directorate launched an innovative Supply Chain Research and Analysis capability three years ago to gain greater insight into the operating environment, performance, capabilities and viability of current and prospective suppliers for GSFC projects and proposals. The capability uses business intelligence techniques and primarily open source information resources as part of a cost-effective, non-intrusive methodology to produce several types of research and analysis reports. The reports are based on a holistic analytical framework encompassing key technical/production, business enterprise management, market and security factors, and feature in-depth information, summary information profiles, SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis, and candidate risk concerns in order to pro-actively support SMA and project management needs. The SRA capability, which is designed to complement and support ongoing SMA/project management activities and practices, has produced over 105 reports since its start-up in early 2015.This presentation addresses the approach, methodology and performance of the Supply Chain Research and Analysiscapability and its value in assuring the success of NASA mission projects. In doing so, the presentation provides lessons-learned, best practices, case examples and address how it fits into the development of an enterprise-level Supply Chain Risk Management capability.

supply chain risk management↗

Metrology - Beyond the Calibration Lab

We rely on data from measurements every day; a gas-pump, a speedometer, and a supermarket weight scale are just three examples of measurements we use to make decisions. We generally accept the data from these measurements as "valid." One reason we can accept the data is the "legal metrology" requirements established and regulated by the government in matters of commerce. The measurement data used by NASA, other government agencies, and industry can be critical to decisions which affect everything from economic viability, to mission success, to the security of the nation. Measurement data can even affect life and death decisions. Metrology requirements must adequately provide for risks associated with these decisions. To do this, metrology must be integrated into all aspects of an industry including research, design, testing, and product acceptance. Metrology, the science of measurement, has traditionally focused on the calibration of instruments, and although instrument calibration is vital, it is only a part of the process that assures quality in measurement data. For example, measurements made in research can influence the fundamental premises that establish the design parameters, which then flow down to the manufacturing processes, and eventually impact the final product. Because a breakdown can occur anywhere within this cycle, measurement quality assurance has to be integrated into every part of the life-cycle process starting with the basic research and ending with the final product inspection process. The purpose of this paper is to discuss the role of metrology in the various phases of a product's life-cycle. For simplicity, the cycle will be divided in four broad phases, with discussions centering on metrology within NASA. .

Mimbs, Scott M.↗

"Glitch Logic" and Applications to Computing and Information Security

This paper introduces a new method of information processing in digital systems, and discusses its potential benefits to computing and information security. The new method exploits glitches caused by delays in logic circuits for carrying and processing information. Glitch processing is hidden to conventional logic analyses and undetectable by traditional reverse engineering techniques. It enables the creation of new logic design methods that allow for an additional controllable "glitch logic" processing layer embedded into a conventional synchronous digital circuits as a hidden/covert information flow channel. The combination of synchronous logic with specific glitch logic design acting as an additional computing channel reduces the number of equivalent logic designs resulting from synthesis, thus implicitly reducing the possibility of modification and/or tampering with the design. The hidden information channel produced by the glitch logic can be used: 1) for covert computing/communication, 2) to prevent reverse engineering, tampering, and alteration of design, and 3) to act as a channel for information infiltration/exfiltration and propagation of viruses/spyware/Trojan horses.

hardware vulnerabilities↗

Virtualized Multi-Mission Operations Center (vMMOC) and its Cloud Services

His presentation will cover, the current and future, technical and organizational opportunities and challenges with virtualizing a multi-mission operations center. The full deployment of Goddard Space Flight Centers (GSFC) Virtualized Multi-Mission Operations Center (vMMOC) is nearly complete. The Space Science Mission Operations (SSMO) organizations spacecraft ACE, Fermi, LRO, MMS(4), OSIRIS-REx, SDO, SOHO, Swift, and Wind are in the process of being fully migrated to the vMMOC. The benefits of the vMMOC will be the normalization and the standardization of IT services, mission operations, maintenance, and development as well as ancillary services and policies such as collaboration tools, change management systems, and IT Security. The vMMOC will also provide operational efficiencies regarding hardware, IT domain expertise, training, maintenance and support.The presentation will also cover SSMO's secure Situational Awareness Dashboard in an integrated, fleet centric, cloud based web services fashion. Additionally the SSMO Telemetry as a Service (TaaS) will be covered, which allows authorized users and processes to access telemetry for the entire SSMO fleet, and for the entirety of each spacecrafts history. Both services leverage cloud services in a secure FISMA High and FedRamp environment, and also leverage distributed object stores in order to house and provide the telemetry. The services are also in the process of leveraging the cloud computing services elasticity and horizontal scalability. In the design phase is the Navigation as a Service (NaaS) which will provide a standardized, efficient, and normalized service for the fleet's space flight dynamics operations. Additional future services that may be considered are Ground Segment as a Service (GSaaS), Telemetry and Command as a Service (TCaaS), Flight Software Simulation as a Service, etc.

