Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Reliability assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,027 records · Page 57

Non-Micropipe Dislocations in 4H-SiC Devices: Electrical Properties and Device Technology Implications

It is well-known that SiC wafer quality deficiencies are delaying the realization of outstandingly superior 4H-SiC power electronics. While efforts to date have centered on eradicating micropipes (i.e., hollow core super-screw dislocations with Burgers vectors greater than or equal to 2c), 4H-SiC wafers and epilayers also contain elementary screw dislocations (i.e., Burgers vector = 1c with no hollow core) in densities on the order of thousands per sq cm, nearly 100-fold micropipe densities. While not nearly as detrimental to SiC device performance as micropipes, it has recently been demonstrated that elementary screw dislocations somewhat degrade the reverse leakage and breakdown properties of 4H-SiC p(+)n diodes. Diodes containing elementary screw dislocations exhibited a 5% to 35% reduction in breakdown voltage, higher pre-breakdown reverse leakage current, softer reverse breakdown I-V knee, and microplasmic breakdown current filaments that were non-catastrophic as measured under high series resistance biasing. This paper details continuing experimental and theoretical investigations into the electrical properties of 4H-SiC elementary screw dislocations. The nonuniform breakdown behavior of 4H-SiC p'n junctions containing elementary screw dislocations exhibits interesting physical parallels with nonuniform breakdown phenomena previously observed in other semiconductor materials. Based upon experimentally observed dislocation-assisted breakdown, a re-assessment of well-known physical models relating power device reliability to junction breakdown has been undertaken for 4H-SiC. The potential impact of these elementary screw dislocation defects on the performance and reliability of various 4H-SiC device technologies being developed for high-power applications will be discussed.

Neudeck, Philip G.↗

Technology Maturity Towards Highly Reusable Space Transportation Goals

The National Aeronautics and Space Administration's (NASA) Advanced Space Transportation Program (ASTP) has advanced key propulsion and launch vehicle systems technologies towards enabling the concepts identified by the Highly Reusable Space Transportation (HRST) Study as having significant potential for reducing the cost of access to space. The Marshall Space Flight Center (MSFC) manages the ASTP for the NASA Aero-Space Technology Enterprise. The HRST Study was conducted from 1995 through 1997 to evaluated launch concepts with the potential to reduce launch cost to $100 to $200 per pound of payload to low Earth orbit in the 2016 to 2022 timeframe. The HRST represents a generation of launch vehicles beyond the Lockheed-Martin VentureStar concept with a goal of another factor of ten reduction in launch cost below the next generation Reusable Launch Vehicle. Several concepts were developed and evaluated during the initial HRST studies. At the completion of the concept development phase in 1997, four task forces were formed to integrate the results of the study. These task forces were System Concept Definition, Operations Assessment. Cost Assessment and Technology Assessment. The Operations Assessment task force published its final report in November 1998. The Operations Assessment task force evaluated both single stage to orbit (SSTO) and two-stage to orbit (TSTO) concepts. SSTO concepts included horizontal takeoff and horizontal landing, vertical takeoff and vertical landing and vertical takeoff and horizontal landing. Horizontally launched concepts including launch assist options. SSTO concepts included airbreathing and all rocket as well as combination propulsion systems. The Operations Assessment considered the significance of performance margin, flight rate capability, reliability, launch assist, design optimization and technology development. These studies serve as a guide for the ASTP to prioritize technology development towards future highly reusable launch systems. Although the ASTP supports the development of technology that is focused at a near term fully reusable launch vehicle, the core of the technology development is looking ahead to future generations of launch vehicles that will enable dramatic growth in civil and commercial space enterprise. The primary focus of the paper is to status the key enabling technologies including rocket based combined cycle (RBCC) propulsion, magnetic launch assist, long life, low weight rocket propulsion, integral hot structures. robust thermal protection systems and integrated vehicle health management. The ASTP technology roadmap is leading rapidly towards system demonstration and eventual future X vehicle flight demonstrations.

