SEARCH · Engineering Papers

Results for “Consequence”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 577 records · Page 32

All sources NASA NTRS DOE OSTI

DOE OSTI2020

Cybersecurity Resiliency of Marine Renewable Energy Systems-Part 1: Identifying Cybersecurity Vulnerabilities and Determining Risk

Technology innovation, market demand, and the potential impacts of a changing climate are driving the marine renewable energy (MRE) industry to develop market-ready systems to provide low-carbon electricity for emerging, off-grid markets. The advanced operational and information technology devices used in MRE systems create a pathway for a cyber threat actor to gain unauthorized access to data or disrupt operation. To improve the resiliency of MRE systems as a predictable, affordable, and reliable source of energy from oceans and rivers, guidance was developed for an end users' organization that describes a framework for identifying and managing cybersecurity risk. The development of the cybersecurity guidance is based on standards described in the Risk Management Framework and Cybersecurity Framework developed by the National Institute of Standards and Technology (NIST). This paper is the first of a two-part series that describes an approach to determine the cybersecurity risk for MRE systems based on assessing potential cyber threats, identifying vulnerabilities (people, processes, and technology, including physical and operational environment), and evaluating the consequences a cyberattack would have on operation of the MRE system and impact on end users' mission and business objectives. MRE developers and stakeholders can use this approach to assess their current cybersecurity risk posture to incorporate appropriate cybersecurity controls to reduce the consequences and impacts from a cyberattack on MRE systems. This approach can be refined further as MRE systems are deployed and operational configurations are available.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2020

Understanding the Charging Flexibility of Shared Automated Electric Vehicle Fleets

The combined anticipated trends of vehicle sharing (ride-hailing), automated control, and powertrain electrification are poised to disrupt the current paradigm of predominately owner-driven gasoline vehicles with low levels of utilization. Shared, automated, electric vehicle (SAEV) fleets offer the potential for lower cost and emissions and have garnered significant interest among the research community. While promising, unmanaged operation of these fleets may lead to unintended negative consequences. One potentially unintended consequence is a high quantity of SAEVs charging during peak demand hours on the electric grid, potentially increasing the required generation capacity. This research explores the flexibility associated with charging loads demanded by SAEV fleets in response to servicing personal mobility travel demands. Travel demand is synthesized in four major United States metropolitan areas: Detroit, MI; Austin, TX; Washington, DC; and Miami, FL. In each of these four cities, SAEV simulations are performed using local projected electricity prices from the Regional Energy Deployment System (ReEDS) for a handful of supply side scenarios. A coordinated charging model is introduced that seeks to reduce fleet charging costs in response to time-varying electricity prices and increasing shares of personal trip demand served (between 1% and 25% of all metro trips served by the SAEV fleet). Simulation results are presented across various scenarios assuming fleetwide coordination to minimize charging energy costs while constrained by offering adequate mobility service to fleet customers. The results indicate that the SAEV charging load is highly flexible; energy costs were shown to reduce between 13% and 46% across a wide range of simulated scenarios. In addition, these savings were realized without detrimentally impacting the fleet’s ability to service trips.

autonomous vehicle↗

DOE OSTI2023

Protection Against Graph-Based False Data Injection Attacks on Power Systems

Graph signal processing (GSP) has emerged as a powerful tool for practical network applications, including power system monitoring. By representing power system voltages as smooth graph signals, recent research has focused on developing GSP-based methods for state estimation, attack detection, and topology identification. Included, efficient methods have been developed for detecting false data injection (FDI) attacks, which until now were perceived as non-smooth with respect to the graph Laplacian matrix. Consequently, these methods may not be effective against smooth FDI attacks. In this paper, we propose a graph FDI (GFDI) attack that minimizes the Laplacian-based graph total variation (TV) under practical constraints. In addition, we develop a low-complexity algorithm that solves the non-convex GDFI attack optimization problem using ell_1-norm relaxation, the projected gradient descent (PGD) algorithm, and the alternating direction method of multipliers (ADMM). We then propose a protection scheme that identifies the minimal set of measurements necessary to constrain the GFDI output to high graph TV, thereby enabling its detection by existing GSP-based detectors. Our numerical simulations on the IEEE-57 bus test case reveal the potential threat posed by well-designed GSP-based FDI attacks. Moreover, we demonstrate that integrating the proposed protection design with GSP-based detection can lead to significant hardware cost savings compared to previous designs of protection methods against FDI attacks.

