Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “failure mode analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 955 records · Page 53

Characterization of the Edge Crack Torsion (ECT) Test for Mode III Fracture Toughness Measurement of Laminated Composites

The edge crack torsion (ECT) test is designed to initiate mode III delamination growth in composite laminates. The test has undergone several design changes during its development. The objective of this paper was to determine the suitability of the current ECT test design a mode III fracture test. To this end, ECT tests were conducted on specimens manufactured from IM7/8552 and S2/8552 tape laminates. Three-dimensional finite element analyses were performed. The analysis results were used to calculate the distribution of mode I, mode II, and mode III strain energy release rate along the delamination front. The results indicated that mode IIIdominated delamination growth would be initiated from the specimen center. However, in specimens of both material types, the measured values of GIIIc exhibited significant dependence on delamination length. Load-displacement response of the specimens exhibited significant deviation from linearity before specimen failure. X-radiographs of a sample of specimens revealed that damage was initiated in the specimens prior to failure. Further inspection of the failure surfaces is required to identify the damage and determine that mode III delamination is initiated in the specimens.

Ratcliffe, James G.↗

The application of fracture mechanics to failure analysis of photovoltaic solar modules

Cracking of silicon solar cells and solar module transparent cover panels such as glass or polymethylmethacrylate (PMMA) is a major cause of photovoltaic solar module failure in field service. Silicon and cover materials are brittle, and cracking of these materials is expected to result from the extension of preexisting flaws under stress. Study of the cracking mechanisms is therefore an appropriate area for the application of fracture mechanics principles. In this study, fracture mechanics techniques were employed to identify the mode of crack propagation, to examine the fracture-initiating flaw, to estimate the nature and magnitude of fracture stress in the field, and to predict analytically the service lifetime. Recommendations for corrective actions are also made.

Chen, C. P.↗

Evaluation of 10V Chip Polymer Tantalum Capacitors for Space Applications

Due to low ESR and safe failure mode, new technology chip polymer tantalum capacitors (CPTC) have gained popularity in the electronics design community, first in commercial applications, and now in hi-rel and space systems. The major drawbacks of these parts are high leakage currents, degradation under environmental stresses, and a relatively narrow temperature range of operating and storage conditions. Several studies have shown that a certain amount of moisture in polymer cathodes is necessary for a normal operation of the parts. This might limit applications of CPTCs in space systems and requires analysis of long-term exposure to deep vacuum conditions on their performance and reliability. High leakage currents and limited maximum operational temperature complicate accelerated testing that is necessary to assess long-term reliability and require new screening and qualification procedures for quality assurance. A better understanding of behavior of CPTCs as compared to traditional, MnO2, capacitors is necessary to develop adequate approaches for QA system for space applications. A specific of CPTCs is that different materials and processes might be used for low-voltage (10 V and less) and high-voltage (above 10 V) capacitors, so performance and degradation processes in these groups require separate analysis. In this work, that is a part of the NASA Electronic Parts and Packaging (NEPP) program, degradation of AC and DC characteristics under environmental stresses at different temperatures and voltages have been studied in nine lots of commercial and automotive grade capacitors rated to 10 V. Results of analysis of leakage currents, high temperature storage (HTS) up to 5000 hrs in vacuum and air at different temperatures, and Highly Accelerated Life Testing (HALT) in the range from 85 C to 145 C are presented. Temperature and voltage acceleration factors were calculated based on approximation of distributions of degradation rates with a general log-linear Weibull model. Mechanisms of degradation and failures, and requirements for screening and qualification testing are discussed.

Tantalum Capacitors↗

Max Launch Abort System (MLAS) Pad Abort Test Vehicle (PATV) II Attitude Control System (ACS) Integration and Pressurization Subsystem Dynamic Random Vibration Analysis

