Search NASA⌕ Search

SEARCH · Search NASA

Results for “Formal analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10
All sourcesNASA NTRSDOE OSTI
NASA NTRS1992

Verifying the interactive convergence clock synchronization algorithm using the Boyer-Moore theorem prover

The application of formal methods to the analysis of computing systems promises to provide higher and higher levels of assurance as the sophistication of our tools and techniques increases. Improvements in tools and techniques come about as we pit the current state of the art against new and challenging problems. A promising area for the application of formal methods is in real-time and distributed computing. Some of the algorithms in this area are both subtle and important. In response to this challenge and as part of an ongoing attempt to verify an implementation of the Interactive Convergence Clock Synchronization Algorithm (ICCSA), we decided to undertake a proof of the correctness of the algorithm using the Boyer-Moore theorem prover. This paper describes our approach to proving the ICCSA using the Boyer-Moore prover.

Young, William D.↗
NASA NTRS2010

Timing of Formal Phase Safety Reviews for Large-Scale Integrated Hazard Analysis

Integrated hazard analysis (IHA) is a process used to identify and control unacceptable risk. As such, it does not occur in a vacuum. IHA approaches must be tailored to fit the system being analyzed. Physical, resource, organizational and temporal constraints on large-scale integrated systems impose additional direct or derived requirements on the IHA. The timing and interaction between engineering and safety organizations can provide either benefits or hindrances to the overall end product. The traditional approach for formal phase safety review timing and content, which generally works well for small- to moderate-scale systems, does not work well for very large-scale integrated systems. This paper proposes a modified approach to timing and content of formal phase safety reviews for IHA. Details of the tailoring process for IHA will describe how to avoid temporary disconnects in major milestone reviews and how to maintain a cohesive end-to-end integration story particularly for systems where the integrator inherently has little to no insight into lower level systems. The proposal has the advantage of allowing the hazard analysis development process to occur as technical data normally matures.

Massie, Michael J.↗
NASA NTRS2011

The Necessity of Functional Analysis for Space Exploration Programs

As NASA moves toward expanded commercial spaceflight within its human exploration capability, there is increased emphasis on how to allocate responsibilities between government and commercial organizations to achieve coordinated program objectives. The practice of program-level functional analysis offers an opportunity for improved understanding of collaborative functions among heterogeneous partners. Functional analysis is contrasted with the physical analysis more commonly done at the program level, and is shown to provide theoretical performance, risk, and safety advantages beneficial to a government-commercial partnership. Performance advantages include faster convergence to acceptable system solutions; discovery of superior solutions with higher commonality, greater simplicity and greater parallelism by substituting functional for physical redundancy to achieve robustness and safety goals; and greater organizational cohesion around program objectives. Risk advantages include avoidance of rework by revelation of some kinds of architectural and contractual mismatches before systems are specified, designed, constructed, or integrated; avoidance of cost and schedule growth by more complete and precise specifications of cost and schedule estimates; and higher likelihood of successful integration on the first try. Safety advantages include effective delineation of must-work and must-not-work functions for integrated hazard analysis, the ability to formally demonstrate completeness of safety analyses, and provably correct logic for certification of flight readiness. The key mechanism for realizing these benefits is the development of an inter-functional architecture at the program level, which reveals relationships between top-level system requirements that would otherwise be invisible using only a physical architecture. This paper describes the advantages and pitfalls of functional analysis as a means of coordinating the actions of large heterogeneous organizations for space exploration programs.

program management↗
NASA NTRS1995

Formal methods demonstration project for space applications

The Space Shuttle program is cooperating in a pilot project to apply formal methods to live requirements analysis activities. As one of the larger ongoing shuttle Change Requests (CR's), the Global Positioning System (GPS) CR involves a significant upgrade to the Shuttle's navigation capability. Shuttles are to be outfitted with GPS receivers and the primary avionics software will be enhanced to accept GPS-provided positions and integrate them into navigation calculations. Prior to implementing the CR, requirements analysts at Loral Space Information Systems, the Shuttle software contractor, must scrutinize the CR to identify and resolve any requirements issues. We describe an ongoing task of the Formal Methods Demonstration Project for Space Applications whose goal is to find an effective way to use formal methods in the GPS CR requirements analysis phase. This phase is currently under way and a small team from NASA Langley, ViGYAN Inc. and Loral is now engaged in this task. Background on the GPS CR is provided and an overview of the hardware/software architecture is presented. We outline the approach being taken to formalize the requirements, only a subset of which is being attempted. The approach features the use of the PVS specification language to model 'principal functions', which are major units of Shuttle software. Conventional state machine techniques form the basis of our approach. Given this background, we present interim results based on a snapshot of work in progress. Samples of requirements specifications rendered in PVS are offered to illustration. We walk through a specification sketch for the principal function known as GPS Receiver State processing. Results to date are summarized and feedback from Loral requirements analysts is highlighted. Preliminary data is shown comparing issues detected by the formal methods team versus those detected using existing requirements analysis methods. We conclude by discussing our plan to complete the remaining activities of this task.

