Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Software Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,531 records · Page 85
All sourcesNASA NTRSDOE OSTI
NASA NTRS2011

Common Bolted Joint Analysis Tool

Common Bolted Joint Analysis Tool (comBAT) is an Excel/VB-based bolted joint analysis/optimization program that lays out a systematic foundation for an inexperienced or seasoned analyst to determine fastener size, material, and assembly torque for a given design. Analysts are able to perform numerous what-if scenarios within minutes to arrive at an optimal solution. The program evaluates input design parameters, performs joint assembly checks, and steps through numerous calculations to arrive at several key margins of safety for each member in a joint. It also checks for joint gapping, provides fatigue calculations, and generates joint diagrams for a visual reference. Optimum fastener size and material, as well as correct torque, can then be provided. Analysis methodology, equations, and guidelines are provided throughout the solution sequence so that this program does not become a "black box:" for the analyst. There are built-in databases that reduce the legwork required by the analyst. Each step is clearly identified and results are provided in number format, as well as color-coded spelled-out words to draw user attention. The three key features of the software are robust technical content, innovative and user friendly I/O, and a large database. The program addresses every aspect of bolted joint analysis and proves to be an instructional tool at the same time. It saves analysis time, has intelligent messaging features, and catches operator errors in real time.

Imtiaz, Kauser↗
NASA NTRSDate not supplied

Verification of the Generalized Aerospace Simulation in Simulink (R)

NASA uses six-degrees-of-freedom (6-DOF) simulations tools to design, test, develop Guidance Navigation and Control (GN&C) software, and certify vehicle performance prior to flight. Therefore, it is critical that the 6-DOF tools used for vehicle design and certification are validated. The focus of this work is the vali-dation of the NASA Marshall Space Flight Center 6-DOF “GeneraLized Aero-space Simulation in Simulink” (GLASS) framework tool. The GLASS tool framework is currently used to support NASA GN&C insight for the Human Landing System (HLS) project, simulating vehicle dynamics during lunar descent and as-cent. The GLASS framework utilizes the off-the-shelf Mathworks ® Simscape Multibody® toolbox to model vehicle multi-body dynamics. NASA’s Engineering and Safety Center (NESC) provides a set of 6-DOF simulation verification “check cases” that are available to any user needing to verify 6-DOF tools. The check cases contain seventeen atmospheric and twenty-six orbital test scenarios are provided to validate equations of motion, environmental models (e.g., atmosphere, gravitation, and geodesy) and tool propagators. This paper compares GLASS 6-DOF simulation results against the NESC check cases’ results via simulation-to-simulation comparisons. The comparisons demonstrate that GLASS simulation results are “in family” with the outputs of the applicable NASA NESC check cases and verifies the GLASS core framework dynamics and the correct implementation of the check case scenario models.

6-Dof↗
NASA NTRSDate not supplied

Crew Performance Support System to Aid in Anomaly Resolution: Concept of Operations

