Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “risk informed design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 865 records · Page 48

Human Transportation System (HTS) study: Executive summary

This report summarizes work completed under the Human Transportation System Study. This study was conducted by the New Initiatives Office at JSC with the technical support of Boeing, General Dynamics, Lockheed, McDonnell-Douglas, Martin Marietta, and Rockwell. The study was designed to generate information on determining the appropriate path to follow for new system development to meet the Nation's space transportation needs. The study evaluates 18 transportation architecture options using a parametric set of mission requirements. These options include use of current systems (e.g., Shuttle, Titan, etc.) as well as proposed systems (e.g., PLS, Single-Stage-to-Orbit, etc.) to assess the impact of various considerations, such as the cost of alternate access, or the benefit of separating people and cargo. The architecture options are compared to each other with six measurable evaluation criteria or attributes. They are: funding profile, human safety, probability of mission success, architecture cost risk, launch schedule confidence, and environmental impact. Values for these attributes are presented for the architecture options, with pertinent conclusions and recommendations.

Unmanned spacecraft↗

Human Transportation System (HTS) study, volume 1

This report summarizes work completed under the Human Transportation System Study. This study was conducted by the New Initiatives Office at JSC with the technical support of Boeing, General Dynamics, Lockheed, McDonnell-Douglas, Martin Marietta, and Rockwell. The study was designed to generate information on determining the appropriate path to follow for new system development to meet the Nation's space transportation needs. The study evaluates 18 transportation architecture options using a parametric set of mission requirements. These options include use of current systems (e.g., Shuttle, Titan, etc.) as well as proposed systems (e.g., PLS, Single-Stage-to-Orbit, etc.) to assess the impact of various considerations, such as the cost of alternate access, or the benefit of separating people and cargo. The architecture options are compared to each other with six measurable evaluation criteria or attributes. They are: funding profile, human safety, probability of mission success, architecture cost risk, launch schedule confidence, and environmental impact. Values for these attributes are presented for the architecture options, with pertinent conclusions and recommendations.

Unmanned spacecraft↗

Comm for Small Sats: The Lunar Atmosphere and Dust Environment Explorer (LADEE) Communications Subsystem

September 6, 2013 through April 21, 2014 marked the mission lifecycle of the highly successful LADEE (Lunar Atmosphere and Dust Environment Explorer) mission that orbited the moon to gather detailed information about the thin lunar atmosphere. This paper will address the development, risks, and lessons learned regarding the specification, selection, and deployment of LADEE's unique Radio Frequency based communications subsystem and supporting tools. This includes the Electronic Ground Support Equipment (EGSE), test regimes, and RF dynamic link analysis environment developed to meet mission requirements for small, flexible, low cost, high performance, fast turnaround, and reusable spacecraft communication capabilities with easy and reliable application to future similar low cost small satellite missions over widely varying needs for communications and communications system complexity. LADEE communication subsystem key components, architecture, and mission performance will be reviewed toward applicability for future mission planning, design, and utilization.

transponder↗

The Ejectable Data Recorder: A Lean, Risk-Informed Approach for Hardware Development

