Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Methodology”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
NASA NTRS1995

Structural Optimization Methodology for Rotating Disks of Aircraft Engines

In support of the preliminary evaluation of various engine technologies, a methodology has been developed for structurally designing the rotating disks of an aircraft engine. The structural design methodology, along with a previously derived methodology for predicting low-cycle fatigue life, was implemented in a computer program. An interface computer program was also developed that gathers the required data from a flowpath analysis program (WATE) being used at NASA Lewis. The computer program developed for this study requires minimum interaction with the user, thus allowing engineers with varying backgrounds in aeropropulsion to successfully execute it. The stress analysis portion of the methodology and the computer program were verified by employing the finite element analysis method. The 10th- stage, high-pressure-compressor disk of the Energy Efficient Engine Program (E3) engine was used to verify the stress analysis; the differences between the stresses and displacements obtained from the computer program developed for this study and from the finite element analysis were all below 3 percent for the problem solved. The computer program developed for this study was employed to structurally optimize the rotating disks of the E3 high-pressure compressor. The rotating disks designed by the computer program in this study were approximately 26 percent lighter than calculated from the E3 drawings. The methodology is presented herein.

Armand, Sasan C.↗
NASA NTRS1996

The Study of the Relationship between Probabilistic Design and Axiomatic Design Methodology

This program report is the final report covering all the work done on this project. The goal of this project is technology transfer of methodologies to improve design process. The specific objectives are: 1. To learn and understand the Probabilistic design analysis using NESSUS. 2. To assign Design Projects to either undergraduate or graduate students on the application of NESSUS. 3. To integrate the application of NESSUS into some selected senior level courses in Civil and Mechanical Engineering curricula. 4. To develop courseware in Probabilistic Design methodology to be included in a graduate level Design Methodology course. 5. To study the relationship between the Probabilistic design methodology and Axiomatic design methodology.

Onwubiko, Chinyere↗
NASA NTRS1999

Development of a Practical Methodology for Elastic-Plastic and Fully Plastic Fatigue Crack Growth

A practical engineering methodology has been developed to analyze and predict fatigue crack growth rates under elastic-plastic and fully plastic conditions. The methodology employs the closure-corrected effective range of the J-integral, delta J(sub eff) as the governing parameter. The methodology contains original and literature J and delta J solutions for specific geometries, along with general methods for estimating J for other geometries and other loading conditions, including combined mechanical loading and combined primary and secondary loading. The methodology also contains specific practical algorithms that translate a J solution into a prediction of fatigue crack growth rate or life, including methods for determining crack opening levels, crack instability conditions, and material properties. A critical core subset of the J solutions and the practical algorithms has been implemented into independent elastic-plastic NASGRO modules. All components of the entire methodology, including the NASGRO modules, have been verified through analysis and experiment, and limits of applicability have been identified.

McClung, R. C.↗
NASA NTRS1999

Development of a Practical Methodology for Elastic-Plastic and Fully Plastic Fatigue Crack Growth

A practical engineering methodology has been developed to analyze and predict fatigue crack growth rates under elastic-plastic and fully plastic conditions. The methodology employs the closure-corrected effective range of the J-integral, (Delta)J(sub eff), as the governing parameter. The methodology contains original and literature J and (Delta)J solutions for specific geometries, along with general methods for estimating J for other geometries and other loading conditions, including combined mechanical loading and combined primary and secondary loading. The methodology also contains specific practical algorithms that translate a J solution into a prediction of fatigue crack growth rate or life, including methods for determining crack opening levels, crack instability conditions, and material properties. A critical core subset of the J solutions and the practical algorithms has been implemented into independent elastic-plastic NASGRO modules. All components of the entire methodology, including the NASGRO modules, have been verified through analysis and experiment, and limits of applicability have been identified.

