Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “consequence”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 703 records · Page 39
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

Cosmological Consequences of Unconstrained Gravity and Electromagnetism

Motivated by the quantum description of gauge theories, we study the cosmological effects of relaxing the Hamiltonian and momentum constraints in general relativity and Gauss' law in electromagnetism. We show that the unconstrained theories have new source terms that mimic a pressureless dust and a charge density that only follows geodesics. The source terms may be the simplest explanation for dark matter and generically predict a charged component. We comment that discovery of such terms would rule out inflation and be a direct probe of the initial conditions of the universe.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗
DOE OSTI2022

BayoTech Risk and Modeling Support of NM Gas Site

The BayoTech hydrogen generation system has been evaluated in terms of safety considerations at the NM Gas site. The consequence of a leak in different components in the system was evaluated in terms of plume dispersion and overpressure. Additionally, the likelihood of a leak scenario for different hydrogen components was identified. The worst-case plume dispersion cases, full-bore leaks, resulted in relatively large plumes. However, these cases were noted to be far less likely than the partial break cases that were evaluated. The partial break cases resulted in nearly negligible plume lengths. Similarly, the overpressure analysis of the full-bore break scenarios resulted in much larger overpressures than the partial break cases (which resulted in negligible overpressure at the lot line). There were several cases evaluated in the analysis that represented leak scenarios from both hydrogen and natural gas sources. Generally, the natural gas leak scenarios resulted in a smaller horizontal impact than that of hydrogen leaks. The worst-case consequence from a hydrogen leak resulted from the compressors, storage pods, or dispensing system. To consider the safety features that may isolate the leak, the consequence was evaluated at different times after the leak event to show the reduction of pressure. After 2 seconds, the plume dispersion from this event is contained within the perimeter of the site. The worst-case consequences show that the plume may disperse to adjacent facilities and to the street. When considering both likelihood and consequence, the risk may be considered low because the maximum frequency of a full-bore leak from any component within the hydrogen compound is 8.2 E-5/yr. This means that a full-bore leak is expected to occur less than once every 10,000 years. The risk can be further reduced by implementing mitigative countermeasures, such as CMU walls along the sides of the equipment compound. This would reduce the overall consequence of the worst-case dispersion scenarios (horizontal impact of plume). In terms of siting and safety analysis, the NFPA 2 code was used to provide a high-level evaluation of the current site plan. The most limiting equipment in terms of set-back distance are the compressors/storage units because of the high-pressure hydrogen. The site layout was evaluated for an acceptable location for the compression/storage unit based on NFPA 2 set-back distances. It is important to note that the NFPA 2 set-back distances consider both likelihood and consequence. This is important because the worst-case results evaluated herein also represent the least likely leak scenario. Other site-specific considerations were evaluated, including the parking shade structure with photovoltaic cells and refueling vehicles. These issues were dispositioned and determined to not present a safety risk.

08 HYDROGEN↗
DOE OSTI2021

Modeling and Evaluation of Cyber-Attacks on Grid-Interactive Efficient Buildings

Grid-interactive efficient buildings (GEBs) are not only exposed to passive threats (e.g., physical faults) but also active threats such as cyber-attacks launched on the network-based control systems. The impact of cyber-attacks on GEB operation are not yet fully understood, especially as regards the performance of grid services. To quantify the consequences of cyber-attacks on GEBs, this paper proposes a modeling and simulation framework that includes different cyber-attack models and key performance indexes to quantify the performance of GEB operation under cyber-attacks. The framework is numerically demonstrated to model and evaluate cyber-attacks such as data intrusion attacks and Denial-of-Service attacks on a typical medium-sized office building that uses the BACnet/IP protocol for communication networks. Simulation results show that, while different types of attacks could compromise the building systems to different extents, attacks via the remote control of a chiller yield the most significant consequences on a building system’s operation, including both the building service and the grid service. It is also noted that a cyber-attack impacts the building systems during the attack period as well as the post-attack period, which suggests that both periods should be considered to fully evaluate the consequences of a cyber-attack.

