Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Risk Analyses”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

The Space Shuttle Program Pre-Flight Meteoroid and Orbital Debris Risk/Damage Predictions and Post-Flight Damage Assessments

The pre-flight predictions and postflight assessments carried out in relation to a series of Space Shuttle missions are reviewed, and data are presented for the meteoroid and orbital debris damage observed on the Hubble Space Telescope during the 1994 Hubble repair mission. Pre-flight collision risk analyses are carried out prior to each mission, and in the case of an unacceptable risk, the mission profile is altered until the risk is considered to be acceptable. The NASA's BUMPER code is used to compute the probability of damage from debris and meteoroid particle impacts based on the Poisson statistical model for random events. The penetration probability calculation requires information concerning the geometry of the critical systems, the penetration resistance and mission profile parameters. Following each flight, the orbiter is inspected for meteoroid and space debris damage. The emphasis is on areas such as the radiator panels, the windows and the reinforced carbon-carbon structures on the leading wing edges and on the nose cap. The contents of damage craters are analyzed using a scanning electron microscope to determine the nature and origin of the impactor. Hypervelocity impact tests are often performed to simulate the observed damage and to estimate the nature of the damaging particles. The number and type of damage observed provides information concerning the orbital debris environment.

Levin, George M.↗

High-Fidelity Multi-Rotor Unmanned Aircraft System Simulation Development for Trajectory Prediction Under Off-Nominal Flight Dynamics

The NASA Unmanned Aircraft System (UAS) Traffic Management (UTM) project is conducting research to enable civilian low-altitude airspace and UAS operations. A goal of this project is to develop probabilistic methods to quantify risk during failures and off nominal flight conditions. An important part of this effort is the reliable prediction of feasible trajectories during off-nominal events such as control failure, atmospheric upsets, or navigation anomalies that can cause large deviations from the intended flight path or extreme vehicle upsets beyond the normal flight envelope. Few examples of high-fidelity modeling and prediction of off-nominal behavior for small UAS (sUAS) vehicles exist, and modeling requirements for accurately predicting flight dynamics for out-of-envelope or failure conditions are essentially undefined. In addition, the broad range of sUAS aircraft configurations already being fielded presents a significant modeling challenge, as these vehicles are often very different from one another and are likely to possess dramatically different flight dynamics and resultant trajectories and may require different modeling approaches to capture off-nominal behavior. NASA has undertaken an extensive research effort to define sUAS flight dynamics modeling requirements and develop preliminary high fidelity six degree-of-freedom (6-DOF) simulations capable of more closely predicting off-nominal flight dynamics and trajectories. This research has included a literature review of existing sUAS modeling and simulation work as well as development of experimental testing methods to measure and model key components of propulsion, airframe and control characteristics. The ultimate objective of these efforts is to develop tools to support UTM risk analyses and for the real-time prediction of off-nominal trajectories for use in the UTM Risk Assessment Framework (URAF). This paper focuses on modeling and simulation efforts for a generic quad-rotor configuration typical of many commercial vehicles in use today. An overview of relevant off-nominal multi-rotor behaviors will be presented to define modeling goals and to identify the prediction capability lacking in simplified models of multi-rotor performance. A description of recent NASA wind tunnel testing of multi-rotor propulsion and airframe components will be presented illustrating important experimental and data acquisition methods, and a description of preliminary propulsion and airframe models will be presented. Lastly, examples of predicted off-nominal flight dynamics and trajectories from the simulation will be presented.

Foster, John V.↗

Quasi-Static Probabilistic Structural Analyses Process and Criteria

Current deterministic structural methods are easily applied to substructures and components, and analysts have built great design insights and confidence in them over the years. However, deterministic methods cannot support systems risk analyses, and it was recently reported that deterministic treatment of statistical data is inconsistent with error propagation laws that can result in unevenly conservative structural predictions. Assuming non-nal distributions and using statistical data formats throughout prevailing stress deterministic processes lead to a safety factor in statistical format, which integrated into the safety index, provides a safety factor and first order reliability relationship. The embedded safety factor in the safety index expression allows a historically based risk to be determined and verified over a variety of quasi-static metallic substructures consistent with the traditional safety factor methods and NASA Std. 5001 criteria.