As missions progress into deep space, communication delays and disruptions will disenable the crew’s reliance on Earth experts. There are also limitations in the amount of data that can be downlinked to the ground. It is prudent to assume that critical, complex vehicle or habitat sub-systems will malfunction at a time when a lunar or Mars’ crew cannot rely on the Earth-Support team to detect, diagnose and resolve the problem and it is impractical to expect a small crew to step-in with the same level of expertise as 50+ authorities. The crew will need novel processes and advanced technological support to independently identify and resolve safety- and time-critical anomalies. That a self-reliant crew is unable to respond appropriately to time-critical anomalies is a significant risk to crew safety and mission success. This risk is driven by several factors; novel and unanticipated anomalies would not have been trained pre-flight, the crew could forget their pre-flight training or spaceflight stressors could impair the crew’s problem-solving ability. At last year’s IWS, Beard reported that a single spaceflight stressor (elevated CO2) could undermine the crew’s ability to independently respond to emergencies. Concept of Operations (ConOps) provide a common view of future system functions to all stakeholders. For the current project, a ConOps was developed that describes the operational processes, practices and capabilities needed by a crew of astronauts on deep space missions to autonomously respond to anticipated and unanticipated anomalies. It is crucial to recognize that, as of August 2018 existing technologies are unable to effectively support crew anomaly response to unanticipated events. “Intelligent technology” has not reached a maturity level that permits generalizing a solution to novel situations. For example, to train intelligent technology requires volumes of data that do not exist. The complexities involved in a manned mission to Mars cannot be compared to sending rovers to Mars using scripted software. This ConOps proposes a Crew Performance Support System (CPSS) that will push NASA and its industry partners toward what will be required for a safe and successful manned mission to Mars. Anomaly resolution during a deep space mission will take place within a dynamic, or changing, context. The figure to the left shows five broad contextual variables: the organizational culture, mission context, system characteristics, team characteristics and individual characteristics. The yellow arrow indicates that spaceflight and task-related stressors can affect system, team and individual crewmember characteristics and therefore anomaly response potential. The figure depicts a protective umbrella of Human-System Integration (HSI) principles that should be instituted during CPSS development including a balanced workload, shared situation awareness and building an appropriate level of trust in the automation. The figure also depicts two interrelated and cooperative components, an HSI Data System and other Enabling Capabilities will be required to support crew anomaly response and Earth-Support situation awareness. As we journey from ISS to Gateway to Mars, multiple, simultaneous and integrated research and development efforts (i.e., support systems co-evolution) must be implemented to meet the problem-solving challenges a self-reliant crew will face on a Mars’ mission. The crossovers between the capabilities are just as important as the discrete capabilities themselves. As the capabilities mature, the lines between the support subdomains will blur and an integrated system will emerge. The ConOps summarizes current knowledge about how highly trained people solve anomalies in safety- and time-critical situations, describes a group of capabilities that could help to reduce the extant risk and documents requirements levied on additional systems that provides critical inputs to the CPSS. Scenarios are used to promote a shared understanding of processes, practices and technological goals needed for safe and productive manned missions beyond LEO.

HSIA risk↗
DOE OSTI2024

Numerical investigation of the AP1000 response following loss-of-coolant accident using PCTRAN and CFD to support R&D of SMRs

Small Modular Reactors (SMRs) present a promising solution for the future of sustainable energy, offering advantages such as reduced waste generation, advanced passive safety features, and potential cost efficiencies. Ongoing research focuses on the design and development of SMRs, addressing challenges through numerical simulations and experimental test data. Given that many next-generation reactors are first-of-a-kind (FOK), current operational reactors serve as valuable benchmarks for understanding various thermal-hydraulic phenomena during postulated design basis accidents (DBAs), including loss-of-coolant accidents (LOCA), main steam line breaks (MSLB), and steam generator tube ruptures (SGTR). This study employs the AP1000 model Personal Computer Transient Analyzer (PCTRAN) to simulate reactor responses to small-break LOCA scenarios, specifically analyzing break sizes of 2 and 10 inches. Additionally, ANSYS FLUENT software is utilized to assess containment responses to large-break LOCAs, focusing on the quantification of decay heat removal via natural convection. Verification of the PCTRAN results is achieved using Westinghouse data, with CFD results corroborating the findings. The outcomes demonstrate strong agreement with Westinghouse data, confirming the accuracy of the simulations.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2005

Vehicle Integrated Performance Analysis, the VIPA Experience: Reconnecting with Technical Integration