Fu, Yanyang↗
DOE OSTI2014

SOARCA Peach Bottom Atomic Power Station Long-Term Station Blackout Uncertainty Analysis: Convergence of the Uncertainty Results

This paper describes the convergence of MELCOR Accident Consequence Code System, Version 2 (MACCS2) probabilistic results of offsite consequences for the uncertainty analysis of the State-of-the-Art Reactor Consequence Analyses (SOARCA) unmitigated long-term station blackout scenario at the Peach Bottom Atomic Power Station. The consequence metrics evaluated are individual latent-cancer fatality (LCF) risk and individual early fatality risk. Consequence results are presented as conditional risk (i.e., assuming the accident occurs, risk per event) to individuals of the public as a result of the accident. In order to verify convergence for this uncertainty analysis, as recommended by the Nuclear Regulatory Commission’s Advisory Committee on Reactor Safeguards, a ‘high’ source term from the original population of Monte Carlo runs has been selected to be used for: (1) a study of the distribution of consequence results stemming solely from epistemic uncertainty in the MACCS2 parameters (i.e., separating the effect from the source term uncertainty), and (2) a comparison between Simple Random Sampling (SRS) and Latin Hypercube Sampling (LHS) in order to validate the original results obtained with LHS. Three replicates (each using a different random seed) of size 1,000 each using LHS and another set of three replicates of size 1,000 using SRS are analyzed. The results show that the LCF risk results are well converged with either LHS or SRS sampling. The early fatality risk results are less well converged at radial distances beyond 2 miles, and this is expected due to the sparse data (predominance of “zero” results).

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2014

SOARCA Peach Bottom Atomic Power Station Long-Term Station Blackout Uncertainty Analysis: Knowledge Advancement.

This paper describes the knowledge advancements from the uncertainty analysis for the State-of- the-Art Reactor Consequence Analyses (SOARCA) unmitigated long-term station blackout accident scenario at the Peach Bottom Atomic Power Station. This work assessed key MELCOR and MELCOR Accident Consequence Code System, Version 2 (MACCS2) modeling uncertainties in an integrated fashion to quantify the relative importance of each uncertain input on potential accident progression, radiological releases, and off-site consequences. This quantitative uncertainty analysis provides measures of the effects on consequences, of each of the selected uncertain parameters both individually and in interaction with other parameters. The results measure the model response (e.g., variance in the output) to uncertainty in the selected input. Investigation into the important uncertain parameters in turn yields insights into important phenomena for accident progression and off-site consequences. This uncertainty analysis confirmed the known importance of some parameters, such as failure rate of the Safety Relief Valve in accident progression modeling and the dry deposition velocity in off-site consequence modeling. The analysis also revealed some new insights, such as dependent effect of cesium chemical form for different accident progressions. (auth)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2016

Recent Progress on the Stochastic Objective Decision Aide (SODA) Application

Idaho State University, in collaboration with Idaho National Laboratory, is engaged in development of a simple to use software application that utilizes stochastic techniques for the calculation of radiation doses associated with hypothetical radioactive material releases. This work is being performed through a grant from the U.S. Department of Energy (DOE) Nuclear Safety Research and Development (NSR and D) Program. Initial progress on the application was reported previously. Recent additions to the application are reported here. The Stochastic Objective Decision Aide (SODA) provides an easy to use software application to help decision makers support their judgment about the need or lack of need for safety structures, systems, and components. SODA is not intended to replace traditional design basis accident dose calculation methodology, nor is it intended to replace existing software used to perform formal dose consequence calculations. Rather, SODA is intended to supplement information obtained from existing codes to give a decision maker more information about an accident scenario. SODA also provides a simple method to perform parametric or sensitivity studies on individual input parameters. Non-reactor nuclear facilities operated under the approval authority of the US DOE use unmitigated hazard evaluations to determine if potential radiological doses associated with design basis events challenge dose evaluation guidelines. Unmitigated events that sufficiently challenge dose evaluation guidelines merit the selection of safety structures, systems, or components (SSCs) to prevent or mitigate the hazard. Dose consequence calculations traditionally involve use of the 'five-factor' formula: ST = MAR.DR.ARF.RF.LPF where ST is the source term (Bq), MAR is the total available material-at-risk (Bq), DR is the damage ratio (no units), ARF is the airborne release fraction (no units), RF is the respirable fraction (no units), and LPF is the leak path factor (no units). Potential radiation doses are then calculated using: CED = χ/Q.BR.ST.DCF (2) where CED is the committed effective dose (Sv), χ/Q is the plume dispersion (s/m{sup 3}), BR is the breathing rate (m{sup 3}/s), ST is the source term (Bq), and DCF is the dose conversion factor (Sv/Bq). Conservative single value input parameters are typically used to represent ARF, RF, LPF and BR. The traditional methodology, while conservative, can lead to skewed conclusions in the balance between cost and risk reduction resulting in over engineered systems with greater design, construction and operating costs. Rather than using a bounding single point value for each parameter in the dose consequence calculation, SODA uses distributions for some or all of the parameters. Each input parameter distribution is stochastically sampled and the resulting dose consequence calculation is repeated many times to develop a dose consequence distribution. The resulting distribution provides more information for the decision maker to rely upon when determining the need for safety SSCs. The SODA application was developed using MATLAB and it incorporates the use of Monte Carlo techniques as well as a graphical user interface (GUI). The application includes user selection of the governing distribution for parameters such as the MAR, DR, ARF, RF, LPF,χ/Q, BR, and DCF. While MATLAB was used for the development work, the application is distributed as a self-contained executable program. Features of the application include pull down menus with available distributions for the various parameters. The user has the option to plot the input parameter distribution that results from the random sampling process. The resulting dose consequence distribution is automatically analyzed to determine its similarity to well know distributions. This was done using the Bayesian Information Criterion method. If the resulting distribution is sufficiently similar to a well-known distribution, the application provides information about the distributions such as the mean value and other parameters. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2016

