Engineering PapersSearch

SEARCH · Engineering Papers

Results for “PENELOPE”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Introduction to Penelope

A formal program verification is a (mathematical) proof that a program executed according to its intended model meets some specification. This proves that the algorithm defined by the program is correct in the precise technical sense of being consistent with a particular specification. A program correct in this sense is free from a large and important class of errors, even though its behavior may still produce unintended results--either because the implementation of the programming language itself does not match the model of execution, or because the specification does not correctly express the user's intentions. Penelope is a prototype system for interactively developing and verifying programs that are written in a rich subset of sequential Ada. Penelope can be used to develop a program and its correctness proof incrementally, and in concert with one another. Incrementality is used in a number of ways to help make verification more tractable and more productive. For example, if an already-verified program is modified, one can attempt to prove the modified version by replaying and modifying the original verification. Penelope's specification language, Larch/Ada, belongs to the family of Larch interface languages. Larch/Ada scales up properly, in the sense that it is demonstrably sound to decompose a system hierarchically and reason locally about the implementation of each piece. Penelope has been applied in various demonstration projects--for specification (guidance control, distributed operating systems), verification (of off-the-shelf code), and formal development (by non-expert as well as expert users). Some features of Penelope have been embodied in Ada Wise, a lint-like non-interactive tool that warns of the potential for certain dynamic semantic errors in Ada programs.

Guaspari, David

Using Penelope to assess the correctness of NASA Ada software: A demonstration of formal methods as a counterpart to testing

Life-critical applications warrant a higher level of software reliability than has yet been achieved. Since it is not certain that traditional methods alone can provide the required ultra reliability, new methods should be examined as supplements or replacements. This paper describes a mathematical counterpart to the traditional process of empirical testing. ORA's Penelope verification system is demonstrated as a tool for evaluating the correctness of Ada software. Grady Booch's Ada calendar utility package, obtained through NASA, was specified in the Larch/Ada language. Formal verification in the Penelope environment established that many of the package's subprograms met their specifications. In other subprograms, failed attempts at verification revealed several errors that had escaped detection by testing.

Eichenlaub, Carl T.

Formal specification and verification of Ada software

The use of formal methods in software development achieves levels of quality assurance unobtainable by other means. The Larch approach to specification is described, and the specification of avionics software designed to implement the logic of a flight control system is given as an example. Penelope is described which is an Ada-verification environment. The Penelope user inputs mathematical definitions, Larch-style specifications and Ada code and performs machine-assisted proofs that the code obeys its specifications. As an example, the verification of a binary search function is considered. Emphasis is given to techniques assisting the reuse of a verification effort on modified code.

Hird, Geoffrey R.

Photometric geodesy of main-belt asteroids. III - Additional lightcurves

A total of 107 complete or partial lightcurves are presented for 59 different asteroids over the 1982-1989 period. Unusual lightcurves with unequal minima and maxima at large amplitudes are preferentially seen for M-type asteroids. Some asteroids, such as 16 Psyche and 201 Penelope, exhibit lightcurves combining large amplitude with very unequal brightness for both maxima and both minima, even at small phase angles. An M-type asteroid is believed to consist of a metal core of a differentiated parent body that has had its rocky mantle completely removed by one or more large impacts.

Weidenschilling, S. J.

Formally specifying the logic of an automatic guidance controller

The following topics are covered in viewgraph form: (1) the Penelope Project; (2) the logic of an experimental automatic guidance control system for a 737; (3) Larch/Ada specification; (4) some failures of informal description; (5) description of mode changes caused by switches; (6) intuitive description of window status (chosen vs. current); (7) design of the code; (8) and specifying the code.

Guaspari, David

Integrity and security in an Ada runtime environment

A review is provided of the Formal Methods group discussions. It was stated that integrity is not a pure mathematical dual of security. The input data is part of the integrity domain. The group provided a roadmap for research. One item of the roadmap and the final position statement are closely related to the space shuttle and space station. The group's position is to use a safe subset of Ada. Examples of safe sets include the Army Secure Operating System and the Penelope Ada verification tool. It is recommended that a conservative attitude is required when writing Ada code for life and property critical systems.

Bown, Rodney L.

Formalizing structured file services for the data storage and retrieval subsystem of the data management system for Spacestation Freedom

A brief example of the use of formal methods techniques in the specification of a software system is presented. The report is part of a larger effort targeted at defining a formal methods pilot project for NASA. One possible application domain that may be used to demonstrate the effective use of formal methods techniques within the NASA environment is presented. It is not intended to provide a tutorial on either formal methods techniques or the application being addressed. It should, however, provide an indication that the application being considered is suitable for a formal methods by showing how such a task may be started. The particular system being addressed is the Structured File Services (SFS), which is a part of the Data Storage and Retrieval Subsystem (DSAR), which in turn is part of the Data Management System (DMS) onboard Spacestation Freedom. This is a software system that is currently under development for NASA. An informal mathematical development is presented. Section 3 contains the same development using Penelope (23), an Ada specification and verification system. The complete text of the English version Software Requirements Specification (SRS) is reproduced in Appendix A.