Goldberg, B.↗

Summary of Results from the Risk Management Program for the Mars Microrover Flight Experiment

On 4 July 1997, the Mars Pathfinder landed on the surface of Mars carrying the first planetary rover, known as the Sojourner. Formally known as the Microrover Flight Experiment (MFEX), the Sojourner was a low cost, high-risk technology demonstration, in which new risk management techniques were tried. This paper summarizes the activities and results of the effort to conduct a low-cost, yet meaningful risk management program for the MFEX. The specific activities focused on cost, performance, schedule, and operations risks. Just as the systems engineering process was iterative and produced successive refinements of requirements, designs, etc., so was the risk management process. Qualitative risk assessments were performed first to gain some insights for refining the microrover design and operations concept. These then evolved into more quantitative analyses. Risk management lessons from the manager's perspective is presented for other low-cost, high-risk space missions.

Shishko, Robert↗

NASA Taxonomies for Searching Problem Reports and FMEAs

Many types of hazard and risk analyses are used during the life cycle of complex systems, including Failure Modes and Effects Analysis (FMEA), Hazard Analysis, Fault Tree and Event Tree Analysis, Probabilistic Risk Assessment, Reliability Analysis and analysis of Problem Reporting and Corrective Action (PRACA) databases. The success of these methods depends on the availability of input data and the analysts knowledge. Standard nomenclature can increase the reusability of hazard, risk and problem data. When nomenclature in the source texts is not standard, taxonomies with mapping words (sets of rough synonyms) can be combined with semantic search to identify items and tag them with metadata based on a rich standard nomenclature. Semantic search uses word meanings in the context of parsed phrases to find matches. The NASA taxonomies provide the word meanings. Spacecraft taxonomies and ontologies (generalization hierarchies with attributes and relationships, based on terms meanings) are being developed for types of subsystems, functions, entities, hazards and failures. The ontologies are broad and general, covering hardware, software and human systems. Semantic search of Space Station texts was used to validate and extend the taxonomies. The taxonomies have also been used to extract system connectivity (interaction) models and functions from requirements text. Now the Reconciler semantic search tool and the taxonomies are being applied to improve search in the Space Shuttle PRACA database, to discover recurring patterns of failure. Usual methods of string search and keyword search fall short because the entries are terse and have numerous shortcuts (irregular abbreviations, nonstandard acronyms, cryptic codes) and modifier words cannot be used in sentence context to refine the search. The limited and fixed FMEA categories associated with the entries do not make the fine distinctions needed in the search. The approach assigns PRACA report titles to problem classes in the taxonomy. Each ontology class includes mapping words - near-synonyms naming different manifestations of that problem class. The mapping words for Problems, Entities and Functions are converted to a canonical form plus any of a small set of modifier words (e.g. non-uniformity NOT + UNIFORM.) The report titles are parsed as sentences if possible, or treated as a flat sequence of word tokens if parsing fails. When canonical forms in the title match mapping words, the PRACA entry is associated with the corresponding Problem, Entity or Function in the ontology. The user can search for types of failures associated with types of equipment, clustering by type of problem (e.g., all bearings found with problems of being uneven: rough, irregular, gritty ). The results could also be used for tagging PRACA report entries with rich metadata. This approach could also be applied to searching and tagging failure modes, failure effects and mitigations in FMEAs. In the pilot work, parsing 52K+ truncated titles (the test cases that were available), has resulted in identification of both a type of equipment and type of problem in about 75% of the cases. The results are displayed in a manner analogous to Google search results. The effort has also led to the enrichment of the taxonomy, adding some new categories and many new mapping words. Further work would make enhancements that have been identified for improving the clustering and further reducing the false alarm rate. (In searching for recurring problems, good clustering is more important than reducing false alarms). Searching complete PRACA reports should lead to immediate improvement.

