Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “identifying security consequences”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

87 records · Page 5

RAMSeS: Rapid Analysis of Mission Software Systems

Over the past few decades, software has become ubiquitous as it has been integrated into nearly every aspect of society, including household appliances, consumer electronics, industrial control systems, public utilities, government operations, and military systems. Consequently, many critical national security questions can no longer be answered convincingly without understanding software, including its purpose, its capabilities, its flaws, its communication, or how it processes and stores data. As software continues to become larger, more complex, and more widespread, our ability to answer important mission questions and reason about software in a timely way is falling behind. Today, to achieve such understanding of third-party software, we rely predominantly on the ability of reverse engineering experts to manually answer each particular mission question for every software system of interest. This approach often requires heroic human effort that nevertheless fails to meet current mission needs and will never scale to meet future needs. The result is an emerging crisis: a massive and expanding gap between the national security need to answer mission questions about software and our ability to do so. Sandia National Laboratories has established the Rapid Analysis of Mission Software Systems (RAMSeS) effort, a collaborative long-term effort aimed at dramatically improving our nation’s ability to answer mission questions about third-party software by growing an ecosystem of tools that augment the human reverse engineer through automation, interoperability, and reuse. Focusing on static analysis of binary programs, we are attempting to identify reusable software analysis components that advance our ability to reason about software, to automate useful aspects of the software analysis process, and to integrate new methodologies and capabilities into a working ecosystem of tools and experts. We aim to integrate existing tools where possible, adapt tools when modest modifications will enable them to interoperate, and implement missing capability when necessary. Although we do hope to automate a growing set of analysis tasks, we will approach this goal incrementally by assisting the human in an ever-widening range of tasks.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Investigating the Impact of Irrigation on Malaria Vector Larval Habitats and Transmission Using a Hydrology‐Based Model

Abstract A combination of accelerated population growth and severe droughts has created pressure on food security and driven the development of irrigation schemes across sub‐Saharan Africa. Irrigation has been associated with increased malaria risk, but risk prediction remains difficult due to the heterogeneity of irrigation and the environment. While investigating transmission dynamics is helpful, malaria models cannot be applied directly in irrigated regions as they typically rely only on rainfall as a source of water to quantify larval habitats. By coupling a hydrologic model with an agent‐based malaria model for a sugarcane plantation site in Arjo, Ethiopia, we demonstrated how incorporating hydrologic processes to estimate larval habitats can affect malaria transmission. Using the coupled model, we then examined the impact of an existing irrigation scheme on malaria transmission dynamics. The inclusion of hydrologic processes increased the variability of larval habitat area by around two‐fold and resulted in reduction in malaria transmission by 60%. In addition, irrigation increased all habitat types in the dry season by up to 7.4 times. It converted temporary and semi‐permanent habitats to permanent habitats during the rainy season, which grew by about 24%. Consequently, malaria transmission was sustained all‐year round and intensified during the main transmission season, with the peak shifted forward by around 1 month. Lastly, we evaluated the spatiotemporal distribution of adult vectors under the effect of irrigation by resolving habitat heterogeneity. These findings could help larval source management by identifying transmission hotspots and prioritizing resources for malaria elimination planning.