In order to mitigate catastrophic failures on future generation space vehicles, engineers at the National Aeronautics and Space Administration have begun to integrate a novel crew abort systems that could pull a crew module away in case of an emergency at the launch pad or during ascent. The Max Launch Abort System (MLAS) is a recent test vehicle that was designed as an alternative to the baseline Orion Launch Abort System (LAS) to demonstrate the performance of a "tower-less" LAS configuration under abort conditions. The MLAS II test vehicle will execute a propulsive coast stabilization maneuver during abort to control the vehicles trajectory and thrust. To accomplish this, the spacecraft will integrate an Attitude Control System (ACS) with eight hypergolic monomethyl hydrazine liquid propulsion engines that are capable of operating in a quick pulsing mode. Two main elements of the ACS include a propellant distribution subsystem and a pressurization subsystem to regulate the flow of pressurized gas to the propellant tanks and the engines. The CAD assembly of the Attitude Control System (ACS) was configured and integrated into the Launch Abort Vehicle (LAV) design. A dynamic random vibration analysis was conducted on the Main Propulsion System (MPS) helium pressurization panels to assess the response of the panel and its components under increased gravitational acceleration loads during flight. The results indicated that the panels fundamental and natural frequencies were farther from the maximum Acceleration Spectral Density (ASD) vibrations which were in the range of 150-300 Hz. These values will direct how the components will be packaged in the vehicle to reduce the effects high gravitational loads.

Ekrami, Yasamin↗

Reinforced Ammo Can Validation Test Report for Lawrence Livermore National Laboratory

A research effort was conducted to investigate the effects of an unintentional internal detonation of energetic materials on a small transportation container called the “Reinforced Ammo Can” (RAC), which is currently approved for the transport of energetic materials up to 2 grams net explosive weight (NEW) onsite at Lawrence Livermore National Laboratory (LLNL). The project used experimental testing of the containers based on simulated results conducted by a Missouri S & T explosives engineering graduate student while on an internship working in explosives safety at LLNL. The proposed experimental testing consisted of 20 central detonation tests in separate Reinforced Ammo Can containers to verify their high explosive (HE) containment capability. RAC containers are required for transporting secondary explosives on site at LLNL Site 200 in quantities between 300 mg and 2 grams of Trinitrotoluene (TNT) equivalent NEW. Currently, the LLNL Environmental Safety and Health (ES&H) Manual states that the RAC containers are permissible for on-site transportation of secondary explosives up to 2 grams NEW by approved HE handlers with the approval of an Explosives Safety Expert (ESE). Simulated results indicated that tensile failure of the closure mechanism on the container is the most likely failure mode, and showed potential occurrence at the 2 gram NEW threshold. Experimental validation tests were conducted indicating failure/rupture of the containers lid with venting of the detonation products at the 2 gram NEW test threshold with an explosive mass safety factor of 1.3. Failure consisted of impact opening the container latch mechanism resulting in potential ejection of the lid depending on the orientation of the charge within the confinement. This analysis solely is an evaluation of the response of the containment if a detonation were to occur, it does NOT consider the probability of such an event.

42 ENGINEERING↗

Experimental Setup for Mechanically Testing Subscale Triangular, Rollable, and Collapsible Deployable Composite Booms

High-strain composite deployable space structures are used for space infrastructure and science applications such as solar array supports, antennae, camera masts, and lightweight structures supporting solar sailing propulsion ele-ments. Triangular, Rollable, and Collapsible (TRAC) deployable composite booms are one example of a high-strain composite deployable structure and were studied using novel experimental test and characterization methods developed under the Gravity Offloading and Analysis of Long Imperfection-sensitive Ele-ments (GOALIE) project. In the present work, a subscale 7-m-long TRAC boom was suspended vertically to orient gravity along the length of the boom. By ori-enting vertically, highly nonlinear and unstable behavior often encountered dur-ing horizontally oriented gravity offload testing of similar structures was reduced. Pretest analytical predictions of TRAC booms indicated three unique failure modes, loads, and locations for three unique loading cases of in-plane bending, out-of-plane bending, and axial compression. To investigate the predicted behav-ior, an experimental test was set up to impart mechanical loads to a subscale TRAC boom. The experimental setup, loading cases, and instrumentation used to characterize the mechanical response of a subscale TRAC boom are described in this paper.

High-strain composites↗

In-Space Inspection Needs: Opportunities for advanced NDE tools such as x-ray CT for additively manufactured parts, in-situ resource utilization, geological applications, and more

