SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
The space shuttle/payload interface analysis is presented. The analysis consists of the following sections: (1) payload capture and cost analysis, (2) business risk and value of operations in space analysis, and (3) payload community analysis. The primary objective of the study was to furnish a method for tracing capture/cost analyses conducted by other study groups.
Starcraft Boosters has developed a different approach for lowering the cost of access to space. We propose developing a new aircraft that will house an existing expendable rocket stage. This vehicle, termed StarBooster, will be the first stage of a family of launch vehicles. By combining these elements, we believe we can reduce the cost and risk of fielding a new partially reusable launch system. This report summarizes the work performed on the StarBooster concept since the company's inception in 1996. Detailed analyses are on-going and future reports will focus on the maturation of the vehicle and system design.
Pratt and Whitney Rocketdyne (PWR), a NASA subcontractor, is executing the design, development, test, and evaluation (DDT&E) of a liquid oxygen, liquid hydrogen two hundred ninety four thousand pound thrust rocket engine initially intended for the Upper Stage (US) and Earth Departure Stage (EDS) of the Constellation Program Ares-I Crew Launch Vehicle (CLV). A key element of the design approach was to base the new J-2X engine on the heritage J-2S engine with the intent of uprating the engine and incorporating SSME and RS-68 lessons learned. The J-2S engine was a design upgrade of the flight proven J-2 configuration used to put American astronauts on the moon. The J-2S Fuel Turbopump (FTP) was the first Rocketdyne-designed liquid hydrogen centrifugal pump and provided many of the early lessons learned for the Space Shuttle Main Engine High Pressure Fuel Turbopumps. This paper will discuss the design trades and analyses performed for the current J-2X FTP to increase turbine life; increase structural margins, facilitate component fabrication; expedite turbopump assembly; and increase rotordynamic stability margins. Risk mitigation tests including inducer water tests, whirligig turbine blade tests, turbine air rig tests, and workhorse gas generator tests characterized operating environments, drove design modifications, or identified performance impact. Engineering design, fabrication, analysis, and assembly activities support FTP readiness for the first J-2X engine test scheduled for July 2011.
The closed environment of the International Space Station (ISS) creates an ideal environment for microbial growth. Previous studies have identified the ubiquitous nature of microorganisms throughout the space station environment. To ensure safety of the crew, microbial monitoring of air and surface within ISS began in December 2000 and continues to be monitored on a quarterly basis. Water monitoring began in 2009 when the potable water dispenser was installed on ISS. However, it is unknown if high microbial counts are associated with inflight medical events. The microbial counts are determined for the air, surface, and water samples collected during flight operations and samples are returned to the Microbiology laboratory at the Johnson Space Center for identification. Instances of microbial counts above the established microbial limit requirements were noted and compared inflight medical events (any non-injury event such as illness, rashes, etc.) that were reported during the same calendar-quarter. Data were analyzed using repeated measures logistic regression for the forty-one US astronauts flew on ISS between 2000 and 2012. In that time frame, instances of microbial counts being above established limits were found for 10 times for air samples, 22 times for surface samples and twice for water. Seventy-eight inflight medical events were reported among the astronauts. A three times greater risk of a medical event was found when microbial samples were found to be high (OR = 3.01; p =.007). Engineering controls, crew training, and strict microbial limits have been established to mitigate the crew medical events and environmental risks. Due to the timing issues of sampling and the samples return to earth, identification of particular microorganisms causing a particular inflight medical event is difficult. Further analyses are underway.
The closed environment of the International Space Station (ISS) creates an ideal environment for microbial growth. Previous studies have identified the ubiquitous nature of microorganisms throughout the space station environment. To ensure safety of the crew, microbial monitoring of air and surface within ISS began in December 2000 and continues to be monitored on a quarterly basis. Water monitoring began in 2009 when the potable water dispenser was installed on ISS. However, it is unknown if high microbial counts are associated with inflight medical events. The microbial counts are determined for the air, surface, and water samples collected during flight operations and samples are returned to the Microbiology laboratory at the Johnson Space Center for identification. Instances of microbial counts above the established microbial limit requirements were noted and compared inflight medical events (any non-injury event such as illness, rashes, etc.) that were reported during the same calendar-quarter. Data were analyzed using repeated measures logistic regression for the forty-one US astronauts flew on ISS between 2000 and 2012. In that time frame, instances of microbial counts being above established limits were found for 10 times for air samples, 22 times for surface samples and twice for water. Seventy-eight inflight medical events were reported among the astronauts. A three times greater risk of a medical event was found when microbial samples were found to be high (OR = 3.01; p =.007). Engineering controls, crew training, and strict microbial limits have been established to mitigate the crew medical events and environmental risks. Due to the timing issues of sampling and the samples return to earth, identification of particular microorganisms causing a particular inflight medical event is difficult. Further analyses are underway.