60 APPLIED LIFE SCIENCES↗

Repository-Scale Performance Assessment Incorporating Postclosure Criticality

A key objective of the United States Department of Energy’s (DOE) Office of Nuclear Energy’s Spent Fuel and Waste Science and Technology Campaign is to better understand the technical basis, risks, and uncertainty associated with the safe and secure disposition of spent nuclear fuel (SNF) and high-level radioactive waste. Commercial nuclear power generation in the United States has resulted in thousands of metric tons of SNF, the disposal of which is the responsibility of the DOE (Nuclear Waste Policy Act of 1982, as amended). Any repository licensed to dispose of SNF must meet requirements regarding the long-term performance of that repository. For an evaluation of the long-term performance of the repository, one of the events that may need to be considered is the SNF achieving a critical configuration during the postclosure period. Of particular interest is the potential behavior of SNF in dual-purpose canisters (DPCs), which are currently licensed and being used to store and transport SNF but were not designed for permanent geologic disposal. A study has been initiated to examine the potential consequences, with respect to long-term repository performance, of criticality events that might occur during the postclosure period in a hypothetical repository containing DPCs. The first phase (a scoping phase) consisted of developing an approach to creating the modeling tools and techniques that may eventually be needed to either include or exclude criticality from a performance assessment (PA) as appropriate; this scoping phase is documented in Price et al. (2019a). In the second phase, that modeling approach was implemented and future work was identified, as documented in Price et al. (2019b). This report gives the results of a repository-scale PA examining the potential consequences of postclosure criticality, as well as the information, modeling tools, and techniques needed to incorporate the effects of postclosure criticality in the PA.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

The evolution of the Human Systems and Simulation Laboratory in nuclear power research

The events at Three Mile Island in the United States brought about fundamental changes in the ways that simulation would be used in nuclear operations. The need for research simulators was identified to scientifically study human-centered risk and make recommendations for process control system designs. This paper documents the human factors research conducted at the Human Systems and Simulation Laboratory (HSSL) since its inception in 2010 at Idaho National Laboratory. The facility’s primary purposes are to provide support to utilities for system upgrades and to validate modernized control room concepts. In the last decade, however, as nuclear industry needs have evolved, so too have the purposes of the HSSL. Thus, beyond control room modernization, human factors researchers have evaluated the security of nuclear infrastructure from cyber adversaries and evaluated human-in-the-loop simulations for joint operations with an integrated hydrogen generation plant. Lastly, our review presents research using human reliability analysis techniques with data collected from HSSL-based studies and concludes with potential future directions for the HSSL, including severe accident management and advanced control room technologies.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

An Approach to Assessing the Added Mass for a Plate in a Channel

The Global Threat Reduction initiative (GTRI) was established by the National Nuclear Security Administration (NNSA) in 2004. One of the highlights of the program is to convert research and test reactors at home and abroad from Highly Enriched Uranium (HEU) to Low Enriched Uranium (LEU) fuels. By switching directly from HEU to LEU, an LEU reactor produces fewer neutrons than an HEU reactor, and in some cases, a direct switch from HEU to LEU results in the reactor being unable to achieve criticality. Under certain circumstances, criticality is achieved and the original neutron fluxes are restored with LEU fuel by adding more fuel elements to the core. Not all reactors, exemplified by the Advanced Test Reactor (ATR) at the Idaho National Lab (INL), have the luxury of simply adding more fuel to the core. In such cases, entirely new designs must be created and tested. The ATR utilizes plate type fuel. During the design and testing of the ATR fuel, flow induced vibrations were identified as potential source for experiment and fuel failure. Flow induced vibrations are problematic to solve because both the frequency of excitation and the modal frequencies of the object need to be determined. For the frequency of the object the frequency is often determined, either theoretically or experimentally without any influence of fluid. When a fluid is introduced, the fundamental frequency of an object can be greatly reduced allowing for resonance between the excitation frequency and the fundamental frequency of the plate. The consequence of such resonance is often failure of the component. Current methods for determining the frequency of a body immersed in a fluid requires the use of multi-physics software in order to determine (if at all possible) the frequency of the object. The work herein provides an alternative means of calculating the frequency of a plate by combining plate frequency theory to determine the added mass on the plate when in the presence of narrow channels. (authors)

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Secure Route: Roadway Risk Mapping for Transportation Planners