NASA is developing the Orion spacecraft to transport crew from the Earth to the Moon as part of the Artemis series of missions. To provide a crew escape capability from pre-launch through ascent, the Orion vehicle is equipped with a Launch Abort System (LAS), built by Lockheed Martin, which pulls the capsule away from the launch vehicle in the event of an abort scenario. The Ascent Abort 2 (AA-2) test flight occurred on July 2, 2019,and tested a production version of the LAS to ensure that it can operate as intended, and to collect a large data set from hundreds of sensors on the vehicle to support Orion flight certification. In the original AA-2 architecture, a single-string set of communications antennas on the LAS would downlink all of the in-flight test data to ground stations. However, that communications architecture was predicted to have data dropouts during abort and jettison of the LAS, and would not support data transmission at all after LAS jettison. As a result, a comprehensive trade study was completed, yielding the addition of antennas on the crew module (CM), a buffer/rebroadcast capability for key portions of the flight, and an ejectable data recorder (EDR) subsystem. This EDR subsystem would serve as a backup to the radio frequency (RF) communications system, and would be non-flight critical, providing a unique capability that enabled management to take a different approach with the hardware and software development. The Crew Module and Separation Ring were developed as “Class 1”Flight Hardware, albeit with some tailoring approaches to enable efficiencies. The Class 1 designation requires full rigor for flight hardware and software, documenting everything that happens to a piece of hardware from procurement through disposal, requiring a full spectrum of acceptance tests, and the highest rigor of quality assurance processes. At the other end of the spectrum, Class 3hardware is controlled, but not intended for flight, and leaves the level of rigor up to the project manager. This classification is often used for research and development projects. Similarly,Class-1E has been recently defined at NASA for ISS payloads and technology development projects that are not flight critical and do not need the full rigor of Class 1 to be successful. The EDR subsystem was challenged at commencement to adopt a skunkworks and agile-like approach to hardware development, allowing for a different risk posture than the rest of the AA-2 hardware. After initially pursuing Class 1 processes, the EDR subsystem design evolved to incorporating numerous commercial components, leading to re-designation as a Class-1E subsystem. The resulting EDR subsystem was fully successful in meeting all flight system requirements, and achieved 100% retrieval of flight test data. This paper will discuss the risk posture of the EDR subsystem and the subsequent tailoring that was enacted as part of its Class-1E status.

EDR↗

Supportability for Beyond Low Earth Orbit Missions

Exploration beyond Low Earth Orbit (LEO) presents many unique challenges that will require changes from current Supportability approaches. Currently, the International Space Station (ISS) is supported and maintained through a series of preplanned resupply flights, on which spare parts, including some large, heavy Orbital Replacement Units (ORUs), are delivered to the ISS. The Space Shuttle system provided for a robust capability to return failed components to Earth for detailed examination and potential repair. Additionally, as components fail and spares are not already on-orbit, there is flexibility in the transportation system to deliver those required replacement parts to ISS on a near term basis. A similar concept of operation will not be feasible for beyond LEO exploration. The mass and volume constraints of the transportation system and long envisioned mission durations could make it difficult to manifest necessary spares. The supply of on-demand spare parts for missions beyond LEO will be very limited or even non-existent. In addition, the remote nature of the mission, the design of the spacecraft, and the limitations on crew capabilities will all make it more difficult to maintain the spacecraft. Alternate concepts of operation must be explored in which required spare parts, materials, and tools are made available to make repairs; the locations of the failures are accessible; and the information needed to conduct repairs is available to the crew. In this paper, ISS heritage information is presented along with a summary of the challenges of beyond LEO missions. A number of Supportability issues are discussed in relation to human exploration beyond LEO. In addition, the impacts of various Supportability strategies will be discussed. Any measure that can be incorporated to reduce risk and improve mission success should be evaluated to understand the advantages and disadvantages of implementing those measures. Finally, an effort to model and evaluate Supportability for beyond LEO missions will be described.