Lyles, Garry↗

Numerical Simulation of Dual-Mode Scramjet Combustors

Results of a numerical investigation of a three-dimensional dual-mode scramjet isolator-combustor flow-field are presented. Specifically, the effect of wall cooling on upstream interaction and flow-structure is examined for a case assuming jet-to-jet symmetry within the combustor. Comparisons are made with available experimental wall pressures. The full half-duct for the isolator-combustor is then modeled in order to study the influence of side-walls. Large scale three-dimensionality is observed in the flow with massive separation forward on the side-walls of the duct. A brief review of convergence-acceleration techniques useful in dual-mode simulations is presented, followed by recommendations regarding the development of a reliable and unambiguous experimental data base for guiding CFD code assessments in this area.

Rodriguez, C. G.↗

Mars Exploration 2003 to 2013: An Integrated Perspective

The science goals for the Mars exploration program, together with the HEDS precursor environmental and technology needs, have been carefully laid out over the last several years and serve as a solid starting point for re-planning the program in an orderly way. Most recently, the science and HEDS communities have recognized the significance of subsurface sampling as a key component in "following the water": 1) to achieve science goals related to the search for evidence of life and 2) to gain access to the most valuable resource -- water. Accessing samples from hundreds and even thousands of meters beneath the surface is a challenge that will call for technology development and for one or more demonstration missions. Recent mission failures and concerns about the complexity of the previously planned MSR missions indicate that, before we are ready to undertake sample return and deep sampling, the Mars exploration program needs to include 1) technology development missions and 2) basic landing site assessment missions. These precursor missions should demonstrate the capability for reliable & accurate soft landing and in situ propellant production. The precursor missions will need to carry out close-up site observations, ground-penetrating radar mapping from orbit and conduct seismic surveys. The needs of the science and HEDS program requirements have much in common and clearly the programs should be planned as a single, continuous exploration effort. (We note that, although we are not yet ready to carry out sample return missions, we already have the capability to make impressive gains in in situ exploration by deploying full-scale rovers with mobility upward of ten kilometers.) A prudent minimum list of missions can be derived from the numerous goals and requirements; they can be sequenced in an orderly way to ensure that time is available to feed forward the results of the precursor missions.

Briggs, G.↗

Mars Exploration 2003 to 2013 - An Integrated Perspective: Time Sequencing the Missions

The science goals for the Mars exploration program, together with the HEDS precursor environmental and technology needs, serve as a solid starting point for re-planning the program in an orderly way. Most recently, the community has recognized the significance of subsurface sampling as a key component in "following the water". Accessing samples from hundreds and even thousands of meters beneath the surface is a challenge that will call for technology development and for one or more demonstration missions. Recent mission failures and concerns about the complexity of the previously planned MSR missions indicate that, before we are ready to undertake sample return and deep sampling, the Mars exploration program needs to include: 1) technology development missions; and 2) basic landing site assessment missions. These precursor missions should demonstrate the capability for reliable & accurate soft landing and in situ propellant production. The precursor missions will need to carry out close-up site observations, ground-penetrating radar mapping from orbit and conduct seismic surveys. Clearly the programs should be planned as a single, continuous exploration effort. A prudent minimum list of missions, including surface rovers with ranges of more than 10 km, can be derived from the numerous goals and requirements; they can be sequenced in an orderly way to ensure that time is available to feed forward the results of the precursor missions. One such sequence of missions is proposed for the decade beginning in 2003.

Briggs, G.↗

Periodontal Probe Improves Exams, Alleviates Pain

Dentists, comedian Bill Cosby memorably mused, tell you not to pick your teeth with any sharp metal object. Then you sit in their chair, and the first thing they grab is an iron hook!" Conventional periodontal probing is indeed invasive, uncomfortable for the patient, and the results can vary greatly between dentists and even for repeated measurements by the same dentist. It is a necessary procedure, though, as periodontal disease is the most common dental disease, involving the loss of teeth by the gradual destruction of ligaments that hold teeth in their sockets in the jawbone. The disease usually results from an increased concentration of bacteria in the pocket, or sulcus, between the gums and teeth. These bacteria produce acids and other byproducts, which enlarge the sulcus by eroding the gums and the periodontal ligaments. The sulcus normally has a depth of 1 to 2 millimeters, but in patients with early stages of periodontal disease, it has a depth of 3 to 5 millimeters. By measuring the depth of the sulcus, periodontists can have a good assessment of the disease s progress. Presently, there are no reliable clinical indicators of periodontal disease activity, and the best available diagnostic aid, periodontal probing, can only measure what has already been lost. A method for detecting small increments of periodontal ligament breakdown would permit earlier diagnosis and intervention with less costly and time-consuming therapy, while overcoming the problems associated with conventional probing. The painful, conventional method for probing may be destined for the archives of dental history, thanks to the development of ultrasound probing technologies. The roots of ultrasound probes are in an ultrasound-based time-of-flight technique routinely used to measure material thickness and length in the Nondestructive Evaluation Sciences Laboratory at Langley Research Center. The primary applications of that technology have been for corrosion detection and bolt tension measurements (Spinoff 2005). This ultrasound measurement system was adapted to the Periodontal Structures Mapping System, invented at Langley by John A. Companion, under the supervision of Dr. Joseph S. Heyman. Support of the research and development that led to this invention was provided by NASA s Technology Applications Engineering Program and by the Naval Institute for Dental and Biomedical Research, in Great Lakes, Illinois.

