SEARCH · Engineering Papers

Results for “Device Failure Probability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

All sources NASA NTRS DOE OSTI

NASA NTRS1978

Scanning microscopy in microcircuit failure analysis

A three-phase microcircuit failure analysis procedure is presented. In the first phase, the device is nondestructively tested and the data obtained is correlated with the circumstances surrounding the failure event. The device is then subjected to a limited nondestructive analysis dominated by optical and scanning electron microscopy (SEM). Knowing that microcircuits usually fail from manufacturing defects or misuse, the analyst looks for one of the probable mechanisms. The SEM has two special operating modes that provide unique data for nondestructive analysis: voltage contrast and conductive current. These are used with other SEM modes and surface analysis techniques to analyze complicated microcircuits. The last phase includes the destructive procedures. The end product of these analyses is a corrective action that will yield a highly reliable system.

Nicolas, D. P.↗

NASA NTRS2018

Radiation Testing Electronics with Heavy Ions-The Best Way to Hit a Target Moving Ever Exponentially Faster

In 1972, when engineers at Hughes Aircraft Corporation discovered that errors in their satellite avionics were being caused by cosmic rays (so-called single-event effects, or SEE), Moore's Law was only 7 years old. Now, more than 45 years on, the scaling that drove Moore's Law for its first 35 years has reached its limits. However, electronics technology continues to evolve exponentially and SEE remain a formidable issue for use of electronics in space. SEE occur when a single ionizing particle passes through a sensitive volume in an active semiconductor device and generates sufficient charge to cause anomalous behavior or failure in the device. Because SEE can occur at any time during the mission, the emphasis of SEE risk management methodologies is ensuring that all SEE modes in a device under test are detected by the test. Because a particle's probability of causing an SEE generally increases as the particle becomes more ionizing, heavy-ion beams have been and remain the preferred tools for elucidating SEE vulnerabilities. In this talk we briefly discuss space radiation environments and SEE mechanisms, describe SEE test methodologies and discuss current and future challenges for use of heavy-ion beams for SEE testing in an era when the continued validity of Moore's law depends on innovation rather than CMOS scaling.

space radiation environments↗

NASA NTRS1999

Fracture Probability of MEMS Optical Devices for Space Flight Applications

A bending fracture test specimen design is presented for thin elements used in optical devices for space flight applications. The specimen design is insensitive to load position, avoids end effect complications, and can be used to measure strength of membranes less than 2 microns thick. The theoretical equations predicting stress at failure are presented, and a detailed finite element model is developed to validate the equations for this application. An experimental procedure using a focused ion beam machine is outlined, and results from preliminary tests of 1.9 microns thick single crystal silicon are presented. These tests are placed in the context of a methodology for the design and evaluation of mission critical devices comprised of large arrays of cells.

Fettig, Rainer K.↗

NASA NTRS2003

A Program to Detect and Characterize Extra-Solar Giant Planets

We initiated a significant hardware upgrade to the AFOE, to increase its efficiency for precise radial velocity studies to the level where we can continue to contribute usefully to extrasolar planet research on relatively bright stars. The AFOE, at a 1.5-m telescope, will of course not have the sensitivity of radial velocity instruments at larger telescopes, such as the HIRES on Keck or the Hectochelle on the MMT telescope (about to come on line). However, it has been possible to increase its efficiency for precise radial velocity studies by a factor of 4 to 5, which-combined with the large amount of telescope time available at the 1.5-m telescope-will permit us to do intensive follow-up observations of stars brighter than about 8 magnitude. The AFOE was originally designed primarily for asteroseismology using a ThAr reference. This provided useful wavelength stability over tens of minutes as required for asteroseismology, but we were unable to get a long-term (month-to-month) velocity precision better than about 15 m/s with that setup. Hence, we implemented an iodine cell as a wavelength reference for extrasolar planet studies. However, the optical design of the original AFOE did not completely span the wavelength range covered by the iodine absorption spectrum, and furthermore the optics suffered significant light loss through optical obscuration in the camera secondary. To remedy this, we replaced the AFOE grating with a new one that covered the entire iodine spectral range at somewhat lower spectral resolution, and replaced the camera with a transmitting lens. (The use of a lens was made possible by restricting the spectral range covered by the upgraded AFOE to only the iodine region.) These upgrades were successfully completed, and the instrument was tested for three nights in fall of 2002. The expected improvement in sensitivity by a factor of 4 to 5 was observed: that is, the same velocity precision as previously attained (of order 5 to 7 m/s) was now obtained on a stars that are about 4 to 5 times fainter. Unfortunately, just after installing the new AFOE optics, there was a catastrophic failure of the old Tektronix CCD. A careful investigation was made, and it was determined that the failure was probably due to too many thermal cyclings over the previous 8 years. The only solution was to purchase a new CCD. Internal funds of $16,000 were found for this purpose, and the new CCD (a thinned, back-illuminated Marconi 2K x 2K device with 13.5 micron pixels, and employing dual readout channels to keep the readout time as short as 20 seconds) was ordered, has now arrived, and is currently under test before 1 being installed in the AFOE liquid nitrogen dewar. At the same time, we expect to implement new CCD control electronics. This system should be better in many ways than the previous detector (including eliminating the need for UV flashing to maximize the quantum efficiency). We plan to install the detector on the telescope and begin operations again in April of this year.