The secure transport of sensitive materials across U.S. road networks pose unique challenges for local, state, and federal agencies. Threats range from random events (e.g., accidents, medical emergencies, mechanical failures) to opportunistic or organized tactical assaults. Although the probability of such attacks is very low, the consequences of material loss to foreign states or terrorists can be catastrophic, qualifying these scenarios as “grey swan” events—low-probability, high-impact occurrences that are predictable but difficult to quantify. Traditional risk assessments struggle in these contexts, necessitating a shift toward subjective risk perception to inform planning. Risk perception in transport planning is shaped by various factors, including knowledge of adversarial capabilities, vehicle defenses, manifest details, and geographic features along the route. Geographic features such as bridges, tunnels, roadside elevation, and gaps in cellular coverage introduce vulnerabilities, while mitigative features include safe havens, police stations, and medical services. Temporal variables such as congestion, accidents, and weather further complicate route planning. Despite their importance, existing routing tools like Google Maps and commercial software do not explicitly account for geographic risk features, requiring planners to rely on personal familiarity with routes—a time-intensive, non-scalable approach. This work addresses these gaps by: (1) developing datasets that catalog geographic risk features along U.S. roadways, (2) eliciting risk perceptions from experienced transportation security experts, and (3) linking these perceptions to roadway conditions and geographic data. We implement these capabilities within Secure Route a novel mapping tool for classifying route segment risks associated with roadway conditions. This system provides transportation planners with an intuitive interface to assess and contextualize risk along potential routes, improving decision-making for secure transport. We present current progress in this effort and identify next steps.

Stewart, Robert [ORNL] (ORCID:0000000281867559)↗

ARCADE Analysis Methods & Validation Pathway

The Advanced Reactor Cyber Analysis and Development Environment (ARCADE) provides an automated analysis system which supports risk-informed performance based (RIPB) evaluations of nuclear control systems. Every possible cyber threat which could lead to consequence is identified by simulating the unsafe control action sequences which transform digital harm into physical harm. Eliminating the simulation of complex digital cyber attack chains cuts out unnecessary computational overhead and focuses directly on the physics of cyber-physical attacks. This focus enables designers to make informed decisions which can entirely eliminate categories of cyber threats against advanced reactors through the physical nature of the plant design. This narrowing of cyber threat against nuclear power plants through the physics of the system is intended to make any remaining threat management and cost efficient. This is the goal of the Tiered Cyber Analysis (TCA) outlined in NRC Draft Regulation Guide (RG) 5.96, which provides a RIPB cybersecurity approach for new reactors. ARCADE has been custom developed to meet the demands of the rigorous analysis required in Tier 1 of the TCA, which forms the foundation of the TCA process. Currently, ARCADE is still under development, but has made significant leaps in capability. A pilot analysis on the opensource Asherah simulator was performed which demonstrated key functionality goals. The next stage of ARCADE development involves improvements to the applications which support the analysis system, and enabling the analysis system to utilize the full suite of unsafe control action simulations. Since the analysis method’s core functions are complete, validation of the analysis method will be started concurrent to the next development stages. The automated analysis ARCADE will provide can radically change the cybersecurity design process for advanced reactors, reducing the cost of security implementation while enhancing cyber resilience. The pathway for ARCADE’s development to this goal has become much clearer. The majority of technical hurdles have been cleared, and the remaining development needs have been solidified. ARCADE is now capable of assisting the advanced reactor design process and directly support advanced reactor industry RIPB practices.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Addressing Consequence within Operational Risk: An Approach for Understanding an Organization’s Unique Infrastructure Environment

The endeavor of tackling operational risk focused on consequences is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure landscape in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure landscape as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space.

99 GENERAL AND MISCELLANEOUS↗

Risk-informed Physical Security Using Dynamic Force-on-Force Modelling Tools (ABSTRACT)