Probabilistic Risk Assessment of Spent Fuel Pool Cooling System Failure Considering Safety and Security Initiating Events

In order to quantify the probable risk associated with a safety system, nuclear safety risk evaluation process is applied which is generally performed in three steps. The first step is to calculate the damage frequency of a critical system. This step is followed by the radioactive source term estimation due to the potential system damage. The final step is the assessment of off-site consequences. The safety risk formula is shown by Eq. (1). P{sub F} is the probability of safety system failure (the probability used describes a random, independent event), and C is the consequence value. R{sub SAF} = P{sub F} * C (1) The security risk associated with an attack on critical infrastructure and/or special nuclear materials theft is usually evaluated using three- term risk equation (probability of attack, probability of adversary success, and consequence). A security threat and the related initiating events are not considered in a pure safety risk analysis. The vulnerability of the physical protection system is performed independently even though the consequence resulting from a security initiating event can be similar to a safety related initiating event and thus gets double counted. The security risk can be calculated using Eq. (2) R{sub SEC} = P{sub A} * P{sub S} * C (2) PA is the probability of attack, P{sub S} is the probability of adversary success (P{sub S} = 1 - P{sub I} P{sub N}). P{sub I} being the probability of interruption which accounts for the probabilities of detection of all timely detection elements along an adversary path. PN being the probability of neutralization: the result of engagement of the response force with the adversaries after the interruption has occurred. C is the consequence magnitude from a successful attack. The two security probabilities do not describe random, independent events. As a result, because of the differences in the randomness and independence of the respective safety and security probabilities, the safety and the security risks are currently calculated separately. The consequence term in nuclear safety and security risk evaluation have the same definition. An effort is made here to study the effect on the overall risk by considering security initiating events along with the subsequent failure of the intermediate safety element. The target selected is a spent fuel storage pool for analyzing the public risk arising from the interplay between nuclear security and safety initiating events. EASI (Estimate of Adversary Sequence Interruption) model is used to calculate the probability of interruption related to a security system that leads to the calculation of the security initiating event frequency. Further progression of this initiating security event to a top event is analyzed using a Probabilistic Safety Assessment (PSA) tool, SAPHIRE (version 8) to obtain a joint pool damage frequency. For the progression of events leading to a top event, the failure of the intermediate safety elements is assumed to be external random events such as heavy load drop and fire events. The objectives of this study is to (1) determine the double accounting of frequency of failure, risk and allocated resources in the scenario of a non-random security initiating event leading to a safety random event chain (2) compare the damage frequency from pure security with the frequency of combined security-safety failure event and pure safety failure events. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2024

Engineering in Cyber Resilience with Cyber-Informed Engineering

Engineers have super powers to provide cybersecurity resilience with deterministic engineering solutions and to protect systems from the most catastrophic consequences that a cyber saboteur could cause. Come to this session to learn how to use engineering risk management skills to harden your engineered systems from cyberattacks. Objective 1 Identify what system functions could be digitally induced to cause undesired high-impact consequences. Objective 2 Analyze how loss or instability of digital controls in a subsystem could lead to high-impact consequences. Objective 3 Analyze how loss or instability in the digital connectivity between systems could lead to high-impact consequences. Objective 4 Identify engineering controls which could build resilience by eliminating digital loss or instability pathways or reduce the impact of digital loss or instability. This presentation will introduce Cyber-Informed Engineering, described below, and walk participants through specific engineering use cases to show how engineers can consider the potential for cyber sabotage in their existing system designs and enact deterministic engineering-based controls which eliminate pathways for attack or mitigate specific consequences. A wide variety of application use cases will be considered so that audience members can align the material with familiar engineering applications. CIE is an engineering approach that integrates cyber resilience into the conception, design, build, and operation of any physical system that has digital connectivity, sensors, monitoring, or control. CIE offers the opportunity to use engineering to eliminate or mitigate avenues for cyber attack—starting from the earliest stage of design and continuing throughout the system’s lifecycle. Today, engineers and industrial control system (ICS) technicians build engineered systems with specific goals for safety, reliability, and functionality. While systems engineering includes considerable safety and failure mode analysis, cybersecurity risks are often not specifically addressed—particularly the risks of intentional cyber compromise, exploitation, and misuse. Cyber-Informed Engineering pairs well with traditional cyber defenses and offers an extra designed-in protection to eliminate the most catastrophic consequences which can be realized by an adversary should traditional cyber defenses fail.