ABSTRACT Fusarium oxysporumis a cross-kingdom pathogen. While some strains cause disseminated fusariosis and blinding corneal infections in humans, others are responsible for devastating vascular wilt diseases in plants. To better understand the distinct adaptations ofF. oxysporumto animal or plant hosts, we conducted a comparative phenotypic and genetic analysis of two strains: MRL8996 (isolated from a keratitis patient) and Fol4287 (isolated from a wilted tomato [Solanum lycopersicum]). Infection of mouse corneas and tomato plants revealed that, while both strains cause symptoms in both hosts, MRL8996 caused more severe corneal disease in mice, whereas Fol4287 induced more pronounced wilting symptoms in tomato plants.In vitroassays using abiotic stress treatments revealed that the human pathogen MRL8996 was better adapted to elevated temperatures, whereas the plant pathogen Fol4287 was more tolerant to osmotic and cell wall stresses. Both strains displayed broad resistance to antifungal treatment, with MRL8996 exhibiting the paradoxical effect of increased tolerance to higher concentrations of the antifungal caspofungin. We identified a set of accessory chromosomes (ACs) that encode genes with different functions and have distinct transposon profiles between MRL8996 and Fol4287. Interestingly, ACs from both genomes also encode proteins with shared functions, such as chromatin remodeling and post-translational protein modifications. Our phenotypic assays and comparative genomics analyses lay the foundation for future studies correlating genotypes with phenotype and for developing targeted antifungals for agricultural and clinical uses. IMPORTANCE Fusarium oxysporumis a cross-kingdom fungal pathogen that infects both plants and animals. In addition to causing many devastating wilt diseases, this group of organisms was recently recognized by the World Health Organization as a high-priority threat to human health. Climate change has increased the risk ofFusariuminfections, asFusariumstrains are highly adaptable to changing environments. Deciphering fungal adaptation mechanisms is crucial to developing appropriate control strategies. We performed a comparative analysis ofFusariumstrains using an animal (mouse) and plant (tomato) host andin vitroconditions that mimic abiotic stress. We also performed comparative genomics analyses to highlight the genetic differences between human and plant pathogens and correlate their phenotypic and genotypic variations. We uncovered important functional hubs shared by plant and human pathogens, such as chromatin modification, transcriptional regulation, and signal transduction, which could be used to identify novel antifungal targets.
NASA Marshall Space Flight Center is collaborating with the University of Alabama at Birmingham (UAB) School of Public Health and the Centers for Disease Control and Prevention (CDC) National Center for Public Health Informatics to address issues of environmental health and enhance public health decision making by utilizing NASA remotely sensed data and products. The objectives of this study are to develop high-quality spatial data sets of environmental variables, link these with public health data from a national cohort study, and deliver the linked data sets and associated analyses to local, state and federal end-user groups. Three daily environmental data sets will be developed for the conterminous U.S. on different spatial resolutions for the period 2003-2008: (1) spatial surfaces of estimated fine particulate matter (PM2.5) exposures on a 10-km grid utilizing the US Environmental Protection Agency (EPA) ground observations and NASA's MODerate-resolution Imaging Spectroradiometer (MODIS) data; (2) a 1-km grid of Land Surface Temperature (LST) using MODIS data; and (3) a 12-km grid of daily Solar Insolation (SI) using the North American Land Data Assimilation System (NLDAS) forcing data. These environmental data sets will be linked with public health data from the UAB REasons for Geographic And Racial Differences in Stroke (REGARDS) national cohort study to determine whether exposures to these environmental risk factors are related to cognitive decline and other health outcomes. These environmental datasets and public health linkage analyses will be disseminated to end-users for decision making through the CDC Wide-ranging Online Data for Epidemiologic Research (WONDER) system.