Ido, Haisam Kassim↗

A Safety-Driven Approach to Exploring and Comparing Air Traffic Management Concepts for Enabling Urban Air Mobility

There is broad recognition that the high tempo and density of Urban Air Mobility (UAM) operations will require identifying new Air Traffic Management (ATM) concepts to safely integrate UAM air traffic into the airspace alongside existing air traffic. However, the simulation models used to compare ATM concepts today are difficult to apply during the early stages of concept development and do not offer enough support in identifying potential new concepts. In addition, they have limited ability to evaluate ATM concepts in terms of safety, security, and other key emergent properties. Instead of using simulation to evaluate ATM concepts, this paper demonstrates how a safety-driven systems engineering approach based on Systems-Theoretic Accident Model and Processes (STAMP) can be used to design properties such as safety into an ATM system from the earliest stages of development. Using a hazard analysis technique called Systems-Theoretic Process Analysis (STPA), system requirements and the desired ATM behavior are derived. As an example, two possible ATM concepts to implement that behavior are compared to identify their safety-related benefits and tradeoffs. This new approach enables (1) systematic exploration of alternative ATM concepts and (2) identification of the safety-related tradeoffs between concepts as early as possible in the development process.

system safety↗

Seismic Assessment of a Long-Term Lunar Habitat

The establishment of secure earth-independent long-term lunar habitats has been envisioned by numerous government agencies and private companies. Recent advancements in assessing seismic hazards caused by shallow moonquakes have highlighted the importance of incorporating this phenomenon into the design of robust and resilient lunar structures. However, further research is required to explore lunar habitat design that considers seismic loads. This paper proposes assessing the structural response of a lunar habitat made of sulfur concrete covered with a regolith layer. The numerical model of the structure is subjected to gravitational, internal pressure and seismic loads. The seismic analysis of the structure is carried out using spectral and nonlinear time history methods. Conditional mean spectra for shallow moonquakes with return periods of 75, 475, 970 and 2475 years are used in the seismic analysis. The records used for the temporal analyses were ground motions that agree with a preliminary seismic hazard on the Moon. The results of temporal analyses reveal that shallow moonquakes with return periods greater than 475 years can lead to the loss of the global stability of the structure. Consequently, the findings imply that seismic loads have the potential to impose unacceptable demands on lunar structures constructed from in-situ materials like sulfur concrete. Hence, it is imperative to incorporate seismic considerations in the design process for developing resilient and long-term lunar habitats.

Lunar habitat↗

Latch mechanism for the space telescope

Latch mechanisms to secure, release, and relatch deployables on the Space Telescope are described. The latch mechanisms are mechanical pre-loading devices composed of a four-bar linkage driven by an electro-mechanical rotary actuator. The latch mechanism requirements, unique design features, analytical highlights, and the development testing are discussed.

Schmidt, H. F.↗

Applicative architectures for fault-tolerant multiprocessors

This paper proposes functional programming frameworks for the design of highly reliable multiprocessor systems. In contrast to imperative programming environments, a functional environment offers elegant, relatively simple, and efficient solutions to concurrent error detection and recovery problems in multiprocessors. Specific fault tolerance mechanisms for upset exposure, fault containment, secure task assignment, and recovery are developed for a class of applicative multiprocessor architectures. Verification of abstract behavioral characteristics of applicative tasks is used for exposing faults during the execution of tasks. The fault containment mechanism is based on isolation of stack and heap segments of tasks. A protocol for secure task assignment is defined between system components. The architecture permits incremental, distributed, and asynchronous backups of system state. Finally, recovery is accomplished, even in the worst cases, by reexecution of a small number of tasks.

Sharma, Madhumitra↗

The Space Shuttle Decision: NASA's Search for a Reusable Space Vehicle

This significant new study of the decision to build the Space Shuttle explains the Shuttle's origins and early development. In addition to internal NASA discussions, this work details the debates in the late 1960s and early 1970s among policymakers in Congress, the Air Force, and the Office of Management and Budget over the roles and technical designs of the Shuttle. Examining the interplay of these organizations with sometimes conflicting goals, the author not only explains how the world's premier space launch vehicle came into being, but also how politics can interact with science, technology, national security, and economics in national government. The weighty policy decision to build the Shuttle represents the first component of the broader story: future NASA volumes will cover the Shuttle's development and operational histories.

Heppenheimer, T. A.↗