It is now 50 years since the first human presence on the surface of the Moon and as we strive to return with women and men in the next few years, we embrace new technical challenges, goals, and innovative solutions to address 21st century objectives. These new ambitions carry fresh challenges and risks, with the field of NDE playing an increasingly more relevant role towards meeting these essential goals. In recent years, more advanced NDE tools have triggered a rapid expansion of applications for the space industry. In particular, x-ray Computed Tomography (CT) has proven to be a trusted and powerful asset for spaceflight hardware inspection, as well as applied geotechnical analysis for natural materials (e.g., rocks, soils) for NASA and across industry. However, such methods have yet to be extended to “deep space” applications such as those that are now part of the US National Space Policy Directive (SPD-1) and the accelerated push to return humans to the Moon (i.e., Artemis). For this reason, advancing these powerful Earth-based laboratory methods via new technologies, integrated computational solutions, and creative engineering approaches is directly aligned with national space policies, as well as with multiple NASA Strategic Plan priorities. The use of x-ray CT at scales as fine as a few microns or smaller can identify spacecraft part failure modes relevant to quality assurance for flight hardware and AM parts such as those recently developed for ISS. This technology could also identify valuable metallic phases within geological materials (i.e., rocks or drill cores), enabling resource-relevant triage of samples for In-Situ Resource Utilization (ISRU) and high science value sample return to Earth laboratories. There is also significant application for 3D imaging tools for medical use such as inspecting protective gear as well as bone density degradation studies which are critical in establishing a sustained presence in space. Timing for development of these tools for space use is advantageous as we prepare for new opportunities in the next few years and recognize recent commercial technology advancements which make it feasible. Moreover, as NASA strives to take full advantage of developments in AM technologies, including In-Space Manufacturing (ISM), it is widely recognized that NDE tools such as CT will play an essential role in acceptance of these parts for widespread use. New in-space 3D inspection tools with complimentary technology such as AI-based automated feature recognition (accelerated by machine learning), rapid compositional analysis, and advanced sample manipulation, would be a game-changing step toward a new class of crew-based laboratory sensors once human outposts on the Moon are established.

In-Space Non-Destructive Evaluation↗

Debonding of Stitched Composite Joints: Testing and Analysis

The effect of stitches on the failure of a single lap joint configuration was determined in a combined experimental and analytical study. The experimental study was conducted to determine debond growth under static monotonic loading. The stitches were shown to delay the initiation ofthe debond and provide load transfer beyond the load necessary to completely debond the stitched lap joint. The strain energy release rates at the debond front were calculated using a finite element-based technique. Models of the unstitched configuration showed significant values of modes I and II across the width of the joint and showed that mode III is zero at the centerline but increases near the free edge. Models of the stitched configuration showed that the stitches effectively reduced mode I to zero, but had less of an effect on modes II and III.

Glaessgen, E. H.↗

Passive Safety System Reliability Analysis: Methodology, Application, and Results

Many advanced reactor designs rely on passive systems to provide assurance that certain safety functions, such as reactivity control and reactor heat removal, are maintained during transient scenarios. The performance of these systems is sensitive to boundary and environmental conditions and can lead to functional failure, which is the inability of the system to perform as intended even without any physical failures. Additionally, conditions can cause the passive systems to operate in an intermediate or degraded state. These operational modes of passive systems and their overall reliability can be difficult to capture in traditional probabilistic frameworks where discrete operating modes are assumed or time-dependent boundary conditions are not accounted for. Novel strategies and methods are needed to be able to capture the reliability of these passive systems and their impact on facility safety. The current abstract provides a summary of such a methodology and examples of its use in a case study, the GE Hitachi (GEH) PRISM probabilistic safety assessment (PSA), and the U.S. Department of Energy (USDOE) Versatile Test Reactor (VTR) PSA.

Bucknor, M.↗

Register of experts for information on mechanics of structural failure

This register is comprised of a list of approximately 300 experts from approximately 90 organizations who have published results of theoretical and/or experimental research related to six problem areas in the mechanics of structural failure: (1) life prediction for structural materials, (2) fracture toughness testing, (3) fracture mechanics analysis; (4) hydrogen embrittlement; (5) protective coatings; and (6) composite materials. The criteria for the selection of names for the register are recent contributions to the literature, participation in or support of relevant research programs, and referral by peers. Each author included is listed by organizational affiliation, address, and principal field of expertise. The purpose of the register is to present, in easy reference form, sources for dependable information regarding failure modes and mechanisms of aerospace structures. The register includes two indexes; an alphabetical listing of the experts and an alphabetical listing of the organizations with whom they are affiliated.