Malin, Jane T.↗

Fundamentals of wildlife dosimetry and lessons learned from a decade of measuring external dose rates in the field

Methods for determining the radiation dose received by exposed biota require major improvements to reduce uncertainties and increase precision. We share our experiences in attempting to quantify external dose rates to free-ranging wildlife using GPS-coupled dosimetry methods. The manuscript is a primer on fundamental concepts in wildlife dosimetry in which the complexities of quantifying dose rates are highlighted, and lessons learned are presented based on research with wild boar and snakes at Fukushima, wolves at Chornobyl, and reindeer in Norway. GPS-coupled dosimeters produced empirical data to which numerical simulations of external dose using computer software were compared. Our data did not support a standing paradigm in risk analyses: Using averaged soil contaminant levels to model external dose rates conservatively overestimate the dose to individuals within a population. Following this paradigm will likely lead to misguided recommendations for risk management. The GPS-dosimetry data also demonstrated the critical importance of how modeled external dose rates are impacted by the scale at which contaminants are mapped. When contaminant mapping scales are coarse even detailed knowledge about each animal’s home range was inadequate to accurately predict external dose rates. Importantly, modeled external dose rates based on a single measurement at a trap site did not correlate to actual dose rates measured on free ranging animals. These findings provide empirical data to support published concerns about inadequate dosimetry in much of the published Chernobyl and Fukushima dose-effects research. Furthermore, our data indicate that a huge portion of that literature should be challenged, and that improper dosimetry remains a significant source of controversy in radiation dose-effect research.

61 RADIATION PROTECTION AND DOSIMETRY↗

Assessing quality in cardiac surgery: why this is necessary in the twenty-first century

The cost and high-profile nature of coronary surgery means that this is an area of close public scrutiny. As much pioneering work in data collection and risk analyses has been carried out by cardiac surgeons, substantial information exists and the correct interpretation of that data is identified as an important issue. This paper considers the background and history of risk-adjustment in cardiac surgery, the uses of quality data, examines the observed/expected mortality ratio and looks at issues such as cost and reactions to outliers. The conclusion of the study is that the continuation of accurate data collection by the whole operative team and a strong commitment to constantly improving quality is crucial to its meaningful application.

Review↗

Expansion of Hazards and Probabilistic Risk Assessments of a Light-Water Reactor Coupled with Electrolysis Hydrogen Production Plants

This report builds upon the body of work sponsored by the Department of Energy (DOE) Light-Water Reactor Sustainability (LWRS) Flexible Power Operation and Generation (FPOG) program that presented generic probabilistic risk assessments (PRAs) for the addition of a heat extraction system (HES) to light-water reactors to support the co-location of a high temperature hydrogen electrolysis facility (HTEF). Probabilistic and deterministic hazards assessments and risk analyses are leveraged throughout this report. Several improvements and new analyses are included in this report. First, higher amounts of detail in the specifications of the generic HTEFs are used to produce scaled results for a 100, 500, and 1000 MW nominal hydrogen production facility. An additional hazard assessment of 1000 kg of hydrogen storage is performed. The facility hazards and footprint are assessed to determine the safe distance required for placement near the nuclear power plant (NPP). Second, specific designs for corresponding HESs for the different levels of support required by the HTEFs are analyzed in the PRA model. Third, a hazards analysis of the specified HTEFs leads not only to effects of the quantified risk assessment for the NPP, but also qualitative hazards assessment for the community. Finally, a seismic analysis and a high winds analysis have each been added to the PRA. The results investigate the applicability of the potential licensing approaches which do not require a full United States (U.S.) Nuclear Regulatory Commission (NRC) licensing review. The PRAs are generic and include listed assumptions. The HTEF design built for this project has further eliminated many conservative assumptions from the prior PRAs in this series. The PRA results indicate that the 10 CFR 50.59 licensing approach is justified due to the minimal increase in initiating event frequencies for all design basis accidents, with none exceeding 7.7%. The PRA results for core damage frequency and large early release frequency support the use of NRC Regulation Guide 1.174 as further risk information that supports a change without a full licensing amendment review. The hazard analyses and PRA confirm the need for engineered blast barriers of storage tanks and the common production header leaving the HTEF. The hazards analyses and PRA also confirm with high confidence that using the assumptions of design in this report that the safety case for licensing an HES addition and an HTEF sited with its unprotected high-pressure stage components 187 meters from the NPP’s transmission towers (the most fragile structure, system, and component) is strong.