Jamsek, Damir A.

A Comparison of Experimental EPMA Data and Monte Carlo Simulations

Monte Carlo (MC) modeling shows excellent prospects for simulating electron scattering and x-ray emission from complex geometries, and can be compared to experimental measurements using electron-probe microanalysis (EPMA) and phi(rho z) correction algorithms. Experimental EPMA measurements made on NIST SRM 481 (AgAu) and 482 (CuAu) alloys, at a range of accelerating potential and instrument take-off angles, represent a formal microanalysis data set that has been used to develop phi(rho z) correction algorithms. The accuracy of MC calculations obtained using the NIST, WinCasino, WinXray, and Penelope MC packages will be evaluated relative to these experimental data. There is additional information contained in the extended abstract.

Carpenter, P. K.

Calculated X-ray Intensities Using Monte Carlo Algorithms: A Comparison to Experimental EPMA Data

Monte Carlo (MC) modeling has been used extensively to simulate electron scattering and x-ray emission from complex geometries. Here are presented comparisons between MC results and experimental electron-probe microanalysis (EPMA) measurements as well as phi(rhoz) correction algorithms. Experimental EPMA measurements made on NIST SRM 481 (AgAu) and 482 (CuAu) alloys, at a range of accelerating potential and instrument take-off angles, represent a formal microanalysis data set that has been widely used to develop phi(rhoz) correction algorithms. X-ray intensity data produced by MC simulations represents an independent test of both experimental and phi(rhoz) correction algorithms. The alpha-factor method has previously been used to evaluate systematic errors in the analysis of semiconductor and silicate minerals, and is used here to compare the accuracy of experimental and MC-calculated x-ray data. X-ray intensities calculated by MC are used to generate a-factors using the certificated compositions in the CuAu binary relative to pure Cu and Au standards. MC simulations are obtained using the NIST, WinCasino, and WinXray algorithms; derived x-ray intensities have a built-in atomic number correction, and are further corrected for absorption and characteristic fluorescence using the PAP phi(rhoz) correction algorithm. The Penelope code additionally simulates both characteristic and continuum x-ray fluorescence and thus requires no further correction for use in calculating alpha-factors.

Carpenter, P. K.

GEMS X-ray Polarimeter Performance Simulations

The Gravity and Extreme Magnetism Small explorer (GEMS) is an X-ray polarization telescope selected as a NASA small explorer satellite mission. The X-ray Polarimeter on GEMS uses a Time Projection Chamber gas proportional counter to measure the polarization of astrophysical X-rays in the 2-10 keV band by sensing the direction of the track of the primary photoelectron excited by the incident X-ray. We have simulated the expected sensitivity of the polarimeter to polarized X-rays. We use the simulation package Penelope to model the physics of the interaction of the initial photoelectron with the detector gas and to determine the distribution of charge deposited in the detector volume. We then model the charge diffusion in the detector,and produce simulated track images. Within the track reconstruction algorithm we apply cuts on the track shape and focus on the initial photoelectron direction in order to maximize the overall sensitivity of the instrument, using this technique we have predicted instrument modulation factors nu(sub 100) for 100% polarized X-rays ranging from 10% to over 60% across the 2-10 keV X-ray band. We also discuss the simulation program used to develop and model some of the algorithms used for triggering, and energy measurement of events in the polarimeter.

Baumgartner, Wayne H.

Absolute intensities of CO2 lines in the 3140-3410/cm spectral region

Absolute intensities for 430 transitions belonging to eleven rotation-vibration bands of (C-12)(O-16)2, (C-13)(O-16)2, and (O-16)(C-18)(O-18) in the 3140-3410/cm spectral region have been determined by analyzing spectra recorded at 0.01/cm resolution with the Fourier transform spectrometer in the McMath solar telescope complex at the National Solar Observatory on Kitt Peak. The data were recorded at room temperature and low pressures (less than 10 torr) using a natural sample of carbon dioxide. Intensities were derived using a nonlinear least-squares spectral fitting procedure, and the values obtained for each band have been analyzed to determine the vibrational band intensity and nonrigid rotor coefficients. An alternative mathematical formulation is shown in the case of bands for which the Coriolis effect is large and the Q-branch line intensities were not determinable either because they were severely blended or absent from the spectra. Comparison are made between the results obtained in this study and other published values.