Morgenstern, Gal↗

DOE OSTI2025

Anomalies of global symmetries on the lattice

't Hooft anomalies of global symmetries play a fundamental role in quantum many-body systems and quantum field theory (QFT). In this paper, we make a systematic analysis of lattice anomalies - the analog of 't Hooft anomalies in lattice systems - for which we give a precise definition. Crucially, a lattice anomaly is not a feature of a specific Hamiltonian, but rather is a topological invariant of the symmetry action. The controlled setting of lattice systems allows for a systematic and rigorous treatment of lattice anomalies, shorn of the technical challenges of QFT. We find that lattice anomalies reproduce the expected properties of QFT anomalies in many ways, but also have crucial differences. In particular, lattice anomalies and QFT anomalies are not, contrary to a common expectation, in one-to-one correspondence, and there can be non-trivial anomalies on the lattice that are infrared (IR) trivial: they admit symmetric trivial gapped ground states, and map to trivial QFT anomalies at low energies. Nevertheless, we show that lattice anomalies (including IR-trivial ones) have a number of interesting consequences in their own right, including connections to commuting projector models, phases of many-body localized (MBL) systems, and quantum cellular automata (QCA). We make substantial progress on the classification of lattice anomalies and develop several theoretical tools to characterize their consequences on symmetric Hamiltonians. Our work places symmetries of quantum many-body lattice systems into a unified theoretical framework and may also suggest new perspectives on symmetries in QFT.

Disordered Systems and Neural Networks (cond-mat.d↗

DOE OSTI2025

Particle Production by Time-Varying Dark Energy and the End of Cosmic Expansion

We consider various possible consequences of time-varying dark energy due to a quintessence scalar field whose energy density is partially converted to particles as the field evolves down its potential. This particle production acts as a source of thermal friction on the field that can make it difficult to distinguish whether dark energy is due to a radiating field rolling down a steep potential, a purely self-interacting field moving down a flatter potential, or a cosmological constant. By reducing the acceleration of the scalar field, thermal friction increases the amount of accelerated expansion and can cause a sizable bump in the quintessence equation of state. We take special interest in the case where a steep potential rapidly changes from positive to negative as the field evolves, resulting in the end of cosmic expansion and the beginning of contraction. Even in this case, we find that thermal friction lengthens the period of accelerated expansion and consequently delays the end of cosmic expansion, making it challenging to detect the impending transition to contraction using conventional cosmological tests. However, particle production can also provide alternative avenues for detection by generating a background of thermal dark radiation, partly comprised of neutrinos or other particles, whose energy density exceeds the remnant photon energy density.

Cosmology and Nongalactic Astrophysics (astro-ph.C↗

DOE OSTI2024

Fire weather compromises forestation-reliant climate mitigation pathways

Forestation can contribute to climate change mitigation. However, increasing frequency and intensity of climate extremes are posed to have profound impact on forests and consequently on the mitigation potential of forestation efforts. In this perspective, we critically assess forestation-reliant climate mitigation scenarios from five different integrated assessment models (IAMs) by showcasing the spatially explicit exposure of forests to fire weather and the simulated increase in global annual burned area. We provide a detailed description of the feedback from climate change to forest carbon uptake in IAMs. Few IAMs are currently accounting for feedback mechanisms like loss from fire disturbance. Consequently, many forestation areas proposed by IAM scenarios will be exposed to fire-promoting weather conditions and without costly prevention measures might be object to frequent burning. We conclude that the actual climate mitigation portfolio in IAM scenarios is subject to substantial uncertainty and that the risk of overly optimistic estimates of negative emission potential of forestation should be avoided. As a way forward we propose how to integrate more detailed climate information when modeling climate mitigation pathways heavily relying on forestation.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2025