08 HYDROGEN↗

Path Toward a Unifid Geometry for Radiation Transport

The Direct Accelerated Geometry for Radiation Analysis and Design (DAGRAD) element of the RadWorks Project under Advanced Exploration Systems (AES) within the Space Technology Mission Directorate (STMD) of NASA will enable new designs and concepts of operation for radiation risk assessment, mitigation and protection. This element is designed to produce a solution that will allow NASA to calculate the transport of space radiation through complex computer-aided design (CAD) models using the state-of-the-art analytic and Monte Carlo radiation transport codes. Due to the inherent hazard of astronaut and spacecraft exposure to ionizing radiation in low-Earth orbit (LEO) or in deep space, risk analyses must be performed for all crew vehicles and habitats. Incorporating these analyses into the design process can minimize the mass needed solely for radiation protection. Transport of the radiation fields as they pass through shielding and body materials can be simulated using Monte Carlo techniques or described by the Boltzmann equation, which is obtained by balancing changes in particle fluxes as they traverse a small volume of material with the gains and losses caused by atomic and nuclear collisions. Deterministic codes that solve the Boltzmann transport equation, such as HZETRN [high charge and energy transport code developed by NASA Langley Research Center (LaRC)], are generally computationally faster than Monte Carlo codes such as FLUKA, GEANT4, MCNP(X) or PHITS; however, they are currently limited to transport in one dimension, which poorly represents the secondary light ion and neutron radiation fields. NASA currently uses HZETRN space radiation transport software, both because it is computationally efficient and because proven methods have been developed for using this software to analyze complex geometries. Although Monte Carlo codes describe the relevant physics in a fully three-dimensional manner, their computational costs have thus far prevented their widespread use for analysis of complex CAD models, leading to the creation and maintenance of toolkit-specific simplistic geometry models. The work presented here builds on the Direct Accelerated Geometry Monte Carlo (DAGMC) toolkit developed for use with the Monte Carlo N-Particle (MCNP) transport code. The workflow for achieving radiation transport on CAD models using MCNP and FLUKA has been demonstrated and the results of analyses on realistic spacecraft/habitats will be presented. Future work is planned that will further automate this process and enable the use of multiple radiation transport codes on identical geometry models imported from CAD. This effort will enhance the modeling tools used by NASA to accurately evaluate the astronaut space radiation risk and accurately determine the protection provided by as-designed exploration mission vehicles and habitats

Lee, Kerry↗

Comparison and multi-model inference of excess risks models for radiation-related solid cancer

In assessments of detrimental health risks from exposures to ionising radiation, many forms of risk to dose–response models are available in the literature. The usual practice is to base risk assessment on one specific model and ignore model uncertainty. The analysis illustrated here considers model uncertainty for the outcome all solid cancer incidence, when modelled as a function of colon organ dose, using the most recent publicly available data from the Life Span Study on atomic bomb survivors of Japan. Seven recent publications reporting all solid cancer risk models currently deemed plausible by the scientific community have been included in a model averaging procedure so that the main conclusions do not depend on just one type of model. The models have been estimated with different baselines and presented for males and females at various attained ages and ages at exposure, to obtain specially computed model-averaged Excess Relative Risks (ERR) and Excess Absolute Risks (EAR). Monte Carlo simulated estimation of uncertainty on excess risks was accounted for by applying realisations including correlations in the risk model parameters. Three models were found to weight the model-averaged risks most strongly depending on the baseline and information criteria used for the weighting. Fitting all excess risk models with the same baseline, one model dominates for both information criteria considered in this study. Based on the analysis presented here, it is generally recommended to take model uncertainty into account in future risk analyses.