Today's NASA is facing significant challenges and changes. The Exploration initiative indicates a large increase in projects with limited increase in budget. The Columbia report has criticized NASA for its lack of insight and technical integration impacting its ability to provide safety. The Aldridge report is advocating NASA find new ways of doing business. Very early in the Space Launch Initiative (SLI) program a small team of engineers at MSFC were asked to propose a process for performing a system level assessment of a launch vehicle. The request was aimed primarily at providing insight and making NASA a "smart buyer." Out of this effort the VIPA team was created. The difference between the VIPA effort and many integration attempts is that VIPA focuses on using experienced people from various disciplines and a process which focuses them on a technically integrated assessment. Most previous attempts have focused on developing an all encompassing software tool. In addition, VIPA anchored its process formulation in the experience of its members and in early developmental Space Shuttle experience. The primary reference for this is NASA-TP-2001-210092, "Launch Vehicle Design Process: Characterization, Technical Integration, and Lessons Learned," and discussions with its authors. The foundations of VIPA's process are described. The VIPA team also recognized the need to drive detailed analysis earlier in the design process. Analyses and techniques typically done in later design phases, are brought forward using improved computing technology. The intent is to allow the identification of significant sensitivities, trades, and design issues much earlier in the program. This process is driven by the T-model for Technical Integration described in the aforementioned reference. VIPA's approach to performing system level technical integration is discussed in detail. Proposed definitions are offered to clarify this discussion and the general systems integration dialog. VIPA's capabilities and process can now be used to significantly enhance the development and monitoring of realizable project requirements. This is done through the use of VIPA's V-model. Starting with a given concept, VIPA's assessment validates the concept's stated performance, identifies significant issues either with the concept or the requirements, and then re-integrates these issues to determine impacts. This process is discussed along with a description of how it may be integrated into a program's insight and review process. The VIPA process has been employed successfully on several projects including SLI, Orbital Space Plane (OSP), and several heavy lift concepts for Exploration. It has also been proposed for use on the Jupiter Icy Moon (JIMO) spacecraft. The VIPA process has gained favor with both engineering and project organizations for being responsive and insightful. Selected results from these assessments will be presented.

McGhee, David S.↗
NASA NTRS2024

Transfer of NASA Technology to the DoD: Mitigating Motion Sickness with Autogenic Feedback Training Exercise

Motion sickness poses a significant safety risk, particularly in the context of aviation. Given its prevalence among aviators and its detrimental impact on performance, researchers have attempted to identify effective mitigation strategies for motion sickness. Currently, many of the existing interventions are pharmacological, and while effective, they present a problem due to their associated adverse side effects. The primary goals of the current research were 1) demonstrate the value of the application of Autogenic-Feedback Training Exercise (AFTE), a physiological training program developed by NASA to mitigate the impact of operational stressors such as motion sickness and spatial disorientation on human physiology and performance and 2) evaluate a new enhanced version of AFTE training software and demonstrate the ability to apply it remotely and train other personnel to administer it. AFTE combines principles of autogenic therapy, and biofeedback in training individuals to control their physiological reactions through a series of relaxation and arousal exercises. This study included twenty-six participants, 17 men and 9 women. On day 1 participants were tested in a rotating chair (pre-test) to determine their motion sickness tolerance (measured as minutes of rotation); days 2-5 consisted of four AFTE training sessions, each 30-min. in duration for a total of 2 hours; and on day 6 the participants were re-tested in the rotating chair. Results revealed a significant increase in motion sickness tolerance with AFTE on the post-test when compared to pre-test, participants had significantly lower symptom diagnostic scores post-test, and there was no significant gender effect. In addressing the first goal it was concluded that the modified 2-hour version of AFTE significantly improved motion sickness tolerance with participants experiencing fewer symptoms. A second goal of this research was to refine and transfer a NASA technology, software and methods for applications within DOD by training other personnel to administer AFTE. A comparison of NASA and NAMRU-D trainers on AFTE outcome for improving participants’ motion sickness tolerance revealed no significant difference indicating the successful transfer of methods to DOD. In addition, remote AFTE training of military aviators at distant sites was feasible. A third goal was to identify individual patterns of interoceptive abilities and related autonomic metrics able to predict stress response and training outcome. These data included measures of personality traits obtained from questionnaires and specific autonomic measures (e.g., heart rate variability) collected by NAMRU-D investigators. These results will be reported in a separate paper.

autonomic nervous system↗
DOE OSTI2022

AOI.1 Application of Artificial Intelligence techniques enabling coal fired power plants the ability to achieve higher efficiency, improved availability, and increased reliability of their operations (Final Report)