McClung, R. C.↗
NASA NTRS1998

Methodology for Examining the Operator and the System Concurrently: Pilot Interaction with Automation

Complex system description is problematic when considering operator task activities interacting with system dynamics. Engineering languages have matured sufficiently to allow machine system description at various levels of depth and breadth but without operator synergy. Concurrently, Task Analysis methods have evolved along diverse lines enabling a description of the operator in the system from various paradigms but not describing the system. A void exists when attempting to view the system and the operator in the same plane. We propose a methodology employing descriptive languages from different domains viewed in a single dimension. Finite Automata (FA) languages describe the machine system in the proposed approach. Operator task specifications, a form of task analysis output, examine the operator activities within the system. Operator task specifications were then selected for discrete task activities and overlaid on the system description to examine operator inputs and subsequently view system responses. Unexpected (surprise) and undesirable system behavior was expected to emerge from this analysis. In this paper we shall first describe the methodology and show how the two perspectives, machine model and operator task specifications are integrated. Following we describe the process of doing such analysis using an example from cockpit automation. The methodology was employed in the analysis of a new function that was added to an existing automatic flight control system. We begin by defining a flight scenario involving all aspects of pilot interaction with the new function. Then, we proceed to develop a basic model of the machine behavior, in the context of pilot actions. Finally we superimpose the operator task specification on the machine model and perform the analysis. The proposed methodology may have broad appeal to system designers and human factors specialists. A common language for engineers of diverse domains is a strong point of this approach. Systems engineers may not fully understand operational considerations and human limitations, and human factors specialists may not be exposed to the full extent of system behavior. We hope the proposed methodology is adopted by both disciplines and in the process each assimilates a common language to address potential shortcomings of either approach separately.

Austin, David↗
NASA NTRS2002

A Life-Cycle Cost Estimating Methodology for NASA-Developed Air Traffic Control Decision Support Tools

This paper describes the development of a life-cycle cost (LCC) estimating methodology for air traffic control Decision Support Tools (DSTs) under development by the National Aeronautics and Space Administration (NASA), using a combination of parametric, analogy, and expert opinion methods. There is no one standard methodology and technique that is used by NASA or by the Federal Aviation Administration (FAA) for LCC estimation of prospective Decision Support Tools. Some of the frequently used methodologies include bottom-up, analogy, top-down, parametric, expert judgement, and Parkinson's Law. The developed LCC estimating methodology can be visualized as a three-dimensional matrix where the three axes represent coverage, estimation, and timing. This paper focuses on the three characteristics of this methodology that correspond to the three axes.

Wang, Jianzhong Jay↗
NASA NTRS2003

Development of Probabilistic Life Prediction Methodologies and Testing Strategies for MEMS and CMC's

This effort is to investigate probabilistic life prediction methodologies for ceramic matrix composites and MicroElectroMechanical Systems (MEMS) and to analyze designs that determine stochastic properties of MEMS. For CMC's this includes a brief literature survey regarding lifing methodologies. Also of interest for MEMS is the design of a proper test for the Weibull size effect in thin film (bulge test) specimens. The Weibull size effect is a consequence of a stochastic strength response predicted from the Weibull distribution. Confirming that MEMS strength is controlled by the Weibull distribution will enable the development of a probabilistic design methodology for MEMS - similar to the GRC developed CARES/Life program for bulk ceramics. A main objective of this effort is to further develop and verify the ability of the Ceramics Analysis and Reliability Evaluation of Structures/Life (CARES/Life) code to predict the time-dependent reliability of MEMS structures subjected to multiple transient loads. A second set of objectives is to determine the applicability/suitability of the CARES/Life methodology for CMC analysis, what changes would be needed to the methodology and software, and if feasible, run a demonstration problem. Also important is an evaluation of CARES/Life coupled to the ANSYS Probabilistic Design System (PDS) and the potential of coupling transient reliability analysis to the ANSYS PDS.

Jadaan, Osama↗
NASA NTRS2006

Experimental Methodology for Measuring Combustion and Injection-Coupled Responses

A Russian scaling methodology for liquid rocket engines utilizing a single, full scale element is reviewed. The scaling methodology exploits the supercritical phase of the full scale propellants to simplify scaling requirements. Many assumptions are utilized in the derivation of the scaling criteria. A test apparatus design is presented to implement the Russian methodology and consequently verify the assumptions. This test apparatus will allow researchers to assess the usefulness of the scaling procedures and possibly enhance the methodology. A matrix of the apparatus capabilities for a RD-170 injector is also presented. Several methods to enhance the methodology have been generated through the design process.

