Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Software Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21
All sourcesNASA NTRSDOE OSTI
NASA NTRS1998

A Hazardous Gas Detection System for Aerospace and Commercial Applications

The detection of explosive conditions in aerospace propulsion applications is important for safety and economic reasons. Microfabricated hydrogen, oxygen, and hydrocarbon sensors as well as the accompanying hardware and software are being developed for a range of aerospace safety applications. The development of these sensors is being done using MEMS (Micro ElectroMechanical Systems) based technology and SiC-based semiconductor technology. The hardware and software allows control and interrogation of each sensor head and reduces accompanying cabling through multiplexing. These systems are being applied on the X-33 and on an upcoming STS-95 Shuttle mission. A number of commercial applications are also being pursued. It is concluded that this MEMS-based technology has significant potential to reduce costs and increase safety in a variety of aerospace applications.

Hunter, G. W.↗
NASA NTRS2008

Technology Infusion of CodeSonar into the Space Network Ground Segment (RII07)

The NASA Software Assurance Research Program (in part) performs studies as to the feasibility of technologies for improving the safety, quality, reliability, cost, and performance of NASA software. This study considers the application of commercial automated source code analysis tools to mission critical ground software that is in the operations and sustainment portion of the product lifecycle.

Benson, Markland↗
DOE OSTI2014

SU-E-T-248: Near Real-Time Analysis of Radiation Delivery and Imaging, Accuracy to Ensure Patient Safety

Purpose: To develop and optimize an effective software method for comparing planned to delivered control point machine parameters for all VARIAN TrueBeam treatments so as to permit (1) assessment of a large patient pool throughout their treatment course to quantify treatment technique specific systematic and random uncertainty of observables, (2) quantify the site specific daily imaging shifts required for target alignment, and (3) define tolerance levels for mechanical parameters and imaging parameters based on statistical analysis data gathered, and the dosimetric impact of variations. Methods: Treatment and imaging log files were directly compared to plan parameters for Eclipse and Pinnacle planned treatments via 3D, IMRT, control point, RapidArc, and electrons. Each control point from all beams/arcs (7984) for all fractions (1940) of all patients treated over six months were analyzed. At each control point gantry angle, collimator angle, couch angle, jaw positions, MLC positions, MU were compared. Additionally per-treatment isocenter shifts were calculated. Results were analyzed as a whole in treatment type subsets: IMRT, 3D, RapidArc; and in treatment site subsets: brain, chest/mediastinum, esophagus, H and N, lung, pelvis, prostate. Results: Daily imaging isocenter shifts from initial external tattoo alignment were dependent on the treatment site with < 0.5 cm translational shifts for H and N, Brain, and lung SBRT, while pelvis, esophagus shifts were ∼1 cm. Mechanical delivery parameters were within tolerance levels for all sub-beams. The largest variations were for RapidArc plans: gantry angle 0.11±0.12,collimator angle 0.00±0.00, jaw positions 0.48±0.26, MLC leaf positions 0.66±0.08, MU 0.14±0.34. Conclusion: Per-control point validation reveals deviations between planned and delivered parameters. If used in a near real-time error checking system, patient safety can be improved by equipping the treatment delivery system with additional forcing functions which by-pass human error avenues.

60 APPLIED LIFE SCIENCES↗
NASA NTRS1987

Safety considerations in the design of manned spaceflight hardware

Some of the significant potential hazards affecting NASA's planned space-flight initiatives are discussed together with the safety design strategies they mandate. Attention is given to the role played by NASA's newly centralized safety organization during the design of manned space flight hardware and software. Prompt-effect/physical hazards include fire, explosions and depressurization, and natural and man-made space debris. Delayed-effect hazards include radiation and toxic contamination, microgravity effects, crew illness and injury, and isolation. Safety design considerations for software and hypersonic transatmospheric vehicles are evaluated.