Divito, Ben L.↗
DOE OSTI2021

Jaynesian Analysis of Environmental Chemistry: Systems Model Component Integration via the Arctic Aquatic Carbon Cycle

Focal Areas: All three are touched upon from the OBER call. We will consider formal logical inference and entropic information analysis for sparse but intensive chemical measurements, as optimal drivers for managing process complexity. As a centerpiece for the discussion we take soil-to-sea organic structural evolution within the Arctic hydro-geochemosphere, assessing detrital negentropy then algorithmic greed to generate ranked, reduced mechanisms for system integration.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS2002

The Aeronautical Data Link: Taxonomy, Architectural Analysis, and Optimization

The future Communication, Navigation, and Surveillance/Air Traffic Management (CNS/ATM) System will rely on global satellite navigation, and ground-based and satellite based communications via Multi-Protocol Networks (e.g. combined Aeronautical Telecommunications Network (ATN)/Internet Protocol (IP)) to bring about needed improvements in efficiency and safety of operations to meet increasing levels of air traffic. This paper will discuss the development of an approach that completely describes optimal data link architecture configuration and behavior to meet the multiple conflicting objectives of concurrent and different operations functions. The practical application of the approach enables the design and assessment of configurations relative to airspace operations phases. The approach includes a formal taxonomic classification, an architectural analysis methodology, and optimization techniques. The formal taxonomic classification provides a multidimensional correlation of data link performance with data link service, information protocol, spectrum, and technology mode; and to flight operations phase and environment. The architectural analysis methodology assesses the impact of a specific architecture configuration and behavior on the local ATM system performance. Deterministic and stochastic optimization techniques maximize architectural design effectiveness while addressing operational, technology, and policy constraints.

Morris, A. Terry↗
NASA NTRS2016

Microgravity-Induced Physiological Fluid Redistribution: Computational Analysis to Assess Influence of Physiological Parameters

Space flight impacts human physiology in many ways, the most immediate being the marked cephalad (headward) shift of fluid upon introduction into the microgravity environment. This physiological response to microgravity points to the redistribution of blood and interstitial fluid as a major factor in the loss of venous tone and reduction in heart muscle efficiency which impact astronaut performance. In addition, researchers have hypothesized that a reduction in astronaut visual acuity, part of the Visual Impairment and Intracranial Pressure (VIIP) syndrome, is associated with this redistribution of fluid. VIIP arises within several months of beginning space flight and includes a variety of ophthalmic changes including posterior globe flattening, distension of the optic nerve sheath, and kinking of the optic nerve. We utilize a suite of lumped parameter models to simulate microgravity-induced fluid redistribution in the cardiovascular, central nervous and ocular systems to provide initial and boundary data to a 3D finite element simulation of ocular biomechanics in VIIP. Specifically, the lumped parameter cardiovascular model acts as the primary means of establishing how microgravity, and the associated lack of hydrostatic gradient, impacts fluid redistribution. The cardiovascular model consists of 16 compartments, including three cerebrospinal fluid (CSF) compartments, three cranial blood compartments, and 10 thoracic and lower limb blood compartments. To assess the models capability to address variations in physiological parameters, we completed a formal uncertainty and sensitivity analysis that evaluated the relative importance of 42 input parameters required in the model on relative compartment flows and compartment pressures. Utilizing the model in a pulsatile flow configuration, the sensitivity analysis identified the ten parameters that most influenced each compartment pressure. Generally, each compartment responded appropriately to parameter variations associated with itself and adjacent compartments. However, several unexpected interactions between components, such as between the choroid plexus and the lower capillaries, were found, and are due to simplifications in the formulation of the model. The analysis illustrates that highly influential parameters and those that have unique influences within the model formulation must be tightly controlled for successful model application.

gravitational physiology↗
DOE OSTI2022

Quantification of human contribution to soil moisture-based terrestrial aridity

Abstract Current knowledge of the spatiotemporal patterns of changes in soil moisture-based terrestrial aridity has considerable uncertainty. Using Standardized Soil Moisture Index (SSI) calculated from multi-source merged data sets, we find widespread drying in the global midlatitudes, and wetting in the northern subtropics and in spring between 45°N–65°N, during 1971–2016. Formal detection and attribution analysis shows that human forcings, especially greenhouse gases, contribute significantly to the changes in 0–10 cm SSI during August–November, and 0–100 cm during September–April. We further develop and apply an emergent constraint method on the future SSI’s signal-to-noise (S/N) ratios and trends under the Shared Socioeconomic Pathway 5-8.5. The results show continued significant presence of human forcings and more rapid drying in 0–10 cm than 0–100 cm. Our findings highlight the predominant human contributions to spatiotemporally heterogenous terrestrial aridification, providing a basis for drought and flood risk management.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2021