Cavitt, Ryan C.↗
NASA NTRS2008

A Vegetation Correction Methodology for Time Series Based Soil Moisture Retrieval From C-band Radar Observations

A methodology is presented to correct backscatter (sigma(sup 0)) observations for the effect of vegetation. The proposed methodology is based on the concept that the ratio of the surface scattering over the total amount of scattering (sigma(sup 0)(sub soil)/sigma(sup 0)) is only affected by the vegetation and can be described as a function of the vegetation water content. Backscatter observations sigma(sup 0) from the soil are not influenced by vegetation. Under bare soil conditions (sigma(sup 0)(sub soil)/sigma(sup 0)) equals 1. Under low to moderate biomass and soil moisture conditions, vegetation affects the observed sigma(sup 0) through absorption of the surface scattering and contribution of direct scattering by the vegetation itself. Therefore, the contribution of the surface scattering is smaller than the observed total amount of scattering and decreases as the biomass increases. For dense canopies scattering interactions between the soil surface and vegetation elements (e.g. leaves and stems) also become significant. Because these higher order scattering mechanisms are influenced by the soil surface, an increase in (sigma(sup 0)(sub soil)/sigma(sup 0)) may be observed as the biomass increases under densely vegetated conditions. This methodology is applied within the framework of time series based approach for the retrieval of soil moisture. The data set used for this investigation has been collected during a campaign conducted at USDA's Optimizing Production Inputs for Economic and Environmental Enhancement OPE-3) experimental site in Beltsville, Maryland (USA). This campaign took place during the corn growth cycle from May 10th to 0ctober 2nd, 2002. In this period the corn crops reached a vegetation water content of 5.1 kg m(exp -2) at peak biomass and a soil moisture range varying between 0.00 to 0.26 cubic cm/cubic cm. One of the deployed microwave instruments operated was a multi-frequency (C-band (4.75 GHz) and L-band (1.6 GHz)) quad-polarized (HH, HV, VV, VH) radar which was mounted on a 20 meter long boom. In the OPE-3 field campaign, radar observations were collected once a week at nominal times of 8 am, 10 am, 12 noon and 2 pm. During each data run the radar acquired sixty independent measurements within an azimuth of 120 degrees from a boom height of 12.2 m and at three different incidence angles (15,35, and 55 degrees). The sixty observations were averaged to provide one backscatter value for the study area and its accuracy is estimated to be 51.0 dB. For this investigation the C-band observations have been used. Application of the proposed methodology to the selected data set showed a well-defined relationship between (sigma(sup 0)(sub soil)/sigma(sup 0)) and the vegetation water content. It is found that this relationship can be described with two experimentally determined parameters, which depend on the sensing configuration (e.g. incidence angle and polarization). Through application of the proposed vegetation correction methodology and the obtained parameterizations, the soil moisture retrieval accuracy within the framework of a time series based approach is improved from 0.033 to 0.032 cubic cm/cubic cm, from 0.049 to 0.033 cubic cm/cubic cm and from 0.079 to 0.047 cubic cm/cubic cm for incidence angles of 15,35 and 55 degrees, respectively. Improvement in soil moisture retrieval due to vegetation correction is greater at larger incidence angles (due to the increased path length and larger vegetation effects on the surface signal at the larger angles).

Joseph, Alicia T.↗
NASA NTRS2009

Development of a Methodology to Gather Seated Anthropometry in a Microgravity Environment