63 RADIATION, THERMAL, AND OTHER ENVIRON. POLLUTAN↗

Development of the J-2X Engine for the Ares I Crew Launch Vehicle and the Ares V Cargo Launch Vehicle: Building on the Apollo Program for Lunar Return Missions

The United States (U.S.) Vision for Space Exploration has directed NASA to develop two new launch vehicles for sending humans to the Moon, Mars, and beyond. In January 2006, NASA streamlined its hardware development approach for replacing the Space Shuttle after it is retired in 2010. Benefits of this approach include reduced programmatic and technical risks and the potential to return to the Moon by 2020, by developing the Ares I Crew Launch Vehicle (CLV) propulsion elements now, with full extensibility to future Ares V Cargo Launch Vehicle (CaLV) lunar systems. The Constellation Program selected the Pratt & Whitney Rocketdyne J-2X engine to power the Ares I Upper Stage Element and the Ares V Earth Departure Stage. This decision was reached during the Exploration Systems Architecture Study and confirmed after the Exploration Launch Projects Office performed a variety of risk analyses, commonality assessments, and trade studies. This paper narrates the evolution of that decision; describes the performance capabilities expected of the J-2X design, including potential commonality challenges and opportunities between the Ares I and Ares V launch vehicles; and provides a current status of J-2X design, development, and hardware testing activities. This paper also explains how the J-2X engine effort mitigates risk by testing existing engine hardware and designs; building on the Apollo Program (1961 to 1975), the Space Shuttle Program (1972 to 2010); and consulting with Apollo-era experts to derive other lessons lived to deliver a human-rated engine that is on an aggressive development schedule, with its first demonstration flight in 2012.

Greene, William D.↗

Development of the J-2X Engine for the Ares I Crew Launch Vehicle and the Ares V Cargo Launch Vehicle: Building on the Apollo Program for Lunar Return Missions

The United States (U.S.) Vision for Space Exploration has directed NASA to develop two new launch vehicles for sending humans to the Moon, Mars, and beyond. In January 2006, NASA streamlined its hardware development approach for replacing the Space Shuttle after it is retired in 2010. Benefits of this approach include reduced programmatic and technical risks and the potential to return to the Moon by 2020 by developing the Ares I Crew Launch Vehicle (CLV) propulsion elements now, with full extensibility to future Ares V Cargo Launch Vehicle (CaLV) lunar systems. The Constellation Program selected the Pratt & Whitney Rocketdyne J-2X engine to power the Ares I Upper Stage Element and the Ares V Earth Departure Stage (EDS). This decision was reached during the Exploration Systems Architecture Study and confirmed after the Exploration Launch Projects Office performed a variety of risk analyses, commonality assessments, and trade studies. This paper narrates the evolution of that decision; describes the performance capabilities expected of the J-2X design, including potential commonality challenges and opportunities between the Ares I and Ares V launch vehicles; and provides a current status of J-2X design, development, and hardware testing activities. This paper also explains how the J-2X engine effort mitigates risk by testing existing engine hardware and designs; building on the Apollo Program (1961 to 1975), the Space Shuttle Program (1972 to 2010); and consulting with Apollo era experts to derive other lessons learned to deliver a human-rated engine that is on an aggressive development schedule, with its first demonstration flight in 2012.

Greene, WIlliam↗

The impact of sampling scale: A comparison of methods for estimating external contaminant exposure in free-ranging wildlife