High-Resolution Model Intercomparison Project phase 2 (HighResMIP2) towards CMIP7

Abstract. Robust projections and predictions of climate variability and change, particularly at regional scales, rely on the driving processes being represented with fidelity in model simulations. Consequently, the role of enhanced horizontal resolution in improved process representation in all components of the climate system continues to be of great interest. Recent simulations suggest the possibility of significant changes in both large-scale aspects of the ocean and atmospheric circulations and in the regional responses to climate change, as well as improvements in representations of small-scale processes and extremes, when resolution is enhanced. The first phase of the High-Resolution Model Intercomparison Project (HighResMIP1) was successful at producing a baseline multi-model assessment of global simulations with model grid spacings of 25–50 km in the atmosphere and 10–25 km in the ocean, a significant increase when compared to models with standard resolutions on the order of 1° that are typically used as part of the Coupled Model Intercomparison Project (CMIP) experiments. In addition to over 250 peer-reviewed manuscripts using the published HighResMIP1 datasets, the results were widely cited in the Intergovernmental Panel on Climate Change report and were the basis of a variety of derived datasets, including tracked cyclones (both tropical and extratropical), river discharge, storm surge, and impact studies. There were also suggestions from the few ocean eddy-rich coupled simulations that aspects of climate variability and change might be significantly influenced by improved process representation in such models. The compromises that HighResMIP1 made should now be revisited, given the recent major advances in modelling and computing resources. Aspects that will be reconsidered include experimental design and simulation length, complexity, and resolution. In addition, larger ensemble sizes and a wider range of future scenarios would enhance the applicability of HighResMIP. Therefore, we propose the High-Resolution Model Intercomparison Project phase 2 (HighResMIP2) to improve and extend the previous work, to address new science questions, and to further advance our understanding of the role of horizontal resolution (and hence process representation) in state-of-the-art climate simulations. With further increases in high-performance computing resources and modelling advances, along with the ability to take full advantage of these computational resources, an enhanced investigation of the drivers and consequences of variability and change in both large- and synoptic-scale weather and climate is now possible. With the arrival of global cloud-resolving models (currently run for relatively short timescales), there is also an opportunity to improve links between such models and more traditional CMIP models, with HighResMIP providing a bridge to link understanding between these domains. HighResMIP also aims to link to other CMIP projects and international efforts such as the World Climate Research Program lighthouse activities and various digital twin initiatives. It also has the potential to be used as training and validation data for the fast-evolving machine learning climate models.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2025

Explainable Machine Learning for Functional Data

Black-box machine learning models are recognized as useful tools for prediction applications, but the algorithmic complexity of some models causes interpretation challenges. Explainability methods have been proposed to provide insight into these models, but there is little research focused on supervised modeling with functional data inputs. We argue that, especially in applications of high consequence, it is important to explicitly model the functional dependence in a black-box analysis to not obscure or misrepresent patterns in explanations. As such, we propose the V ariable importance E xplainable E lastic S hape A nalysis (VEESA) pipeline for training supervised machine learning models with functional inputs. The pipeline is an analysis process that includes the data preprocessing, modeling, and post-hoc explanations. The preprocessing is done using elastic functional principal components analysis, which accounts for vertical and horizontal variability in functional data and, ultimately, allows for explanations in the original data space that identify the important functional variability without bias due to correlated variables. Here, we demonstrate the pipeline on two high-consequence applications: explosives classification for national security and inkjet printer identification in forensic science. The applications exhibit the VEESA pipeline’s ability to provide an understanding of the characteristics of the functional data useful for prediction. Code for implementing the pipeline is available in the veesa R package (and supplemental python code).