Crillo, William M.↗

Enabling Space Exploration Medical System Development Using a Tool Ecosystem

The NASA Human Research Program’s (HRP) Exploration Medical Capability (ExMC) Element is utilizing a Model Based Systems Engineering (MBSE) approach to enhance the development of systems engineering products that will be used to advance medical system designs for exploration missions beyond Low Earth Orbit. In support of future missions, the team is capturing content such as system behaviors, functional decompositions, architecture, system requirements and interfaces, and recommendations for clinical capabilities and resources in Systems Modeling Language (SysML) models. As these products mature, SysML models provide a way for ExMC to capture relationships among the various products, which includes supporting more integrated and multi-faceted views of future medical systems. In addition to using SysML models, HRP and ExMC are developing supplementary tools to support two key functions: 1) prioritizing current and future research activities for exploration missions in an objective manner; and 2) enabling risk-informed and evidence-based trade space analysis for future space vehicles, missions, and systems. This paper will discuss the long-term HRP and ExMC vision for the larger ecosystem of tools, which include dynamic Probabilistic Risk Assessment (PRA) capabilities, additional SysML models, a database of system component options, and data visualizations. It also includes a review of an initial Pilot Project focused on enabling medical system trade studies utilizing data that is coordinated across tools for consistent outputs (e.g., mission risk metrics that are associated with medical system mass values and medical conditions addressed). This first Pilot Project demonstrated successful operating procedures and integration across tools. Finally, the paper will also cover a second Pilot Project that utilizes tool enhancements such as medical system optimization capabilities, post-processing, and visualization of generated data for subject matter expert review, and increased integration amongst the tools themselves.

Amador, Jennifer R.↗

Enabling Space Exploration Medical System Development Using a Tool Ecosystem

The NASA Human Research Program's (HRP) Exploration Medical Capability (ExMC) Element is utilizing a Model Based Systems Engineering (MBSE) approach to enhance the development of systems engineering products that will be used to advance medical system designs for exploration missions beyond Low Earth Orbit. In support of future missions, the team is capturing content such as system behaviors, functional decompositions, architecture, system requirements and interfaces, and recommendations for clinical capabilities and resources in Systems Modeling Language (SysML) models. As these products mature, SysML models provide a way for ExMC to capture relationships among the various products, which includes supporting more integrated and multi-faceted views of future medical systems. In addition to using SysML models, HRP and ExMC are developing supplementary tools to support two key functions: 1) prioritizing current and future research activities for exploration missions in an objective manner; and 2) enabling risk-informed and evidence-based trade space analysis for future space vehicles, missions, and systems. This paper will discuss the long-term HRP and ExMC vision for the larger ecosystem of tools, which include dynamic Probabilistic Risk Assessment (PRA) capabilities, additional SysML models, a database of system component options, and data visualizations. It also includes a review of an initial Pilot Project focused on enabling medical system trade studies utilizing data that is coordinated across tools for consistent outputs (e.g., mission risk metrics that are associated with medical system mass values and medical conditions addressed). This first Pilot Project demonstrated successful operating procedures and integration across tools. Finally, the paper will also cover a second Pilot Project that utilizes tool enhancements such as medical system optimization capabilities, post-processing, and visualization of generated data for subject matter expert review, and increased integration amongst the tools themselves.

Amador, Jennifer R.↗

Assessment of Survey Results from Advanced Reactor Industry Domain Experts on Nonlinear Soil-Structure Interaction Analysis Software Verification and Validation