The Constellation Program's Crew Exploration Vehicle (CEV) is required to accommodate the full population range of crewmembers according to the anthropometry requirements stated in the Human-Systems Integration Requirement (HSIR) document (CxP70024). Seated height is one of many critical dimensions of importance to the CEV designers in determining the optimum seat configuration in the vehicle. Changes in seated height may have a large impact to the design, accommodation, and safety of the crewmembers. Seated height can change due to elongation of the spine when crewmembers are exposed to microgravity. Spinal elongation is the straightening of the natural curvature of the spine and the expansion of inter-vertebral disks. This straightening occurs due to fluid shifts in the body and the lack of compressive forces on the spinal vertebrae. Previous studies have shown that as the natural curvature of the spine straightens, an increase in overall height of 3% of stature occurs which has been the basis of the current HSIR requirements. However due to variations in the torso/leg ratio and impact of soft tissue, data is nonexistent as to how spinal elongation specifically affects the measurement of seated height. In order to obtain this data, an experiment was designed to collect spinal elongation data while in a seated posture in microgravity. The purpose of this study was to provide quantitative data that represents the amount of change that occurs in seated height due to spinal elongation in microgravity environments. Given the schedule and budget constraints of ISS and Shuttle missions and the uniqueness of the problem, a methodology had to be developed to ensure that the seated height measurements were accurately collected. Therefore, simulated microgravity evaluations were conducted to test the methodology and procedures of the experiment. This evaluation obtained seat pan pressure and seated height data to a) ensure that the lap restraint provided sufficient restraint to eliminate any gap between the subject s gluteal surface and the seat pan and b) to document any necessary design and procedural changes needed due to the microgravity environment. The methodology and setup used during the simulated microgravity evaluations was replicable to the proposed methodology and setup for in-space missions. A flight-like Shuttle seat, pressure sensors, anthropometer, and existing hardware was used to measure seated height and contact area while experiencing microgravity. The outlying buttock and thigh surface contact areas were collected to determine if the subjects were in contact with the seat pan, while a measurer recorded their seated height with an anthropometer. The Anthropometry and Biomechanics Facility (ABF) completed data collection from three microgravity flights to assess the restraint methods and techniques to be used for the in-flight procedures performed by the crewmembers in orbit. The first flight demonstrated that the restraint system on the seat, used in a nominal configuration, did not sufficiently restrain a person in the seat. The results showed the subjects were not in full contact with the seat pan, resulting in inaccurate sitting height data. Thus, a second flight was conducted to test different restraint system options. The results showed that by 1) changing the restraint system from the nominal 3-points of the 5-point harness, which is used for crewmembers when fully suited with emergency equipment, and 2) rerouting the lap straps around the joint of the backrest, where the backrest and seat pan are joined, resulted in the optimal method to restrain a subject. This rerouting method allowed for the anchor location to change and pull the subjects back into the seat instead of being anchored at the side of the subjects thighs. The results from the third flight validated the final restraint system, which resulted in a verified methodology for collecting seated anthropometry to ultimately determine the amount of spil elongation in a microgravity environment.

Rajulu, Sudhakar↗
NASA NTRS2014

Interrelationships Between Receiver/Relative Operating Characteristics Display, Binomial, Logit, and Bayes' Rule Probability of Detection Methodologies

Unknown risks are introduced into failure critical systems when probability of detection (POD) capabilities are accepted without a complete understanding of the statistical method applied and the interpretation of the statistical results. The presence of this risk in the nondestructive evaluation (NDE) community is revealed in common statements about POD. These statements are often interpreted in a variety of ways and therefore, the very existence of the statements identifies the need for a more comprehensive understanding of POD methodologies. Statistical methodologies have data requirements to be met, procedures to be followed, and requirements for validation or demonstration of adequacy of the POD estimates. Risks are further enhanced due to the wide range of statistical methodologies used for determining the POD capability. Receiver/Relative Operating Characteristics (ROC) Display, simple binomial, logistic regression, and Bayes' rule POD methodologies are widely used in determining POD capability. This work focuses on Hit-Miss data to reveal the framework of the interrelationships between Receiver/Relative Operating Characteristics Display, simple binomial, logistic regression, and Bayes' Rule methodologies as they are applied to POD. Knowledge of these interrelationships leads to an intuitive and global understanding of the statistical data, procedural and validation requirements for establishing credible POD estimates.