During this effort, SparkCognition with support from the Electric Power Research Institute (EPRI) was tasked with applying artificial intelligence (AI) to improve the reliability, efficiency, and safety of operations at a coal-fired plant. By implementing AI techniques, like machine learning (ML), it is believed that operators can leverage existing data sources to gain more insights such as advanced warning of machine degradation. With enough lead time, a reliability engineer can take action to minimize, or even avoid, impact to production. To complete this work effort, SparkCognition developed and refined an ML-based model using sensor data for a Steam Turbine unit at a host site. The models were deployed in an online, web-based solution that allows users to visualize model outputs and supporting data. The final solution, based on SparkCognition’s proprietary software platform called SparkPredict®, was shared with EPRI who completed an online evaluation of results to determine the solution’s ability to detect actionable events.

20 FOSSIL-FUELED POWER PLANTS↗
NASA NTRS2006

Integrated Vehicle Health Management (IVHM) for Aerospace Systems

To achieve NASA's ambitious Integrated Space Transportation Program objectives, aerospace systems will implement a variety of new concept in health management. System level integration of IVHM technologies for real-time control and system maintenance will have significant impact on system safety and lifecycle costs. IVHM technologies will enhance the safety and success of complex missions despite component failures, degraded performance, operator errors, and environment uncertainty. IVHM also has the potential to reduce, or even eliminate many of the costly inspections and operations activities required by current and future aerospace systems. This presentation will describe the array of NASA programs participating in the development of IVHM technologies for NASA missions. Future vehicle systems will use models of the system, its environment, and other intelligent agents with which they may interact. IVHM will be incorporated into future mission planners, reasoning engines, and adaptive control systems that can recommend or execute commands enabling the system to respond intelligently in real time. In the past, software errors and/or faulty sensors have been identified as significant contributors to mission failures. This presentation will also address the development and utilization of highly dependable sohare and sensor technologies, which are key components to ensure the reliability of IVHM systems.

Baroth, Edmund C.↗
DOE OSTI2019

Use of Automation in Low Level Waste Storage and Management - 19227

The Australian Nuclear Science and Technology Organisation (ANSTO) generates Low Level Waste (LLW) and Intermediate Level Waste (ILW) from various site operations such as the operation of a research Reactor and the manufacture of Molybdenum 99. The Low Level Solid Waste (LLSW) generated is stored at ANSTO before and after conditioning. The current process flow involves the storage of LLSW waste before conditioning on racks, handled using forklifts. When the unconditioned waste is ready for conditioning, it is transferred to another facility, where volume reduction and packaging is carried out. Once conditioned, the waste is placed in further storage, pending dispatch to the proposed Australian National Radioactive Waste Management Facility (NRWMF). A new purpose built facility has been constructed, adjacent to the LLSW processing facility, for the storage and management of LLSW in both unconditioned and conditioned forms. This new facility will streamline the waste management process and significantly enhance the safety and efficiency of the process. In line with international best practises, the new facility utilises automation solutions to minimise the build footprint, and minimise the use of forklifts and other mobile plant. Most importantly, it applies the principle of ALARA (As Low as Reasonably Achievable) to minimise operator activities in areas where radioactive material is stored and eliminates double handling of the waste. The automation for unconditioned waste utilises an Automated Storage and Retrieval System (ASRS), a vertical stacker crane within high density racking, to provide easy storage and retrieval for processing and/or routine inspections. This system allows operators to control it from outside of the storage area whilst utilising integrated software that allows for the required tracking of the unconditioned waste. From the ASRS storage area, unconditioned waste will have a smooth transition to the processing facility which is located adjacent to the ASRS system. Once conditioned, the waste is catalogued and returned to a designated storage area within the new facility using an automated building gantry crane with a target delivery system to eliminate the need for operators in the main storage bay. The waste will be held here in preparation for dispatch to the future repository. The utilisation of the ASRS for the purpose of storing LLSW is an innovative use of automation that will eliminate operators from active areas, reduce dose rates received and integrate with the waste tracking software. Furthermore, the system has significant advantages with operational efficiencies increased, reduced double handling of nuclear waste and maximum use of building footprint. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRS1990