Source record↗

Evaluation of Margins of Safety in Brazed Joints

One of the essential steps in assuring reliable performance of high cost critical brazed structures is the assessment of the Margin of Safety (MS) of the brazed joints. In many cases the experimental determination of the failure loads by destructive testing of the brazed assembly is not practical and cost prohibitive. In such cases the evaluation of the MS is performed analytically by comparing the maximum design loads with the allowable ones and incorporating various safety or knock down factors imposed by the customer. Unfortunately, an industry standard methodology for the design and analysis of brazed joints has not been developed. This paper provides an example of an approach that was used to analyze an AlBeMet 162 (38%Be-62%Al) structure brazed with the AWS BAlSi-4 (Al-12%Si) filler metal. A practical and conservative interaction equation combining shear and tensile allowables was developed and validated to evaluate an acceptable (safe) combination of tensile and shear stresses acting in the brazed joint. These allowables are obtained from testing of standard tensile and lap shear brazed specimens. The proposed equation enables the assessment of the load carrying capability of complex brazed joints subjected to multi-axial loading.

Flom, Yury↗

Developing a Logistics Data Process for Support Equipment for NASA Ground Operations

The United States NASA Space Shuttle has long been considered an extremely capable yet relatively expensive rocket. A great part of the roughly US $500 million per launch expense was the support footprint: refurbishment and maintenance of the space shuttle system, together with the long list of resources required to support it, including personnel, tools, facilities, transport and support equipment. NASA determined to make its next rocket system with a smaller logistics footprint, and thereby more cost-effective and quicker turnaround. The logical solution was to adopt a standard Logistics Support Analysis (LSA) process based on GEIA-STD-0007 http://www.logisticsengineers.org/may09pres/GEIASTD0007DEXShortIntro.pdf which is the successor of MIL-STD-1388-2B widely used by U.S., NATO, and other world military services and industries. This approach is unprecedented at NASA: it is the first time a major program of programs, Project Constellation, is factoring logistics and supportability into design at many levels. This paper will focus on one of those levels NASA ground support equipment for the next generation of NASA rockets and on building a Logistics Support Analysis Record (LSAR) for developing and documenting a support solution and inventory of resources for. This LSAR is actually a standards-based database, containing analyses of the time and tools, personnel, facilities and support equipment required to assemble and integrate the stages and umbilicals of a rocket. This paper will cover building this database from scratch: including creating and importing a hierarchical bill of materials (BOM) from legacy data; identifying line-replaceable units (LRUs) of a given piece of equipment; analyzing reliability and maintainability of said LRUs; and therefore making an assessment back to design whether the support solution for a piece of equipment is too much work, i.e., too resource-intensive. If one must replace or inspect an LRU too much, perhaps a modification of the design of the equipment can make such operational effort unnecessary. Finally, this paper addresses processes of tying resources to a timeline of tasks performed in ground operations: this enables various overarching analyses, e.g., a summarization of all resources used for a given piece of equipment. Quality Control of data will also be discussed: importing and exporting data from product teams, including spreadsheets-todatabase or data exchange between databases.