Benner, D. Chris

The effects of fire on biogenic soil emissions of nitric oxide and nitrous oxide

Measurements of biogenic soil emissions of nitric oxide (NO) and nitrous oxide (N2O) before and after a controlled burn conducted in a chaparral ecosystem on June 22, 1987, showed significantly enhanced emissions of both gases after the burn. Mean NO emissions from heavily burned and wetted (to simulate rainfall) sites exceeded 40 ng N/sq m s, and increase of 2 to 3 compared to preburn wetted site measurements. N2O emissions from burned and wetted sites ranged from 9 to 22 ng N/sq m s. Preburn N2O emissions from these wetted sites were all below the detection level of the instrumentation, indicating a flux below 2 ng N/sq m s. The flux of NO exceeded the N2O flux from burned wetted sites by factors ranging from 2.7 to 3.4. These measurements, coupled with preburn and postburn measurements of ammonium and nitrate in the soil of this chaparral ecosystem and measurements of NO and N2O emissions obtained under controlled laboratory conditions, suggest that the postfire enhancement of NO and N2O emissions is due to production of these gases by nitrifying bacteria.

Levine, Joel S.

SHAPA: An interactive software tool for protocol analysis applied to aircrew communications and workload

As modern transport environments become increasingly complex, issues such as crew communication, interaction with automation, and workload management have become crucial. Much research is being focused on holistic aspects of social and cognitive behavior, such as the strategies used to handle workload, the flow of information, the scheduling of tasks, the verbal and non-verbal interactions between crew members. Traditional laboratory performance measures no longer sufficiently meet the needs of researchers addressing these issues. However observational techniques are better equipped to capture the type of data needed and to build models of the requisite level of sophistication. Presented here is SHAPA, an interactive software tool for performing both verbal and non-verbal protocol analysis. It has been developed with the idea of affording the researchers the closest possible degree of engagement with protocol data. The researcher can configure SHAPA to encode protocols using any theoretical framework or encoding vocabulary that is desired. SHAPA allows protocol analysis to be performed at any level of analysis, and it supplies a wide variety of tools for data aggregation, manipulation. The output generated by SHAPA can be used alone or in combination with other performance variables to get a rich picture of the influences on sequences of verbal or nonverbal behavior.

James, Jeffrey M.

Trace gases in the atmosphere of Mars - An indicator of microbial life

The detection of certain trace gases in the atmosphere of Mars would indicate the presence of microbial life on the surface. Candidate biogenic gases include CH4, NH3, N2O, and several reduced sulfur species. Chemical thermodynamic equilibrium and photochemical calculations preclude the presence of these gases in any measurable concentrations in the atmosphere of Mars in the absence of biogenic production. A search for these gases utilizing either high-resolution (spectral and spatial) spectroscopy from a Mars orbiter, such as the Mars Observer orbiter, and/or in situ measurements from a Mars lander or rover is proposed.

Levine, Joel S.

On the possibility of chemosynthetic ecosystems in subsurface habitats on Mars

Recent discoveries of nonphotosynthetic microbial ecosystems on earth have prompted the present reexamination of the prospects for microbial life on Mars, where well-protected subsurface niches associated with hydrothermal activity could have furnished a refuge after surface conditions became inhospitable. It is noted that extensive geological features attest to widespread ground ice-volcanism interactions. Attention is given to the possibility of anaerobic systems employing CO2 as the primary source of carbon, and liquid water furnished by melted subsurface permafrost. Gases from deep volcanic activity could effect reduction, thereby establishing a chemolithoautotrophic basis for a methanogenic or acetogenic and sulfur-based ecology microbial community.

Boston, Penelope J.

Auto-adaptive finite element meshes

Accurate capturing of discontinuities within compressible flow computations is achieved by coupling a suitable solver with an automatic adaptive mesh algorithm for unstructured triangular meshes. The mesh adaptation procedures developed rely on non-hierarchical dynamical local refinement/derefinement techniques, which hence enable structural optimization as well as geometrical optimization. The methods described are applied for a number of the ICASE test cases are particularly interesting for unsteady flow simulations.

Richter, Roland

Lunar and Martian Sub-surface Habitat Structure Technology Development and Application

NASA's human exploration initiative poses great opportunity and great risk for manned missions to the Moon and Mars. Subsidace structures such as caves and lava tubes offer readily available and existing in-situ habitat options. Sub-surface dwellings can provide complete radiation, micro-meteorite and exhaust plume shielding and a moderate and constant temperature environment; they are, therefore, excellent pre-existing habitat risk mitigation elements. Technical challenges to subsurface habitat structure development include surface penetration (digging and mining equipment), environmental pressurization, and psychological environment enhancement requirements. Lunar and Martian environments and elements have many beneficial similarities. This will allow for lunar testing and design development of subsurface habitat structures for Martian application; however, significant differences between lunar and Martian environments and resource elements will mandate unique application development. Mars is NASA's ultimate exploration goal and is known to have many very large lava tubes. Other cave types are plausible. The Moon has unroofed rilles and lava tubes, but further research will, in the near future, define the extent of Lunar and Martian differences and similarities. This paper will discuss Lunar and Martian subsurface habitation technology development challenges and opportunities.

Boston, Penelope J.