The seismic load case has a significant impact on the design and cost of nuclear power plants. Given the need to substantially reduce cost, advanced reactor designers are looking to leverage numerical tools that enable seismic analysis of an integrated vessel/support/structure/soil system. Modern nonlinear analysis tools provide a solution, capturing dynamic coupling between components (including soil-structure interaction (SSI)) concurrent with nonlinear behavior in one or more parts of the system. Although these methods have a rich history of technical development and implementation, software quality assurance (SQA) following nuclear industry standards remains a significant burden for those wishing to adopt such methods for advanced reactor design and licensing. To reduce the SQA burden, this project will develop the guidance for SQA verification and validation (V&V) of coupled nonlinear SSI analysis tools, to include a test matrix of software features and test problems to support commercial grade dedication (CGD). The guidance is intended to be technology-neutral: supporting designers of all advanced reactors. To maximize the value of the project to reactor designers, the project team performed focused surveys of and interviews with advanced reactor designers. Additionally, the project surveyed members of the broader industry involved in reactor design and licensing. The aggregated industry feedback consists of written survey responses, live polling responses, focused interviews, and informal feedback provided after outreach presentations, collectively referred to as “survey results”. Herein, the survey results are reported, reviewed, and assessed to inform follow-on project activities. The survey results confirmed the familiarity of the industry with the coupled nonlinear SSI analysis. They also affirm the project need based upon the expressed intent to (1) incorporate nonlinear features and (2) pursue the coupled nonlinear SSI analysis to reduce seismic demands and construction costs. All reactor designers indicated their intent to incorporate two or more nonlinear features, and all reactor designer respondents opined that the coupled nonlinear SSI analysis would allow for the optimization of the reactor design and construction. However, the programmatic challenges, whether real or perceived, present a significant barrier to reactor designers. The barrier most commonly identified by the reactor designer population was regulatory risk, with 70% citing this as a reason not to pursue the approach. The perceived regulatory risk identified by the reactor designers underscores the importance of regulator engagement and dialogue in this project. Additionally, half of the reactor designers identified cost and lack of guidance as a deterrent. The survey results also provide insights to tailor specific aspects of the guidance document and test matrix. The project plans to prepare both a formal referenceable guidance document and a collaborative, web-based test matrix and problem set. The project will focus on more complete test problem definitions for the prioritized nonlinear features over shallower problem descriptions for a larger set of features. The nonlinearities prioritized as high based upon survey feedback include fluid-structure interaction and seismic isolation and energy dissipation devices. The nonlinearities prioritized as intermediate include nonlinear geomaterials, nonlinear concrete, nonlinear steel, and interface/contact nonlinearity. Deep embedment and the associated nonlinear phenomena are assigned the lowest priority based upon survey feedback.

42 ENGINEERING↗

Applying Cyber-Informed Engineering to Power System Operations

This presentation covers the interaction of the discipline of system operations with the growing body of knowledge around Cyber-Informed Engineering (CIE). First is discussion of a number of fundamental concepts for system operators - organizational division of responsibilities, human and machine cooperation, goals, and priorities. The next section covers the reasons why CIE was developed, what it is, and the key design and operational, and organizational principles of CIE. Finally, some thoughts on how CIE can be applied to power system operations are offered, along with some examples of how an organization can approach applying CIE principles in their particular circumstances.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Risk assessment of wellbore leakage during underground hydrogen storage

The expansion of renewable energy sources would require large-scale energy storage options to overcome the intermittent nature of these sources. Underground hydrogen storage (UHS) in depleted hydrocarbon reservoirs offers a scalable and practical energy storage solution. These reservoirs are chosen for their availability and large capacity, but the unique properties of hydrogen raise concerns about potential leakage pathways, particularly through wellbores. In this study, we develop and apply, for the first time, reduced-order models (ROMs) specifically designed for efficient leakage risk prediction in UHS systems operating in depleted hydrocarbon reservoirs. Using 3,000 high-fidelity simulation scenarios, we examine the influence of 11 key parameters, including reservoir and aquifer depths, wellbore permeability and porosity, initial saturations of water, oil and gas fractions (hydrogen, light, intermediate, and heavy hydrocarbons), reservoir pressure multiplier, and the aquifer-to-reservoir volume ratio, to simulate leakage behavior over a 1,000-year timescale. We train ROMs using a two-step classification-regression approach, achieving R 2 values exceeding 99 % across all targets. These ROMs effectively capture the leakage evolution and identify critical controls of leakage, guiding the design of mitigation strategies. Results indicate that gas leakage occurs in about 27 % of scenarios as early as five years post-operation, reaching volumes of up to 106 ft3. Oil leakage is less frequent (~17 %) and typically begins decades later. Our findings also show that hydrogen often migrates first, owing to its smaller molecular size and higher buoyancy, followed by heavier hydrocarbons. Over time, these heavier components contribute significantly to the total leaked volume, reinforcing the need for targeted monitoring and remediation strategies. Our analysis highlights that deeper storage reservoirs, shallower aquifers, and low-permeability wellbores significantly reduce leakage risks. In conclusion, this work offers a robust framework for risk-informed UHS deployment, supporting energy security through reliable large-scale hydrogen storage while safeguarding environmental integrity.