Chakrabarti, Suman↗

Credibility Assessment of Deterministic Computational Models and Simulations for Space Biomedical Research and Operations

Human missions beyond low earth orbit to destinations, such as to Mars and asteroids will expose astronauts to novel operational conditions that may pose health risks that are currently not well understood and perhaps unanticipated. In addition, there are limited clinical and research data to inform development and implementation of health risk countermeasures for these missions. Consequently, NASA's Digital Astronaut Project (DAP) is working to develop and implement computational models and simulations (M&S) to help predict and assess spaceflight health and performance risks, and enhance countermeasure development. In order to effectively accomplish these goals, the DAP evaluates its models and simulations via a rigorous verification, validation and credibility assessment process to ensure that the computational tools are sufficiently reliable to both inform research intended to mitigate potential risk as well as guide countermeasure development. In doing so, DAP works closely with end-users, such as space life science researchers, to establish appropriate M&S credibility thresholds. We will present and demonstrate the process the DAP uses to vet computational M&S for space biomedical analysis using real M&S examples. We will also provide recommendations on how the larger space biomedical community can employ these concepts to enhance the credibility of their M&S codes.

Mulugeta, Lealem↗

Three Generations of Tracking and Data Relay Satellite (TDRS) Spacecraft

The current Tracking and Data Relay Satellite configuration consists of nine in-orbit satellites (four first generation, three second generation and two third generation satellites) globally distributed in geosynchronous orbit to provide near continuous data relay service to missions like Hubble Space Telescope and the International Space Station. The 1st generation spacecraft were designed by TRW/Northrop Grumman with their launches of the five spacecraft ranging from 1983 through 1995. The 2nd and 3rd generation spacecraft were designed by Boeing with their launches ranging 2000 - 2002 and 2013 - 2017 respectively. TDRS-3 is now 27 years on orbit, continues to be a capable asset for the TDRS constellation. Lack of need for inclination control combined with large fuel reserves and redundancy on critical elements provides spacecraft that operate well past design life, all of which contributes to expanded TDRS constellation support capabilities. All spacecraft generations have issues. Significant issues will be summarized with the focus on the Boeing related problems. Degradations and failures are continually assessed and provide the foundation for yearly updates to spacecraft reliability models, constellation service projections and deorbit plans (in order to meet NASAs mandate of limiting orbital debris). Even when accounting for degradations and failures, the life expectancy for the Boeing delivered 2nd generation TDRS-8, 9 10 TDRS are anticipated to be 25+ years.

TDRS↗

Finite Element Simulation of Three Full-Scale Crash Tests for Cessna 172 Aircraft

The NASA Emergency Locator Transmitter Survivability and Reliability (ELT-SAR) project was initiated in 2013 to assess the crash performance standards for the next generation of emergency locator transmitter (ELT) systems. Three Cessna 172 aircraft were acquired to perform crash testing at NASA Langley Research Center's Landing and Impact Research Facility. Full-scale crash tests were conducted in the summer of 2015 and each test article was subjected to severe, but survivable, impact conditions including a flare-to-stall during emergency landing, and two controlled-flight-into-terrain scenarios. Full-scale finite element analyses were performed using a commercial explicit solver, ABAQUS. The first test simulated impacting a concrete surface represented analytically by a rigid plane. Tests 2 and 3 simulated impacting a dirt surface represented analytically by an Eulerian grid of brick elements using a Mohr-Coulomb material model. The objective of this paper is to summarize the test and analysis results for the three full-scale crash tests. Simulation models of the airframe which correlate well with the tests are needed for future studies of alternate ELT mounting configurations.

Mason, Brian H.↗

A PCR Based Microbial Monitoring Alternative Method of Detection and Identification of Microbes Aboard ISS