The Space Launch Initiative (SLI) program is developing a second-generation reusable launch vehicle. The program goals include lowering the risk of loss of crew to 1 in 10,000 and reducing annual operations cost to one third of the cost of the Space Shuttle. The SLI missions include NASA, military and commercial satellite launches and crew and cargo launches to the space station. The SLI operations analyses provide an assessment of the operational support and infrastructure needed to operate candidate system architectures. Measures of the operability are estimated (i.e. system dependability, responsiveness, and efficiency). Operations analysis is used to determine the impact of specific technologies on operations. A conceptual path to reducing annual operations costs by two thirds is based on key design characteristics, such as reusability, and improved processes lowering labor costs. New operations risks can be expected to emerge. They can be mitigated with effective risk management with careful identification, assignment, tracking, and closure. SLI design characteristics such as nearly full reusability, high reliability, advanced automation, and lowered maintenance and servicing coupled with improved processes are contributors to operability and large operating cost reductions.
We use several environmental monitoring tools to assess ecosystem health and in part, risk to human health. Generally, the concentrations of chemicals we observe are below background and screening levels. All of our monitoring data are available in Intellus, and our analyses and results are reported in the Annual Site Environmental Report. Our program is only one of several monitoring programs at LANL, others include air, surface water, ground water, canyon sediments. We strive to improve the program by incorporating new monitoring techniques, monitoring new locations, monitoring new chemicals of interest, and by using robust statistical analyses.
Recently, there has been a resurgence of interest in advanced (non-light water) reactor designs, including sodium fast reactors (SFRs). In parallel, multiple efforts are underway to develop risk informed, performance-based licensing pathways for advanced reactors. However, such licensing approaches depend on the accuracy of the associated safety assessments, including mechanistic source term (MST) analyses. Unlike historical source term assessments, which utilizes bounding estimates of radionuclide release, MSTs attempt to realistically estimate the transport and retention of radionuclides for specific transient scenarios. For SFR MST analyses, the behavior of radionuclide aerosols is a key factor, as noted in recent studies. Due to the use of sodium as the primary coolant, many potential transient scenarios involve the release of radionuclide aerosols in conjunction with sodium aerosols. For such scenarios, sodium may be the dominant aerosol species, compared to that of released radionuclides. Therefore, understanding the behavior of sodium aerosols is particularly important to an accurate assessment of aerosol transport. Although many approaches to aerosol modeling exist, it is vital to establish their capabilities in evaluating sodium aerosol behavior for SFR analyses.
The Enhanced Thematic Mapper Plus (ETM+) Main Electronics Module (MEM) power supply heat sink temperature is critical to the Landsat-7 mission. It is strongly dependent on the thermal louver design. A lower power supply heat sink temperature increases the reliability of the MEM, and reduces the risk of over heating and thermal shut-down. After the power supply failures in ETM+ instrument thermal vacuum tests #1 and #2, the author performed detailed thermal analyses of the MEM, and proposed to reduce the louver set-points by 7C. At the 1998 Intersociety Energy Conversion Engineering Conference (IECEC), the author presented a paper that included results of thermal analysis of the MEM. It showed that a 70C reduction of the louver set points could reduce the maximum power supply heat sink temperature in thermal vacuum test and in flight to below 20"C in the cooler outgas mode and in the nominal imaging mode, and has no significant impact on the standby heater duty cycle. It also showed that the effect of Earth infrared and albedo on the power supply heat sink temperature is small. The louver set point reduction was implemented in June 1998, just prior to ETM+ thermal vacuum test #3. Results of the thermal vacuum tests, and temperature data in flight validate the MEM thermal performance improvement due to the 70C reduction of the louver set points.