Elastic Shape Analysis↗

DOE OSTI2022

Interaction of radio frequency waves with cylindrical density filaments -- scattering and radiation pressure

The propagation of radio-frequency (RF) waves in tokamaks can be affected by filamentary structures, or blobs, that are present in the edge plasma and the scrape-off layer. The difference in the permittivity between the surrounding plasma and interior of a filament leads to reflection, refraction and diffraction of the waves. This, in turn, can affect the power flow into the core of the plasma and reduce the efficiency of heating and/or current generation. The scattering of RF waves, lower hybrid, helicon and ion cyclotron waves, by a single cylindrical filament, embedded in a background plasma, is studied using a full-wave analytical theory developed previously (Ram & Hizanidis, Phys. Plasmas, vol. 23, 2016, 022504). The theory assumes that the plasma in and around a filament is homogeneous and cold. A detailed scattering analysis reveals a variety of common features that exist among the three distinctly different RF waves. These common attributes can be inferred intuitively based on an examination of the cold plasma dispersion relation. The physical intuition is a useful step to understanding experimental observations on scattering, as well as results from simulations that include general forms of edge plasma turbulence. While a filament can affect the propagation of RF waves, the radiation force exerted by the waves can influence the filament. The force on a filament is determined using the Maxwell stress tensor. In 1905, Poynting was the first to evaluate and measure the radiation force on an interface separating two different dielectric media (Poynting, London Edinburgh Dublin Philos. Mag. J. Sci., vol. 9, 1905, pp. 393–406). For ordinary light propagating in vacuum and incident on a glass surface, Poynting noted that the surface is ‘pulled’ towards the vacuum. In a magnetized cold plasma, there are two independent wave modes. Even if only one of these modes is excited by an RF antenna, a filament will couple power to the other mode: a consequence of electromagnetic boundary conditions. This facet of scattering has consequences on the radiation force that go beyond Poynting's seminal contribution. The direction of the force depends on the polarization of the incident wave and on the mode structure of the waves inside and in the vicinity of a filament. It can either pull the filament toward the RF source or push it away. For slow lower hybrid waves, filaments with densities greater than the ambient density are pulled in, while filaments with lower densities are pushed out, thereby enhancing the density in front of the antenna. In the case of fast helicon and ion cyclotron waves, the direction of the force depends on the plasma and wave parameters; in particular, on the ambient density. The radiation force, in all three frequency ranges, is large enough to affect the motion of a filament and could be measured experimentally. This also suggests the possibility of modifying the edge turbulence using RF waves.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

DOE OSTI2023

Measuring surface albedo for various crops

Surface albedo can affect the energy budget and subsequently cause localized warming or cooling of the climate. When we convert a substantial portion of lands to agriculture, land surface properties are consequently altered, including albedo. Through crop selection and management, one can increase crop albedo to obtain higher levels of localized cooling effects to mitigate global warming. Still, there is little understanding about how distinctive features of a cropping system may be responsible for elevated albedo and consequently for the cooling potential of cultivated lands. To address this pressing issue, we conducted seasonal measurements of surface reflectivity during five growing seasons on annual crops of corn-soybean–winter wheat

albedo↗

DOE OSTI2020

A PROVEN APPROACH FOR EFFECTIVE COMPUTER SECURITY SELF-ASSESSMENTS AT NUCLEAR FACILITIES

A proven method for conducting cybersecurity self-assessments at nuclear power plants is now available for international use. This method was originally developed by Pacific Northwest National Laboratory, under the sponsorship of the U.S. Nuclear Regulatory Commission (NRC), for use at U.S. nuclear power plants. The “Method,” described in NUREG/CR-6847 “Cyber Security Self-Assessment Method for U.S. Nuclear Power Plants,” was originally a limited release document that was withheld from public disclosure but is now publicly available. The Method provides a systematic, phased, and risk-informed approach to help decision makers and security specialists understand their relative cybersecurity posture. Completed Method assessments may be used to support or validate selection of computer security controls to mitigate cyber threats as well as demonstrate compliance with regulations or statutes enacted by competent authorities. The Method assesses the cybersecurity posture of key systems at a nuclear facility with a focus on protection of design base functions. It considers both physical and digital elements of system vulnerabilities and the resulting potential consequences from exploitation. It is well-suited for addressing blended cyberattacks. A semi-quantitative analytical approach is used in the evaluation of potential vulnerabilities, consequences, and risks and provides a technical basis for the selection of security controls to mitigate cyberattacks. The Method’s application at U.S. nuclear power plants has been very encouraging. The only nuclear plant in the United States that did not have adverse findings during its initial NRC computer security inspection prepared for inspection through the diligent application of this self-assessment method and the implementation of recommendations that came out of that self-assessment. Nuclear facilities around the world might find application of the Method extremely helpful for making cost-effective, risk-based decisions regarding computer security and for preparing to pass computer security inspections by their competent authorities.