08 HYDROGEN↗

Multi-scale impacts of climate change on hydropower for long-term water-energy planning in the contiguous United States

Climate change impacts on watersheds can potentially exacerbate water scarcity issues where water serves multiple purposes including hydropower. The long-term management of water and energy resources is still mostly approached in a siloed manner at different basins or watersheds, failing to consider the potential impacts that may concurrently affect many regions at once. There is a need for a large-scale hydropower modeling framework that can examine climate impacts across adjoining river basins and balancing authorities (BAs) and provide a periodic assessment at regional to national scales. Expanding from our prior assessment only for the United States (US) federal hydropower plants, we enhance and extend two regional hydropower models to cover over 85% of the total hydropower nameplate capacity and present the first contiguous US-wide assessment of future hydropower production under Coupled Model Intercomparison Project phase 6’s high-end Shared Socioeconomic Pathway 5-8.5 emission scenario using an uncertainty-aware multi-model ensemble approach. We present regional hydropower projections, using both BA regions and US Hydrologic Subregions (HUC4s), to consistently inform the energy and water communities for two future periods—the near-term (2020–2039) and the mid-term (2040–2059) relative to a historical baseline period (1980–2019). We find that the median projected changes in annual hydropower generation are typically positive—approximately 5% in the near-term, and 10% in the mid-term. However, since the risk of regional droughts is also projected to increase, future planning cannot overly rely on the ensemble median, as the potential of severe hydropower reductions could be overlooked. The assessment offers an ensemble of future hydropower generation projections, providing regional utilities and power system operators with consistent data to develop drought scenarios, design long duration storage and evaluate energy infrastructure reliability under intensified inter-annual and seasonal variability.

13 HYDRO ENERGY↗

Concepts to Support HRP Integration Using Publications and Modeling

Initial efforts are underway to enhance the Human Research Program (HRP)'s identification and support of potential cross-disciplinary scientific collaborations. To increase the emphasis on integration in HRP's science portfolio management, concepts are being explored through the development of a set of tools. These tools are intended to enable modeling, analysis, and visualization of the state of the human system in the spaceflight environment; HRP's current understanding of that state with an indication of uncertainties; and how that state changes due to HRP programmatic progress and design reference mission definitions. In this talk, we will discuss proof-of-concept work performed using a subset of publications captured in the HRP publications database. The publications were tagged in the database with words representing factors influencing health and performance in spaceflight, as well as with words representing the risks HRP research is reducing. Analysis was performed on the publication tag data to identify relationships between factors and between risks. Network representations were then created as one type of visualization of these relationships. This enables future analyses of the structure of the networks based on results from network theory. Such analyses can provide insights into HRP's current human system knowledge state as informed by the publication data. The network structure analyses can also elucidate potential improvements by identifying network connections to establish or strengthen for maximized information flow. The relationships identified in the publication data were subsequently used as inputs to a model captured in the Systems Modeling Language (SysML), which functions as a repository for relationship information to be gleaned from multiple sources. Example network visualization outputs from a simple SysML model were then also created to compare to the visualizations based on the publication data only. We will also discuss ideas for building upon this proof-of-concept work to further support an integrated approach to human spaceflight risk reduction.