Generazio, Edward R.↗
NASA NTRS2009

Evaluation methodology guidance for stack packages

This report provides evaluation methodology guidance based on previous National Aeronautics and Space Administration (NASA) reports and literature surveys for 3D stack packages and assemblies. Two aspects of technology are covered: the package itself (guidance for functional packages) and package assembly manufacturing and reliability. This work was funded by the NASA Electronic Parts and Packaging (NEPP) Program. The objectives of this NEPP project are to: Perform a literature survey of 3D stack technology; perform a literature survey on the evaluation methodology for 3D package and assembly; combine the two aspects to provide evaluation methodology for both aspects with consideration of interactions between package and assembly; generate guidance on the evaluation methodology for 3D stack package integrity prior to and after assembly; provide recommendations on future experimental activities. The qualification and evaluation methodology guidelines will facilitate NASA projects in effectively evaluating the reliability of very dense and newly available high-density 3D stack packages, allowing more processing power in a smaller board footprint and lower system weight.

Gerke, David↗
DOE OSTI2014

Methodology for the Incorporation of Passive Component Aging Modeling into the RAVEN/ RELAP-7 Environment

Passive system, structure and components (SSCs) will degrade over their operation life and this degradation may cause to reduction in the safety margins of a nuclear power plant. In traditional probabilistic risk assessment (PRA) using the event-tree/fault-tree methodology, passive SSC failure rates are generally based on generic plant failure data and the true state of a specific plant is not reflected realistically. To address aging effects of passive SSCs in the traditional PRA methodology [1] does consider physics based models that account for the operating conditions in the plant, however, [1] does not include effects of surveillance/inspection. This paper represents an overall methodology for the incorporation of aging modeling of passive components into the RAVEN/RELAP-7 environment which provides a framework for performing dynamic PRA. Dynamic PRA allows consideration of both epistemic and aleatory uncertainties (including those associated with maintenance activities) in a consistent phenomenological and probabilistic framework and is often needed when there is complex process/hardware/software/firmware/ human interaction [2]. Dynamic PRA has gained attention recently due to difficulties in the traditional PRA modeling of aging effects of passive components using physics based models and also in the modeling of digital instrumentation and control systems. RAVEN (Reactor Analysis and Virtual control Environment) [3] is a software package under development at the Idaho National Laboratory (INL) as an online control logic driver and post-processing tool. It is coupled to the plant transient code RELAP-7 (Reactor Excursion and Leak Analysis Program) also currently under development at INL [3], as well as RELAP 5 [4]. The overall methodology aims to: • Address multiple aging mechanisms involving large number of components in a computational feasible manner where sequencing of events is conditioned on the physical conditions predicted in a simulation environment such as RELAP-7. • Identify the risk-significant passive components, their failure modes and anticipated rates of degradation • Incorporate surveillance and maintenance activities and their effects into the plant state and into component aging progress. • Asses aging affects in a dynamic simulation environment 1. C. L. SMITH, V. N. SHAH, T. KAO, G. APOSTOLAKIS, “Incorporating Ageing Effects into Probabilistic Risk Assessment –A Feasibility Study Utilizing Reliability Physics Models,” NUREG/CR-5632, USNRC, (2001). 2. T. ALDEMIR, “A Survey of Dynamic Methodologies for Probabilistic Safety Assessment of Nuclear Power Plants, Annals of Nuclear Energy, 52, 113-124, (2013). 3. C. RABITI, A. ALFONSI, J. COGLIATI, D. MANDELLI and R. KINOSHITA “Reactor Analysis and Virtual Control Environment (RAVEN) FY12 Report,” INL/EXT-12-27351, (2012). 4. D. ANDERS et.al, "RELAP-7 Level 2 Milestone Report: Demonstration of a Steady State Single Phase PWR Simulation with RELAP-7," INL/EXT-12-25924, (2012).