Strategy for distributed controller defence: Leveraging controller roles and control support groups to maintain or regain control in cyber-adversarial power systems

Distributed controllers play a prominent role in electric power grid operation. The coordinated failure or malfunction of these controllers is a serious threat, where the resulting mechanisms and consequences are not yet well-known and planned against. If certain controllers are maliciously compromised by an adversary, they can be manipulated to drive the system to an unsafe state. The authors present a strategy for distributed controller defence (SDCD) for improved grid tolerance under conditions of distributed controller compromise. The work of the authors’ first formalises the roles that distributed controllers play and their control support groups using controllability analysis techniques. With these formally defined roles and groups, the authors then present defence strategies for maintaining or regaining system control during such an attack. A general control response framework is presented here for the compromise or failure of distributed controllers using the remaining, operational set. The SDCD approach is successfully demonstrated with a 7-bus system and the IEEE 118-bus system for single and coordinated distributed controller compromise; the results indicate that SDCD is able to significantly reduce system stress and mitigate compromise consequences.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2021

ASMT-783246, Assessment Report for Department 635 Analysis of Fiscal Year 2021 ES&H Events

This assessment analyzes Environment, Safety, and Health (ES&H) occurrences and Non-Occurrence Trackable Events (NOTEs) from fiscal year (FY) 2021. For this report, assessors used three primary methods for categorizing occurrence and NOTE data: issue categorization, DOE reporting criteria groups, and DOE cause codes. The FY 2021 Q1 occurrence and NOTE total was the lowest since this type of analysis began in FY 2018 Q4, following a downward trend from the FY 2019 Q3 high point. The FY 2021 Q2 occurrence and NOTE total was nearly double the FY 2021 Q1 total; occurrence totals declined slightly in Q3 and Q4, while NOTE totals remained the same. NOTEs in each of the final three quarters were more than double the amount from Q1. This assessment resulted in one observation. As COVID-19 vaccination rates increase and COVID 19 impacts on operations decrease, the number of workers on-site and the amount of activity-level work will increase. With these changes, focused attention on the following areas related to work planning and controls may reduce the probability of future events, hazard identification and analysis, compliance with standards, formality of operations, and job scoping.

99 GENERAL AND MISCELLANEOUS↗
NASA NTRS1978

Using tools for verification, documentation and testing

Methodologies are discussed on four of the major approaches to program upgrading -- namely dynamic testing, symbolic execution, formal verification and static analysis. The different patterns of strengths, weaknesses and applications of these approaches are shown. It is demonstrated that these patterns are in many ways complementary, offering the hope that they can be coordinated and unified into a single comprehensive program testing and verification system capable of performing a diverse and useful variety of error detection, verification and documentation functions.

Osterweil, L. J.↗
NASA NTRS1990

Analysis of spatial pseudodepolarizers in imaging systems

The objective of a number of optical instruments is to measure the intensity accurately without bias as to the incident polarization state. One method to overcome polarization bias in optical systems is the insertion of a spatial pseudodepolarizer. Both the degree of depolarization and image degradation (from the polarization aberrations of the pseudodepolarizer) are analyzed for two depolarizer designs: (1) the Cornu pseudodepolarizer, effective for linearly polarized light, and (2) the dual Babinet compensator pseudodepolarizer, effective for all incident polarization states. The image analysis uses a matrix formalism to describe the polarization dependence of the diffraction patterns and optical transfer function.

Mcguire, James P., Jr.↗
NASA NTRS2002

Application of Modern Design of Experiments to CARS Thermometry in a Model Scramjet Engine

We have applied formal experiment design and analysis to optimize the measurement of temperature in a supersonic combustor at NASA Langley Research Center. We used the coherent anti-Stokes Raman spectroscopy (CARS) technique to map the temperature distribution in the flowfield downstream of an 1160 K, Mach 2 freestream into which supersonic hydrogen fuel is injected at an angle of 30 degrees. CARS thermometry is inherently a single-point measurement technique; it was used to map thc flow by translating the measurement volume through the flowfield. The method known as "Modern Design of Experiments" (MDOE) was used to estimate the data volume required, design the test matrix, perform the experiment and analyze the resulting data. MDOE allowed us to match the volume of data acquired to the precision requirements of the customer. Furthermore, one aspect of MDOE, known as response surface methodology, allowed us to develop precise maps of the flowfield temperature, allowing interpolation between measurement points. An analytic function in two spatial variables was fit to the data from a single measurement plane. Fitting with a Cosine Series Bivariate Function allowed the mean temperature to be mapped with 95% confidence interval half-widths of +/- 30 Kelvin, comfortably meeting the confidence of +/- 50 Kelvin specified prior to performing the experiments. We estimate that applying MDOE to the present experiment saved a factor of 5 in data volume acquired, compared to experiments executed in the traditional manner. Furthermore, the precision requirements could have been met with less than half the data acquired.