Physical security requirement of nuclear power plants (NPPs) in the US is regulated in a mainly prescriptive manner. This “one size fits all” approach may consequently overlook plant-specific characteristics which are beneficial for the inherent safety and security of the plant. Although a performance-based security measure has been promulgated in 10 CFR 73.55(r), current evaluation methods generally emphasize static and conservative assumptions on physical security uncertainties. This conservatism contributes to the overall operational and maintenance costs, which account to 70% of total operating expenditures for an NPP. This paper describes an ongoing work at the Idaho National Laboratory within the Light Water Reactor Sustainability pathway, which aims to optimize physical protection system with regards to system effectiveness and dollar costs. To achieve this goal, a risk-informed approach to physical security is proposed. This approach leverages the Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool to model facility infiltration and Force-on-Force (FoF) engagement in a dynamic manner. The dynamic FoF analysis was conducted by coupling human performance uncertainties modeled in EMRALD to existing commercial 3-dimensional FoF software, i.e. SCRIBE3D, AVERT and Simajin. Meanwhile, risk analysis was accomplished by coupling the attack outcomes to existing plant Probabilistic Risk Assessment (PRA) model with FLEX strategy. This approach reduces the conservatisms in security modeling and further acknowledges the possibility for plant operators to mitigate the attack outcomes. A sabotage attack on a hypothetical NPP facility was devised to demonstrate the proposed methodology. Dynamic FoF rules were implemented in EMRALD coupled to SCRIBE3D. This dynamic evaluation revealed an additional 21% system effectiveness in protecting the target set relative to the static modelling approach. Furthermore, the conditional core damage probability could be reduced by up to 46% by crediting operator actions in mitigating the sabotage outcomes. We evaluated the relative importance of each component of the physical security posture included in the model and assessed tradeoffs between components to identify potential opportunities for cost reduction while maintaining a specific level of system effectiveness. Results of the cost analysis will be presented in the conference. This study is expected to help NPP operators in allocating resources optimally to satisfy the security requirements.

97 MATHEMATICS AND COMPUTING↗

Potential impacts of Fukushima nuclear wastewater discharge on nutrient supply and greenhouse gas emissions of food systems

Seafood plays a critical role in promoting a nutritious and climate-friendly food system but faces challenges from marine contamination that pose food safety risks. Here, to address these challenges, we developed a Marine Pollution-induced Food System Risk Assessment and Response (MP-FSRAR) model to assess the impact of consumer perceptions of marine pollution risk events on nutrient supply and greenhouse gas (GHG) emissions. Applying this model to the proposed Fukushima Nuclear Wastewater Discharge (FNWD) into the Pacific Ocean, we identified the potential variation in nutrient supply and GHG emissions resulting from changes in Chinese consumers' willingness to consume seafood under 12 scenarios. Our analysis revealed nutrient supply gaps in daily protein, minerals, vitamins, and fatty acids, ranging from 1.5 to 2.7 g/person, 2.5–4.5 mg/person, 5.6–10.3 mcg/person, and 0.08–0.14 g/person, respectively. Closing the protein gap in China would require an additional 3.2–15.8 billion kg yr -1 protein-rich foods, including aquatic, livestock, dairy, and pulses. Additional food supply would increase extra GHG emissions by 1–79 billion kg CO 2 e yr -1 , resulting in potential GHG emissions being transmitted to other countries through the trade chain. Furthermore, we found that the livestock-based food substitution pathway had 40 times higher GHG emissions than the plant-based one. Our MP-FSRAR model provides global stakeholders with new perspectives on the potential consequences of consumer perceptions of marine pollution risks and offers valuable insights for developing countermeasures to build a more resilient and low-carbon food system.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Quantitative Risk Analysis of High Safety Significant Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants using IRADIC Technology