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2015

Methodology for accident analyses of fusion breeder blankets

'Fusion for Energy' (F4E) develops designs and implements the European Test Blanket Systems (TBS) in ITER - Helium-Cooled Lithium-Lead (HCLL) and Helium-Cooled Pebble-Bed (HCPB). Safety demonstration is an essential element for the integration of TBS in ITER and accident analyses are one of its critical segments. A systematic approach to the accident analyses had been acquired under the F4E contract on TBS safety analyses. F4E technical requirements and AMEC and INL efforts resulted in the development of a comprehensive methodology for fusion breeding blanket accident analyses. It addresses the specificity of the breeding blankets design, materials and phenomena and at the same time is consistent with the one already applied to ITER accident analyses. Methodology consists of several phases. At first the reference scenarios are selected on the base of FMEA studies. In the second place elaboration of the accident analyses specifications we use phenomena identification and ranking tables to identify the requirements to be met by the code(s) and TBS models. Thus the limitations of the codes are identified and possible solutions to be built into the models are proposed. These include among others the loose coupling of different codes or code versions in order to simulate multi-fluid flows and phenomena. The code selection and issue of the accident analyses specifications conclude this second step. Furthermore the breeding blanket and ancillary systems models are built on. In this work challenges met and solutions used in the development of both MELCOR and RELAP5 codes models of HCLL and HCPB TBSs will be shared. To continue the developed models are qualified by comparison with finite elements analyses, by code to code comparison and sensitivity studies. Finally, the qualified models are used for the execution of the accident analyses of specific scenario. When possible the methodology phases will be illustrated in the paper by limited number of tables and figures. Description of each phase and its results in detail as well the methodology applications to EU HCLL and HCPB TBSs will be published in separate papers. The developed methodology is applicable to accident analyses of other TBSs to be tested in ITER and as well to DEMO breeding blankets.

Fusion Safety↗
DOE OSTI2015

Development of a Nonlinear Time Domain Methodology (Part I)

The ASCE 4-2014 (draft) provides guidance in Appendix B for nonlinear time-domain soil structure interaction (NLSSI) analysis. To accommodate widespread use of NLSSI, it is necessary to develop a methodology, or a set of steps, that produce reasonable results. An NLSSI methodology opens the door to explore additional seismic behaviour at nuclear facilities such as 1) gapping and sliding, 2) inclined seismic waves coupled with gapping and sliding of foundations atop soil, 3) inclined seismic waves coupled with gapping and sliding of deeply embedded structures, 4) soil dilatancy, 5) surface waves, 4) buoyancy, 5) concrete cracking and 6) seismic isolation. This paper documents the NLSSI methodology. At a high level these steps include 1) define soil site parameters, 2) calibrate site-specific nonlinear soil constitutive model, 3) verify performance of time domain absorbing boundaries, 4) build free field soil site, 5) build 3D soil site model using the appropriate parameters 6) define design concrete material properties and develop appropriate concrete constitutive model, 7) build structural model, 8) define appropriate contact and/or friction behaviour, 9) build combined soil-structure model and run time domain models and 10) compare with SHAKE/SASSI results at increasing levels of ground motion. This paper will describe the NLSSI methodology, discuss important NLSSI considerations, and discuss its potential implementation in industry. A second paper, which is Part II, “Development of a Nonlinear Time Domain Methodology Results,” provides results comparing in-structure response from NLSSI with the linear frequency-domain program, SASSI.

42 ENGINEERING↗
DOE OSTI2021

Optimization Methodology of Pebble Bed HTGR Start-Up and Running-in Strategy

In recent years interest in advanced reactor technologies has increased significantly. However, the methods used for analysis of traditional nuclear reactors are insufficient to consider all the different and varied advanced reactor designs without further development. One promising advanced reactor design is the pebble bed reactor (PBR). PBRs possess unique operational and fuel cycle features that require the development of specific analysis methodologies to adequately design and analyze the systems. There is a need in PBR research for a capability to analyze and optimize the process of transitioning from the start-up reactor core to the equilibrium core (known as the “running-in” of the reactor). The start-up of a PBR and the transition to the equilibrium core is a complex, multi-physics challenge that has not yet been well researched and has many opportunities for design, analysis, and optimization of the process. In this research, a methodology is defined to consider the potential strategies in PBR start-up and run-in to the equilibrium core. Multiple candidate software are considered, and their pros and cons are discussed for the PBR-specific application in the methodology. A preliminary software selection for the physics engine is made, and initial verification of key modules is performed. Software to support optimization of the reactor run-in strategies through reduced order modeling (ROM) and machine learning are considered. Challenges for a full implementation of the methodology are discussed. Additional code selections and verification of models relevant to the application are needed before full demonstration of the methodology can be achieved and an optimal strategy determined.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2023