Previous research has shown that microorganisms and potential human pathogens have been detected on the International Space Station (ISS) with additional introduction of new microflora occurring with every exchange of crew or addition of equipment and supplies. These microbes are readily transferred between crew and subsystems (i.e. ECLSS, environmental control and life support systems). As this can be detrimental to astronaut health and optimal performance of ISS systems, monitoring of systems such as ECLSS to include identification of microbial contaminants could prevent adverse effects on human health and life support systems. Current monitoring on ISS is laborious and utilizes culture based methods followed by sample return to Earth for complete analysis. Future, long-distance spaceflight missions will require real-time monitoring capabilities that enable efficient and rapid assessments of the microbial environment allowing for expedited decisions and more targeted response to cope with anomalies. Polymerase chain reaction (PCR), a molecular microbial monitoring method was chosen and numerous PCR instruments investigated for their potential to perform in microgravity conditions. Using ISS as a test bed for PCR verification in microgravity will enable NASA to assess whether molecular based microbiological sensors may be components of reliable, closed-loop life support and habitation systems in spacecraft, enhancing infrastructure capabilities through increased efficiency, reliability, and time savings by enabling sample analysis on orbit. NASA selected the Water Monitoring Suite as one of the rapid spaceflight hardware demonstration activities utilizing a streamlined process to minimize the time required to fly experimental flight hardware. The RAZOR EX (BioFire Defense, Salt Lake City, UT) system was part of the water monitoring suite and is a commercial off-the-shelf (COTS) real-time PCR instrument designed for field work. The RAZOR EX was originally designed for Department of Defense (DoD) under a small business innovative research (SBIR) grant and is ruggedized, compact and provides a rapid, sample to answer in less than an hour. PCR assays using a fluorescent probe were optimized and spiked with known concentrations of DNA (Pseudomonas aeruginosa) ranging from 0.002 to 20 ng. PCR reagents were lyophilized and configured in customized pouches and tested for flight readiness. Three types of water were used to rehydrate the reagents and demonstrate the fidelity of the PCR reaction in microgravity. Molecular grade deionized water served as a control while filtered and unfiltered ISS potable water served to test for chemical or biological inhibitors. All three types were compared to parallel ground test results. Nine tests were run on ISS (3 of each water type) and the critical threshold cycle (Ct) was compared to parallel ground tests completed at Kennedy Space Center, FL and Johnson Space Center, TX. All concentrations of Pseudomonas aeruginosa DNA were detected. A comparison of the Ct produced in real time PCR indicated similarity between flight and ground samples. There appeared to be no significant difference between flight or ground PCR reactions or between any of the three water types. This testing demonstrated the ability to perform molecular testing during spaceflight operations with similar sensitivity. It will allow for future ground development of molecular protocols and minimize the need for spaceflight testing. Future testing will include development of additional targets including environmental and health related organisms.

Christina Khodadad↗

Enabling Assurance in the MBSE Environment

A number of specific benefits that fit within the hallmarks of effective development are realized with implementation of model-based approaches to systems and assurance. Model Based Systems Engineering (MBSE) enabled by standardized modeling languages (e.g., SysML®) is at the core. These benefits in the context of spaceflight system challenges can include [1]: • Improved management of complex development • Reduced risk in the development process • Improved cost management • Improved design decisions With appropriate modeling techniques the assurance community also can improve early oversight and insight into project development. NASA has shown the basic constructs of SysML in an MBSE environment offer several key advantages, within a Model Based Mission Assurance (MBMA) initiative [2, 3]. These include the following: • Model viewpoints that promote rapid and systematic assessment of requirements coverage, hazard tagging and risk management • Embedded safety assessments for launch vehicles • Deployment of model assisted development of reliability products - Failure Modes and Effects Analyses (FMEAs) and Fault Trees • Test Planning • Validation and Verification of complex functions • Support of Assurance Case development for complex systems In addition, while there are benefits to be harvested, there is a realization that these do not come without effort and cost. Enabling model-based approaches requires structure, not only in an organizational context, but in a modeling context as well. There can be a steep learning curve and costs associated to train skilled modelers. But, on the other hand, not all of the assurance community need to be modelers. Models themselves must conform to ontologies that enable assurance. This places constraints upon the models and modelers. Optimums have yet to be developed where resources and constraints on modeling must be traded off in the organization and modeling efforts for projects. A number of barriers need to be overcome, as well, which pose challenges to the developers of the software that supports MBSE/MBMA. Information and data must be made to flow seamlessly through the life cycle. Because there is a wide variety of tools used in the community, to avoid the problems of the past of silos, delays, and diverging interests, information should flow among these tools to support the “single source of truth” paradigm of MBSE. This will greatly facilitate MBMA and advancement of assurance functions.