A transition from analog instrumentation and control (I&C) technologies to digital I&C technologies is taking place for license renewals of existing nuclear power plants and for operating licenses of new advanced reactors. This transition necessitates research on risk and economic assessments of digital I&C technologies to ensure the long-term safety and reliability of vital systems, reduce uncertainty in licensing costs in addition to timeline, support integration of digital I&C systems in the plant, and find the most efficient technology upgrades. Adding redundancy within systems or components is a common means of improving design safety; however, it can also make designs more prone to common-cause failures (CCFs). Introducing diversity into redundant systems or components is a way to mitigate and possibly eliminate CCFs, but it also increases plant complexity and may be costly. The balance between redundancy and diversity remains a challenge for digital I&C systems. This study performs sensitivity and importance analyses for four design architectures of two digital I&C systems—the reactor-trip system and the engineered safety features actuation system. For each system, two architectures are examined, including a redundant, non-diverse configuration and a redundant, diverse configuration. The sensitivity analysis will provide insights on the impact of introducing diversity to system reliability. The importance results will help identify risk-significant and risk-sensitive components and failure modes, which may be good candidates for future design improvement.
As part of comprehensive efforts to develop physics-based risk assessment techniques for space systems at NASA, coupled computational fluid and rigid body dynamic simulations were carried out to investigate the flow mechanisms that accelerate tank fragments in bursting pressurized vessels. Simulations of several configurations were compared to analyses based on the industry-standard Baker explosion model, and were used to formulate an improved version of the model. The standard model, which neglects an external fluid, was found to agree best with simulation results only in configurations where the internal-to-external pressure ratio is very high and fragment curvature is small. The improved model introduces terms that accommodate an external fluid and better account for variations based on circumferential fragment count. Physics-based analysis was critical in increasing the model's range of applicability. The improved tank burst model can be used to produce more accurate risk assessments of space vehicle failure modes that involve high-speed debris, such as exploding propellant tanks and bursting rocket engines.
Aircraft loss of control (LOC) is a leading cause of fatal accidents across all transport airplane and operational classes, and can result from a wide spectrum of hazards, often occurring in combination. Technologies developed for LOC prevention and recovery must therefore be effective under a wide variety of conditions and uncertainties, including multiple hazards, and their validation must provide a means of assessing system effectiveness and coverage of these hazards. This requires the definition of a comprehensive set of LOC test scenarios based on accident and incident data as well as future risks. This paper defines a comprehensive set of accidents and incidents over a recent 15 year period, and presents preliminary analysis results to identify worst-case combinations of causal and contributing factors (i.e., accident precursors) and how they sequence in time. Such analyses can provide insight in developing effective solutions for LOC, and form the basis for developing test scenarios that can be used in evaluating them. Preliminary findings based on the results of this paper indicate that system failures or malfunctions, crew actions or inactions, vehicle impairment conditions, and vehicle upsets contributed the most to accidents and fatalities, followed by inclement weather or atmospheric disturbances and poor visibility. Follow-on research will include finalizing the analysis through a team consensus process, defining future risks, and developing a comprehensive set of test scenarios with correlation to the accidents, incidents, and future risks. Since enhanced engineering simulations are required for batch and piloted evaluations under realistic LOC precursor conditions, these test scenarios can also serve as a high-level requirement for defining the engineering simulation enhancements needed for generating them.