Lindstrom, David↗

NASA NTRSDate not supplied

AXAF Hypervelocity Impact Test Results

Composite and honeycomb panels are commonly used for spacecraft structural components. The impact test results and analysis of six different composite and honeycomb combinations for use on the advanced X-ray astrophysics facility (AXAF) are reported. The AXAF consists of an X-ray telescope and the associated detecting devices attached to an octagonal spacecraft with an internal propulsion system. The spacecraft's structural panels and optical bench are made of two different graphite fiber reinforced polyimides or composite panels bonded to either side of an aluminum honeycomb. The instrument is required to have at least a 0.92 probability of no failure of any of the critical elements due to meteoroids and debris. In relation to the no-failure probability determination in its low earth orbit environment, hypervelocity impact testing was performed to determine the ballistic limit range and the extent of damage due to impact. The test results for a power and signal cable bundle located behind a panel are presented. Tests planned for a multilayer insulation (MLI) blanket and four types of cable bundles are discussed.

Cynthia L Frost↗

NASA NTRS2011

Energy Storage Project

NASA's Exploration Technology Development Program funded the Energy Storage Project to develop battery and fuel cell technology to meet the expected energy storage needs of the Constellation Program for human exploration. Technology needs were determined by architecture studies and risk assessments conducted by the Constellation Program, focused on a mission for a long-duration lunar outpost. Critical energy storage needs were identified as batteries for EVA suits, surface mobility systems, and a lander ascent stage; fuel cells for the lander and mobility systems; and a regenerative fuel cell for surface power. To address these needs, the Energy Storage Project developed advanced lithium-ion battery technology, targeting cell-level safety and very high specific energy and energy density. Key accomplishments include the development of silicon composite anodes, lithiated-mixed-metal-oxide cathodes, low-flammability electrolytes, and cell-incorporated safety devices that promise to substantially improve battery performance while providing a high level of safety. The project also developed "non-flow-through" proton-exchange-membrane fuel cell stacks. The primary advantage of this technology set is the reduction of ancillary parts in the balance-of-plant--fewer pumps, separators and related components should result in fewer failure modes and hence a higher probability of achieving very reliable operation, and reduced parasitic power losses enable smaller reactant tanks and therefore systems with lower mass and volume. Key accomplishments include the fabrication and testing of several robust, small-scale nonflow-through fuel cell stacks that have demonstrated proof-of-concept. This report summarizes the project s goals, objectives, technical accomplishments, and risk assessments. A bibliography spanning the life of the project is also included.

Mercer, Carolyn R.↗

DOE OSTI2021

A Risk-Averse Approach for Distribution Grid Expansion Planning

Recent episodes of natural disasters have challenged the resilience of power grids. Adequate distribution grid planning that properly captures the risk aversion of the utility system planner is a key factor to increase the flexibility of distribution networks to circumvent these events. In this paper, we propose a methodology to determine the optimal portfolio of investments in lines and storage devices in order to minimize a convex combination between expected value and CVaR of operational costs, including energy not served, while taking into account the multistage nature of the energy storage management within this context. While the expected value of energy not served has been traditionally employed to tackle routine failures, we also minimize the CVaR of energy not served to address high-impact, low-probability (HILP) events. We illustrate the performance of the proposed methodology with a 54-Bus system test case.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2022