The impacts of contaminants on wildlife are dose dependent, and thus being able to track or predict exposure following contamination events is important for monitoring ecosystem health. However, the ability to track exposure in free-ranging wildlife is often severely limited. Consequently, researchers have predominantly relied on simple methods for estimating contaminant exposures in wildlife with little regard for spatial contaminant heterogeneity or an animal’s use of diverse habitats. We evaluated the influence sampling scale (i.e., how finely contaminant distribution and organism’s spatial use of the landscape is mapped) has on (1) realism and (2) conservativeness of exposure estimates. To do this, we monitored the actual exposure of wild boar (Sus scrofa) in Fukushima, Japan to radioactive contamination using GPS27 coupled contaminant monitors placed on individual animals. We compared empirical exposures to estimates generated by combining varying amounts of information about an individual boar’s location and/or movement, with the distribution of contamination on the landscape. Here we found that the most realistic exposure estimates were produced when finer-scale contaminant distribution surveys (e.g., airborne surveys) were combined with more accurate estimates of an individual’s space use (e.g., home ranges or core areas). Importantly, estimates of exposure based on single point surveys at a trap site (a simple method commonly used in the literature), did not correlate with actual exposure rates, suggesting dose-effects studies using this method may result in spurious conclusions. These results suggest that researchers seeking realistic estimates of exposure, such as in dose-effect studies, should ensure they have adequately accounted for fine-scale contaminant distribution patterns and areas of higher use by study organisms. However, conservative estimates of exposure i.e., intentionally over-predicting exposure as is done in initial tiers of ecological risk analyses) were not as scale sensitive and could be achieved with a single known location and coarse contaminant distribution maps.

63 RADIATION, THERMAL, AND OTHER ENVIRON. POLLUTAN↗

Reliability Block Diagram (RBD) Analysis of NASA Dryden Flight Research Center (DFRC) Flight Termination System and Power Supply

In order to perform public risk analyses for vehicles containing Flight Termination Systems (FTS), it is necessary for the analyst to know the reliability of each of the components of the FTS. These systems are typically divided into two segments; a transmitter system and associated equipment, typically in a ground station or on a support aircraft, and a receiver system and associated equipment on the target vehicle. This analysis attempts to analyze the reliability of the NASA DFRC flight termination system ground transmitter segment for use in the larger risk analysis and to compare the results against two established Department of Defense availability standards for such equipment.

Morehouse, Dennis V.↗

Development of the J-2X Engine for the Ares I Crew Launch Vehicle and the Ares V Cargo Launch Vehicle: Building on the Apollo Program for Lunar Return Missions

The United States (U.S.) Vision for Space Exploration directs NASA to develop two new launch vehicles for sending humans to the Moon, Mars, and beyond. In January 2006, NASA streamlined its hardware development approach for replacing the Space Shuttle after it is retired in 2010. Benefits of this approach include reduced programmatic and technical risks and the potential to return to the Moon by 2020, by developing the Ares I Crew Launch Vehicle (CLV) propulsion elements now, with full extensibility to future Ares V Cargo Launch Vehicle (CaLV) lunar systems. This decision was reached after the Exploration Launch Projects Office performed a variety of risk analyses, commonality assessments, and trade studies. The Constellation Program selected the Pratt & Whitney Rocketdyne J-2X engine to power the Ares I Upper Stage Element and the Ares V Earth Departure Stage. This paper narrates the evolution of that decision; describes the performance capabilities expected of the J-2X design, including potential commonality challenges and opportunities between the Ares I and Ares V launch vehicles; and provides a current status of J-2X design, development, and hardware testing activities. This paper also explains how the J-2X engine effort mitigates risk by building on the Apollo Program and other lessons lived to deliver a human-rated engine that is on an aggressive development schedule, with its first demonstration flight in 2012.

Snoddy, Jim↗

Process design and techno-economic analysis for bio-based graphite and liquid hydrocarbons production from lignocellulosic biomass

The worldwide demand for graphite, as the main anode material for Li-ion batteries, is expected to double by 2028 since it supports the use of electricity, including transient renewable sources, for energy storage, sustainable mobility, and automation. However, the dependence on non-renewable and external resources jeopardizes the world supply chain. This study explores the technical and economic performance of transforming lignocellulosic biomass into biographite and fuel-grade hydrocarbons through pyrolysis bio-oil upgrading. According to simulation results, the total power demand for the biorefinery reached 10,784 kWh per tonne of biographite, of which 36 % can be supplied by the heat integration network and power plant. Sensitivity and risk analyses were conducted to evaluate the economics, with process yields identified as the most relevant indicators to the minimum selling price (MSP). The analysis revealed a promising cost-competitive range for biographite MSP against fossil-based graphite (medium quality synthetic graphite Chinese market price ~$\$$4.2/kg). Case D, which includes biofuels as a byproduct, presents the best metrics, reaching a MSP of $\$$3.3/kg of anode-grade biographite with a profit margin of 27 %. While including biofuels in the product slate provides the best economic performance, the uncertainty associated with the big capital investment makes its risk 13 % higher to attain an IRR >20 % than the case in which biographite is produced as a standalone product. Overall, this study demonstrates that integrated biorefineries can produce a cost-competitive bio-based anode material for Li-ion batteries.