Carpenter, J. L., Jr.↗

Surface flaw reliability analysis of ceramic components with the SCARE finite element postprocessor program

The SCARE (Structural Ceramics Analysis and Reliability Evaluation) computer program on statistical fast fracture reliability analysis with quadratic elements for volume distributed imperfections is enhanced to include the use of linear finite elements and the capability of designing against concurrent surface flaw induced ceramic component failure. The SCARE code is presently coupled as a postprocessor to the MSC/NASTRAN general purpose, finite element analysis program. The improved version now includes the Weibull and Batdorf statistical failure theories for both surface and volume flaw based reliability analysis. The program uses the two-parameter Weibull fracture strength cumulative failure probability distribution model with the principle of independent action for poly-axial stress states, and Batdorf's shear-sensitive as well as shear-insensitive statistical theories. The shear-sensitive surface crack configurations include the Griffith crack and Griffith notch geometries, using the total critical coplanar strain energy release rate criterion to predict mixed-mode fracture. Weibull material parameters based on both surface and volume flaw induced fracture can also be calculated from modulus of rupture bar tests, using the least squares method with known specimen geometry and grouped fracture data. The statistical fast fracture theories for surface flaw induced failure, along with selected input and output formats and options, are summarized. An example problem to demonstrate various features of the program is included.

Gyekenyesi, John P.↗

Surface flaw reliability analysis of ceramic components with the SCARE finite element postprocessor program

The SCARE (Structural Ceramics Analysis and Reliability Evaluation) computer program on statistical fast fracture reliability analysis with quadratic elements for volume distributed imperfections is enhanced to include the use of linear finite elements and the capability of designing against concurrent surface flaw induced ceramic component failure. The SCARE code is presently coupled as a postprocessor to the MSC/NASTRAN general purpose, finite element analysis program. The improved version now includes the Weibull and Batdorf statistical failure theories for both surface and volume flaw based reliability analysis. The program uses the two-parameter Weibull fracture strength cumulative failure probability distribution model with the principle of independent action for poly-axial stress states, and Batdorf's shear-sensitive as well as shear-insensitive statistical theories. The shear-sensitive surface crack configurations include the Griffith crack and Griffith notch geometries, using the total critical coplanar strain energy release rate criterion to predict mixed-mode fracture. Weibull material parameters based on both surface and volume flaw induced fracture can also be calculated from modulus of rupture bar tests, using the least squares method with known specimen geometry and grouped fracture data. The statistical fast fracture theories for surface flaw induced failure, along with selected input and output formats and options, are summarized. An example problem to demonstrate various features of the program is included.

Gyekenyesi, J. P.↗

Impact Testing of Aluminum 2024 and Titanium 6Al-4V for Material Model Development

One of the difficulties with developing and verifying accurate impact models is that parameters such as high strain rate material properties, failure modes, static properties, and impact test measurements are often obtained from a variety of different sources using different materials, with little control over consistency among the different sources. In addition there is often a lack of quantitative measurements in impact tests to which the models can be compared. To alleviate some of these problems, a project is underway to develop a consistent set of material property, impact test data and failure analysis for a variety of aircraft materials that can be used to develop improved impact failure and deformation models. This project is jointly funded by the NASA Glenn Research Center and the FAA William J. Hughes Technical Center. Unique features of this set of data are that all material property data and impact test data are obtained using identical material, the test methods and procedures are extensively documented and all of the raw data is available. Four parallel efforts are currently underway: Measurement of material deformation and failure response over a wide range of strain rates and temperatures and failure analysis of material property specimens and impact test articles conducted by The Ohio State University; development of improved numerical modeling techniques for deformation and failure conducted by The George Washington University; impact testing of flat panels and substructures conducted by NASA Glenn Research Center. This report describes impact testing which has been done on aluminum (Al) 2024 and titanium (Ti) 6Al-4vanadium (V) sheet and plate samples of different thicknesses and with different types of projectiles, one a regular cylinder and one with a more complex geometry incorporating features representative of a jet engine fan blade. Data from this testing will be used in validating material models developed under this program. The material tests and the material models developed in this program will be published in separate reports.