Inflight replanning for diversions

Current procedures for handling flight plan diversions can require too much of the crew's resources. This increases workload and may compromise safety and cause delays in modifying the flight plan. The goal of NASA Langley Research Center's Diverter research program is to develop guidelines for a prototype pilot decision aid for diversions that will reduce cognitive workload, improve safety, increase capacity and traffic flow, and increase aircraft efficiency. The Diverter program has been partitioned into five phases, the first three of which were performed under contract by Lockheed Aeronautical Systems Company, Marietta, GA. In the first two phases, which have been completed, the system requirements and desired functions were defined and a prototype decision-making aid was implemented and demonstrated on a workstation. In phase three, which is currently under way, the pilot/vehicle interface is being defined and the capability of the prototype is being improved. In the last two phases, which will be performed at NASA Langley Research Center, the interface will be implemented, tied into the prototype aiding software, and installed in an advanced simulation facility for testing. In addition, significant implementation issues may be addressed through flight testing on NASA research aircraft. Information is given in viewgraph form.

Palmer, Michael↗
NASA NTRS2009

Testing First-Order Logic Axioms in AutoCert

AutoCert [2] is a formal verification tool for machine generated code in safety critical domains, such as aerospace control code generated from MathWorks Real-Time Workshop. AutoCert uses Automated Theorem Provers (ATPs) [5] based on First-Order Logic (FOL) to formally verify safety and functional correctness properties of the code. These ATPs try to build proofs based on user provided domain-specific axioms, which can be arbitrary First-Order Formulas (FOFs). These axioms are the most crucial part of the trusted base, since proofs can be submitted to a proof checker removing the need to trust the prover and AutoCert itself plays the part of checking the code generator. However, formulating axioms correctly (i.e. precisely as the user had really intended) is non-trivial in practice. The challenge of axiomatization arise from several dimensions. First, the domain knowledge has its own complexity. AutoCert has been used to verify mathematical requirements on navigation software that carries out various geometric coordinate transformations involving matrices and quaternions. Axiomatic theories for such constructs are complex enough that mistakes are not uncommon. Second, adjusting axioms for ATPs can add even more complexity. The axioms frequently need to be modified in order to have them in a form suitable for use with ATPs. Such modifications tend to obscure the axioms further. Thirdly, speculating validity of the axioms from the output of existing ATPs is very hard since theorem provers typically do not give any examples or counterexamples.

Ahn, Ki Yung↗
NASA NTRS2011

SpaceCube 2.0: An Advanced Hybrid Onboard Data Processor

The SpaceCube 2.0 is a compact, high performance, low-power onboard processing system that takes advantage of cutting-edge hybrid (CPU/FPGA/DSP) processing elements. The SpaceCube 2.0 design concept includes two commercial Virtex-5 field-programmable gate array (FPGA) parts protected by gradiation hardened by software" technology, and possesses exceptional size, weight, and power characteristics [5x5x7 in., 3.5 lb (approximately equal to 12.7 x 12.7 x 17.8 cm, 1.6 kg) 5-25 W, depending on the application fs required clock rate]. The two Virtex-5 FPGA parts are implemented in a unique back-toback configuration to maximize data transfer and computing performance. Draft computing power specifications for the SpaceCube 2.0 unit include four PowerPC 440s (1100 DMIPS each), 500+ DSP48Es (2x580 GMACS), 100+ LVDS high-speed serial I/Os (1.25 Gbps each), and 2x190 GFLOPS single-precision (65 GFLOPS double-precision) floating point performance. The SpaceCube 2.0 includes PROM memory for CPU boot, health and safety, and basic command and telemetry functionality; RAM memory for program execution; and FLASH/EEPROM memory to store algorithms and application code for the CPU, FPGA, and DSP processing elements. Program execution can be reconfigured in real time and algorithms can be updated, modified, and/or replaced at any point during the mission. Gigabit Ethernet, Spacewire, SATA and highspeed LVDS serial/parallel I/O channels are available for instrument/sensor data ingest, and mission-unique instrument interfaces can be accommodated using a compact PCI (cPCI) expansion card interface. The SpaceCube 2.0 can be utilized in NASA Earth Science, Helio/Astrophysics and Exploration missions, and Department of Defense satellites for onboard data processing. It can also be used in commercial communication and mapping satellites.