Danehy, P. M.↗
NASA NTRS2003

An Architectural Concept for Intrusion Tolerance in Air Traffic Networks

The goal of an intrusion tolerant network is to continue to provide predictable and reliable communication in the presence of a limited num ber of compromised network components. The behavior of a compromised network component ranges from a node that no longer responds to a nod e that is under the control of a malicious entity that is actively tr ying to cause other nodes to fail. Most current data communication ne tworks do not include support for tolerating unconstrained misbehavio r of components in the network. However, the fault tolerance communit y has developed protocols that provide both predictable and reliable communication in the presence of the worst possible behavior of a limited number of nodes in the system. One may view a malicious entity in a communication network as a node that has failed and is behaving in an arbitrary manner. NASA/Langley Research Center has developed one such fault-tolerant computing platform called SPIDER (Scalable Proces sor-Independent Design for Electromagnetic Resilience). The protocols and interconnection mechanisms of SPIDER may be adapted to large-sca le, distributed communication networks such as would be required for future Air Traffic Management systems. The predictability and reliabi lity guarantees provided by the SPIDER protocols have been formally v erified. This analysis can be readily adapted to similar network stru ctures.

Maddalon, Jeffrey M.↗
NASA NTRS2007

Identification of Human-Induced Changes in Atmospheric Moisture Content

Data from the satellite-based Special Sensor Microwave Imager (SSM/I) show that the total atmospheric moisture content over oceans has increased by 0.41 kg/sq m per decade since 1988. Results from current climate models indicate that water vapor increases of this magnitude cannot be explained by climate noise alone. In a formal detection and attribution analysis using the pooled results from 22 different climate models, the simulated "fingerprint" pattern of anthropogenically caused changes in water vapor is identifiable with high statistical confidence in the SSM/I data. Experiments in which forcing factors are varied individually suggest that this fingerprint "match" is primarily due to human-caused increases in greenhouse gases and not to solar forcing or recovery from the eruption of Mount Pinatubo. Our findings provide preliminary evidence of an emerging anthropogenic signal in the moisture content of earth's atmosphere.

Santer, B.D.↗
NASA NTRS2013

High-Order Entropy Stable Finite Difference Schemes for Nonlinear Conservation Laws: Finite Domains

Developing stable and robust high-order finite difference schemes requires mathematical formalism and appropriate methods of analysis. In this work, nonlinear entropy stability is used to derive provably stable high-order finite difference methods with formal boundary closures for conservation laws. Particular emphasis is placed on the entropy stability of the compressible Navier-Stokes equations. A newly derived entropy stable weighted essentially non-oscillatory finite difference method is used to simulate problems with shocks and a conservative, entropy stable, narrow-stencil finite difference approach is used to approximate viscous terms.

Fisher, Travis C.↗
NASA NTRS2012

Semantically-Rigorous Systems Engineering Modeling Using Sysml and OWL

The Systems Modeling Language (SysML) has found wide acceptance as a standard graphical notation for the domain of systems engineering. SysML subsets and extends the Unified Modeling Language (UML) to define conventions for expressing structural, behavioral, and analytical elements, and relationships among them. SysML-enabled modeling tools are available from multiple providers, and have been used for diverse projects in military aerospace, scientific exploration, and civil engineering. The Web Ontology Language (OWL) has found wide acceptance as a standard notation for knowledge representation. OWL-enabled modeling tools are available from multiple providers, as well as auxiliary assets such as reasoners and application programming interface libraries, etc. OWL has been applied to diverse projects in a wide array of fields. While the emphasis in SysML is on notation, SysML inherits (from UML) a semantic foundation that provides for limited reasoning and analysis. UML's partial formalization (FUML), however, does not cover the full semantics of SysML, which is a substantial impediment to developing high confidence in the soundness of any conclusions drawn therefrom. OWL, by contrast, was developed from the beginning on formal logical principles, and consequently provides strong support for verification of consistency and satisfiability, extraction of entailments, conjunctive query answering, etc. This emphasis on formal logic is counterbalanced by the absence of any graphical notation conventions in the OWL standards. Consequently, OWL has had only limited adoption in systems engineering. The complementary strengths and weaknesses of SysML and OWL motivate an interest in combining them in such a way that we can benefit from the attractive graphical notation of SysML and the formal reasoning of OWL. This paper describes an approach to achieving that combination.

Web Ontology Language (OWL)↗