Solid Waste Management (SWM) operates the E-Area Low-Level Waste Facility (ELLWF) where low level on-site and off-site solid waste streams are buried. The facility has been in operation since late 1994 and is currently projected to remain in operation until 2065. This facility can accommodate a broad range of waste forms resulting from the six different types of disposal unit options (i.e., varying degrees of engineered barriers → trenches to concrete vaults). This facility is currently operating under a Performance Assessment (PA) issued back in 2008, along with several subsequent supporting Special Analyses (SA). The Savannah River National Laboratory (SRNL) developed the prior PAs and SAs and has been tasked to update the facility’s PA. For operating the E-Area facility, a Waste Inventory Tracking System (e.g., WITS) is actively employed by waste generators where every radionuclide entering the facility (to be buried in one of its many disposal units1) must be either directly or indirectly accounted for. Since there is a large number of radionuclides in existence (>3,000), the International Commission on Radiological Protection (ICRP-107) has provided guidance on the subset of radionuclides requiring further assessment in landfills such as the E-Area LLWF. The ICRP-107 publication provides critical radiological information on 1,252 radionuclides of 97 elements. This database is the critical starting point for developing a consistent inventory limit system. The explicit measurement and tracking of all 1,252 ICRP-107 radionuclides can be reduced when process knowledge, burial history, and radiological aspects are factored into conservative groundwater and intruder screening processes. Across the DOE complex these screening processes have been historically performed using the methodology suggested by the National Council on Radiation Protection and Measurements (NCRP) as presented in their original report (NCRP 1984) and then refined in a later report (NCRP 1996). In the recommended screening models employed within this report the traditional NCRP models are updated to better handle progeny and better reflect the known characteristics of E-Area. This improved screening process is referred to as the “NCRP-like” method. Various upgrades to the traditional NCRP methodology have been used by others (e.g., NRC funded effort by Kennedy and Strenge 1992). The more detailed models by Kennedy and Strenge (1992) were considered in this effort and are compared to the results from the more traditional NCRP-like models. The groundwater and inadvertent intruder screening analyses presented in this report start with this 1,252 radionuclide list and reduces it down to more manageable lists that are applicable to the various disposal unit types contained within E-Area. In order to reduce this starting list, some level of exposure risk must be considered acceptable. Historically, a dose (or concentration level) has been compared with a screening criterion set to 1% of a performance measure (e.g., a betagamma dose not to exceed the 4 mrem/yr beta-gamma performance measure x 0.01 = 0.04 mrem/yr). Thus, if a radionuclide produced a bounding or screening-level dose (or concentrations) less than the screening criterion, it could be safely removed from further consideration. Several tiers of screening and bounding level analyses have been considered in this report.
Abstract Invasive plant pathogenic fungi have a global impact, with devastating economic and environmental effects on crops and forests. Biosurveillance, a critical component of threat mitigation, requires risk prediction based on fungal lifestyles and traits. Recent studies have revealed distinct genomic patterns associated with specific groups of plant pathogenic fungi. We sought to establish whether these phytopathogenic genomic patterns hold across diverse taxonomic and ecological groups from the Ascomycota and Basidiomycota, and furthermore, if those patterns can be used in a predictive capacity for biosurveillance. Using a supervised machine learning approach that integrates phylogenetic and genomic data, we analyzed 387 fungal genomes to test a proof-of-concept for the use of genomic signatures in predicting fungal phytopathogenic lifestyles and traits during biosurveillance activities. Our machine learning feature sets were derived from genome annotation data of carbohydrate-active enzymes (CAZymes), peptidases, secondary metabolite clusters (SMCs), transporters, and transcription factors. We found that machine learning could successfully predict fungal lifestyles and traits across taxonomic groups, with the best predictive performance coming from feature sets comprising CAZyme, peptidase, and SMC data. While phylogeny was an important component in most predictions, the inclusion of genomic data improved prediction performance for every lifestyle and trait tested. Plant pathogenicity was one of the best-predicted traits, showing the promise of predictive genomics for biosurveillance applications. Furthermore, our machine learning approach revealed expansions in the number of genes from specific CAZyme and peptidase families in the genomes of plant pathogens compared to non-phytopathogenic genomes (saprotrophs, endo- and ectomycorrhizal fungi). Such genomic feature profiles give insight into the evolution of fungal phytopathogenicity and could be useful to predict the risks of unknown fungi in future biosurveillance activities.