Mindock, J.↗

Gateway Implementation of Cybersecurity Requirements

Cyber threats are a constant present-day reality for any type of business -- Space exploration is not excluded from these threats either. The Gateway Program is one of NASA’s latest initiatives that extend space exploration beyond low earth orbit. Gateway allows for NASA to prove technologies and mature systems necessary to live and work on another celestial body before embarking on multi-year missions to Mars. The Gateway is a small, human-tended space station in orbit around the Moon. With the increased autonomy, distance and criticality of systems, cybersecurity is one of the critical subsystems that touches and integrates with most if not all subsystems of the Gateway. Building a gateway to the lunar orbit is no simple task. In this presentation, we outline an approach that the Gateway team adopted in creating a cyber safe and robust vehicle to support operations and assure protection of the critical functions. Gateway Program is required to implement National Institute of Standards and Technology (NIST) guidelines to adhere to the Federal Information Security Modernization Act (FISMA). NIST provides a framework for managing and controlling cybersecurity risks by defining cybersecurity controls and methodologies for implementation. The NIST framework is based upon the system, data within the system, integrations with external systems, and risk assessments to determine impacts for each of those systems. The goals and objectives are to identify appropriate security controls that fulfill and map to the NIST 800-53 framework. The implementation process involves developing an organizational understanding to manage cybersecurity risk to systems, people, assets, data, and capabilities. NIST Security controls are interpreted and defined within the Gateway vehicle requirements subsystems specifications. This paper details the approach, implementation, and challenges faced during the development and design phases to address cyber threats during the Gateway vehicle operations.

Svetlana Hanson↗

Gateway Implementation of Cybersecurity Requirements

Cybersecurity threats are a constant present-day reality for any type of business -- Space exploration is not excluded from these threats either. The Gateway Program is one of NASA’s latest initiatives that extend space exploration beyond low earth orbit. Gateway allows for NASA to prove technologies and mature systems necessary to live and work on another celestial body before embarking on multi-year missions to Mars. The Gateway is a small, human-tended space station in orbit around the Moon. With the increased autonomy, distance and criticality of systems, cybersecurity is a critical discipline that touches and integrates with most if not all subsystems of the Gateway. Building a gateway to the lunar orbit is no simple task. In this presentation, we outline an approach that the Gateway team adopted in creating a cyber safe and robust vehicle to support operations and assure protection of the critical functions. Gateway Program is required to implement National Institute of Standards and Technology (NIST) guidelines to adhere to the Federal Information Security Modernization Act (FISMA). NIST provides a framework for managing and controlling cybersecurity risks by defining cybersecurity controls and methodologies for implementation. The NIST framework is based upon the system, data within the system, integrations with external systems, and risk assessments to determine impacts for each of those systems. The goals and objectives are to identify appropriate security controls that fulfil and map to the NIST 800-53 framework. The implementation process involves developing an organizational understanding to manage cybersecurity risk to systems, people, assets, data, and capabilities. NIST Security controls are interpreted and defined within the Gateway vehicle requirements subsystems specifications. This paper details the approach, implementation, and challenges faced during the development and design phases to address cyber threats during the Gateway vehicle operations.

Cybersecurity↗

AI Benchmark Democratization and Carpentry

Benchmarks are a cornerstone of modern machine learning, enabling reproducibility, comparison, and scientific progress. However, AI benchmarks are increasingly complex, requiring dynamic, AI-focused workflows. Rapid evolution in model architectures, scale, datasets, and deployment contexts makes evaluation a moving target. Large language models often memorize static benchmarks, causing a gap between benchmark results and real-world performance. Beyond traditional static benchmarks, continuous adaptive benchmarking frameworks are needed to align scientific assessment with deployment risks. This calls for skills and education in AI Benchmark Carpentry. From our experience with MLCommons, educational initiatives, and programs like the DOE's Trillion Parameter Consortium, key barriers include high resource demands, limited access to specialized hardware, lack of benchmark design expertise, and uncertainty in relating results to application domains. Current benchmarks often emphasize peak performance on top-tier hardware, offering limited guidance for diverse, real-world scenarios. Benchmarking must become dynamic, incorporating evolving models, updated data, and heterogeneous platforms while maintaining transparency, reproducibility, and interpretability. Democratization requires both technical innovation and systematic education across levels, building sustained expertise in benchmark design and use. Benchmarks should support application-relevant comparisons, enabling informed, context-sensitive decisions. Dynamic, inclusive benchmarking will ensure evaluation keeps pace with AI evolution and supports responsible, reproducible, and accessible AI deployment. Community efforts can provide a foundation for AI Benchmark Carpentry.

von Laszewski, Gregor [Virginia U.]↗

BioSentinel: Mission Development of a Radiation Biosensor to Gauge DNA Damage and Repair Beyond Low Earth Orbit on a 6U Nanosatellite.