This report documents the activities performed by Idaho National Laboratory (INL) during fiscal year (FY) 2021 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) Risk Assessment project. In FY-2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades/designs. An integrated risk assessment technology for the DI&C systems (IRADIC technology) was proposed for this strategy, which aims to (1) provide a best-estimate risk-informed capability to quantitatively and accurately estimate the safety margin obtained from plant modernization, especially for the High Safety Significant Safety-related (HSSSR) DI&C systems, (2) develop an advanced risk assessment technology to support transition from analog to DI&C technologies for nuclear industry, (3) assure the long-term safety and reliability of vital HSSSR DI&C systems, (4) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals and deal with the expensive licensing justifications from regulatory insights, the IRADIC technology is instructive for nuclear vendors and utilities to effectively lower the costs associated with digital compliance and speed industry advances by: (1) defining an integrated risk-informed analysis process for DI&C upgrade, including hazard analysis, reliability analysis, and consequence analysis, (2) applying systematic and risk-informed tools to address common cause failures (CCFs) and quantify responding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the individual level, system level, and plant level, (4) providing insights and suggestions on designs to manage the risks; thus, to support the development, licensing, and deployment of advanced DI&C technologies on nuclear power plant (NPPs). In this report, an approach for performing software CCF analysis, given limited data, is developed and demonstrated using a case study of a highly redundant digital reactor trip system. Consequence analysis is also performed based on different accident scenarios. Results indicate that plant modernization including the improvement of HSSSR DI&C systems will make great benefits to plant safety by providing more safety margins to accident management. In addition, a novel approach is proposed in this report for the quantification of software hazards when sufficient operational and testing data available. The method incorporates software development quality as well as strong analysis techniques to identify and link software defects to potential failure modes. The approach includes both semantic and test-based analysis to detect failures that can exist in different stages of the software development life cycle. This method is applied to an advanced human system interface relevant to reactor trip safety developed from the APR 1400 design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Enhancing power plant safety through simulated cyber events - 341

There are gaps in understanding how a cyber-attack would manifest itself within power plants and what these events would look like within the control room from an operator's perspective. This is especially true for nuclear power plants where safety has much broader consequences than nonnuclear plants. The operating and emergency procedures that operators currently use are likely inadequate for targeted cyber-attacks. This research focuses on understanding how a cyber event would affect the operation of the plant, how an operator would perceive the event, and if the operator's actions would keep the plant in a safe condition. This research is part of Sandia's Laboratory Directed Research and Development program where a nuclear power plant cyber model of the control system digital architecture is coupled with a generic pressurized water reactor plant training simulator. Cyber event scenarios will be performed on the coupled system with plant operators. The scenarios simulate plant conditions that may exist during a cyber-attack, component failure, or insider sabotage, and provide an understanding of the displayed information and the actual plant conditions. These scenarios will determine if plant operators can 1) recognize that they are under cyber-attack and 2) take appropriate actions to keep the plant safe. This will also provide the opportunity to assess the operator cognitive workload during such events and identify where improvements might be made. Experiments with nuclear power plant operators will be carried out over FY 2018 and results of the research are expected by the end of FY 2018. (authors)

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Enabling Model Organism and Commercial Astronaut Data Access Through the NASA Open Science Data Repository