Cyber Attack Sequences Generation for Electric Power Grid

Security assessment of cyber-physical energy systems (CPESs) such as the electric power grid is a critical operation to maintain availability, reliability, and quality of service in the presence of persistent threats from malicious cyber actors. Existing security assessment approaches such as penetration testing and red teaming rely on subject matter expert experience and forensic cyber analysis of historical events to perform realistic, threat-informed assessments of CPES defense. CPESs have a large attack surface because of the heterogeneity and complexity of underlying topology, devices, measurements, and vulnerabilities. The aforementioned approaches lead to partial coverage of the attack surface with a large set of unknown but possible exploits. There is a need to automate the CPES attack surface discovery and contextualize it for relevant, highly probable, real-world attack scenarios. We propose a methodology and framework to facilitate the discovery of the CPES attack surface. We present a multilayer attack graph with ranked attack sequences to describe CPES failure scenarios. We present a work-in-progress framework that lists key components to automate the attack modeling and sequence generation. We demonstrate the published National Electric Sector Cybersecurity Organization Resource CPES failure scenario to highlight the trustworthiness of generated attack sequences.

Dutta, Ashutosh↗

NASA NTRS2017

Sensitivity Analysis of the Bone Fracture Risk Model

Introduction: The probability of bone fracture during and after spaceflight is quantified to aid in mission planning, to determine required astronaut fitness standards and training requirements and to inform countermeasure research and design. Probability is quantified with a probabilistic modeling approach where distributions of model parameter values, instead of single deterministic values, capture the parameter variability within the astronaut population and fracture predictions are probability distributions with a mean value and an associated uncertainty. Because of this uncertainty, the model in its current state cannot discern an effect of countermeasures on fracture probability, for example between use and non-use of bisphosphonates or between spaceflight exercise performed with the Advanced Resistive Exercise Device (ARED) or on devices prior to installation of ARED on the International Space Station. This is thought to be due to the inability to measure key contributors to bone strength, for example, geometry and volumetric distributions of bone mass, with areal bone mineral density (BMD) measurement techniques. To further the applicability of model, we performed a parameter sensitivity study aimed at identifying those parameter uncertainties that most effect the model forecasts in order to determine what areas of the model needed enhancements for reducing uncertainty. Methods: The bone fracture risk model (BFxRM), originally published in (Nelson et al) is a probabilistic model that can assess the risk of astronaut bone fracture. This is accomplished by utilizing biomechanical models to assess the applied loads; utilizing models of spaceflight BMD loss in at-risk skeletal locations; quantifying bone strength through a relationship between areal BMD and bone failure load; and relating fracture risk index (FRI), the ratio of applied load to bone strength, to fracture probability. There are many factors associated with these calculations including environmental factors, factors associated with the fall event, mass and anthropometric values of the astronaut, BMD characteristics, characteristics of the relationship between BMD and bone strength and bone fracture characteristics. The uncertainty in these factors is captured through the use of parameter distributions and the fracture predictions are probability distributions with a mean value and an associated uncertainty. To determine parameter sensitivity, a correlation coefficient is found between the sample set of each model parameter and the calculated fracture probabilities. Each parameters contribution to the variance is found by squaring the correlation coefficients, dividing by the sum of the squared correlation coefficients, and multiplying by 100. Results: Sensitivity analyses of BFxRM simulations of preflight, 0 days post-flight and 365 days post-flight falls onto the hip revealed a subset of the twelve factors within the model which cause the most variation in the fracture predictions. These factors include the spring constant used in the hip biomechanical model, the midpoint FRI parameter within the equation used to convert FRI to fracture probability and preflight BMD values. Future work: Plans are underway to update the BFxRM by incorporating bone strength information from finite element models (FEM) into the bone strength portion of the BFxRM. Also, FEM bone strength information along with fracture outcome data will be incorporated into the FRI to fracture probability.