Lin, Michael↗
DOE OSTI2015

Calculating uncertainty on K-effective with MONK10 - 14583

Criticality safety assessments require a demonstration that a particular configuration of fissile material has an adequate sub-critical margin (k-effective sufficiently below unity) to ensure that the risk of criticality under normal operation and accident conditions is acceptable. The required sub-critical margin depends upon the uncertainty in the estimated value of k-effective. The uncertainty in the calculated value of k-effective arises from a number of sources, including: manufacturing tolerances on input data to the code (affecting geometry, compositions and densities), uncertainty in the nuclear data used by the code, stochastic uncertainty resulting from Monte Carlo simulation and modelling approximations/errors, including the inevitable bugs in the software. The ANSWERS Software Service, in collaboration with industrial partners, is developing a number of techniques to better understand and quantify uncertainty on predicted values of k-effective, using MONK. The SPRUCE utility code has been developed to allow uncertainty to be estimated using sampling methods. This can include the sampling of input parameters (including dimensions, compositions and densities) from statistical distributions. It can also include sampling different nuclear data libraries. A set of nuclear data libraries has been generated for this purpose by sampling from statistical distributions that represent the uncertainties in the published nuclear data evaluated files; a set of libraries has been produced for Latin Hypercube Sampling. By varying the input data and nuclear data, separate and combined uncertainties due to manufacturing tolerances and nuclear data can be derived. By performing least squares fitting on the results it is also possible to estimate the contribution of each of the uncertain inputs and a sensitivity method in MONK can break down the nuclear data uncertainty. (authors)

42 ENGINEERING↗
DOE OSTI2023

Methodology for physics-informed generation of synthetic neutron time-of-flight measurement data

Accurate neutron cross section data are a vital input to the simulation of nuclear systems for a wide range of applications from energy production to national security. The evaluation of experimental data is a key step in producing accurate cross sections. There is a widely recognized lack of reproducibility in the evaluation process due to its artisanal nature and therefore there is a call for improvement within the nuclear data community. This can be realized by automating/standardizing viable parts of the process, namely, parameter estimation by fitting theoretical models to experimental data. This automation effort could greatly benefit from a synthetic data resource. This work leverages problem-specific physics, Monte Carlo sampling, and a general methodology for data synthesis to generate unlimited, labelled experimental cross-section data that is statistically indistinguishable to the observed data. Heuristic and, where applicable, rigorous statistical comparisons to observed data support this claim. The demonstration is based on/limited to transmission measurements at Rensselaer Polytechnic Institute (RPI) and energy-differential cross sections in the resolved resonance region (RRR). An open-source software is published alongside this article that executes the complete methodology to produce high-utility synthetic datasets. The goal of this work is to provide an approach and corresponding tool that will allow the evaluation community to begin exploring more data-driven, ML-based solutions to long-standing challenges in the field.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2021