NASA’s Open Science Data Repository (OSDR) brings together omics data from NASA’s GeneLab project and non-omics data, including physiological, phenotypic, imaging, and behavioral data from NASA’s Ames Life Sciences Data Archive (ALSDA) collected from decades of space biology research, providing open and FAIR (findable, accessible, interoperable, and reusable) access of these precious data to scientists world-wide. This rich source of meticulously curated metadata and data from spaceflight and analog studies has been mined by the scientific community resulting in dozens of high impact scientific publications that reveals a complex network of molecular and physiological effects of spaceflight across living systems, from microbes to plants, to mammals. Understanding how these effects translate to the human condition is critical as we move deeper into the era of commercial space travel. However, the integration of data, specifically omics data, from astronauts is particularly challenging due to their sensitive nature. OSDR has risen to this challenge by developing a mechanism to control access to identifiable levels of omics data, such as raw sequence data, while enabling public access to processed, unidentifiable, data and associated metadata that will allow the scientific community to interrogate human astronaut data alongside data from model organisms to begin answering these critical questions. The 2021 SpaceX Inspiration4 (I4) mission collected a comprehensive atlas of biological measurements from four civilian astronauts, providing a wealth of data to characterize the effects of spaceflight on the human body. These data include both non-omics and omics assays such as direct RNA sequencing (RNA-seq), single nuclei ATAC-seq and RNA-seq, metagenomics, proteomics, and comprehensive metabolic and cytokine panels, all of which have been integrated into the OSDR system across no less than 9 studies. Each study has been carefully curated using community-backed OSDR standards for sample and assay level metadata ensuring these data are findable and accessible. In addition to hosting both raw and processed data from the principal investigator team for each assay type, the GeneLab team plans to re-process the I4 omics data using GeneLab’s standard processing pipelines. The GeneLab processed data outputs will allow for comparisons across studies on OSDR and enable visualization of these data through the OSDR data visualization platform thereby enabling data reusability and interoperability. Here we describe the robust privacy and security protocols implemented by OSDR to safeguard sensitive health data from astronauts while facilitating metadata and processed data sharing for research purposes. We further provide a road map for navigating the vast amount of data provided for each I4 study on the OSDR, including experimental design, associated experiments, payloads, and missions, data generation and analysis protocols, and associated scientific articles. Additionally, we illustrate how to interrogate the standardized metadata provided in the sample and assay tables as well as various means to download and access the data including programmatically through the GeneLab Open API (GLOpenAPI). The open access of datasets in NASA’s OSDR provides a unique opportunity for the scientific community, as well as citizen scientists and students, to continue using OSDR resources to further unlock profound insights into the consequences of space travel on the human body. Through implementation of security measures to protect sensitive human data, the OSDR seeks to strengthen the science exchange between the Biological and Physical Sciences Program and the Human Research Program, per recommendation 4-1 of the 2023-2032 Decadal Survey, and encourage further sharing and dissemination of astronaut data to provide the scientific community with the resources needed to lay the groundwork for developing targeted mitigation strategies to help withstand the rigors of long-duration spaceflight.

Amanda Marie Saravia-butler↗

Framework for Modeling High-Impact, Low-Frequency Power Grid Events to Support Risk-Informed Decisions

Natural and man-made hazardous events resulting in loss of grid infrastructure assets challenge the electric power grid’s security and resilience. However, the planning and allocation of appropriate contingency resources for such events requires an understanding of their likelihood and the extent of their potential impact. Where these events are of low likelihood, a risk-informed perspective on planning can be problematic as there exists an insufficient statistical basis to directly estimate the probabilities and consequences of their occurrence. Since risk-informed decisions rely on such knowledge, a basis for modeling the risk associated with high-impact low frequency events (HILFs) is essential. Insights from such a model can inform where resources are most rationally and effectively expended. The present effort is focused on development of a HILF risk assessment framework. Such a framework is intended to provide the conceptual and overarching technical basis for the development of HILF risk models that can inform decision makers across numerous stakeholder sectors. The North American Electric Reliability Corporation (NERC) 2014 Standard TPL-001-4 considers severe events for transmission reliability planning, but does not address events of such severity that they have the potential to fail a substantial fraction of grid assets over a region, such as geomagnetic disturbances (GMD), extreme seismic events, and coordinated cyber-physical attacks. These are beyond current planning guidelines. As noted, the risks associated with such events cannot be statistically estimated based on historic experience; however, there does exist a stable of risk modeling techniques for rare events that have proven of value across a wide range of engineering application domains. There is an active and growing interest in evaluating the value of risk management techniques in the State transmission planning and emergency response communities, some of this interest in the context of grid modernization activities. The availability of a grid HILF risk model, integrated across multi-hazard domains which, when interrogated, can support transparent, defensible and effective decisions, is an attractive prospect among these communities. In this report, we document an integrated HILF risk framework intended to inform the development of risk models. These models would be based on the systematic and comprehensive (to within scope) characterization of hazards to the level of detail required for modeling risk, identification of the stressors associated with the hazards (i.e., the means of impacting grid and supporting infrastructure), characterization of the vulnerability of assets to these stressors and the probabilities of asset compromise, the grid’s dynamic response to the asset failures, and assessment of subsequent severities of consequence with respect to selected impact metrics, such as power outage duration and geographic reach. Specifically, the current framework is being developed to;1. Provide the conceptual and overarching technical paradigms for the development of risk models; 2. Identify the classes of models required to implement the framework - providing examples of existing models, and also identifying where modeling gaps exist; 3. Identify the types of data required, addressing circumstances under which data are sparse and the formal elicitation of informed judgment might be required; and 4. Identify means by which the resultant risk models might be interrogated to form the necessary basis for risk management.