mathematical models↗

DOE OSTI2023

A Comprehensive Assessment Tool for Low-TRL Current Energy Converters: Preprint

Along with a market-competitive levelized cost of energy, a current energy converter technology strongly benefits from an extensive consideration of socioeconomic, environmental, and regulatory factors early in the design process. As part of a technology performance level assessment, a series of assessment questions and guidance are developed and presented to evaluate an early-stage current energy technology on holistic criteria considering the entire device lifecycle. The assessment represents an accumulation of industry and research experience to date and relies on regular updates to ensure alignment with industry best-practices, regulatory requirements, and up-to-date technical understanding. A cradle-to-grave (materials, manufacturing, installation and deployment, operations and maintenance, and end-of-life) assessment of capabilities and functional requirements for tidal, river, and ocean current technologies has been completed. This work presents the evaluation questions and qualitative performance criteria for current energy converters deployed in tidal, ocean current, and/or river applications. Key considerations related to manufacturing and installation include supply chain robustness, manufacturability and related job creation in the end-user and/or adjacent communities, and the time-to-repayment of the embodied energy debt. During deployment and maintenance operations, the safety of the device and subsystems during disconnect or grid failure, the difficulty and frequency of offshore heavy-lift activities, the avoidance or mitigation of area use conflicts, the sea-states and weather conditions that permit maintenance access, and the availability of contingency plans (should conditions change unexpectedly) are a portion of the considered assessment criteria. Results include the potential impact of early-stage design decisions on the socioeconomic, environmental, and regulatory performance of a technology that allows developers to increase the product value and probability of success, and minimize costly late-stage design iterations through early and broad consideration of factors affecting overall performance and acceptability.

industry support↗

DOE OSTI2023

A Comprehensive Assessment Tool for Low-TRL Current Energy Converters

converter↗

DOE OSTI2023

A Comprehensive Assessment Tool for Low-TRL Current Energy Converters

Along with a market-competitive levelized cost of energy, a current energy converter technology strongly benefits from an extensive consideration of socioeconomic, environmental, and regulatory factors early in the design process. As part of a technology performance level assessment, a series of assessment questions and guidance are developed and presented to evaluate an early-stage current energy technology on holistic criteria considering the entire device lifecycle. The assessment represents an accumulation of industry and research experience to date and relies on regular updates to ensure alignment with industry best-practices, regulatory requirements, and up-to-date technical understanding. A cradle-to-grave (materials, manufacturing, installation and deployment, operations and maintenance, and end-of-life) assessment of capabilities and functional requirements (i.e., high, medium, and low) performance criteria for current energy converters deployed in tidal, ocean current, and/or river applications. Key considerations related to manufacturing and installation include supply chain robustness, manufacturability and related job creation in the end-user and/or adjacent communities, and the time-to-repayment of the embodied energy debt. During deployment and maintenance operations, the safety of the device and subsystems during disconnect or grid failure, the difficulty and frequency of offshore heavy-lift activities, the avoidance or mitigation of area-use conflicts, the sea-states and weather conditions that permit maintenance access, and the availability of contingency plans (should conditions change unexpectedly) are a portion of the considered assessment criteria. Results include the potential impact of early-stage design decisions on the socioeconomic, environmental, and regulatory performance of a technology that allows developers to increase the product value and probability of success, and minimize costly late-stage design iterations through early and broad consideration of factors affecting overall performance and acceptability.

life cycle analysis↗

NASA NTRS1975

Migratory gold resistive shorts - Chemical aspects of a failure mechanism

Integrated-circuit devices using the Ti/W/Au metal system are subject to failure mechanisms based on electrolytic corrosion. The migratory gold resistive short (MGRS) failure mode is one example of this mechanism and results in the formation of filamentary or dendritic deposits of gold between adjacent stripes on the IC chip. This reaction requires the presence of a sufficient amount of water, a bias voltage between adjacent stripes, and the activation of the cathodic (-) stripe. Gold ions are transported from anode to cathode through a film of moisture adsorbed on the surface of the chip; halide ions are probably involved in the transfer. Their presence is verified experimentally by X-ray photoelectron spectroscopy. Some of the chemical and electrostatic factors involved in the MGRS mechanism are discussed in this paper, including the questions of a threshold level of moisture and contamination.