We are designing and developing a "6U" (10 x 22 x 34 cm; 14 kg) nanosatellite as a secondary payload to fly aboard NASA's Space Launch System (SLS) Exploration Mission (EM) 1, scheduled for launch in late 2017. For the first time in over forty years, direct experimental data from biological studies beyond low Earth orbit (LEO) will be obtained during BioSentinel's 12- to 18- month mission. BioSentinel will measure the damage and repair of DNA in a biological organism and allow us to compare that to information from onboard physical radiation sensors. In order to understand the relative contributions of the space environment's two dominant biological perturbations, reduced gravity and ionizing radiation, results from deep space will be directly compared to data obtained in LEO (on ISS) and on Earth. These data points will be available for validation of existing biological radiation damage and repair models, and for extrapolation to humans, to assist in mitigating risks during future long-term exploration missions beyond LEO. The BioSentinel Payload occupies 4U of the spacecraft and will utilize the monocellular eukaryotic organism Saccharomyces cerevisiae (yeast) to report DNA double-strand-break (DSB) events that result from ambient space radiation. DSB repair exhibits striking conservation of repair proteins from yeast to humans. Yeast was selected because of 1) its similarity to cells in higher organisms, 2) the well-established history of strains engineered to measure DSB repair, 3) its spaceflight heritage, and 4) the wealth of available ground and flight reference data. The S. cerevisiae flight strain will include engineered genetic defects to prevent growth and division until a radiation-induced DSB activates the yeast's DNA repair mechanisms. The triggered culture growth and metabolic activity directly indicate a DSB and its successful repair. The yeast will be carried in the dry state within the 1-atm P/L container in 18 separate fluidics cards with each card having 16 independent culture microwells, with integral microchannels and filters to supply nutrients and reagents, confine the yeast to the wells, and enable optical measurement. The measurement subsystem will monitor each subgroup of culture wells continuously for several weeks, optically tracking DSBtriggered cell growth and metabolism. BioSentinel will also include physical radiation sensors based on the TimePix sensor, as implemented by JSC's RadWorks group, which record individual radiation events including estimates of their linear-energytransfer (LET) values. Radiation-dose and LET data will be compared directly to the rate of DSB-and-repair events measured by the S. cerevisiae biosentinels. The spacecraft bus will operate in a deep space environment with functions that include command and data handling, communications, power generation (via deployable solar panels) and storage, and attitude determination-and-control system with micropropulsion. Development of the BioSentinel spacecraft will mature and prove multiple nanosatellite advances in order to function well beyond LEO: Communications from distances of ≥ 500,000 km; Autonomous attitude control, momentum management, and safe mode of nanosatellites in deep space; Shielding-, hardening-, design-, and software-derived radiation tolerance for electronics; Reliable functionality for 12 - 18 months of key subsystems for biofluidics, memory, communications, power, etc.; Close integration of living biological radiation event monitors with miniature physical radiation spectrometers; Biological measurement of solar particle events beyond Earth orbit In addition to providing the first biological results from beyond LEO in over 4 decades, BioSentinel will provide an adaptable small-satellite instrument platform to perform a range of human-exploration-relevant measurements that characterize the biological consequences of multiple outer space environments. BioSentinel is being developed under NASA's Advanced Exploration Systems program.