Rodney, G. A.↗
NASA NTRS2006

A Predictive Approach to Eliminating Errors in Software Code

NASA s Metrics Data Program Data Repository is a database that stores problem, product, and metrics data. The primary goal of this data repository is to provide project data to the software community. In doing so, the Metrics Data Program collects artifacts from a large NASA dataset, generates metrics on the artifacts, and then generates reports that are made available to the public at no cost. The data that are made available to general users have been sanitized and authorized for publication through the Metrics Data Program Web site by officials representing the projects from which the data originated. The data repository is operated by NASA s Independent Verification and Validation (IV&V) Facility, which is located in Fairmont, West Virginia, a high-tech hub for emerging innovation in the Mountain State. The IV&V Facility was founded in 1993, under the NASA Office of Safety and Mission Assurance, as a direct result of recommendations made by the National Research Council and the Report of the Presidential Commission on the Space Shuttle Challenger Accident. Today, under the direction of Goddard Space Flight Center, the IV&V Facility continues its mission to provide the highest achievable levels of safety and cost-effectiveness for mission-critical software. By extending its data to public users, the facility has helped improve the safety, reliability, and quality of complex software systems throughout private industry and other government agencies. Integrated Software Metrics, Inc., is one of the organizations that has benefited from studying the metrics data. As a result, the company has evolved into a leading developer of innovative software-error prediction tools that help organizations deliver better software, on time and on budget.

Source record↗
NASA NTRS1992

Independent verification and validation for Space Shuttle flight software

The Committee for Review of Oversight Mechanisms for Space Shuttle Software was asked by the National Aeronautics and Space Administration's (NASA) Office of Space Flight to determine the need to continue independent verification and validation (IV&V) for Space Shuttle flight software. The Committee found that the current IV&V process is necessary to maintain NASA's stringent safety and quality requirements for man-rated vehicles. Therefore, the Committee does not support NASA's plan to eliminate funding for the IV&V effort in fiscal year 1993. The Committee believes that the Space Shuttle software development process is not adequate without IV&V and that elimination of IV&V as currently practiced will adversely affect the overall quality and safety of the software, both now and in the future. Furthermore, the Committee was told that no organization within NASA has the expertise or the manpower to replace the current IV&V function in a timely fashion, nor will building this expertise elsewhere necessarily reduce cost. Thus, the Committee does not recommend moving IV&V functions to other organizations within NASA unless the current IV&V is maintained for as long as it takes to build comparable expertise in the replacing organization.

Source record↗
NASA NTRS2024

Considerations for Using Autonomous Flight Termination Software in Crewed Launch Vehicles

Autonomous flight termination systems (AFTS) are being progressively employed onboard launch vehicles to replace ground personnel and infrastructure needed to terminate flight or destruct the vehicle should an anomaly occur. This automation uses on-board real-time data and encoded logic to determine if the flight should be self-terminated. For uncrewed launch vehicles, FTS systems are required to protect the public and governed by the United States Space Force (USSF). For crewed missions, NASA must augment range AFTS requirements for crew safety and certify each flight according to human rating standards, thus adding unique requirements for reuse of software originally intended for uncrewed missions. This bulletin summarizes new information relating to AFTS to raise awareness of key distinctions, summarize considerations and outline best practices for incorporating AFTS into human-rated systems.

Avionics↗
DOE OSTI2020

Hazard analysis for identifying common cause failures of digital safety systems using a redundancy-guided systems-theoretic approach

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection, digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. Here, this paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the causal factors of potential single points of failure in the design of digital safety systems in advanced plant designs.

42 ENGINEERING↗
NASA NTRS1967

Mission design for flight safety.

Manned space flight safety through mission trajectory design, considering hardware, software and operational constraints

MANNED SPACE FLIGHT↗
NASA NTRS2003

Addressing software security risk mitigations in the life cycle

The NASA Office of Safety and Mission Assurance (OSMA) has funded the Jet Propulsion Laboratory (JPL) with a Center Initiative, 'Reducing Software Security Risk through an Integrated Approach' (RSSR), to address this need. The Initiative is a formal approach to addressing software security in the life cycle through the instantiation of a Software Security Assessment Instrument (SSAI) for the development and maintenance life cycles.

software tools↗
NASA NTRS2007

NASA's Core Trajectory Sub-System Project: Using JBoss Enterprise Middleware for Building Software Systems Used to Support Spacecraft Trajectory Operations

NASA's Johnson Space Center (JSC) / Flight Design and Dynamics Division (DM) has prototyped the use of Open Source middleware technology for building its next generation spacecraft mission support system. This is part of a larger initiative to use open standards and open source software as building blocks for future mission and safety critical systems. JSC is hoping to leverage standardized enterprise architectures, such as Java EE, so that its internal software development efforts can be focused on the core aspects of their problem domain. This presentation will outline the design and implementation of the Trajectory system and the lessons learned during the exercise.