Grunthaner, F. J.↗

DOE OSTI2020

The organic redox transistor for neuromorphic computing

Inspired by the in-memory computing architectures of biological systems, neuromorphic computing using crossbar arrays of artificial synapses based on non-volatile memory (NVM) devices with variable conductances has emerged as a new paradigm to enable massively parallel and ultra-low power computing hardware for data centric applications. Although inference has been demonstrated successfully using crossbars based on a variety of NMV technologies, efficient learning and scaling to large arrays (>10 6 elements) remains a challenge due to the synaptic elements' non-ideal electrical characteristics which degrades ANN accuracy. A further challenge is that in the conductive state memristors draw large currents >μA resulting in significant voltage drops in the interconnect wires and increased probability of failure in scaled arrays. We suggest the organic polymer redox transistor (RT) is an alternate approach that could solve many of these challenges, enabling both inference and parallel outer product updates, as recently demonstrated by Fuller et al. An RT consists of redox-active channel and gate electrodes in contact with a liquid or solid electrolyte. lon insertion through the electrolyte controls the channel electronic conductivity, while electron transfer through an external circuit maintains overall charge neutrality. Unlike a rechargeable battery, in the RT the voltage built-up across the electrolyte is kept to a minimum (typically <100 mV) by using the same material for the gate and channel. Elimination of the voltage offset simplifies integration of the RT into programmable arrays by enabling the use of various selectors. RTs based on inorganic and organic materials have been recently demonstrated with conductance tuning occurring at potentials of just a few mV and hundreds to thousands of linearly and symmetrically programmable conductance states, enabling near ideal accuracy in neural network simulations. Introduced in the 1980's, redox transistors with metallic gate electrodes and organic channel materials, also known as organic electrochemical transistors (OECTs), have been explored for a variety of applications such as chem- and bio-sensing, neural interfaces, and low cost printed circuits. A typical channel material for OECTs is the conducting polymer poly(3,4-ethylenedioxythiophene) doped with poly(styrene sulfonate) (PEDOT:PSS). PEDOT is a p-type semiconducting polymer with mobile positively charged polarons that hop chain-to-chain.

Talin, Albert Alec↗

NASA NTRS2011

Energy Storage Technology Development for Space Exploration

The National Aeronautics and Space Administration is developing battery and fuel cell technology to meet the expected energy storage needs of human exploration systems. Improving battery performance and safety for human missions enhances a number of exploration systems, including un-tethered extravehicular activity suits and transportation systems including landers and rovers. Similarly, improved fuel cell and electrolyzer systems can reduce mass and increase the reliability of electrical power, oxygen, and water generation for crewed vehicles, depots and outposts. To achieve this, NASA is developing non-flow-through proton-exchange-membrane fuel cell stacks, and electrolyzers coupled with low permeability membranes for high pressure operation. The primary advantage of this technology set is the reduction of ancillary parts in the balance-of-plant fewer pumps, separators and related components should result in fewer failure modes and hence a higher probability of achieving very reliable operation, and reduced parasitic power losses enable smaller reactant tanks and therefore systems with lower mass and volume. Key accomplishments over the past year include the fabrication and testing of several robust, small-scale non-flow-through fuel cell stacks that have demonstrated proof-of-concept. NASA is also developing advanced lithium-ion battery cells, targeting cell-level safety and very high specific energy and energy density. Key accomplishments include the development of silicon composite anodes, lithiatedmixed- metal-oxide cathodes, low-flammability electrolytes, and cell-incorporated safety devices that promise to substantially improve battery performance while providing a high level of safety.

Mercer, Carolyn R.↗

NASA NTRS2019

Electrified Aircraft Propulsion Systems: Potential Failure Modes and Failure Mitigation Strategies

Electrified aircraft propulsion (EAP) systems hold great potential for the reduction of aircraft fuel burn, emissions, and noise. Currently, NASA and other organizations are actively working to identify and mature technologies necessary to bring EAP designs to reality. A requirement for the development of any civil aircraft and its systems is to ensure that potential hazards in the design are identified and appropriately mitigated to ensure that the system is safe. During aircraft development, a system safety assessment that consists of a functional hazard assessment is conducted to identify all potential failure conditions of each function, and classify those failures according to the severity of their effects on the aircraft or its occupants. The more severe a function's failure condition classification, the greater the development assurance level required for the function to ensure that the probability of the hazard is acceptably low. Today, aircraft engines and their control systems receive type certificate approval as a stand-alone system to signify their airworthiness. However, the complex coupling and distributed nature of EAP designs are expected to place added challenges on the certification of these systems. This presentation will provide an initial high-level review of the potential failure modes and hazards posed by a generic EAP system along with potential mitigation strategies for those failures. The EAP system is assumed to be a hybrid design consisting of gas turbine engines, mechanical drives, electric machines, power electronics and distribution systems, energy storage devices, and motor driven propulsors. The functionality provided by each of these EAP subsystems will be discussed along with the potential failure modes they may encounter. This will include a discussion of coupled failure effects, where a fault in one EAP subsystem effects the operation of other subsystems in the architecture. Next, potential failure mitigation strategies are discussed including both software-based and hardware-based mitigation strategies. The presentation will conclude with an example evaluation of the potential failure modes and mitigation strategies for a concept EAP system proposed by NASA.