09 BIOMASS FUELS↗

Overview of Micrometeoroid and Orbital Debris Analysis Process for Mars Sample Return Earth Entry System

Introduction: Micrometeoroid and orbital debris (MMOD) risk analyses for the Mars Sample Return (MSR) Earth Entry System (EES) have been significantly more rigorous than previously flown missions because of its categorization as a Class V restricted return mission. This means the returned samples present significant concern for biogenic contamination. These analyses seek to determine if a micrometeoroid or orbital debris strike would result in loss of containment assurance and are summarized in the flowchart in Fig. 1. Methodology: The mission is considered in two MMOD phases: a pre-release phase where the EES is protected by a Micrometeoroid Protection System (MMPS) and a post-release phase called “free-flight” where the EES is exposed directly to the MMOD environment. These phases correspond to interplanetary cruise and imminent re-entry, respectively. To inform the MMPS design, a 30-shot high velocity impact testing (HVIT) series on candidate configurations at NASA White Sands Test Facility was completed in the summer of 2022. Sample post-shot images are shown in Fig 2 [1]. These data are used to baseline the MMPS design and to tune the hydrocode simulations. ALE3D, CTH, and SPHC are the hydrocodes that simulate physics of high-speed impacts [2]. Results generated with these populate a penetration depth versus energy space beyond the testable velocity regime of HVIT (~7 km/s). The penetration depth versus energy space data are used to define a critical projectile diameter function called a Ballistic Limit Equation (BLE), where the projectile “criticality” is determined by zone dependent failure criteria defined a-priori [3]. For example, the nose of the heatshield has a failure criterion of 50% TPS penetration, assigned because the landing loads are concentrated on that region and no substructure damage is permitted. The BLEs for each vehicle material zone are input into the BUMPER 3 code, along with the vehicle surface mesh and the corresponding space environment model, to calculate a probability of penetration or number of penetrations. The environment models, MEM3 for MM and ORDEM 3.2 for OD, simulate the meteoroid environment from 0.2 to 2 au based on the Grün flux equation, and the debris environment up to 40,000 km altitude from Earth surface, respectively [4,5]. Presentation Focus: The presentation or poster will present the results to-date focusing on the full risk analysis process flow seen in Fig. 1. Details on the derivation of the failure criteria will be discussed, along with HVIT results and how these influenced the MMPS configuration baseline decision. Further, results of hydrocode simulations will be presented and the tuning to HVIT outputs will be described. Finally, the strategies that direct the BLE formulation will be reviewed, specifically, for the EES elements that are most exposed to the MMOD environment.

mmod↗

ARCADE (Advanced Reactor Cyber Analysis and Development Environment)

SAND2025-11780O ARCADE (Advanced Reactor Cyber Analysis and Development Environment) software performs cybersecurity experiments on Defensive Cyber Security Architectures (DCSA) for Distributed Control Systems (DCSs). The application is integrated into a cohesive environment that performs cyber risk analyses and reduces costs. ARCADE can investigate the entire cyber-attack surface of a DCS from the physics of control, down to the firmware of individual components with automated efficiency. ARCADE has five major functional components: the Data Broker system, the virtualization environment, the cyber-attack simulator, the cyber-physical analysis system, and the physics simulator. Sandia National Laboratories is a multimission laboratory managed and operated by National Technology & Engineering Solutions of Sandia, LLC, a wholly owned subsidiary of Honeywell International Inc., for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-NA0003525.

Valme, Romuald↗