Cyber security, Nuclear security, Self-assessment↗

DOE OSTI2020

Excitons in two-dimensional metal-halide perovskites

Georgia Tech School of Chemistry and Biochemistry Special Summer Seminar Series, Prof Carlos Silva; While polarons --- charges bound to a lattice deformation induced by electron-phonon coupling --- are primary photoexcitations at room temperature in bulk metal-halide hybrid organic-inorganic perovskites (HOIP), excitons --- Coulomb-bound electron-hole pairs --- are the stable quasi-particles in their two-dimensional (2D) analogues. Here we address the fundamental question: are polaronic effects consequential for excitons in 2D-HIOPs? Based on our recent work, we argue that polaronic effects are manifested intrinsically in the exciton spectral structure, which is comprised of multiple non-degenerate resonances with constant inter-peak energy spacing. We highlight measurements of population and dephasing dynamics that point to the apparently deterministic role of polaronic effects in excitonic properties. We contend that an interplay of long-range and short-range exciton-lattice couplings give rise to exciton polarons, a character that fundamentally establishes their effective mass and radius, and consequently, their quantum dynamics. Given this complexity, a fundamentally far-reaching issue is how Coulomb-mediated many-body interactions---elastic scattering such as excitation-induced dephasing, inelastic exciton bimolecular scattering, and multi-exciton binding---depend upon the specific exciton-lattice coupling within the structured excitation lineshape. We measure the intrinsic and density-dependent exciton dephasing rates of the multiple excitons and their dependence on temperature by means of two-dimensional coherent excitation spectroscopy. We find that diverse excitons display distinct intrinsic dephasing rates mediated by phonon scattering involving different effective phonons, and contrasting rates of exciton-exciton elastic scattering. These findings establish specifically the consequence of distinct lattice dressing on exciton many-body quantum dynamics, which critically define fundamental optical properties that underpin photonics and quantum optoelectronics.

solar cells, metal-halide perovskites, excitons, p↗

DOE OSTI2020

Geothermal Sector Cybersecurity Vulnerability Assessment

A review of geothermal sector-specific cybersecurity vulnerabilities and risks (consequences) was conducted at the request of the Geothermal Technologies Office (GTO). The vulnerabilities and risks reviewed in this study have relevance to achieving the 2019 GeoVision Report (DOE GTO 2019) technological advancements and expected sector growth. The study offers areas for consideration but does not quantify the likelihood (frequency) of the consequences. This cybersecurity analysis project represents a proactive effort to identify areas to enhance cybersecurity in geothermal development and operations. It was not initiated to address any immediate threat or specific known risk. Of the eight identified vulnerabilities analyzed, the review identified reservoir data system monitoring as one that is unique to geothermal systems and may warrant further investigation to better understand risk and mitigation. A detailed analysis of the other vulnerabilities may highlight additional uniqueness relative to other industries. Further research actions are recommended to better quantify risk and enhance cybersecurity preparedness of the sector. As the geothermal industry grows, the cybersecurity strategies to be deployed will be of increasing importance to ensure resilient, reliable, and secure clean energy for years to come.

cyber-physical security↗

DOE OSTI2021

Assessing the Potential for Inadvertent Human Intrusion at the Area 3 and Area 5 Radioactive Waste Management Sites on the Nevada National Security Site, Nye County, Nevada

This paper recommends an approach to inadvertent human intrusion (IHI) at the Area 3 and Area 5 Radioactive Waste Management Sites (RWMSs) on the Nevada National Security Site (NNSS). IHI analysis uses the consequences of an individual inadvertently contacting buried waste to set waste concentration limits for near-surface disposal of low-level radioactive waste (LLW). Regulatory agencies are increasingly applying risk-informed decision-making to LLW waste management (NRC 2006). Risk-informed decision-making combines scientific risk assessment with stakeholder values and perceptions to determine a level of acceptable risk. Risk considers not only the consequences of an event, but also its probability of occurring.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