Simon, Donald L.↗

NASA NTRS1984

Fastener load tests and retention systems tests for cryogenic wind-tunnel models

A-286 stainless steel screws were tested to determine the tensile load capability and failure mode of various screw sizes and types at both cryogenic and room temperature. Additionally, five fastener retention systems were tested by using A-286 screws with specimens made from the primary metallic alloys that are currently used for cryogenic models. The locking system effectiveness was examined by simple no-load cycling to cryogenic temperatures (-275 F) as well as by dynamic and static loading at cryogenic temperatures. In general, most systems were found to be effective retention devices. There are some differences between the various devices with respect to ease of application, cleanup, and reuse. Results of tests at -275 F imply that the cold temperatures act to improve screw retention. The improved retention is probably the result of differential thermal contraction and/or increased friction (thread-binding effects). The data provided are useful in selecting screw sizes, types, and locking devices for model systems to be tested in cryogenic wind tunnels.

Wallace, J. W.↗

NASA NTRS2013

What Reliability Engineers Should Know about Space Radiation Effects

Space radiation in space systems present unique failure modes and considerations for reliability engineers. Radiation effects is not a one size fits all field. Threat conditions that must be addressed for a given mission depend on the mission orbital profile, the technologies of parts used in critical functions and on application considerations, such as supply voltages, temperature, duty cycle, and redundancy. In general, the threats that must be addressed are of two types-the cumulative degradation mechanisms of total ionizing dose (TID) and displacement damage (DD). and the prompt responses of components to ionizing particles (protons and heavy ions) falling under the heading of single-event effects. Generally degradation mechanisms behave like wear-out mechanisms on any active components in a system: Total Ionizing Dose (TID) and Displacement Damage: (1) TID affects all active devices over time. Devices can fail either because of parametric shifts that prevent the device from fulfilling its application or due to device failures where the device stops functioning altogether. Since this failure mode varies from part to part and lot to lot, lot qualification testing with sufficient statistics is vital. Displacement damage failures are caused by the displacement of semiconductor atoms from their lattice positions. As with TID, failures can be either parametric or catastrophic, although parametric degradation is more common for displacement damage. Lot testing is critical not just to assure proper device fi.mctionality throughout the mission. It can also suggest remediation strategies when a device fails. This paper will look at these effects on a variety of devices in a variety of applications. This paper will look at these effects on a variety of devices in a variety of applications. (2) On the NEAR mission a functional failure was traced to a PIN diode failure caused by TID induced high leakage currents. NEAR was able to recover from the failure by reversing the current of a nearby Thermal Electric Cooler (turning the TEC into a heater). The elevated temperature caused the PIN diode to anneal and the device to recover. It was by lot qualification testing that NEAR knew the diode would recover when annealed. This paper will look at these effects on a variety of devices in a variety of applications. Single Event Effects (SEE): (1) In contrast to TID and displacement damage, Single Event Effects (SEE) resemble random failures. SEE modes can range from changes in device logic (single-event upset, or SEU). temporary disturbances (single-event transient) to catastrophic effects such as the destructive SEE modes, single-event latchup (SEL). single-event gate rupture (SEGR) and single-event burnout (SEB) (2) The consequences of nondestructive SEE modes such as SEU and SET depend critically on their application--and may range from trivial nuisance errors to catastrophic loss of mission. It is critical not just to ensure that potentially susceptible devices are well characterized for their susceptibility, but also to work with design engineers to understand the implications of each error mode. -For destructive SEE, the predominant risk mitigation strategy is to avoid susceptible parts, or if that is not possible. to avoid conditions under which the part may be susceptible. Destructive SEE mechanisms are often not well understood, and testing is slow and expensive, making rate prediction very challenging. (3) Because the consequences of radiation failure and degradation modes depend so critically on the application as well as the component technology, it is essential that radiation, component. design and system engineers work togetherpreferably starting early in the program to ensure critical applications are addressed in time to optimize the probability of mission success.

DiBari, Rebecca↗