Pereira, J. Michael↗

Physical and Electrical Characterization of Aluminum Polymer Capacitors

Conductive polymer aluminum capacitor (PA capacitor) is an evolution of traditional wet electrolyte aluminum capacitors by replacing liquid electrolyte with a solid, highly conductive polymer. On the other hand, the cathode construction in polymer aluminum capacitors with coating of carbon and silver epoxy for terminal connection is more like a combination of the technique that solid tantalum capacitor utilizes. This evolution and combination result in the development of several competing capacitor construction technologies in manufacturing polymer aluminum capacitors. The driving force of this research on characterization of polymer aluminum capacitors is the rapid progress in IC technology. With the microprocessor speeds exceeding a gigahertz and CPU current demands of 80 amps and more, the demand for capacitors with higher peak current and faster repetition rates bring conducting polymer capacitors to the center o( focus. This is because this type of capacitors has been known for its ultra-low ESR and high capacitance. Polymer aluminum capacitors from several manufacturers with various combinations of capacitance, rated voltage, and ESR values were obtained and tested. The construction analysis of the capacitors revealed three different constructions: conventional rolled foil, the multilayer stacking V-shape, and a dual-layer sandwich structure. The capacitor structure and its impact on the electrical characteristics has been revealed and evaluated. A destructive test with massive current over stress to fail the polymer aluminum capacitors reveals that all polymer aluminum capacitors failed in a benign mode without ignition, combustion, or any other catastrophic failures. The extraordinary low ESR (as low as 3 mOMEGA), superior frequency independence reported for polymer aluminum capacitors have been confirmed. For the applications of polymer aluminum capacitors in space programs, a thermal vacuum cycle test was performed. The results, as expected, show no impact on the electrical characteristics of the capacitors. The breakdown voltage of polymer capacitors has been evaluated using a steady step surge test. Initial results show the uniform distribution in the breakdown voltage for polymer aluminum capacitors. Polymer aluminum capacitors with a combination of very high capacitance, extraordinary low ESR, excellent frequency stability, and non-ignite benign failure mode make it a niche fit in space applications for both today and future. Polymer capacitors are apparently also the best substitutes of the currently used MnO2-based tantalum capacitors in the low voltage range. However, some critical aspects are still to be addressed in the next phase of the investigation for PA capacitors. These include the long term reliability test of 125 C dry life and 85 C/85%RH humidity, the failure mechanism and de-rating, the radiation tolerance, and the high temperature performance. All of the above requires the continuous NEPP funding and support.

Liu, David (Donghang)↗

Demisability of GFRP and CFRP Components of Reentering Orbital Debris: Phase I Test Results

Observations of surviving reentry debris on the ground and research performed by Hyperschall Technologie Göttingen (HTG) [1] indicated that significantly more glass fiber-reinforced polymer (GFRP) and carbon fiber-reinforced polymer (CFRP) components survive reentry than current models predict. NASA’s Orbital Debris Program Office conducted a series of tests to evaluate the accuracy of material demise models for reentering orbital debris used in NASA’s Object Reentry Survival Analysis Tool (ORSAT) and Debris Assessment Software (DAS). Testing is planned in a multi-phase series to allow for quick quantification of results as well as refinement of methods resulting from lessons learned during early phases. The Phase 1 tests discussed here validated ORSAT models for homogeneous metals, provided an efficient quantification of composite material demisability properties like mass loss rate and overall time to demise, and identified potential failure modes, which are currently not well understood. Phase 2 tests will be used to further understand mass loss rates and modes of both thermal and mechanical failure in composite materials. The authors exposed 95 samples of aluminum, CFRP, Kevlar fiber-reinforced polymer, GFRP, and sheets of G10 fiberglass to conditions approximating the reentry environment using an inductively coupled plasma (ICP) torch facility. The cylindrical CFRP samples were exposed to the atmospheric pressure plasma, at both the end and the midpoint, to investigate the difference in demisability between parts with exposed edges, like panels, and parts with no edges, such as carbonoverwrapped pressure vessels (COPVs). In a non-oxidative environment, no composite materials demised within the 5-minute test time. In the oxidative, elevated heat flux environment, CFRP samples demised between 210 s and 270 s. For the first 100 s of insertion time, most of the mass loss was due to pyrolysis of resin, creating an approximately bi-linear mass-loss rate curve with time. In a non-oxidative environment, carbon filaments were observed to unravel from some of the CFRP end-burned samples; however, this effect did not seem to affect the overall time to demise for the samples significantly. These results indicate that both GFRP and CFRP components survive reentry with significantly more remaining mass than current models predict.