42 ENGINEERING↗
DOE OSTI2020

Performing a multi-unit level-3 PSA with MACCS

MACCS (MELCOR Accident Consequence Code System), WinMACCS, and MelMACCS now facilitate a multi-unit consequence analysis. MACCS evaluates the consequences of an atmospheric release of radioactive gases and aerosols into the atmosphere and is most commonly used to perform probabilistic safety assessments (PSAs) and related consequence analyses for nuclear power plants (NPPs). WinMACCS is a user-friendly preprocessor for MACCS. MelMACCS extracts source-term information from a MELCOR plot file. The current development can combine an arbitrary number of source terms, representing simultaneous releases from a multi-unit facility, into a single consequence analysis. The development supports different release signatures, fission product inventories, and accident initiation times for each unit. The treatment is completely general except that the model is currently limited to collocated units. A major practical consideration for performing a multi-unit PSA is that a comprehensive treatment for more than two units may involve an intractable number of combinations of source terms. This paper proposes and evaluates an approach for reducing the number of calculations to be tractable, even for sites with eight or ten units. The approximation error introduced by the approach is acceptable and is considerably less than other errors and uncertainties inherent in a Level 3 PSA.

42 ENGINEERING↗
DOE OSTI2021

Development of Integrated Safety and Security Models for Comprehensive Reliability and Resiliency Evaluation

The security of the electric grid and supporting energy systems is crucial to national security. One of the complexities in analyzing the security of energy systems is the safety consequences that may result from accidents. For energy systems, the goal is to ensure that they operate as intended and that any consequences are mitigated or prevented. The integration of safety and security is paramount to protecting these systems from attacks and ensuring that large consequences are prevented. This report describes an integrated safety and security methodology to evaluate cybersecurity events that can lead to large consequences. This novel approach first describes how Systems-Theoretic Process Analysis (STPA) provides a digital causal analysis for Bayesian Networks (BNs). The use of STPA causal analysis provides a systematic approach to constructing BNs that adequately model cyber scenarios that result in consequences. When combined with the technical principles described in Risk-Informed Management of Enterprise Systems (RIMES), a comprehensive risk-informed cybersecurity analysis results that allows decision-makers to prioritize systems that most impact risk.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2025

Threat Landscape for BESS and IBR

The cyber risk landscape for BESS and IBR can be broken up by threats, vulnerabilities, and consequences for these systems. This presentation walks through the cyber risk landscape for BESS through the lens of consequence-informed awareness and mitigation for each risk factor. Threats with varying capabilities have been demonstrated in real-world events. Though threat actors can rarely be directly influenced by organizations, exposure of systems to adversaries can be limited (a known issue with IBR systems) to reduce likelihood of adversaries accessing systems with disruptive consequences. Common trends in disclosed IBR vulnerabilities include weak password generation or managements for various devices or services and web portal vulnerabilities that provide unauthorized access to data or capabilities or elevated user privileges. Understanding these common vulnerabilities and considering the consequences if these types of vulnerabilities were to occur can help mitigate risk. Consequences range from loss-of-view events that have no reliability impact to asset damage or grid stability impacts. Five case studies are briefly shared to highlight trends in real-world events affecting IBR.

14 - SOLAR ENERGY↗
DOE OSTI2020

Risk-Oriented PMU Placement Approach in Electric Power Systems

The objective of traditional PMU placement approaches is to use the minimal number of PMUs to cover system complete observability. Very few consider the probability and the consequence severity of observability loss. For example, following line trip, grid topology changes, which may results in observability loss and overloaded lines. As long as the overloaded lines are still observable, then we can take action in time to correct the system; and the consequence of the observability loss is not severe, although some parts of the system is not observable. Otherwise, if the overloaded lines become unobservable, then we lose the situation awareness of the system and the consequence of the observability loss is severe. To address the above points in PMU placement, this paper proposes a risk-oriented PMU placement approach. The proposed approach uses two indices, namely the probability of observability loss and its corresponding consequence of severity to design the optimal PMU placement strategy. We show that our proposed approach is able to capture the critical events while the traditional approaches fail to do so. Extensive simulation results carried out on the IEEE 39-bus and 118-bus systems demonstrate its effectiveness.

observability, risk of observability loss, PMUs pl↗