Methodology and Tool for the Physical Security Analysis of Micro and Advanced Reactors

This work proposes a dynamic evaluation methodology to relax the conservatism in physical security evaluation, by leveraging an ongoing work in the Light Water Reactor Sustainability pathway. This methodology is implemented in a dynamic risk assessment tool named Event Modeling Risk Assessment using Linked Diagrams (EMRALD). The work extends EMRALD’s capability to support a sandbox feature where analysts can easily create attack scenarios and modify advanced/small modular reactor (A/SMR) security and safety features using templates. This approach saves time and cost since the analysis does not require creating detailed computer-aided design models, as is commonly required in commercial force-on-force software tools. EMRALD is completely free to use at https://emraldapp.inl.gov. We have developed basic templates including physical barriers, intrusion sensors, physical areas, and safety actions, that can be downloaded from EMRALD’s GitHub site: https://github.com/idaholab/EMRALD. These templates use generic data commonly used for training purposes, which do not reflect any actual operating nuclear reactor. Users may adjust the data in the templates with their own dataset and/or create new templates in EMRALD. The proposed methodology combines security and safety by assessing sabotage effects up to the radiological consequence to the public instead of merely the core damage state. This practice follows the industry standard for advanced non-light-water reactors currently proposed for endorsement by the Nuclear Regulatory Commission. The combination of security and safety is expressed in an achievability-consequence chart. EMRALD can be used to generate data for this chart. A hypothetical case study using a representative sodium-cooled fast reactor (SFR) facility is presented in this report to demonstrate this methodology. This case study does not contain any actual nuclear plant information. This work will benefit A/SMR vendors and utilities to implement security by design during the reactor design iteration phase, such that they do not have to perform upgrades and retrofits to the reactor after it is installed to improve its physical protection system. The tool may also be used to analyze domestic or foreign reactor designs to support the International Nuclear Security Techniques for Advanced Reactors (INSTAR) bilateral missions. Future works are planned to implement the methodology on a reference SFR reactor and a reference high-temperature gas-cooled reactor to obtain insights and lessons-learned for the A/SMR community.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2017

Cybersecurity Vulnerability Assessment Methodologies for Nuclear Power Plants

As any mechanical system ages, broken or outdated parts must be replaced; nuclear power plants (NPPs) are no different. The average age of a NPP in the United States' aging fleet of commercial reactors is 35 years, with many of these plants operating under extensions of their original licenses. These plants, originally designed in the 1960's and 1970's, are controlled by analog instrumentation and control (I and C) systems, and have since been upgraded (to varying degrees) to hybrid analog-digital systems. As these NPPs are upgraded to continue operating and to meet more stringent safety requirements imposed by the Nuclear Regulatory Commission (NRC), the implementation of digital systems to monitor and run the power plant introduces new vulnerabilities that must be addressed. The main objectives of a vulnerability assessment (VA) are to identify, quantify, and prioritize all of the susceptibilities inherent in a system. This allows for all weaknesses to be analyzed, and for the most serious concerns to be addressed first. Traditional VA methodologies deal with the analysis of physical systems associated with the NPP; with the introduction of digital control systems and computer networks, these methodologies must be expanded to include these fundamentally different systems and vulnerability concerns. Digital systems have been used in NPPs since the 1980's, but only for non-safety control systems; attacks on these systems were not deemed consequential, and no dedicated VA methodology was required. However, 'all new NPPs are being designed with integrated digital instrumentation and control systems as the backbone of protection, controls, alarms, and display and monitoring'. This gives rise to new vulnerabilities such as disrupted data displays, the suppression of critical alarms, or unauthorized access to secure systems from connected networks. The NRC released formal cybersecurity regulations in March 2009 (10 CFR 73.54), as well as a guide for the program in January 2010 (RG 5.71). However, the regulations and guide provide limited insight on how to identify these vulnerabilities; the focus is on remediating them once found. Hence, there is a need for a comprehensive, systematic methodology to conduct a VA on digital computer and communications and network systems. In this paper, we review traditional VA methodologies and discuss relevant cases. Then we discuss challenges to vulnerabilities within the context of modernization of the fleet and what needs to be done to address this issue.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