DOE OSTI2021

Adapting Existing Energy Models for Resilience Analysis

Resilience is a topic receiving much attention in relation to energy systems, with particular attention being paid to the supply of electricity. As a result of the growing interest in energy sector resilience, research communities have proposed a plethora of candidate resilience indicators and metrics, most of which remain immature at different scales and segments within the energy system. A necessary focus of the research community lies in implementing, testing, and validating resilience metrics and analysis approaches in energy sector models, which will be invaluable for informing resilience planning and investment decisions. Recognizing these challenges that need to be addressed, we explore how to effectively integrate resilience considerations into energy sector models and tools. The overarching goal of the effort was to evaluate the data needs, methodologies, and outcomes—including consequences and/or changes in investment or operational decisions due to avoided consequences—based on resilience analysis in a range of existing tools. In particular, we selected five models originally built at NREL to explore non-resilience energy research questions to implement and exercise resilience metrics and analysis approaches. To demonstrate the importance of perspective, we selected models that represent different segments of the energy sector, geographic scales, and modeling approaches. A second important aspect of our effort was the development of generalized power interruption scenarios. These scenarios were intended to help establish a framework for simulating the effects of real-world threats in terms of their impacts on system components and, in turn, power interruption.

ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2021

Quantitative Risk Analysis of High Safety Significant Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants using IRADIC Technology

This report documents the activities performed by Idaho National Laboratory (INL) during fiscal year (FY) 2021 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) Risk Assessment project. In FY-2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades/designs. An integrated risk assessment technology for the DI&C systems (IRADIC technology) was proposed for this strategy, which aims to (1) provide a best-estimate risk-informed capability to quantitatively and accurately estimate the safety margin obtained from plant modernization, especially for the High Safety Significant Safety-related (HSSSR) DI&C systems, (2) develop an advanced risk assessment technology to support transition from analog to DI&C technologies for nuclear industry, (3) assure the long-term safety and reliability of vital HSSSR DI&C systems, (4) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals and deal with the expensive licensing justifications from regulatory insights, the IRADIC technology is instructive for nuclear vendors and utilities to effectively lower the costs associated with digital compliance and speed industry advances by: (1) defining an integrated risk-informed analysis process for DI&C upgrade, including hazard analysis, reliability analysis, and consequence analysis, (2) applying systematic and risk-informed tools to address common cause failures (CCFs) and quantify responding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the individual level, system level, and plant level, (4) providing insights and suggestions on designs to manage the risks; thus, to support the development, licensing, and deployment of advanced DI&C technologies on nuclear power plant (NPPs). In this report, an approach for performing software CCF analysis, given limited data, is developed and demonstrated using a case study of a highly redundant digital reactor trip system. Consequence analysis is also performed based on different accident scenarios. Results indicate that plant modernization including the improvement of HSSSR DI&C systems will make great benefits to plant safety by providing more safety margins to accident management. In addition, a novel approach is proposed in this report for the quantification of software hazards when sufficient operational and testing data available. The method incorporates software development quality as well as strong analysis techniques to identify and link software defects to potential failure modes. The approach includes both semantic and test-based analysis to detect failures that can exist in different stages of the software development life cycle. This method is applied to an advanced human system interface relevant to reactor trip safety developed from the APR 1400 design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2022

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA

In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems (DI&C). However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of particular concern are digital common cause failures (CCFs) specifically related to software defects. These “misbehaviors” by the software can occur in both the control and monitoring of a system. While many new methods have been proposed to identify potential software failure modes, such as Systems-theoretic Process Analysis (STPA), Hazard and Consequence Analysis for Digital Systems (HAZCADS), etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks unsafe control actions (UCAs), which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and unsafe information flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface (HSI) for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy-guided Systems-theoretic Hazard Analysis (RESHA) methodology. The case studies demonstrate the use of UIF and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method can also clarify fault tree construction when multiple component dependencies are present in the system.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2022

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA

22 GENERAL STUDIES OF NUCLEAR REACTORS↗