Greene, Benton R.↗

Impact Testing of Inconel 718 for Material Impact Model Development

One of the difficulties with developing and verifying accurate impact models is that parameters such as high strain-rate material properties, failure modes, static properties, and impact test measurements are often obtained from a variety of different sources using different materials, with little control over consistency among the different sources. In addition, there is often a lack of quantitative measurements in impact tests to which the models can be compared. To alleviate some of these problems, a project is underway to develop a consistent set of material property, impact test data, and failure analysis for a variety of aircraft materials that can be used to develop improved impact failure and deformation models. This project is jointly funded by the NASA Glenn Research Center and the Federal Aviation Administration (FAA) William J. Hughes Technical Center. Unique features of this set of data are that all material property and impact test data are obtained using traceable material, the test methods and procedures are extensively documented, and all of the raw data is available. Four parallel efforts are currently underway. The Ohio State University conducts both measurement of material deformation and failure response over a wide range of strain rates and temperatures and failure analysis of material property specimens and impact test articles. The George Mason University conducts the development of improved numerical modeling techniques for deformation and failure. Glenn conducts the impact testing of flat panels and substructures. This report describes impact testing performed on Inconel 718 sheet and plate samples of different thicknesses with different types of projectiles, one a regular cylinder and one with a more complex geometry incorporating features representative of a jet engine fan blade. Data from this testing will be used in validating material models developed under this program. The material tests and the material models developed in this program will be published in separate reports.

J Michael Pereira↗

Rancor-HUNTER: A Virtual Plant and Operator Environment for Predicting Human Performance

Advances in simulation capabilities to model physical systems have outpaced the development of simulations for humans using those physical systems. There is an argument that the infinite span of potential human behaviors inherently render human modeling more challenging than physical systems. Despite this challenge, the need for modeling humans interacting with these complex systems is paramount. As technologies have improved, many of the failure modes originating from the physical systems have been solved. This means the overall proportion of human errors has increased, such that it is not uncommon to be the primary driver of system failure in modern complex systems. Moreover, technologies such as automated systems may introduce emerging contexts that can cause new, unanticipated modes of human error. Therefore, it is now more important than ever to develop models of human behavior to realize overall system error reductions and achieve established safety margins. To support new and novel concepts of operations for the anticipated wave of advanced nuclear reactor deployments, human factors and human reliability analysis researchers need to develop advanced simulation-based approaches. This talk presents a simulation environment suitable to both collect data and then perform Monte Carlo simulations to evaluate human performance and develop better models of human behavior. Specifically, the Rancor Microworld Simulator models a complex energy production system in a simplified manner. Rancor includes computer-based procedures, which serve as a framework to automatically classify human behaviors without manual, subjective experimenter coding during scenarios. This method supports a detailed level of analysis at the task level. It is feasible for collecting large sample sizes required to develop quantitative modelling elements that have historically challenged traditional full-scope simulator study approaches. Additionally, the other portion of this experimental platform, the Human Unimodel for Nuclear Technology to Enhance Reliability (HUNTER), is presented to show how the collected data can be used to evaluate novel scenarios based on the contextual factors, or performance shaping factors, derived from Rancor simulations. Rancor-HUNTER is being used to predict operator performance with new procedures, such as results from control room modernization or new-build situations. Rancor-HUNTER is also proving a useful surrogate platform to model human performance for other complex systems.

99 GENERAL AND MISCELLANEOUS↗

Application of Orthogonal Defect Classification for Software Reliability Analysis

The modernization of existing and new nuclear power plants with digital instrumentation and control systems (DI&C) is a recent and highly trending topic. However, there lacks strong consensus on best-estimate reliability methodologies by both the United States (U.S.) Nuclear Regulatory Commission (NRC) and the industry. This has resulted in hesitation for further modernization projects until a more unified methodology is realized. In this work, we develop an approach called Orthogonal-defect Classification for Assessing Software Reliability (ORCAS) to quantify probabilities of various software failure modes in a DI&C system. The method utilizes accepted industry methodologies for software quality assurance that are also verified by experimental or mathematical formulations. In essence, the approach combines a semantic failure classification model with a reliability growth model to predict (and quantify) the potential failure modes of a DI&C software system. The semantic classification model is used to address the question: How do latent defects in software contribute to different software failure root causes? The use of reliability growth models is then used to address the question: Given the connection between latent defects and software failure root causes, how can we quantify the reliability of the software? A case study was conducted on a representative I&C platform (ChibiOS) running a smart sensor acquisition software developed by Virginia Commonwealth University (VCU). The testing and evidence collection guidance in ORCAS was applied, and defects were uncovered in the software. Qualitative evidence, such as condition coverage, was used to gauge the completeness and trustworthiness of the assessment while quantitative evidence was used to determine the software failure probabilities. The reliability of the software was then estimated and compared to existing operational data of the sensor device. It is demonstrated that by using ORCAS, a semantic reasoning framework can be developed to justify if the software is reliable (or unreliable) while still leveraging the strength of the existing methods.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