Stensrud, Kjell C.↗
DOE OSTI2015

The experiment filtering tool in the MACSENS workbench - 14341

The MACSENS (outils Moret d'Aide a la Caracterisation et aux etudes de SENSibilite) workbench is dedicated to the advanced validation work for criticality studies. The aim of this kind of tool is to determine the experiments from a validation database being the 'closest' to an application case and, from there, to evaluate a calculation bias with a related uncertainty. To achieve this goal, the MACSENS workbench relies on different kind of information stored in various databases depending on the origin of the data. Two main kinds of data can be identified. The first one concerns the data used to describe the experiments of the validation database (e.g. the inputs needed to perform a calculation). These values characterize the chemical and geometrical models. They can be considered as constant, as they do not vary once evaluated, and some of them can be from a non-numerical nature (reflector material for example...). The second kind of data gathers the results obtained with the use of a simulation code, such as reaction rates, fluxes and leakages, sensitivities, k{sub eff}, etc. These values depend on the version of the code and are purely numerical. In the early 2000's, regarding the increasing number of experiments evaluated in the ICSBEP handbook, the OECD/NEA (Organization for Economic Co-operation and Development/Nuclear Energy Agency), under the ICSBEP (International Criticality Safety Benchmark Evaluation Project) working group direction, decided to store such information in a database and to provide a software, called DICE (Database for the International Criticality safety benchmark Evaluation project), allowing users to search easily criticality experiments of interest. Up to now, more than 4400 critical or subcritical configurations have been compiled by ICSBEP, described and stored in the DICE database. Over time, a validation work has been done on the data, with the participation of IRSN, and a quality assurance policy has been defined. For these reasons, the DICE database is highly reliable. These features were fundamental for the MACSENS developers, who were looking for a database containing descriptive data of the experiments included in the MORET code validation database. The paper describes the solution chosen by IRSN to take advantage of the DICE database content and to overcome the DICE limits. It also explains the quality assurance policy applied to guaranty the reliability of the stored data. It will also discuss the use of the experiment-filtering module of the MACSENS workbench to select a set of experiments and to examine numerical parameter trends for an application case. (authors)

42 ENGINEERING↗
NASA NTRS2018

From Formal Requirements to Highly Assured Software for Unmanned Aircraft Systems

Operational requirements of safety-critical systems are often written in restricted specification logics. These restricted logics are amenable to automated analysis techniques such as model-checking, but are not rich enough to express complex requirements of unmanned systems. This short paper advocates for the use of expressive logics, such as higher-order logic, to specify the complex operational requirements and safety properties of unmanned systems. These rich logics are less amenable to automation and, hence, require the use of interactive theorem proving techniques. However, these logics support the formal verification of complex requirements such as those involving the physical environment. Moreover, these logics enable validation techniques that increase con dence in the correctness of numerically intensive software. These features result in highly-assured software that may be easier to certify. The feasibility of this approach is illustrated with examples drawn for NASA's unmanned aircraft systems.

Munoz, Cesar↗
NASA NTRS2015

Software Graphics Processing Unit (sGPU) for Deep Space Applications

A graphics processing capability will be required for deep space missions and must include a range of applications, from safety-critical vehicle health status to telemedicine for crew health. However, preliminary radiation testing of commercial graphics processing cards suggest they cannot operate in the deep space radiation environment. Investigation into an Software Graphics Processing Unit (sGPU)comprised of commercial-equivalent radiation hardened/tolerant single board computers, field programmable gate arrays, and safety-critical display software shows promising results. Preliminary performance of approximately 30 frames per second (FPS) has been achieved. Use of multi-core processors may provide a significant increase in performance.

McCabe, Mary↗
DOE OSTI2017

Performance Assessment of a Generic Repository for Defense-Related HLW/SNF in Fractured Crystalline Host Rock - 17059