Solid Waste Management (SWM) operates the E-Area Low-Level Waste Facility (ELLWF) where low level on-site and off-site solid waste streams are buried. The facility has been in operation since late 1994 and is currently projected to remain in operation until 2065. This facility can accommodate a broad range of waste forms resulting from the six different types of disposal unit options (i.e., varying degrees of engineered barriers → trenches to concrete vaults). This facility is currently operating under a Performance Assessment (PA) issued back in 2008, along with several subsequent supporting Special Analyses (SA). The Savannah River National Laboratory (SRNL) developed the prior PAs and SAs and has been tasked to update the facility’s PA. For operating the E-Area facility, a Waste Inventory Tracking System (e.g., WITS) is actively employed by waste generators where every radionuclide entering the facility (to be buried in one of its many disposal units) must be either directly or indirectly accounted for. Since there is a large number of radionuclides in existence (>3,000), the International Commission on Radiological Protection (ICRP-107) has provided guidance on the subset of radionuclides requiring further assessment in landfills such as the E-Area LLWF. The ICRP-107 publication provides critical radiological information on 1,252 radionuclides of 97 elements. This database is the critical starting point for developing a consistent inventory limit system. The explicit measurement and tracking of all radionuclides are not necessary when process knowledge, burial history, and radiological aspects are factored into conservative groundwater and intruder screening processes. Across the DOE complex these screening processes have been historically performed using the methodology suggested by the National Council on Radiation Protection and Measurements (NCRP) as presented in their original report (NCRP 1984) and then refined in a later report (NCRP 1996). In the recommended screening models employed within this report the traditional NCRP models are updated to better handle progeny and better reflect the known characteristics of E-Area. This improved screening process is referred to as the “NCRP-like” method. Various upgrades to the traditional NCRP methodology have been used by others (e.g., NRC funded effort by Kennedy and Strenge 1992). The more detailed models by Kennedy and Strenge (1992) were considered in this effort and are compared to the results from the more traditional NCRP-like models. The groundwater and inadvertent intruder screening analyses presented in this report start with this 1,252 radionuclide list and reduces it down to more manageable lists that are applicable to the various disposal unit types contained within E-Area. In order to reduce this starting list, some level of exposure risk must be considered acceptable. Historically, a dose (or concentration level) has been compared with a screening criterion set to 1% of a performance measure (e.g., a beta-gamma dose not to exceed the 4 mrem/yr beta-gamma performance measure x 0.01 = 0.04 mrem/yr). Thus, if a radionuclide produced a bounding or screening-level dose (or concentrations) less than the screening criterion, it could be safely removed from further consideration. Several tiers of screening and bounding level analyses have been considered in this report.
This report documents activities performed by Idaho National Laboratory (INL) during Fiscal Year (FY) 2023 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) risk assessment project. In FY 2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a technical basis to support effective, and secure DI&C technologies for digital upgrades/designs. A risk assessment-informed framework was proposed for this strategy, which aims to (1) provide a best-estimate, risk informed capability to quantitatively estimate the safety margin obtained from plant modernization, especially for safety-related DI&C systems, (2) support and supplement existing risk informed DI&C design guides by providing quantitative risk information and evidence, (3) offer a capability of design architecture evaluation of various DI&C systems, (4) assure the long-term safety and reliability of safety-related DI&C systems, and (5) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals, the LWRS-developed framework provides a means to address relevant technical issues by: (1) defining a risk informed analysis process for DI&C upgrade that integrates hazard analysis, reliability analysis, and consequence analysis, (2) applying risk informed tools to address common cause failures (CCFs) and quantify corresponding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the component level, system level, and plant level, and (4) providing insights and suggestions on designs to manage the risks, thus to support the development and deployment of advanced DI&C technologies in nuclear power plants (NPPs). Adding diversity within a system or components is the primary means to eliminate and mitigate CCFs, but diversity also increases system complexity and may not address all sources of systematic failures. Optimization of diversity and redundancy applications for the safety-critical DI&C systems remains a challenge. To deal with the technical issues in addressing potential software CCFs in safety-related DI&C systems of NPPs and supporting relevant design optimization, the proposed framework provides: (a) A best-estimate, risk informed capability to address new technical digital issues quantitatively, focusing on software CCFs in safety-related DI&C systems of NPPs; (b) A common and a modularized platform for DI&C designers, software developers, cybersecurity analysts, and plant engineers to predict and prevent risk in the early design stage of DI&C systems; (c) Technical bases and risk informed insights to assist users address the risk informed alternatives for evaluation of CCFs in safety-related DI&C systems of NPPs; and (d) A risk informed tool that offers a capability of design architecture evaluation of various DI&C systems to support system design decisions in diversity and redundancy applications. The research and development efforts of this project in FY 2023 are focused on refining current methods on software CCF modeling and estimation and exploring additional innovative approaches to risk assessment of DI&C systems to enable a more comprehensive and complete assessment of various safety-related DI&C design architectures. The primary audience of this report are DI&C designers, engineers, and probabilistic risk assessment (PRA) practitioners. This includes stakeholders, such as the nuclear utilities and regulators who consider the deployment and upgrade of DI&C systems, DI&C software developers and reviewers, and cybersecurity specialists. It should be noted that all the analyses are performed for the demonstration of the methodology, not for the evaluation of an actual digital control system. Results are obtained based on limited design information and testing data.