DNA damage↗

WISP: Watching grid Infrastructure Stealthily through Proxies (Final Technical Report)

The complex interdependencies of cyber systems (sensors and communications), physical grids and associated electricity market operations make protecting electric power grids a significant challenge. The energy sector is constantly under new, targeted, advanced and dangerous cyber-attacks that have the potential to result in the loss of human life. These threats are further exacerbated by our need to modernize the grid. One focus of cyber security research in smart grids is the securing of the SCADA system through advanced intrusion detection systems (IDS) and bad data detection algorithms in state estimation. These methods either require full knowledge of the system topology and parameters or fail to understand the physical behaviors under attack. WISP (Watching grid Infrastructure Stealthily through Proxies) is designed to provide additional protection to the power grid using only publicly available data. In particular, WISP exploits the spatio-temporal nature of the real time locational marginal prices (LMPs), in conjunction with other information such as bids, weather, outages and load data to analyze anomalous power pricing behaviors and then correlate those observations to localize regions of interest and identify potential cyber events. WISP is non-intrusive as the tool is deployed as a service in the Cloud or on premise and provides reliable information to system operators for enhanced situational awareness, without impeding energy delivery functions. The WISP technology comprises three modules: the data-driven anomaly detection core, the vulnerability and risk analysis and the root cause analysis. The data-driven anomaly detection core performs the tasks of feature selection, anomaly detection and attack region localization. The vulnerability and risk analysis module provides system level information of the vulnerable variables and times, assisting the operators in selecting monitoring and protection nodes. The root cause analysis module takes the detection results and identifies potential operational conditions that contribute to the detected anomalies. In Phase I, we have demonstrated the feasibility and effectiveness of WISP. We developed a realistic electricity market simulator capable of generating normal and attack market data under various operational conditions. We developed a series of cyber-attack detection and analysis algorithms and evaluated them under multiple data sources. Finally, we integrated all modules into an end-to-end software, providing functions for data management, data analytics and visualization. Specifically, we have achieved: (i) real-time data acceptance from external utility interfaces with >99% acceptance rate; (ii) high performance anomaly detection algorithms with >98% detection accuracy and <0.1% false alarm rate; and (iii) ultra-low computing delay <50 milliseconds. Additionally, our team developed algorithms to identify the vulnerable variables in electricity market operations and root cause analysis functions to identify major contributors to the price spikes. These ancillary modules are necessary when deploying WISP in real world industry environment. In Phase II, we have demonstrated the effectiveness of WISP software on realistic largescale power systems. We performed red team testing for the Phase I WISP software and identified software vulnerabilities and implemented corresponding mitigation solutions. We adapted the electricity market simulator for the Texas synthetic 2000-bus system and generated datasets for the false data injection attacks. We created database and visualization interfaces for the Texas system and the ISO New England system. We performed software optimization in terms of operation efficiency, computing speed and detection accuracy. Finally, we tested the software on the Texas system and the ISO New England system and evaluated the detection performance. Overall, we achieved above 89% detection rate, below 3% false alarm rate and below 37 seconds of end-to-end detection delay.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Intervention strategies for the management of human error

This report examines the management of human error in the cockpit. The principles probably apply as well to other applications in the aviation realm (e.g. air traffic control, dispatch, weather, etc.) as well as other high-risk systems outside of aviation (e.g. shipping, high-technology medical procedures, military operations, nuclear power production). Management of human error is distinguished from error prevention. It is a more encompassing term, which includes not only the prevention of error, but also a means of disallowing an error, once made, from adversely affecting system output. Such techniques include: traditional human factors engineering, improvement of feedback and feedforward of information from system to crew, 'error-evident' displays which make erroneous input more obvious to the crew, trapping of errors within a system, goal-sharing between humans and machines (also called 'intent-driven' systems), paperwork management, and behaviorally based approaches, including procedures, standardization, checklist design, training, cockpit resource management, etc. Fifteen guidelines for the design and implementation of intervention strategies are included.

Wiener, Earl L.↗