Recently the U.S. made a policy decision to begin R and D for geologic disposal of defense-related HLW/SNF in a facility separate from commercially generated waste. A deep geologic repository for the disposal of DOE-managed HLW, and some thermally cooler DOE-managed SNF, arising from defense and DOE R and D activities, is part of a stepwise, phased approach for disposal of the Nation's nuclear waste, as recommended by the Blue Ribbon Commission on America's Nuclear Future. The work discussed here focuses on post-closure safety (or performance) assessment for such a Defense Waste Repository (DWR), which is divided into four major activities: (1) development of generic reference cases (i.e., knowledge or technical bases for 'generic' or 'non-site-specific' deep geologic repositories); (2) features, events, and processes (FEPs) analyses and screening to support the technical bases and the performance assessment (PA) model; (3) performance evaluation of alternative EBS design concepts; and (4) post-closure safety analyses of the repository system under consideration. Using the known inventory of defense-related SNF, as well as defense-related HLW stored at the Savannah River and Hanford sites, the Geologic Disposal Safety Assessment (GDSA) Framework modeling and software system has been applied to simulate the potential performance of a DWR in crystalline host rock, resulting in a suite of single-realization (i.e., deterministic) and multi-realization (i.e., probabilistic) 3-D post-closure system analyses, over a performance period of one million years. Two types of emplacement concepts are examined, including single-canister vertical-borehole emplacement for the hotter defense SNF waste (KBS-3V concept) and multi-canister horizontal emplacement for defense HLW (similar to Yucca Mountain co-disposal waste packages). Sensitivity analyses examine the effect of key uncertain parameters on repository performance, including the effects of fracture distribution, waste package degradation rate, buffer and disturbed rock zone (DRZ) properties, and sorption parameters. Initial results indicate that a crystalline host rock with a connected fracture system may require additional safety features to ensure robustness of the isolation safety function, such as a deep unsaturated zone, a sufficiently thick sedimentary overburden, and/or a disposal overpack with a very slow corrosion rate. None of these should pose an undue obstacle for successful disposal. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRS2005

Automatic Certification of Kalman Filters for Reliable Code Generation

AUTOFILTER is a tool for automatically deriving Kalman filter code from high-level declarative specifications of state estimation problems. It can generate code with a range of algorithmic characteristics and for several target platforms. The tool has been designed with reliability of the generated code in mind and is able to automatically certify that the code it generates is free from various error classes. Since documentation is an important part of software assurance, AUTOFILTER can also automatically generate various human-readable documents, containing both design and safety related information. We discuss how these features address software assurance standards such as DO-178B.

Denney, Ewen↗
DOE OSTI2024

Towards Provable Security in Industrial Control Systems Via Dynamic Protocol Attestation

Industrial control systems (ICSs) increasingly rely on digital technologies vulnerable to cyber attacks. Cyber attackers can infiltrate ICSs and execute malicious actions. Individually, each action seems innocuous. But taken together, they cause the system to enter an unsafe state. These attacks have resulted in dramatic consequences such as physical damage, economic loss, and environmental catastrophes. This paper introduces a methodology that restricts actions using protocols. These protocols only allow safe actions to execute. Protocols are written in a domain specific language we have embedded in an interactive theorem prover (ITP). The ITP enables formal, machine-checked proofs to ensure protocols maintain safety properties. We use dynamic attestation to ensure ICSs conform to their protocol even if an adversary compromises a component. Since protocol conformance prevents unsafe actions, the previously mentioned cyber attacks become impossible. We demonstrate the effectiveness of our methodology using an example from the Fischertechnik Industry 4.0 platform. We measure dynamic attestation's impact on latency and throughput. Our approach is a starting point for studying how to combine formal methods and protocol design to thwart attacks intended to cripple ICSs.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2016

Plutonium Critical Mass Curve Comparison to Mass at Upper Subcritical Limit (USL) Using Whisper

Whisper is computational software designed to assist the nuclear criticality safety analyst with validation studies with the MCNP ® Monte Carlo radiation transport package. Standard approaches to validation rely on the selection of benchmarks based upon expert judgment. Whisper uses sensitivity/uncertainty (S/U) methods to select relevant benchmarks to a particular application or set of applications being analyzed. Using these benchmarks, Whisper computes a calculational margin. Whisper attempts to quantify the margin of subcriticality (MOS) from errors in software and uncertainties in nuclear data. The combination of the Whisper-derived calculational margin and MOS comprise the baseline upper subcritical limit (USL), to which an additional margin may be applied by the nuclear criticality safety analyst as appropriate to ensure subcriticality. A series of critical mass curves for plutonium, similar to those found in Figure 31 of LA-10860-MS, have been generated using MCNP6.1.1 and the iterative parameter study software, WORM_Solver. The baseline USL for each of the data points of the curves was then computed using Whisper 1.1. The USL was then used to determine the equivalent mass for plutonium metal-water system. ANSI/ANS-8.1 states that it is acceptable to use handbook data, such as the data directly from the LA-10860-MS, as it is already considered validated (Section 4.3 4) “Use of subcritical limit data provided in ANSI/ANS standards or accepted reference publications does not require further validation.”). This paper attempts to take a novel approach to visualize traditional critical mass curves and allows comparison with the amount of mass for which the k eff is equal to the USL (calculational margin + margin of subcriticality). However, the intent is to plot the critical mass data along with USL, not to suggest that already accepted handbook data should have new and more rigorous requirements for validation.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