MACCS Theory Manual

This report describes the models of the MACCS computer code as presented in MACCS Version 3.10.0. The purpose of MACCS is to simulate the impact of severe accidents at nuclear power plants on the surrounding environment. MACCS has been developed by Sandia National Laboratories for the U.S. Nuclear Regulatory Commission. From a given release of radioactive material into the atmosphere, MACCS estimates the extent and magnitude of radiological contamination, offsite doses, protective actions, socioeconomic impacts and costs, and health effects. Since the weather at the time of an accident is not predictable, MACCS supports various sampling options to run a representative set of simulations to evaluate weather variability. MACCS simulates atmospheric transport with a straight-line Gaussian plume segment model. From the estimated air and ground concentrations, MACCS models dose projections through several dose exposure pathways. These exposures can be offset by protective actions during the emergency response and long-term recovery of the accident. MACCS users directly specify the evacuation and sheltering area, while other protective actions (e.g., relocation, farmland restrictions, decontamination) are based on user-specified dose or concentration limits. While protective actions help reduce dose accumulation, they also cause social and economic impacts. MACCS models the extent of displaced individuals and land contamination, and the cost of offsite property damage, economic disruptions, and various accident expenditures caused by protective actions. Finally, from the dose accumulation, MACCS estimates early and stochastic health effects according to dose-response models. The purpose of consequence analyses is to be able to understand and estimate the impact of nuclear accidents. Consequence analysis is an essential tool to inform determinations of adequate protection of the public, to understand nuclear power hazards, to measure the value of regulations, and to help us appreciate the importance of nuclear safety. As such, MACCS has a variety of regulatory uses including environmental analyses (10 CFR 51.53, 52.47), regulatory cost-benefit analyses, backfit analyses (10 CFR 50.109), consequence analysis studies such as SOARCA (NUREG-1935), Level 3 PRA studies, and risk-informing of emergency planning (10 CFR 50 App. E and 50.47). This report updates the previous MACCS theory manual (NUREG/CR-4691 Vol. 2; Chanin, Sprung, Ritchie, & Jow, 1990) and accompanies the MACCS User's Guide (SAND-2021-1588) that describes the use and input requirements of the graphical user interface of MACCS known as WinMACCS. The MACCS User's Guide is also a reference guide that describes data input file formats, describes various software components in the MACCS code suite, and provides a set of example tutorials for running WinMACCS. Also, soon to be published is a MACCS input parameter guidance report (NUREG/CR-7270) that provides technical bases for commonly used MACCS input values. This page left blank

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

Recent Code Developments/Improvements to SAM Multi-dimensional Flow Model

The System Analysis Module (SAM) is under development at Argonne National Laboratory as a modern system-level modeling and simulation tool for advanced non-light water reactor safety analyses. In addition to its conventional one-dimensional flow network module, the multi-dimensional flow model of SAM offers significant benefits to its end-users, including the U.S. NRC, who uses it to develop reference models for advanced reactor concepts. This report provides a summary of the recent progress achieved under DOE-NE’s Nuclear Energy Advanced Modeling and Simulation program in the continuous code development and improvements of the SAM code, specifically its multi-dimensional flow model. The improvements include enhancements to the physical model, code usability, addressing user feedback, and compliance with the SQA program standards that aim to enhance and maintain the quality of the software.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2023

CRITICAL FUNCTION ASSURANCE: Understanding Critical Function and Critical Function Delivery is Foundational for Meaningful ICS Security Improvement and Policy Efforts

Modern life is enabled by a complex and interdependent web of critical functions, including energy, communications, transportation, food, and water. Automation has significantly reduced or replaced human interactions in the delivery of these functions, resulting in a web of goods and services that are made available 24/7 only through unique and intentional deployments of microprocessors, software, and firmware technologies. The prospect of cyber-enabled sabotage of these processes disrupts traditional risk determination models. Critical Function Assurance (CFA) is a foundational approach to identifying, prioritizing, and mitigating the risk that is inherent in the delivery of critical functions that depend on digital technology. It provides rapid focus to what matters most and illuminates elements and areas of risk that otherwise are often overlooked. This focus enables effective application of available security resources and optimizes security strategy and policy efforts. This paper introduces CFA to decision makers and risk executives (including CEOs, COOs, CFOs, and CISOs) whose organizations support and deliver the critical functions that underpin national defense, societal health and safety, and a vibrant economy.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
NASA NTRS2018

Prognostics As-A-Service (PaaS)

Deep awareness of aircraft system health-state is critical for maintaining safe, efficient growth in global operations and enabling autonomy. Maintainers, operators, controllers, dispatchers, pilots, and autonomous systems must have reliable real-time predictions of vehicle health to preserve safety and efficiency. We will explore the feasibility and challenges of cloud enhanced prognostics. Aircraft request PaaS in flight to supplement onboard systems or provide complete health awareness. We will explore and demonstrate the ability to address six major challenges of PaaS: Generality, Environmental Complexity, Utility, Trust, Communications, and Security. We will also explore the factors in the decision to host prognostics onboard vs As-A-Service.

Prognostics As A Service↗