Evans, John W.↗

The HUNTER Dynamic Human Reliability Analysis Tool: Development of a Module for Performance Shaping Factors

Human Unimodel for Nuclear Technology to Enhance Reliability (HUNTER) is a framework to support dynamic human reliability analysis (HRA) in communication with a variety of methods and tools. In this paper, how we have developed one of the HUNTER modules, the individual module for evaluating performance shaping factors (PSFs), is introduced. The PSF refers to any factor that influences human performance such as workload or complexity. It has been used for highlighting human errors and adjusting the error probabilities in the existing HRA. We consider the eight PSFs suggested in the Standardized Plant Analysis Risk-HRA (SPAR-H) method, which is the representative HRA method widely used in the nuclear field. To support our dynamic modeling using the eight SPAR-H PSFs, we reviewed human performance literature and developed data-based mathematical models to rate and quantify PSFs in the context of dynamic HRA. We also design the individual module composed of the two functions: 1) the PSF qualification function that automatically or manually evaluates a PSF level, and 2) the PSF quantification function that dynamically or statically determines the PSF multiplier values and integrate them to adjust human error probabilities (HEPs). How each function works with the SPAR-H PSFs and how the PSFs adjust the HEPs are investigated through literature and discussed in this paper.

99 GENERAL AND MISCELLANEOUS↗

Distributed Coaxial Cable Sensors for In-Situ Condition Based Monitoring of Coal-Fired Boiler Tubes

The increasing contributions of renewable energy sources present new challenges to the operation and maintenance of the existing coal-fired power plants. One of the major operational risks is the unexpected failure of superheater boiler tubes, leading to the most unplanned power plant outrages. The boiler tube failure is difficult to predict due to the harsh operating environments. Therefore, condition-based monitoring (CBM) with a reliable high temperature sensor becomes necessary to produce a meaningful assessment of the health condition of boiler tubes and their remaining lifetime. In this work, the stainless-steel and quartz coaxial cable sensor (SSQ-CCS) is proposed for in-situ distributed monitoring of the boiler tube temperatures in existing coal-fired power plants. Comprehensive tests have been conducted with an in-house testing facility at Clemson University to study and evaluate the sensors’ performance in the temperature range of 100℃ to 600℃. The results indicated that the measurement resolution of the SSQ-CCS sensor is better than 1℃, and the drift is less than 2% over long-period testing. Meanwhile, multi-physics finite element analysis has been conducted to optimize the design and evaluate the safety of the SSQ-CCS temperature sensor under various operational conditions. Based on the performance obtained in the laboratory-scale testing, a field test has been implemented at a power plant. Four SSQ-CCS temperature sensors were installed for in-situ monitoring of the temperatures of a power plant’s superheat tube assembles. The data acquisition system has been successfully set up and collected sensing signals for more than three months. The sensing signals have been post-processed, and the monitored temperature history through the SSQ-CCS temperature sensor has been validated and compared with the conventional high temperature thermal couple data.

Jiao, Xinyu↗

I Can't Patch My OT Systems! A Look at CISA's KEVC Workarounds & Mitigations for OT

We examine the state of publicly available information about known exploitable vulnerabilities applicable to operational technology (OT) environments. Specifically, we analyze the Known Exploitable Vulnerabilities Catalog (KEVC) maintained by the US Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) to assess whether currently available data is sufficient for effective and reliable remediation in OT settings. Our team analyzed all KEVC entries through July 2025 to determine the extent to which OT environments can rely on existing remediation recommendations. We found that although most entries in the KEVC could affect OT environments, only 13% include vendor workarounds or mitigations as alternatives to patching. This paper also examines the feasibility of developing such alternatives based on vulnerability and exploit characteristics, and we present early evidence of success with this approach.

97 MATHEMATICS AND COMPUTING↗

Software reliability through fault-avoidance and fault-tolerance

Strategies and tools for the testing, risk assessment and risk control of dependable software-based systems were developed. Part of this project consists of studies to enable the transfer of technology to industry, for example the risk management techniques for safety-concious systems. Theoretical investigations of Boolean and Relational Operator (BRO) testing strategy were conducted for condition-based testing. The Basic Graph Generation and Analysis tool (BGG) was extended to fully incorporate several variants of the BRO metric. Single- and multi-phase risk, coverage and time-based models are being developed to provide additional theoretical and empirical basis for estimation of the reliability and availability of large, highly dependable software. A model for software process and risk management was developed. The use of cause-effect graphing for software specification and validation was investigated. Lastly, advanced software fault-tolerance models were studied to provide alternatives and improvements in situations where simple software fault-tolerance strategies break down.

Vouk, Mladen A.↗