97 MATHEMATICS AND COMPUTING↗

Markets and Economic Requirements for Fission Batteries and Other Nuclear Systems

Fission Batteries (FBs) are nuclear reactors defined by five characteristics which enable large-scale deployment: cost competitive, standardized sizes for economic mass production, easy installation and removal, secure and safe unattended operation with high reliability. FBs are not defined by technology or power level. Technical and market considerations suggest that most FBs will produce 20 to 30 MWt. This proceedings reports on the outcomes of two workshops that were held in January 2021 to better define markets and economic challenges for FBs. Three major markets were identified. The largest market is the industrial and commercial heat market. There are about 4000 industrial users (excluding utilities) that require more than one megawatt of heat. The number of customers versus size of heat demand was determined. In a low-carbon world there is the potential for many additional customers—including expanded biofuels production and district heat. The second market is for non-grid electricity. This includes co-generation plants that produce heat and electricity for a single customer. The third market is the maritime market with ~100,000 ships worldwide. In the United States, natural gas is the low-cost energy option today and will remain so unless constraints or taxes impact its use. If restrictions on greenhouse gas emissions, the FB competition includes natural gas with carbon capture, biofuels, hydrogen and grid electricity. Natural gas with carbon capture is not economically viable on a small scale. Biofuels may be expensive but may be the economically preferred option for locations with small energy demands of a few megawatts. Hydrogen is a potential competitor with many of the characteristics of natural gas. Grid electricity is not a competitive source of heat. For FBs to be economically competitive, the price of delivered heat must be $20-50/MWh ($6-15/million BTU). The economically competitive range for non-grid electricity is estimated at $70-100/MWh. These electricity prices are competitive with the retail prices of electricity in many parts of the United States for the customer. FBs are not expected to be competitive selling wholesale electricity to the grid. To achieve the aforementioned cost targets for heat and electricity markets, FB designers must (1) maximize the power output within the constraints of a FB (e.g., truck transportability, passive decay heat removal), (2) drastically reduce the size of onsite staff, (3) adopt core designs with low fuel costs (enrichment and fabrication), and (4) develop a system design that is efficiently manufactured in factories. The business case depends upon more than being just a replacement for natural gas. The largest incentives for adoption of FBs is where they create new markets and new sources of revenue. An example is the paper and pulp industry that burns biomass wastes to provide heat and electricity to make paper. An external heat source could meet the demand for heat and electricity by the paper process and enable converting waste biomass into liquid biofuels rather than burning to provide heat. Other markets, such as data centers, are driven by special energy requirements such as extreme reliability. Most customers are not in the energy business but need heat and electricity to produce a product—a manufactured good, education, retail sales (shopping malls), marine transport or some other product. As a consequence, there will be large incentives to lease rather than own FBs. Leasing avoids the regulatory challenges that remain with the owner of the FB. Leasing creates large incentives for FP standardization of sizes and transportability to maintain the value of the FB at the end of the lease—similar to the leasing of jet engines and aircraft. The economic constraints combined with technical constraints suggest competitive FBs will likely have outputs exceeding 10 MWt. There appear to be little incentives for very long-lived reactor cores because such machines require much larger inventories of fuel. Maintenance requirements and the options to provide technology updates may favor shorter lifetimes (~5 years). The assessment is that there is the potential for FBs to be economically viable and play a major role in global decarbonization in three markets: heat, non-grid electricity and maritime applications.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